Overview

Google, IBM & Meta Certificates – 40% Off

One plan covers every Professional Certificate on Coursera.

Cybersecurity isn't just an IT problem; it's a business problem. Data breaches, ransomware attacks, and phishing scams make headlines every week, and the organizations that suffer the most are often the ones where business professionals assumed security was someone else's responsibility. This course changes that assumption. Whether you work in finance, marketing, operations, or management, you have a role to play in protecting your organization's information resources. You'll learn to recognize the threats that put organizations at risk, from well-meaning employees who make costly mistakes to sophisticated attackers targeting your systems, and the strategies and controls organizations use to defend against them. You'll come away with the knowledge to make smarter decisions, ask better questions of your IT colleagues, and contribute to a culture of security awareness in any workplace. In a world where a single click can trigger a crisis, that knowledge isn't optional; it's a professional essential.

Syllabus

Cybersecurity Threats

Every organization faces threats to its information resources, and most of the time, the weakest link isn’t the technology. It’s people, processes, and the gap between what organizations think is happening on their networks and what’s actually happening. This module gives you a clear picture of the threat landscape. You’ll start with the factors that make modern organizations increasingly vulnerable, from the explosion of connected devices to the sophistication of today’s attackers. You’ll examine the human side of security risk, including the unintentional mistakes employees make every day and the social engineering tactics that exploit trust and habit. You’ll explore ten types of deliberate attacks organizations face, from malware and denial-of-service attacks to identity theft and espionage. Understanding what you’re up against is the first step to protecting against it and to becoming the kind of informed professional who doesn’t become the reason your organization makes the news. 💡Tip for success: As you work through the types of attacks, think about the communications you receive at work—email, texts, and phone calls. You’ll start spotting things you never noticed before.

Protecting Information Resources

Knowing the threats is only half the picture. This module focuses on what organizations do to protect themselves, and what every professional should understand about those defenses. You'll start with risk mitigation: the three fundamental strategies organizations use when facing a security threat and the tradeoffs between accepting, transferring, and reducing risk. These aren't abstract frameworks, they're the decisions your organization's leadership makes every time it evaluates a new system, vendor, or policy. Then you'll examine the controls that form the backbone of any information security program: physical controls that protect hardware, access controls that manage who can do what, and communications controls that protect data in transit. You'll see how these layers work together, and where gaps appear when any one is overlooked. Whether or not security is in your job title, understanding how your organization protects its information resources makes you a more aware and valuable professional in any role. 💡Tip for success: Think about your own workplace as you go through the controls — which ones do you already encounter every day, and which gaps can you identify?