Module 1 · Unit 1 · 6 Lessons
COMP 6660 · Enterprise Cybersecurity Foundations of Enterprise Cybersecurity
Introduces enterprise cybersecurity as a strategic business concern. You will define and classify enterprise information assets, work through the core security objectives, survey the modern threat landscape, evaluate recognised frameworks and models, and apply all of this to documented enterprise breaches.
01 Unit overview
Before an enterprise can defend anything, it must know what it is defending, from whom, and why the effort is justified.
Unit 1 answers those three questions. It opens with the evolution of cybersecurity and the way enterprise digitisation — cloud platforms, mobile devices, third-party services, and operational technology — has dissolved the traditional network perimeter. Cybersecurity is framed throughout as a business issue, not a purely technical one: it consumes budget, carries legal and reputational consequences, and must be justified in the language of risk.
The unit then builds the vocabulary. Students learn to identify and classify enterprise information assets — data, information systems, critical infrastructure, and intellectual property — and to reason about the core security objectives: confidentiality, integrity, availability, authenticity, accountability, privacy, and non-repudiation. The modern threat landscape is surveyed through its principal actors (cybercrime, nation-states, hacktivists, insiders) and their motivations.
Recognised frameworks and models — NIST CSF, NIST RMF, ISO/IEC 27001, and defence-in-depth — are compared and evaluated against organisational needs. The unit closes with a set of documented enterprise breaches, used to distinguish success and failure factors and to show the organisational impacts of security failure.
| Unit | 1 — Foundations of Enterprise Cybersecurity |
|---|---|
| Module | Module 1 — Foundations and Technologies |
| Lessons | 6 (Lessons 1.1–1.6) |
| Discussion forum | Forum 1 — Foundations of Enterprise Cybersecurity |
| Assessed by | Assignment 1 (20%) — with Unit 2 |
| Recommended weeks | Weeks 1–2 |
| Primary CLOs | CLO1, CLO2, CLO4, CLO9 |
02 Unit learning outcomes
Upon completion of Unit 1, students will be able to:
Foundations
- Explain cybersecurity objectives and principles.
- Define enterprise information assets.
- Analyse cybersecurity risks affecting organizations.
Frameworks
- Evaluate cybersecurity frameworks and models.
- Select frameworks appropriate to an organization's context and risk appetite.
Application
- Assess organizational cybersecurity posture.
- Analyse enterprise breaches and identify success and failure factors.
Full statement
The authoritative unit learning outcomes, including their mapping to the nine course learning outcomes, are published on the Unit 1 learning outcomes page.
03 Lessons in this unit
Unit 1 contains six lessons. Work through them in order — each builds on the vocabulary introduced in the previous one.
Introduction to Enterprise Cybersecurity
The evolution of cybersecurity, enterprise digitisation, the modern threat landscape, and cybersecurity as a business issue.
Topics: evolution of cybersecurity · enterprise digitization · threat landscape · cybersecurity as a business issue
Lesson 1.2Enterprise Information Assets
What the enterprise must protect: data assets, information systems, critical infrastructure, and intellectual property — and how to classify them.
Topics: data assets · information systems · critical infrastructure · intellectual property
Lesson 1.3Cybersecurity Objectives and Principles
The core security objectives — CIA, authenticity, accountability, privacy, non-repudiation — and how to apply them to enterprise scenarios.
Topics: CIA triad · authenticity · accountability · privacy · non-repudiation
Lesson 1.4Enterprise Threat Landscape
Who attacks enterprises, and why. Cybercrime, nation-state actors, hacktivism, and insider threats.
Topics: cybercrime · nation-state actors · hacktivism · insider threats
Lesson 1.5Security Frameworks and Models
Comparing and selecting among the major frameworks — NIST CSF, NIST RMF, ISO/IEC 27001 — and the defence-in-depth architectural model.
Topics: NIST CSF · NIST RMF · ISO 27001 · defense-in-depth
Lesson 1.6Enterprise Cybersecurity Case Studies
Documented enterprise breaches analysed for lessons learned, security failures, and organisational impacts.
Topics: major breaches · lessons learned · security failures · organizational impacts
04 Discussion and assessment
Forum 1 — Foundations of Enterprise Cybersecurity
Unit 1 hosts the first of six graded discussion forums. Contribute an initial posting of approximately 300–500 words that draws on the readings and scholarly sources, plus at least two meaningful responses to classmates.
Example discussion topics:
- Lessons learned from major cyber incidents.
- Emerging cybersecurity threats.
- Enterprise security challenges.
How Unit 1 is assessed
Unit 1 is assessed through Assignment 1 — Enterprise Cybersecurity Foundations and Technologies (20% of the final grade), which covers Units 1 and 2.
Research topic: Zero Trust Architecture for Modern Enterprises: Principles, Adoption Challenges, and Implementation Strategies.
Unit 1 material also underpins the foundational questions in the final examination (Part A) and provides the vocabulary used throughout the course.
Reading order
There is no set order for the Unit 1 lesson readings, but Lessons 1.1, 1.2, and 1.3 introduce the vocabulary used across the rest of the course. Complete those three before moving on to the frameworks and case-study lessons.