Personnel & Third-Party Security from Coursera

What's inside

Syllabus

Education, Training, & Awareness

Welcome to the first module of Personnel & Third Party Security! Education, training, and awareness of security threats are important for many actors within an organization. It’s not only your users who make bad decisions, it’s also administrators, IT staff, security staff, and risk assessors. In this module we will dive into the process of implementing effective education, training, and awareness programs.

Personnel Security

Welcome to Module 2! Personnel security plays a critical role in protecting an organization’s assets, for example intellectual property, such as customer data or physical assets. Organizations define their security requirements around personnel’s use of organizational assets and then use technical and physical controls to implement them. Through personnel security controls, we work towards a reduction in the misuse, theft, or fraud related to our assets.

Vendor Risk Management

Welcome to Module 3! In this module we will introduce the steps required for effective Vendor Risk Management (VRM), including: due diligence, contracting, monitoring and accessing, as well as termination. When it comes to VRM, we cannot completely eliminate all risk, however, we may be able to reduce risk. The key is to ensure there is no "unacceptable" risk.

Acquisition Strategy

Welcome to the fourth and final module of Personnel & Third-Party Security! Imagine you just bought new hardware, software, or merged with another company. How do you ensure that these actions do not reduce your cyber security posture and increase your risk to external and internal threats? Introducing cyber security risk considerations into acquisition strategy can help deal with these concerns.

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Introduces risk management for third-party vendors, which is growing in relevance to prevent cyber threats

Develops key competencies for personnel security, a core component of modern IT and operational risk management

Provides in-depth knowledge on vendor risk management, which is invaluable for professionals managing third-party relationships

Suits personnel responsible for educating, training, and raising security awareness in organizations

Emphasizes the role of personnel security in protecting organizational assets, such as intellectual property and customer data

Provides thorough coverage of the steps involved in conducting vendor risk assessments

Reviews summary

Rewarding third-party security course

Learners say this engaging course is helpful for developing security awareness. Excellent instructors and useful readings make the learning process enjoyable. Students also appreciate the interesting case studies that help them apply what they learn. Overall, this course provides a solid overview of personnel and third-party security.

Course provides a broad perspective on the field of personnel and third-party security.

"Course provides a good overview of the main topics to be address for personnel security awareness and third party review."

"I have been studying cybersecurity for some time. And this program has a lot of innovative concepts."

Case studies help learners apply their knowledge and make the material more engaging.

"Excellent teacher. Very useful readings. Very interesting case study, especially the teacher's answer."

Instructors are well-received by learners.

"Excellent teacher."

"Really its content is very good."

"This course was easy and I had a hard time understanding the cyber talk, but it was very fun and I enjoyed the course work."

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Personnel & Third-Party Security with these activities:

Review Security Best Practices

Show steps

This will help you recall and practice the foundational security best practices.

Browse courses on Security Best Practices

Show steps

Start with a simple review of essential security principles.
Next, focus on the specific best practices relevant to your role.

Review cyber security fundamental concepts

Show steps

Establish a clear conceptual foundation for the course content.

Show steps

Review basic security concepts such as confidentiality, integrity, and availability
Identify different types of security threats
Describe the role of security controls in protecting assets
Discuss the importance of security policies and procedures

Review Legal and Regulatory Compliance

Show steps

Solidify your understanding of the legal and regulatory landscape to stay compliant.

Show steps

Focus on the key laws and regulations applicable to your industry.
Review industry guidelines and best practices.

Nine other activities

Expand to see all activities and additional details

Show all 12 activities

Practice with mock security breach scenarios

Show steps

Reinforce your understanding of personnel security best practices by simulating real-world scenarios.

Browse courses on Personnel Security

Show steps

Identify and document potential security threats
Develop and implement response plans
Test and evaluate the effectiveness of your plans

Create a Cybersecurity Awareness Poster

Show steps

Demonstrate your understanding of cybersecurity principles and create a visual aid to reinforce them.

Browse courses on Cybersecurity Awareness

Show steps

Start by identifying the key cybersecurity threats and best practices.
Next, design a visually appealing and informative poster.
Finally, display your poster in a prominent location.

Participate in discussion forums

Show steps

Engage with peers to ask questions and share insights, deepening understanding of topics.

Show steps

Join the discussion forums for the course
Read through existing discussions and posts
Ask questions and participate in ongoing discussions
Share your own insights and experiences

Explore case studies of effective vendor risk management

Show steps

Gain insights into real-world applications and best practices in vendor risk management.

Show steps

Identify reputable sources for case studies
Read and analyze case studies to understand different approaches to vendor risk management
Extract key lessons and best practices
Discuss findings with peers or mentors

Volunteer at a cybersecurity-related organization

Show steps

Gain practical experience and contribute to the cybersecurity community.

Show steps

Research and identify cybersecurity organizations
Contact organizations and inquire about volunteer opportunities
Participate in activities and events
Network with professionals in the field

Test preparedness for personnel security risk assessment

Show steps

Practice applying concepts of personnel security risk assessment to enhance understanding.

Show steps

Review case studies of personnel security risk assessment
Conduct mock assessments using provided scenarios
Analyze results and identify areas for improvement
Seek feedback from experts or peers

Conduct a security risk assessment for a small organization

Show steps

Enhance understanding of personnel and third-party security risks.

Show steps

Identify and gather information about the organization
Conduct threat and vulnerability assessment
Evaluate and prioritize risks
Develop and implement mitigation plans

Seek Guidance from Security Professionals

Show steps

Connect with experienced professionals to gain valuable insights and guidance in cybersecurity.

Show steps

Identify potential mentors within the cybersecurity community.
Reach out to them to schedule a virtual meeting.
Prepare questions to learn from their expertise and experiences.

Develop a cybersecurity awareness campaign for a specific audience

Show steps

Apply knowledge of education, training, and awareness techniques by creating a targeted campaign.

Show steps

Identify the target audience and their specific needs
Research and gather information on relevant cybersecurity threats and best practices
Design and develop engaging content
Implement and evaluate the effectiveness of the campaign

Career center

Learners who complete Personnel & Third-Party Security will develop knowledge and skills that may be useful to these careers:

IT Auditor

An IT Auditor reviews an organization's computer systems and networks to ensure that they are secure and compliant with regulations. This course would be very helpful for one looking to work in this field. This course would provide valuable training on how to implement security training and awareness programs and an introduction to Vendor Risk Management (VRM).

See salaries and explore the career path for IT Auditor

Information Security Analyst

An Information Security Analyst plans, implements, and does security audits for an organization's computer networks. This course would be very helpful for one looking to work in this field. This course would provide valuable training on how to implement security training and awareness programs and an introduction to Vendor Risk Management (VRM).

See salaries and explore the career path for Information Security Analyst

Security Consultant

A Security Consultant provides consulting services to help organizations improve their security posture. This course would be very helpful for one looking to work in this field. This course would provide valuable training on how to implement security training and awareness programs and an introduction to Vendor Risk Management (VRM).

See salaries and explore the career path for Security Consultant

Security Manager

A Security Manager is responsible for the overall security of an organization's information systems. This course would be very helpful for one looking to work in this field. This course would provide valuable training on how to implement security training and awareness programs and an introduction to Vendor Risk Management (VRM).

See salaries and explore the career path for Security Manager

Compliance Manager

A Compliance Manager ensures that an organization is compliant with all applicable laws and regulations. This course would be very helpful for one looking to work in this field. This course would provide valuable training on how to implement security training and awareness programs and an introduction to Vendor Risk Management (VRM).

See salaries and explore the career path for Compliance Manager

Risk Manager

A Risk Manager assesses and manages risks to an organization's assets. This course would be very helpful for one looking to work in this field. This course would provide valuable training on how to implement security training and awareness programs and an introduction to Vendor Risk Management (VRM).

See salaries and explore the career path for Risk Manager

Penetration Tester

A Penetration Tester tests an organization's security systems for vulnerabilities. This course may be helpful for one looking to work in this field. This course would provide training on how to implement security training and awareness programs.

See salaries and explore the career path for Penetration Tester

Security Architect

A Security Architect designs and implements an organization's security architecture. This course may be helpful for one looking to work in this field. This course would provide training on how to implement security training and awareness programs.

See salaries and explore the career path for Security Architect

Forensic Analyst

A Forensic Analyst investigates computer crimes. This course may be helpful for one looking to work in this field. This course would provide training on how to implement security training and awareness programs.

See salaries and explore the career path for Forensic Analyst

Security Analyst

A Security Analyst monitors an organization's security systems for threats and vulnerabilities. This course may be helpful for one looking to work in this field. This course would provide training on how to implement security training and awareness programs.

See salaries and explore the career path for Security Analyst

Network Administrator

A Network Administrator manages an organization's computer networks. This course may be helpful for one looking to work in this field. This course would provide training on how to implement security training and awareness programs.

See salaries and explore the career path for Network Administrator

Security Engineer

A Security Engineer designs, implements, and maintains an organization's security systems. This course may be helpful for one looking to work in this field. This course would provide training on how to implement security training and awareness programs.

See salaries and explore the career path for Security Engineer

Systems Administrator

A Systems Administrator manages an organization's computer systems. This course may be helpful for one looking to work in this field. This course would provide training on how to implement security training and awareness programs.

See salaries and explore the career path for Systems Administrator

Database Administrator

A Database Administrator manages an organization's databases. This course may be helpful for one looking to work in this field. This course would provide training on how to implement security training and awareness programs.

See salaries and explore the career path for Database Administrator

Incident Responder

An Incident Responder responds to security incidents. This course may be helpful for one looking to work in this field. This course would provide training on how to implement security training and awareness programs.

See salaries and explore the career path for Incident Responder