Cyber threats are evolving at an unprecedented pace, making security a top priority for every organization. Whether you are a seasoned Chief Information Security Officer (CISO), an IT professional, or a business leader, this course will provide you with the knowledge and tools to build a resilient cybersecurity strategy.
Led by Debra Baker Through practical insights, real-world case studies, and expert strategies, you'll gain a deep understanding of security awareness, risk management, data protection, endpoint security, AI threats, and much more.
What You’ll Learn:
Read more
Cyber threats are evolving at an unprecedented pace, making security a top priority for every organization. Whether you are a seasoned Chief Information Security Officer (CISO), an IT professional, or a business leader, this course will provide you with the knowledge and tools to build a resilient cybersecurity strategy.
Led by Debra Baker Through practical insights, real-world case studies, and expert strategies, you'll gain a deep understanding of security awareness, risk management, data protection, endpoint security, AI threats, and much more.
What You’ll Learn:
Cyber threats are evolving at an unprecedented pace, making security a top priority for every organization. Whether you are a seasoned Chief Information Security Officer (CISO), an IT professional, or a business leader, this course will provide you with the knowledge and tools to build a resilient cybersecurity strategy.
Led by Debra Baker Through practical insights, real-world case studies, and expert strategies, you'll gain a deep understanding of security awareness, risk management, data protection, endpoint security, AI threats, and much more.
What You’ll Learn:
Security Awareness & Phishing Prevention – Train your employees to be the first line of defense against cyber threats.
Multi-Factor Authentication (MFA) & Password Security – Implement robust authentication strategies to prevent account takeovers.
Vulnerability Management & Threat Detection – Learn to proactively identify, assess, and remediate security weaknesses.
Data Protection & Compliance – Secure sensitive data with encryption, backups, and third-party risk management.
Risk Management & Security Policies – Develop a structured approach to balancing security risks and business priorities.
Endpoint & Cloud Security – Protect your organization’s devices and cloud infrastructure from sophisticated attacks.
This practical course includes real-life cybersecurity case studies, step-by-step implementation guides, and expert Q&A sessions to reinforce your learning.
Who Should Take This Course?
CISOs, CIOs, and IT Security Leaders who want to enhance their organization’s cyber resilience.
IT Professionals & Security Analysts looking to upskill in modern security strategies.
Business Executives & Decision Makers who need a solid understanding of cybersecurity best practices.
Anyone interested in Cybersecurity who wants to strengthen their knowledge of security frameworks and risk management.
Why This Course?
Actionable Strategies – No fluff, just real-world, battle-tested security tactics.
Industry-Recognized Best Practices – Learn frameworks like
Expert Guidance – Leverage Debra Baker’s CISO experience to build a security-first culture in your organization.
Stay Ahead of Cyber Threats – Gain insights into emerging attack vectors, AI-driven threats, and Zero Trust security models.
Let’s Build a Cyber-Resilient Future.
Cybersecurity is no longer just an IT issue—it’s a business imperative. Join us on this journey to fortify your organization against evolving cyber threats and establish a resilient, proactive security posture.
Enroll now and take your cybersecurity knowledge to the next level.
What's inside
Learning objectives
- Implement a robust cyber resilience strategy – develop and execute a cybersecurity framework that aligns with industry best practices, including nist.
- Strengthen security awareness & threat detection – train employees on cybersecurity hygiene, phishing prevention, and social engineering tactics.
- Secure critical data & assets – apply encryption, backup strategies, and third-party risk management techniques to protect sensitive information from breaches.
- Enhance endpoint & cloud security – deploy advanced security controls, including endpoint detection & response (edr), zero trust models, and cloud security.
- Leverage ai for cyber defense – understand both the risks and benefits of artificial intelligence in cybersecurity, including ai-driven threat detection.
- Implement a robust cyber resilience strategy – develop and execute a cybersecurity framework that aligns with industry best practices, including nist.
- Strengthen security awareness & threat detection – train employees on cybersecurity hygiene, phishing prevention, and social engineering tactics.
- Secure critical data & assets – apply encryption, backup strategies, and third-party risk management techniques to protect sensitive information from breaches.
- Enhance endpoint & cloud security – deploy advanced security controls, including endpoint detection & response (edr), zero trust models, and cloud security.
- Leverage ai for cyber defense – understand both the risks and benefits of artificial intelligence in cybersecurity, including ai-driven threat detection.
Syllabus
Introduction
After completing this section, learners will be able to explain the concept of cyber resilience, its importance in modern organizations.
Read more
Syllabus
After completing this section, learners will be able to explain the concept of cyber resilience, its importance in modern organizations.
This session provides a real-world scenario of a major cybersecurity breach, breaking down how an attack unfolds and how organizations can respond and recover. By the end of this session, students will be able to:
Analyze how cybercriminals infiltrate an organization through phishing, RDP, and SMB vulnerabilities.
Understand the stages of a ransomware attack and how data exfiltration occurs.
Evaluate incident response strategies used by CISOs and IT teams to mitigate damage.
Learn from case studies such as Colonial Pipeline and SolarWinds attacks.
Develop an effective breach response plan to contain, remediate, and recover from cyber incidents.
Why is this important?
Understanding how attacks happen in the real world helps organizations strengthen defenses and improve resilience against sophisticated cyber threats.
This session covers best practices in authentication and access control, helping students build a secure identity management strategy. By the end of this session, students will be able to:
Implement Multi-Factor Authentication (MFA) to reduce unauthorized access.
Use secure password policies in alignment with NIST 800-63B guidelines.
Understand and deploy passwordless authentication using passkeys and biometrics.
Recognize common authentication attacks, such as credential stuffing and phishing.
Implement role-based and least-privilege access to minimize insider threats.
Why is this important?
IAM is the first line of defense in cybersecurity. A strong IAM strategy prevents 99.9% of account compromise attacks.
These questions will help reinforce the key concepts covered in Section 3 MFA Quiz.
This session guides students on developing and enforcing security policies to ensure compliance and reduce risk. By the end of this session, students will be able to:
Draft and implement essential security policies, including acceptable use and data protection policies.
Ensure compliance with industry regulations like ISO 27001, SOC2, and NIST.
Understand how security policies protect against legal and financial consequences after a breach.
Develop an employee security awareness plan to ensure policies are followed.
Audit and update policies regularly to adapt to new cybersecurity threats.
Why is this important?
A well-defined security policy is the foundation of any cybersecurity program, ensuring consistency, compliance, and risk mitigation.
These questions will help reinforce the key concepts covered in Section 4 Developing Security Policies.
This session covers risk management strategies, helping organizations balance cyber risks, security investments, and business objectives. By the end of this session, students will be able to:
Conduct risk assessments using Impact vs. Likelihood models.
Understand key risk management frameworks like NIST CSF and ISO 27001.
Implement preventive, detective, and corrective security controls.
Develop a risk register to prioritize cybersecurity initiatives.
Align security budgets with risk tolerance and business goals.
Why is this important?
Cybersecurity isn’t about eliminating all risks—it’s about managing them effectively while ensuring business continuity.
These questions will help reinforce the key concepts covered in Section 5 Security & Risk Management.
This session introduces endpoint security strategies, helping students protect devices from malware, ransomware, and unauthorized access. By the end of this session, students will be able to:
Implement Endpoint Detection and Response (EDR) solutions.
Utilize antivirus, firewalls, and application control to secure endpoints.
Harden endpoint configurations using disk encryption and VPNs.
Deploy Network Access Control (NAC) and Zero Trust security.
Protect mobile devices using Mobile Device Management (MDM) solutions.
Why is this important?
Endpoints are the most common attack vector for cybercriminals. Securing them is critical to prevent unauthorized access and data breaches.
These questions will help reinforce the key concepts covered in Section 6 -
Endpoint & Network Security.
This session covers data protection strategies, ensuring data integrity, availability, and confidentiality. By the end of this session, students will be able to:
Understand backup strategies (full, incremental, differential) for disaster recovery.
Create business continuity and disaster recovery (BC/DR) plans.
Ensure backups are tested at least annually, quarterly is recommended
Why is this important?
Proper data protection ensures organizations stay resilient against cyberattacks, ransomware, and compliance violations.
These questions will help reinforce the key concepts covered in Section 7 -
Data Safeguarding & Disaster Recovery.
This session helps students develop security awareness programs to reduce human error-related breaches. By the end of this session, students will be able to:
Train employees on phishing, social engineering, and password security.
Develop engaging cybersecurity awareness campaigns.
Measure training effectiveness using phishing simulations and KPIs.
Choose the best security awareness tools (KnowBe4, Curricula, NINJIO).
Foster a culture of cybersecurity responsibility within an organization.
Why is this important?
Many breaches result from human error—security awareness training is the best defense against phishing and social engineering attacks.
These questions will help reinforce the key concepts covered in Section 8 -
Security Awareness & Asset Inventory Management.
This session teaches students how to identify, assess, and remediate vulnerabilities before they are exploited. By the end of this session, students will be able to:
Use vulnerability scanning tools (Nessus, Qualys, OpenVAS).
Prioritize vulnerabilities using CVSS and CISA’s KEV catalog.
Implement patch management best practices.
Secure applications using OWASP Top 10 guidance.
Integrate security into DevOps (DevSecOps) for continuous protection.
Why is this important?
Regular vulnerability management is essential to prevent cybercriminals from exploiting known weaknesses in systems.
These questions will help reinforce the key concepts covered in Section 9 Vulnerability Management.
This session covers asset inventory management, helping students identify and protect critical assets. By the end of this session, students will be able to:
Create a comprehensive asset inventory of hardware, software, and cloud resources.
Use automated discovery tools like ServiceNow, CloudWize.io, and Drata.
Align asset tracking with compliance frameworks (NIST, CIS, ISO 27001).
Secure mobile devices and endpoints using MDM.
Integrate asset inventory with change management processes.
Why is this important?
You can’t protect what you don’t know exists—an updated asset inventory is critical for cyber resilience.
These questions will help reinforce the key concepts covered in Section 10 Asset Inventory.
This session teaches students how to protect sensitive data from breaches and unauthorized access. By the end of this session, students will be able to:
Implement strong encryption (AES-256, TLS, VPNs).
Protect PII and sensitive business data.
Assess third-party vendors for security risks.
Align data protection policies with compliance (SOC2, GDPR, HIPAA).
Why is this important?
Data breaches cost millions—strong data protection strategies minimize risks and ensure compliance.
These questions will help reinforce the key concepts covered in Section 11 Data Protection & Encryption Quiz.
Traffic lights
Save this course
Save
Reviews summary
Practical guide to cyber resilience for leaders
Great overview for leaders and managers.
Instructor's experience is highly valued.
Content is highly relevant to current threats.
Offers practical steps for implementation.
Activities
Review NIST Cybersecurity Framework
Show steps
Familiarize yourself with the NIST Cybersecurity Framework to better understand the course's focus on industry best practices and compliance.
Browse courses on
NIST Cybersecurity Framework
Show steps
-
Download the NIST Cybersecurity Framework documentation.
-
Read the core functions: Identify, Protect, Detect, Respond, Recover.
-
Identify areas where your current organization aligns or needs improvement.
Review 'Cybersecurity Law'
Show steps
Study a book on cybersecurity law to understand the legal and regulatory aspects of cybersecurity and compliance.
View
Cybersecurity Law
on Amazon
Show steps
-
Obtain a copy of 'Cybersecurity Law'.
-
Read the chapters on data breach notification laws and privacy regulations.
-
Take notes on key legal and regulatory requirements.
Review 'Practical Cybersecurity Architecture'
Show steps
Study a book on cybersecurity architecture to gain a deeper understanding of how to design and implement robust security systems.
View
Melania
on Amazon
Show steps
-
Obtain a copy of 'Practical Cybersecurity Architecture'.
-
Read the chapters on risk management and security controls.
-
Take notes on key concepts and implementation strategies.
Four other activities
Expand to see all activities and additional details
Show all seven activities
Develop a Security Awareness Training Module
Show steps
Create a security awareness training module to reinforce your understanding of security awareness best practices and phishing prevention.
Show steps
-
Identify a target audience within your organization or a hypothetical one.
-
Research common phishing techniques and social engineering tactics.
-
Create a presentation or interactive module covering these topics.
-
Include quizzes and simulations to test understanding.
Follow a Tutorial on Setting Up Multi-Factor Authentication
Show steps
Follow a tutorial to gain hands-on experience with implementing multi-factor authentication, a critical security control.
Show steps
-
Find a tutorial on setting up MFA for a common service (e.g., Google, Microsoft).
-
Follow the steps in the tutorial to enable MFA on your account.
-
Document the process and any challenges you encounter.
Create a Risk Management Plan
Show steps
Develop a risk management plan to apply the concepts of risk assessment, security controls, and business alignment learned in the course.
Show steps
-
Identify critical assets within your organization or a hypothetical one.
-
Conduct a risk assessment using Impact vs. Likelihood models.
-
Develop a risk register to prioritize cybersecurity initiatives.
-
Align security budgets with risk tolerance and business goals.
Write a Blog Post on Endpoint Security
Show steps
Write a blog post summarizing key endpoint security strategies to reinforce your understanding of endpoint protection solutions.
Show steps
-
Research current trends and best practices in endpoint security.
-
Outline the key topics you want to cover in your blog post.
-
Write a draft of your blog post, including examples and case studies.
-
Edit and proofread your blog post before publishing.
Review NIST Cybersecurity Framework
Show steps
Familiarize yourself with the NIST Cybersecurity Framework to better understand the course's focus on industry best practices and compliance.
Browse courses on
NIST Cybersecurity Framework
Show steps
- Download the NIST Cybersecurity Framework documentation.
- Read the core functions: Identify, Protect, Detect, Respond, Recover.
- Identify areas where your current organization aligns or needs improvement.
Review 'Cybersecurity Law'
Show steps
Study a book on cybersecurity law to understand the legal and regulatory aspects of cybersecurity and compliance.
View
Cybersecurity Law
on Amazon
Show steps
- Obtain a copy of 'Cybersecurity Law'.
- Read the chapters on data breach notification laws and privacy regulations.
- Take notes on key legal and regulatory requirements.
Review 'Practical Cybersecurity Architecture'
Show steps
Study a book on cybersecurity architecture to gain a deeper understanding of how to design and implement robust security systems.
View
Melania
on Amazon
Show steps
- Obtain a copy of 'Practical Cybersecurity Architecture'.
- Read the chapters on risk management and security controls.
- Take notes on key concepts and implementation strategies.
Develop a Security Awareness Training Module
Show steps
Create a security awareness training module to reinforce your understanding of security awareness best practices and phishing prevention.
Show steps
- Identify a target audience within your organization or a hypothetical one.
- Research common phishing techniques and social engineering tactics.
- Create a presentation or interactive module covering these topics.
- Include quizzes and simulations to test understanding.
Follow a Tutorial on Setting Up Multi-Factor Authentication
Show steps
Follow a tutorial to gain hands-on experience with implementing multi-factor authentication, a critical security control.
Show steps
- Find a tutorial on setting up MFA for a common service (e.g., Google, Microsoft).
- Follow the steps in the tutorial to enable MFA on your account.
- Document the process and any challenges you encounter.
Create a Risk Management Plan
Show steps
Develop a risk management plan to apply the concepts of risk assessment, security controls, and business alignment learned in the course.
Show steps
- Identify critical assets within your organization or a hypothetical one.
- Conduct a risk assessment using Impact vs. Likelihood models.
- Develop a risk register to prioritize cybersecurity initiatives.
- Align security budgets with risk tolerance and business goals.
Write a Blog Post on Endpoint Security
Show steps
Write a blog post summarizing key endpoint security strategies to reinforce your understanding of endpoint protection solutions.
Show steps
- Research current trends and best practices in endpoint security.
- Outline the key topics you want to cover in your blog post.
- Write a draft of your blog post, including examples and case studies.
- Edit and proofread your blog post before publishing.
Career center
Information Security Manager
Cybersecurity Analyst
IT Security Consultant
Risk Manager
Compliance Officer
Security Architect
Network Security Engineer
Data Protection Officer
Incident Responder
Security Operations Center Analyst
Penetration Tester
Chief Technology Officer
IT Director
Business Continuity Manager
Project Manager
Reading list
Save
Share
Similar courses
OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.
Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.
Find this site helpful? Tell a friend about us.
We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.
Your purchases help us maintain our catalog and keep our servers humming without ads.
Thank you for supporting OpenCourser.
