Module 1 · Units 1–2 · Outcomes & Mapping
COMP 6660 · Enterprise Cybersecurity Module 1 Learning Outcomes
The authoritative learning outcomes for Module 1 — Foundations and Technologies — together with their mapping to the nine course learning outcomes and the assessment components that verify them.
01 Module learning outcomes
Upon successful completion of Module 1, students will be able to:
Foundations
- M1.1 — Explain the scope, objectives, principles, and strategic importance of enterprise cybersecurity.
- M1.2 — Identify and classify enterprise information assets requiring protection.
- M1.3 — Analyse cybersecurity risks affecting organizations.
- M1.4 — Compare cybersecurity frameworks and models, and select those suited to organisational needs.
- M1.5 — Assess organizational cybersecurity posture.
Threat landscape
- M1.6 — Identify major threat actors and analyse modern attack motivations.
- M1.7 — Analyse enterprise breaches and identify success and failure factors.
- M1.8 — Apply security principles to enterprise scenarios.
Core technologies
- M1.9 — Explain core cryptographic principles and evaluate cryptographic applications.
- M1.10 — Compare symmetric and asymmetric algorithms, and select encryption algorithms appropriately.
- M1.11 — Explain PKI architecture and validate digital trust mechanisms.
Identity & access
- M1.12 — Design IAM solutions and explain identity governance.
- M1.13 — Compare access-control models and select authentication approaches.
- M1.14 — Explain Zero Trust and apply Zero Trust concepts to enterprises.
How to read these outcomes
The module outcomes above are the authoritative statements for assessment purposes. They are drawn directly from the unit-level outcomes and are verified by Assignment 1, the two graded discussion forums in this module, and Part A of the final examination. The unit-level statements appear in Sections 02 and 03 below.
02 Unit 1 — Foundations of Enterprise Cybersecurity
Upon completion of Unit 1, students will be able to:
Unit 1 learning outcomes
- U1.1 — Explain cybersecurity objectives and principles.
- U1.2 — Define enterprise information assets.
- U1.3 — Analyse cybersecurity risks affecting organizations.
- U1.4 — Evaluate cybersecurity frameworks and models.
- U1.5 — Assess organizational cybersecurity posture.
Each unit outcome is developed across one or more lessons and assessed through the unit discussion forum and Assignment 1. The table below shows where each outcome is introduced and where it is assessed.
| Outcome | Introduced in | Developed in | Assessed by |
|---|---|---|---|
| U1.1 — Objectives and principles | Lesson 1.1 | Lesson 1.3 | Forum 1; Assignment 1 (Q5); Final exam Part A |
| U1.2 — Enterprise information assets | Lesson 1.2 | Lesson 1.2 | Forum 1; Assignment 1 |
| U1.3 — Cybersecurity risk analysis | Lesson 1.1 | Lesson 1.4 | Forum 1; Assignment 1; Final exam Parts A and B |
| U1.4 — Frameworks and models | Lesson 1.5 | Lesson 1.5 | Forum 1; Assignment 1; Final exam Part A |
| U1.5 — Posture assessment | Lesson 1.5 | Lesson 1.6 | Forum 1; Assignment 1 |
03 Unit 2 — Core Cybersecurity Technologies and Access Control
Upon completion of Unit 2, students will be able to:
Unit 2 learning outcomes
- U2.1 — Explain core cryptographic principles.
- U2.2 — Evaluate authentication technologies.
- U2.3 — Design access-control solutions.
- U2.4 — Apply identity-management approaches.
Unit 2 outcomes are technical and applied. They are assessed primarily through the technical questions in Assignment 1, with support from Forum 2 and the final examination.
| Outcome | Introduced in | Developed in | Assessed by |
|---|---|---|---|
| U2.1 — Cryptographic principles | Lesson 2.1 | Lessons 2.1–2.4 | Assignment 1 (Q2); Final exam Part B |
| U2.2 — Authentication technologies | Lesson 2.6 | Lessons 2.6–2.7 | Forum 2; Assignment 1 (Q4); Final exam Part B |
| U2.3 — Access-control design | Lesson 2.6 | Lessons 2.5–2.7 | Assignment 1 (Q3); Final exam Part B |
| U2.4 — Identity management | Lesson 2.5 | Lessons 2.5–2.6 | Forum 2; Assignment 1 (Q3); Final exam Part B |
04 Mapping to course learning outcomes
Module 1 introduces or develops six of the nine course learning outcomes. The table below shows the coverage level for each course outcome and where the mapping is assessed. The authoritative course-level statements are published on the course learning outcomes page.
| CLO | Statement | Coverage in Module 1 | Assessed by |
|---|---|---|---|
| CLO1 | Define the scope, objectives, principles, and strategic importance of enterprise cybersecurity. | Introduced and developed | Forum 1; Assignment 1; Final exam Part A |
| CLO2 | Analyse threats, vulnerabilities, risks, and attack vectors. | Introduced | Forum 1; Assignment 1; Final exam Parts A and B |
| CLO3 | Evaluate and apply cryptographic, authentication, authorization, and access-control technologies. | Developed and assessed | Forum 2; Assignment 1 (Q2–Q4); Final exam Part B |
| CLO4 | Design and assess enterprise cybersecurity architectures and controls. | Introduced | Assignment 1 (Q1); Final exam Part B |
| CLO5 | Apply cybersecurity principles to secure enterprise systems, networks, cloud environments, and digital services. | Introduced | Assignment 1; Final exam Part B |
| CLO6 | Develop cybersecurity governance, risk-management, compliance, and policy frameworks. | Not addressed in Module 1 | Module 3 |
| CLO7 | Evaluate incident response, business continuity, disaster recovery, and cyber-resilience strategies. | Not addressed in Module 1 | Module 3 |
| CLO8 | Assess emerging cybersecurity technologies, trends, and challenges. | Not addressed in Module 1 | Modules 2 and 3 |
| CLO9 | Conduct scholarly research and communicate cybersecurity findings effectively. | Practised | Forum 1; Forum 2; Assignment 1 |
Coverage levels
Introduced means the outcome is first encountered in Module 1 but developed further in later modules. Developed means the outcome receives substantial treatment here. Assessed means student performance against the outcome is formally graded within Module 1. Outcomes not addressed here are covered in Modules 2 and 3, as indicated.
05 Assessment alignment
Module 1 outcomes are verified by the following assessment components. This alignment is what makes the outcomes auditable — every outcome is assessed at least once, and no assessment tests material that is outside the stated outcomes.
20%
Assignment 1
Enterprise Cybersecurity Foundations and Technologies. Covers M1.1–M1.14. Five technical questions plus a research essay on Zero Trust Architecture.
~3%
Forums 1 & 2
Two graded discussion forums contributing to the 10% online participation component. Cover M1.1–M1.8 and M1.12–M1.14.
Part A
Final examination
Foundational concepts (20% of the exam). Covers M1.1–M1.8 and parts of M1.9–M1.14.
| Outcome | Forum 1 | Forum 2 | Assignment 1 | Final exam |
|---|---|---|---|---|
| M1.1 — Scope and strategic importance | ✓ | — | ✓ | ✓ |
| M1.2 — Enterprise information assets | ✓ | — | ✓ | — |
| M1.3 — Cybersecurity risk analysis | ✓ | — | ✓ | ✓ |
| M1.4 — Frameworks and models | ✓ | — | ✓ | ✓ |
| M1.5 — Posture assessment | ✓ | — | ✓ | — |
| M1.6 — Threat actors and motivations | ✓ | — | — | ✓ |
| M1.7 — Breach analysis | ✓ | — | — | — |
| M1.8 — Apply security principles | ✓ | ✓ | ✓ | ✓ |
| M1.9 — Cryptographic principles | — | ✓ | ✓ | ✓ |
| M1.10 — Symmetric and asymmetric algorithms | — | — | ✓ | ✓ |
| M1.11 — PKI and digital trust | — | ✓ | ✓ | — |
| M1.12 — IAM design and governance | — | ✓ | ✓ | ✓ |
| M1.13 — Access-control and authentication models | — | ✓ | ✓ | ✓ |
| M1.14 — Zero Trust | — | ✓ | ✓ | ✓ |
06 Progression through the course
Module 1 outcomes establish the foundation on which Modules 2 and 3 build. The diagram below shows how each Module 1 outcome is carried forward.
- M1.1–M1.5 — Foundations Carried into Module 3 (governance, risk, and compliance), where these outcomes become the object of governance rather than analysis.
- M1.6–M1.8 — Threat landscape Carried into Module 2, Unit 3, where threat actors and motivations are analysed in depth as part of threat modelling.
- M1.9–M1.11 — Cryptography Applied in Module 2, Units 4 and 5, where cryptographic controls are evaluated within network, cloud, and platform security contexts.
- M1.12–M1.14 — Identity and access Extended in Module 2, Units 4 and 5, where IAM, authentication, and Zero Trust principles are applied to cloud identity and platform security.
Mastery of Module 1 outcomes
Students who can confidently design an IAM solution, compare symmetric and asymmetric algorithms, and evaluate an enterprise against NIST CSF and ISO/IEC 27001 are ready for Module 2. Those who cannot should revisit the relevant lessons before attempting Assignment 2.
What is the difference between a module outcome and a course outcome?
Course learning outcomes (CLOs) describe what students will be able to do by the end of COMP 6660. Module outcomes are the intermediate steps: they are more specific, assessable within the module, and designed to build the CLOs incrementally. Every module outcome maps to one or more CLOs, but a single CLO may span several modules.
Are the module outcomes examinable?
Yes. Module outcomes are examinable in the final examination where the matrix in Section 05 shows a ✓. Assignment 1 is the primary assessment vehicle for Module 1, but outcomes M1.1, M1.3, M1.4, M1.8, M1.9, M1.10, M1.12, M1.13, and M1.14 are all examinable.
Why are CLO6, CLO7, and CLO8 not addressed in Module 1?
CLO6 (governance, risk, compliance) and CLO7 (incident response, continuity, resilience) require the technical and analytical vocabulary developed in Modules 1 and 2, so they are addressed in Module 3. CLO8 (emerging technologies and trends) is developed across Modules 2 and 3 as students encounter platform-specific and forward-looking material.
Where are the unit-level outcomes published?
Where can I find the course-level outcomes?
The nine course learning outcomes are published on the course learning outcomes page, along with their full statements and the mapping to assessments. The course syllabus carries the authoritative assessment scheme and schedule.