Graduate · 3 Credits · Online, Paced Study
Examine the technologies, architectures, governance frameworks, risk-management methodologies, and operational practices used to secure modern enterprise environments — from cryptographic foundations and Zero Trust design through to cyber resilience and emerging threats.
Course Overview
COMP 6660: Enterprise Cybersecurity examines the technologies, architectures, governance frameworks, risk-management methodologies, and operational practices used to secure modern enterprise environments. Students explore cybersecurity from technical, managerial, strategic, and research perspectives.
Topics include enterprise security architecture, cryptography, identity and access management, cyber threats and vulnerabilities, cloud and infrastructure security, cybersecurity governance, risk management, compliance, security operations, incident response, business continuity, and emerging cybersecurity challenges.
Students develop both practical and scholarly competencies through critical analysis, case studies, independent research, and applied cybersecurity design activities.
Graduate students in computing and information systems who intend to lead, design, audit, or research enterprise security programmes — not just operate security tools.
| Course number | COMP 6660 |
|---|---|
| Course title | Enterprise Cybersecurity |
| Credits | 3 (graduate) |
| Level | Graduate |
| Delivery mode | Online, paced study (Brightspace) |
| Prerequisite | COMP 604 |
| Estimated learning hours | 180–200 hours |
| Structure | 3 modules · 6 units |
| Assessment | 3 assignments · online participation · final examination |
Course Learning Outcomes
Nine course learning outcomes (CLOs) frame every unit, lesson, discussion, and assessment in COMP 6660.
Curriculum
Three modules and six units progress from foundations and core technologies, through threats and enterprise architecture, to governance, operations, and resilience.
Establishes the vocabulary, principles, frameworks, and core technologies of enterprise cybersecurity — including cryptography, identity, and access control.
Analyses the adversary landscape and the architectural, network, platform, and cloud controls used to defend enterprise systems and critical infrastructure.
Addresses the managerial, regulatory, and operational side of security: governance, risk, compliance, incident response, continuity, and resilience.
Getting Started
Every unit follows the same rhythm, so you always know what to do next.
Orient yourself with the unit learning outcomes, lesson list, resources, and the discussion prompt.
Each lesson combines readings, core concepts, worked examples, and applied activities.
Post a substantive contribution and respond meaningfully to at least two classmates.
Apply the unit's concepts to a research topic and a set of technical problems.
Assessment
Three research-driven assignments, structured online participation, and a comprehensive final examination. Each assignment pairs a scholarly research topic with applied technical problems.
20%
Enterprise Cybersecurity Foundations and Technologies (Units 1–2). Research topic: Zero Trust Architecture for Modern Enterprises. Full brief →
20%
Enterprise Threat Analysis and Security Architecture (Units 3–5). Research topic: Ransomware as an Enterprise Threat. Full brief →
20%
Enterprise Security Governance and Cyber Resilience (Unit 6 and integrated concepts). Research topic: Integrating NIST CSF, ISO/IEC 27001, and Zero Trust. Full brief →
10%
Six asynchronous discussion forums, one per unit, with scholarly contributions and peer responses. Full brief →
30%
Covers all units and learning outcomes: foundational concepts, technical analysis, and an enterprise case study. Full brief →
| Assessment | Weight |
|---|---|
| Assignment 1 | 20% |
| Assignment 2 | 20% |
| Assignment 3 | 20% |
| Online Participation | 10% |
| Final Examination | 30% |
| Total | 100% |
| Part | Weight | Focus |
|---|---|---|
| A | 20% | Foundational concepts and principles |
| B | 40% | Technical analysis and problem-solving questions |
| C | 40% | Enterprise case study: risk assessment, architectural analysis, governance, strategic recommendations |
Online Participation · 10%
Participation is asynchronous through discussion forums in Brightspace. It is intended to foster scholarly discussion, professional knowledge sharing, critical reflection, and collaborative learning.
Foundations of Enterprise Cybersecurity
Identity, Access Control, and Zero Trust
Threat Intelligence and Risk Management
Enterprise Security Architectures
Systems and Infrastructure Security
Cybersecurity Governance and Resilience
| Criterion | Weight |
|---|---|
| Relevance and quality of contributions | 30% |
| Critical analysis and reflection | 30% |
| Integration of research evidence | 20% |
| Engagement with peers | 20% |
| Total | 100% |
Paced Study
COMP 6660 is delivered as a paced course. The schedule below is the recommended progression across a fourteen-week term.
| Week | Unit | Focus | Key topics |
|---|---|---|---|
| 1–2 | Unit 1 | Foundations of Enterprise Cybersecurity | Evolution of cybersecurity, enterprise assets, the CIA triad, threat landscape, NIST CSF, ISO 27001 |
| 3–5 | Unit 2 | Core Cybersecurity Technologies and Access Control | Symmetric and asymmetric cryptography, PKI, IAM, MFA, RBAC/ABAC, Zero Trust |
| 6–7 | Unit 3 | Threats, Risks, Vulnerabilities, and Cyber Attacks | Risk fundamentals, threat modelling, vulnerability assessment, ransomware, social engineering, APTs, supply chain |
| 8–9 | Unit 4 | Enterprise Security Architectures and Technologies | Architecture principles, defence-in-depth, network security protocols, VPNs, firewalls, IDS/IPS, SIEM, XDR, SOC |
| 10–11 | Unit 5 | Enterprise Systems and Infrastructure Security | OS, endpoint, application, and database security; cloud, container, mobile and IoT; critical infrastructure |
| 12–13 | Unit 6 | Enterprise Cybersecurity Governance, Risk, and Compliance | Governance, policy, risk frameworks, compliance, awareness, auditing, incident response, BCP/DR, cyber resilience |
| 14 | All units | Final Review | Integration of course concepts, case-study practice, final examination |
Research Integration
Each unit incorporates current research literature, industry frameworks, standards, regulations, and enterprise case studies to ensure graduate-level depth and relevance.
Start with Module 1: Foundations and Technologies, or review the full course syllabus and assessment briefs before you dive in.