Foundations of Cybersecurity and Risk Management

Packt via Coursera

Go to class Write review

Overview

Google, IBM & Meta Certificates – 40% Off

One Coursera Plus subscription covers most Professional Certificates on Coursera.

Unlock All Certificates

Gain a comprehensive understanding of cybersecurity principles, threat landscapes, legal frameworks, and risk management strategies essential for security professionals. This course builds a strong foundation in security governance, controls, and data protection. This course introduces the core concepts of cybersecurity, including the CIA triad, threat actors, and the evolving landscape of cyber attacks. Learners will explore privacy regulations, legal considerations, and the implementation of security controls and governance structures. The course also covers risk management frameworks, data security, asset management, and personnel security, providing a holistic view of how organizations protect their information assets. By the end, learners will be equipped to identify, assess, and manage risks while ensuring compliance with industry standards. The course breaks down complex cybersecurity topics into clear, digestible modules, using real-world examples to illustrate key concepts. Learners progress through structured lessons and knowledge checks to reinforce understanding and build practical expertise. This course is part one of a three-course Specialization designed to build a complete and cohesive understanding of the subject. While it offers valuable skills on its own, you'll gain the most benefit by progressing through all three courses as a structured learning journey. This course is based on Ultimate CISSP Certification Preparation Course, by GRC Gate. This course is licensed and distributed by Packt. All rights reserved. Packt is one of the world's most prolific publishers of cutting-edge technical content. For over two decades we've made it our mission to curate and publish the knowledge of only the very best technical experts. We focus on real-world courses that help our customers get the job done, with coverage that extends across a wide range of established and cutting-edge technical topics. If you're an individual or an organisation that embraces learning by doing, Packt is the perfect fit for you.

Syllabus

CISSP Training Course Introduction
- This module introduces the significance of the CISSP certification in shaping a successful cybersecurity career. Learners will gain insight into how CISSP contributes to global security leadership and the evolving role of security professionals in 2026 and beyond.
CISSP Domain 1 – Security Foundations (Part 1/6)
- This module introduces foundational security concepts, including the CIA triad, key terminologies, and ethical frameworks. It also explores how cybersecurity, information security, and information assurance interrelate, along with practical approaches like bug bounty programs and vulnerability management. Learners will gain a comprehensive understanding of security principles and their real-world applications.
CISSP Domain 1 – Cyber Threats (Part 2/6)
- This module provides an in-depth exploration of cyber threats, covering threat actors, advanced persistent threats, malware, and web application vulnerabilities. Learners will gain an understanding of defensive strategies, threat intelligence, and how to protect against various cyber attacks.
CISSP Domain 1 – Privacy and Laws (Part 3/6)
- This module covers the distinctions between security and privacy, key privacy regulations, and major federal laws impacting cybersecurity. It also explores intellectual property rights, security standards, and methods for assessing organizational maturity in information security.
CISSP Domain 1 – Security Controls (Part 4/6)
- This module explores the fundamental concepts of security controls, including their types, implementation, and strategic use in protecting organizational systems. Learners will gain an understanding of defense in depth, abstraction, and compensating controls to strengthen security frameworks.
CISSP Domain 1 – Security Governance (Part 5/6)
- This module explores the key elements of security governance, including the roles of a security manager, organizational structure, security programs, and the relationship between governance and management. It covers the development and implementation of security policies, standards, and procedures, and emphasizes alignment with business goals. Learners will gain a comprehensive understanding of how to establish effective information security governance frameworks.
CISSP Domain 1 – Risk Management (Part 6/6)
- This module provides a comprehensive overview of risk management concepts, frameworks, and practices essential for security professionals. Learners will explore how to identify, analyze, evaluate, and respond to risks within organizational systems. The content also covers the importance of continuous monitoring and reporting in maintaining effective risk governance.
CISSP Domain 2 – Data Security and Data Controls (Part 1/3)
- This module explores the fundamental aspects of data security, including the data lifecycle, secure disposal methods, digital rights management, and data security controls. Learners will gain an understanding of how to manage and protect data throughout its entire lifecycle while ensuring compliance with security standards.
CISSP Domain 2 – Asset Management and Protection (Part 2/3)
- This module covers the critical aspects of managing and protecting IT assets, including the risks of shadow IT, strategies for effective asset tracking, and the use of role-based accountability frameworks. Learners will gain an understanding of how to identify, manage, and secure organizational assets through structured processes and clear role definitions.
CISSP Domain 2 – Personnel and Vendor Security (Part 3/3)
- This module explores key aspects of personnel and vendor security, including social engineering prevention, security awareness programs, due care and diligence, outsourcing risks, supply chain management, and real-world case studies. Learners will gain practical insights into implementing security measures and managing human-related risks in organizations.