Risk, Resilience, and Compliance Operations

This unit covers organizational risk management, incident recovery, and operational security controls that build on foundational cybersecurity concepts and prepare students for advanced defensive operations. Students will learn to design and test backup/recovery strategies, apply assessment and DevSecOps practices, and align technical and human controls with regulatory and privacy requirements.

Learning Objectives

• Analyze threats, vulnerabilities, and applicable regulations to develop a comprehensive risk management and incident recovery plan that maps controls to compliance requirements and cyber insurance considerations.
• Implement and validate technical resilience controls by configuring and performing full and incremental system restores, backing up and restoring cryptographic keys and passwords, and applying patch and key-management procedures for devices both inside and outside organizational control.
• Apply security assessment and operations techniques by selecting and using appropriate tools to discover open ports, perform vulnerability scans and simulated attacks, and integrate DevSecOps/DataOps and CSPM practices to maintain continuous security posture.
• Evaluate human and organizational controls by designing measurable awareness programs, reporting templates, and cross-department collaboration strategies that address social engineering, physical security, privacy incidents, and behavior-change metrics.