Examine the historical and contemporary evolution of cybersecurity. Differentiate between the types of risks and threats associated with various organizations and industries. Identify the key characteristics of internet of things (IoT) devices and discuss how the scope of risk your business faces is impacted by IoT. Assess the need for increased cybersecurity to protect data and assets and describe how you would respond to a security threat.

Evaluate your existing knowledge regarding the types of cyber attacks. Define how attackers infiltrate and weaken common security systems and technologies. Analyze the risk of attacks in the day-to-day operations of various organizations and industries. Differentiate among different cyber attacks and their characteristics.

Critique poor security measures and the potential consequences of unsecured and unprotected data. List and define the ingredients of strong security measures, including people, processes and technology. Differentiate between the types of security roles and functions and where they live in the IT space. Define and explain how prevention and detection relate to security functions.

Identify each stage of the attack life cycle. List the key signs and symptoms of a cyber attack using your knowledge of the types of cyber threats. Assess the tactics, techniques and procedures (TTPs) of cyber attackers and threats. Match the different stages of the attack life cycle to attacker behaviors. Discuss how to detect a cyber attack occurrence based on the attack life cycle.

Determine the threat landscape across different organizations and industries. Adopt the mindset of an attacker through a scenario-based role-playing activity. Analyze attacker decisions, goals and challenges in determining victims and attacker methods. Predict which organizational assets are most valuable to attackers.

Organize the NIST Cybersecurity Framework and its functions. Discern how the Federal Financial Institutions Examination Council (FFIEC) is built upon NIST. Identify and prioritize functions inside the security framework that are most critical and relevant to your industry. Facilitate improvements or changes to security based on the NIST Cybersecurity Framework. Match the NIST Cybersecurity Framework functions to their requirements and associated components. Apply the NIST Cybersecurity Framework to help strengthen general security infrastructure in a scenario.

Review how confidentiality has been a focus of cybersecurity legal frameworks. Name ways that cybersecurity laws are used to protect individual privacy and national security. List the steps you would take to minimize risks of a breach on private and confidential personal records. Determine which laws apply to security and confidentiality situations. Discuss the legal repercussions for and responsibilities of organizations in the event of a data breach.

Apply knowledge of your organization to assess security gaps and vulnerabilities. Summarize the main types of risks associated with your industry and the strategies for mitigating them. List defensive measures you can take for responding to a cyber incident. Develop a strategy for inventorying your company's technologies and digital assets. Discuss why organizations should prioritize cybersecurity and measures to prevent and detect threats.