Module 1 Course Introduction – introduces the course and its conduct, followed by a lesson that sets the stage for the rest of the material. Lessons in this chapter include:
- Course Organization
- Setting the Stage
Module 2 Managing Risks in the Digital Age – introduces students to enterprise risk management and the COSO Principles. Lessons in this chapter include:
- Enterprise Risk Management Framework
- COSO Overview
- Enterprise Risk Management Framework Applied
Module 3 Cybersecurity within a System – introduces systems thinking and the Service Value Management System (SVMS) that includes the Z-X Model. Lessons in this chapter include:
- The importance of Systems Thinking
- Governance & Culture and Strategy & Objectives
- Service Value Management System
- Z-X Model Overview
Module 4 Z-X Model Capabilities – probes the details of the Z-X Model and the relationship to existing organizational capabilities. Lessons in the chapter include:
- Z-X Model Plan
- Z-X Model Design
- Z-X Model Build & Deploy
- Z-X Model Operate & Improve
Module 5 Adapt – introduces the first part of AIO, Adapt that introduces the Goal Question Metric approach to develop appropriate metrics for the cybersecurity implementation. Lessons in this chapter include:
- Overview of AIO
- Cybersecurity Adopt & Adapt
- Adapt in the Context of the Z-X Model
- Preparations to Implement
- Project Approach w/GQM
- Metrics, Measurement & Balance
Module 6 Implement – covers the 'I' in AIO. It presents the implementation of the selected cybersecurity informative references using the same phased approach introduced in the NCSP Practitioner (and Bootcamp) course. Lessons in this chapter include:
- Implement & COSO Principles
- Phase 0
- Phase 1
- Phase 2
- Phase 3
- Additional Controls
Module 7 Operate & Improve – covers the last aspect of AIO. Lessons in this chapter include:
- Operate, Improve & COSO Principles
- Deliver Value & Integrate
- Ongoing Improvement
