Module 1 · Units 1–2 · 13 Lessons
COMP 6660 · Enterprise Cybersecurity Foundations and Technologies
Establishes the vocabulary, principles, frameworks, and core technologies of enterprise cybersecurity — from information assets, the CIA triad, and the modern threat landscape, through cryptography and public key infrastructure, to identity and access management and Zero Trust.
01 Module overview
Module 1 establishes the conceptual and technical foundation on which the rest of COMP 6660 builds.
The module opens with the question of why enterprise cybersecurity is a business problem rather than a purely technical one. Enterprise digitisation has distributed data, systems, and trust across cloud platforms, mobile devices, third-party services, and operational technology — expanding the attack surface far beyond the traditional network perimeter.
Unit 1 develops this foundation. Students examine the evolution of cybersecurity, define and classify enterprise information assets, and work through the core security objectives: confidentiality, integrity, availability, authenticity, accountability, privacy, and non-repudiation. The unit then surveys the modern threat landscape and the major security frameworks — NIST CSF, NIST RMF, and ISO/IEC 27001 — and architectural models such as defence-in-depth, before applying all of this to documented enterprise breaches.
Unit 2 turns to the core technologies that enforce security policy. Students work from cryptographic primitives (symmetric and asymmetric encryption, key management) through digital signatures and public key infrastructure, then into identity and access management: identity lifecycle, federation, authentication (MFA, SSO), and access-control models (RBAC, ABAC). The unit closes with Zero Trust — the architectural paradigm that connects identity, least privilege, and continuous verification.
Together, the two units prepare students for Assignment 1 and for the threat, architecture, and infrastructure material in Module 2.
| Module | 1 — Foundations and Technologies |
|---|---|
| Units | Unit 1, Unit 2 |
| Lessons | 13 (6 + 7) |
| Discussion forums | Forum 1 (Unit 1), Forum 2 (Unit 2) |
| Assessment | Assignment 1 — Enterprise Cybersecurity Foundations and Technologies (20%) |
| Recommended weeks | Weeks 1–5 |
| Primary CLOs | CLO1, CLO2, CLO3, CLO4, CLO5 |
02 Module learning outcomes
Upon successful completion of Module 1, students will be able to:
Foundations
- Explain the scope, objectives, principles, and strategic importance of enterprise cybersecurity.
- Identify and classify enterprise information assets requiring protection.
- Compare cybersecurity frameworks and models, and select those suited to organisational needs.
- Analyse the modern threat landscape, including major threat actors and their motivations.
Technologies
- Explain core cryptographic principles, requirements, and key-management practices.
- Compare symmetric and asymmetric algorithms, and select them appropriately for enterprise applications.
- Explain public key infrastructure and validate digital trust mechanisms.
Identity & Access
- Design identity and access management solutions and explain identity governance.
- Compare access-control models and select appropriate authentication approaches.
- Apply Zero Trust concepts — continuous verification, least privilege, micro-segmentation — to enterprise environments.
Full statement
The authoritative module learning outcomes, including their mapping to the nine course learning outcomes, are published on the Module 1 learning outcomes page.
| CLO | Statement | Coverage in Module 1 |
|---|---|---|
| CLO1 | Define the scope, objectives, principles, and strategic importance of enterprise cybersecurity. | Introduced and assessed (Unit 1) |
| CLO2 | Analyse threats, vulnerabilities, risks, and attack vectors. | Introduced (Units 1–2) |
| CLO3 | Evaluate and apply cryptographic, authentication, authorization, and access-control technologies. | Developed and assessed (Unit 2) |
| CLO4 | Design and assess enterprise cybersecurity architectures and controls. | Introduced (Units 1–2) |
| CLO5 | Apply cybersecurity principles to secure enterprise systems and services. | Introduced (Unit 2) |
| CLO9 | Conduct scholarly research and communicate findings effectively. | Practised (Assignment 1, forums) |
03 Units in this module
Module 1 contains two units. Each unit provides an overview page, a learning outcomes page, a set of lessons, a graded discussion forum, and a curated resource list.
Unit 1 — Foundations of Enterprise Cybersecurity
Introduces enterprise cybersecurity as a strategic business concern, defines the assets that require protection, establishes the core security objectives and principles, surveys the modern threat landscape, and applies recognised frameworks and models to real enterprise breaches.
Unit learning outcomes
- Explain cybersecurity objectives and principles.
- Define enterprise information assets.
- Analyse cybersecurity risks affecting organizations.
- Evaluate cybersecurity frameworks and models.
- Assess organizational cybersecurity posture.
Introduction to Enterprise Cybersecurity
Evolution of cybersecurity, enterprise digitization, the threat landscape, and cybersecurity as a business issue.
Lesson 1.2Enterprise Information Assets
Data assets, information systems, critical infrastructure, and intellectual property — and how to classify them.
Lesson 1.3Cybersecurity Objectives and Principles
The CIA triad, authenticity, accountability, privacy, and non-repudiation applied to enterprise scenarios.
Lesson 1.4Enterprise Threat Landscape
Cybercrime, nation-state actors, hacktivism, and insider threats — and the motivations behind them.
Lesson 1.5Security Frameworks and Models
NIST CSF, NIST RMF, ISO 27001, and defence-in-depth — comparing and selecting frameworks.
Lesson 1.6Enterprise Cybersecurity Case Studies
Major breaches, lessons learned, security failures, and organisational impacts.
Unit 2 — Core Cybersecurity Technologies and Access Control
Examines the cryptographic, identity, and access-control technologies that enforce enterprise security policy — from encryption algorithms and key management through PKI, IAM, authentication and authorization models, and the principles of Zero Trust.
Unit learning outcomes
- Explain core cryptographic principles.
- Evaluate authentication technologies.
- Design access-control solutions.
- Apply identity-management approaches.
Cryptographic Foundations
Encryption, key management, and the security principles that cryptographic systems must satisfy.
Lesson 2.2Symmetric Cryptography
DES, Triple DES, and AES — comparing algorithms and selecting them appropriately.
Lesson 2.3Asymmetric Cryptography
RSA, elliptic curve cryptography, and Diffie–Hellman key exchange.
Lesson 2.4Digital Signatures and PKI
Certificates, certificate authorities, and trust models — validating digital trust.
Lesson 2.5Identity and Access Management
IAM architecture, the identity lifecycle, federation, and identity governance.
Lesson 2.6Authentication and Authorization
MFA, single sign-on, RBAC, and ABAC — comparing access-control models.
Lesson 2.7Zero Trust Principles
Continuous verification, least privilege, and micro-segmentation applied to the enterprise.
04 Discussion and assessment
Discussion forums
Module 1 hosts two of the six graded discussion forums. Each requires an initial contribution of approximately 300–500 words, supported by scholarly sources, plus at least two meaningful peer responses.
- Forum 1 — Foundations of Enterprise Cybersecurity. Lessons learned from major cyber incidents; emerging cybersecurity threats; enterprise security challenges. Open Forum 1 →
- Forum 2 — Identity, Access Control, and Zero Trust. Zero Trust adoption experiences; MFA effectiveness; IAM challenges. Open Forum 2 →
Participation is worth 10% of the final grade overall.
Assignment 1 (20%)
Enterprise Cybersecurity Foundations and Technologies — covers Unit 1 and Unit 2.
Research topic: Zero Trust Architecture for Modern Enterprises: Principles, Adoption Challenges, and Implementation Strategies.
Technical questions include:
- Design a Zero Trust Architecture for a distributed enterprise.
- Compare AES and RSA for enterprise applications.
- Design an IAM solution for a healthcare organization.
- Evaluate authentication mechanisms for preventing credential-based attacks.
- Analyse how Zero Trust contributes to confidentiality, integrity, availability, and accountability.