Module 2 · Units 3–5 · Outcomes & Mapping
COMP 6660 · Enterprise Cybersecurity Module 2 Learning Outcomes
The authoritative learning outcomes for Module 2 — Threats, Architecture, and Infrastructure Protection — together with their mapping to the nine course learning outcomes and the assessment components that verify them.
01 Module learning outcomes
Upon successful completion of Module 2, students will be able to:
Threats & risk
- M2.1 — Conduct structured threat analysis and threat modelling for enterprise environments.
- M2.2 — Assess risks and vulnerabilities using recognised methodologies and evidence.
- M2.3 — Evaluate attack techniques, including ransomware, social engineering, APTs, insider threats, and supply-chain compromise.
- M2.4 — Recommend mitigation strategies proportionate to assessed risk.
Architecture
- M2.5 — Design enterprise security architectures using defence-in-depth and segmentation.
- M2.6 — Evaluate network, monitoring, and detection technologies, including IDS, IPS, SIEM, XDR, and SOC operations.
- M2.7 — Recommend appropriate security controls for a given enterprise context.
Infrastructure
- M2.8 — Secure enterprise infrastructures across operating systems, endpoints, applications, and databases.
- M2.9 — Evaluate cloud, container, virtualisation, mobile, and IoT platform security.
- M2.10 — Analyse emerging infrastructure threats, including those affecting critical infrastructure.
How to read these outcomes
The module outcomes above are the authoritative statements for assessment purposes. They are drawn directly from the unit-level outcomes and are verified by Assignment 2, the three graded discussion forums in this module, and Parts B and C of the final examination. The unit-level statements appear in Sections 02–04 below.
02 Unit 3 — Threats, Risks, Vulnerabilities, and Cyber Attacks
Upon completion of Unit 3, students will be able to:
Unit 3 learning outcomes
- U3.1 — Conduct threat analysis.
- U3.2 — Assess risks and vulnerabilities.
- U3.3 — Evaluate attack techniques.
- U3.4 — Recommend mitigation strategies.
| Outcome | Introduced in | Developed in | Assessed by |
|---|---|---|---|
| U3.1 — Threat analysis | Lesson 3.2 | Lessons 3.2–3.3 | Forum 3; Assignment 2 (Q1); Final exam Parts B and C |
| U3.2 — Risk and vulnerability assessment | Lesson 3.1 | Lessons 3.1–3.3 | Forum 3; Assignment 2 (Q1); Final exam Part C |
| U3.3 — Attack techniques | Lesson 3.4 | Lessons 3.4–3.7 | Forum 3; Assignment 2 (Q4); Final exam Part B |
| U3.4 — Mitigation strategies | Lesson 3.3 | Lessons 3.4–3.7 | Assignment 2 (Q4); Final exam Part C |
03 Unit 4 — Enterprise Security Architectures and Technologies
Upon completion of Unit 4, students will be able to:
Unit 4 learning outcomes
- U4.1 — Design enterprise security architectures.
- U4.2 — Evaluate security technologies.
- U4.3 — Recommend appropriate controls.
| Outcome | Introduced in | Developed in | Assessed by |
|---|---|---|---|
| U4.1 — Architecture design | Lessons 4.1–4.2 | Lessons 4.3–4.5 | Assignment 2 (Q2, Q5); Final exam Part C |
| U4.2 — Technology evaluation | Lesson 4.6 | Lessons 4.6–4.7 | Forum 4; Assignment 2 (Q3); Final exam Part B |
| U4.3 — Control recommendation | Lesson 4.1 | Lessons 4.5–4.7 | Forum 4; Assignment 2 (Q5); Final exam Part C |
04 Unit 5 — Enterprise Systems and Infrastructure Security
Upon completion of Unit 5, students will be able to:
Unit 5 learning outcomes
- U5.1 — Secure enterprise infrastructures.
- U5.2 — Evaluate cloud and platform security.
- U5.3 — Analyze emerging infrastructure threats.
| Outcome | Introduced in | Developed in | Assessed by |
|---|---|---|---|
| U5.1 — Secure infrastructure | Lesson 5.1 | Lessons 5.1–5.4 | Forum 5; Assignment 2 (Q5); Final exam Part B |
| U5.2 — Cloud and platform security | Lesson 5.5 | Lessons 5.5–5.6 | Forum 5; Assignment 2 (Q2); Final exam Part B |
| U5.3 — Emerging infrastructure threats | Lesson 5.7 | Lessons 5.7–5.8 | Forum 5; Final exam Part B |
05 Mapping to course learning outcomes
Module 2 develops or assesses six of the nine course learning outcomes. The table below shows the coverage level for each course outcome and where the mapping is assessed. The authoritative course-level statements are published on the course learning outcomes page.
| CLO | Statement | Coverage in Module 2 | Assessed by |
|---|---|---|---|
| CLO1 | Define the scope, objectives, principles, and strategic importance of enterprise cybersecurity. | Reinforced | Final exam Part A |
| CLO2 | Analyse threats, vulnerabilities, risks, and attack vectors. | Developed and assessed | Forum 3; Assignment 2 (Q1, Q4); Final exam Parts B and C |
| CLO3 | Evaluate and apply cryptographic, authentication, authorization, and access-control technologies. | Applied | Assignment 2 (Q2); Final exam Part B |
| CLO4 | Design and assess enterprise cybersecurity architectures and controls. | Developed and assessed | Forums 4 and 5; Assignment 2 (Q2, Q3, Q5); Final exam Parts B and C |
| CLO5 | Apply cybersecurity principles to secure enterprise systems, networks, cloud environments, and digital services. | Developed and assessed | Forum 5; Assignment 2 (Q2, Q5); Final exam Part B |
| CLO6 | Develop cybersecurity governance, risk-management, compliance, and policy frameworks. | Introduced (risk management only) | Lesson 3.1; developed in Module 3 |
| CLO7 | Evaluate incident response, business continuity, disaster recovery, and cyber-resilience strategies. | Introduced (detection and response) | Lesson 4.7; developed in Module 3 |
| CLO8 | Assess emerging cybersecurity technologies, trends, and challenges. | Introduced | Forums 4 and 5; Final exam Part B |
| CLO9 | Conduct scholarly research and communicate cybersecurity findings effectively. | Practised | Forums 3, 4, 5; Assignment 2 |
Coverage levels
Introduced means the outcome is first encountered in Module 2 but developed further in later modules. Developed means the outcome receives substantial treatment here. Assessed means student performance against the outcome is formally graded within Module 2. Applied or reinforced means the outcome is used in a new context.
06 Assessment alignment
Module 2 outcomes are verified by the following assessment components. Every module outcome is assessed at least once.
20%
Assignment 2
Enterprise Threat Analysis and Security Architecture. Covers M2.1–M2.10. Five technical questions plus a research essay on ransomware.
~5%
Forums 3, 4 & 5
Three graded discussion forums contributing to the 10% online participation component. Cover M2.1–M2.4, M2.6–M2.7, and M2.8–M2.10.
Parts B & C
Final examination
Technical analysis (Part B, 40%) and case-study architectural analysis (Part C, 40%). Covers most Module 2 outcomes.
| Outcome | Forum 3 | Forum 4 | Forum 5 | Assignment 2 | Final exam |
|---|---|---|---|---|---|
| M2.1 — Threat analysis and modelling | ✓ | — | — | ✓ | ✓ |
| M2.2 — Risk and vulnerability assessment | ✓ | — | — | ✓ | ✓ |
| M2.3 — Attack techniques | ✓ | — | — | ✓ | ✓ |
| M2.4 — Mitigation strategies | — | — | — | ✓ | ✓ |
| M2.5 — Architecture design | — | ✓ | — | ✓ | ✓ |
| M2.6 — Detection technology evaluation | — | ✓ | — | ✓ | ✓ |
| M2.7 — Control recommendation | — | ✓ | — | ✓ | ✓ |
| M2.8 — Secure enterprise infrastructure | — | — | ✓ | ✓ | ✓ |
| M2.9 — Cloud and platform security | — | — | ✓ | ✓ | ✓ |
| M2.10 — Emerging infrastructure threats | — | — | ✓ | — | ✓ |
07 Progression through the course
Module 2 outcomes build on Module 1 and feed into Module 3. The diagram below shows how each outcome connects.
- M2.1–M2.4 — Threats and risk Builds on Module 1 outcomes M1.3 and M1.6. Feeds into Module 3, where risk becomes a governance concern and mitigation is planned at the enterprise level.
- M2.5–M2.7 — Architecture Builds on Module 1 outcomes M1.4 and M1.5 (frameworks and posture). Feeds into Module 3, where architecture is evaluated within governance and compliance frameworks.
- M2.8–M2.10 — Infrastructure Builds on Module 1 outcomes M1.9–M1.14 (cryptography and access control). Feeds into Module 3, particularly Lesson 6.7 (incident response) and Lesson 6.9 (cyber resilience).
Mastery of Module 2 outcomes
Students who can conduct a structured threat-modelling exercise, design a defence-in-depth architecture for a specific enterprise context, and evaluate cloud and platform security controls are ready for Module 3. Those who cannot should revisit the relevant units before attempting Assignment 3.
Why does Module 2 have ten module outcomes compared with Module 1's fourteen?
Module 1 covers a wider range of foundational concepts and therefore has more module outcomes. Module 2 is more integrated: several of its outcomes span multiple units, and the outcomes themselves are broader. The number of outcomes is determined by the structure of the content, not by a fixed target.
Are the module outcomes identical to the unit outcomes?
No. Unit outcomes are more specific and describe what students will be able to do at the end of each unit. Module outcomes are aggregated statements that cover the whole module. Every module outcome can be traced back to one or more unit outcomes, but the wording and scope differ.
How does CLO8 (emerging technologies) fit into Module 2?
CLO8 is introduced in Module 2, Unit 5, where cloud, container, mobile, and IoT security are treated as emerging areas of enterprise risk. It is developed further in Module 3, Lesson 6.10, which examines AI in cybersecurity, digital sovereignty, and quantum risk.
Which outcomes should I prioritise if I am short on time?
Prioritise M2.1, M2.2, M2.5, and M2.8. These are the most heavily weighted in Assignment 2 and the final examination. M2.3, M2.4, M2.6, M2.7, and M2.9 are also assessed but tend to be built on the foundations laid by these four.
Where can I find the course-level outcomes?
The nine course learning outcomes are published on the course learning outcomes page, along with their full statements and the mapping to assessments. The course syllabus carries the authoritative assessment scheme and schedule.