Applied Cybersecurity Controls and Testing

This unit guides students through practical implementation of security controls, vulnerability testing, and program governance. Learners practice access control and authentication design (including least privilege and Zero Trust), perform reconnaissance and social-engineering assessments, and develop data protection, continuity, and awareness strategies to meet compliance and operational needs.

Learning Objectives

• Analyze organizational assets, data flows, and network topology to identify and prioritize systems and data for vulnerability testing and protective controls
• Apply least-privilege and Zero Trust principles to design and implement access controls, authentication mechanisms, and data protection for on-premises and cloud environments
• Evaluate and perform physical, technical, and social-engineering reconnaissance and tests, and design security awareness and training programs tailored to organizational subcultures and remote workforces
• Develop continuity, disaster-recovery, backup, and governance plans (including budgeting and approval workflows) that satisfy compliance requirements and support incident preparedness