Module 2 · Unit 5 · Forum 5
COMP 6660 · Enterprise Cybersecurity Forum 5 — Systems and Infrastructure Security
The fifth graded discussion forum. Analyse how enterprises secure their platforms — cloud, containers, endpoints, mobile, IoT, and critical infrastructure — and where the boundaries between them create risk.
01 Forum overview
Forum 5 addresses platform security. It invites you to analyse how enterprises protect the platforms their workloads actually run on — and where the boundaries between those platforms create risk.
The forum runs asynchronously in Brightspace and is one of six graded forums contributing to the 10% online participation component. It draws most heavily on Lessons 5.5 (Cloud Security), 5.6 (Container and Virtualization Security), and 5.8 (Critical Infrastructure Security), though the compute-stack lessons (5.1–5.4) supply essential context.
Forum 5 supports Assignment 2's cloud-migration and defence-in-depth questions, and also informs Part C of the final examination, which frequently requires analysis of platform-specific risk.
Where to post
The forum is hosted in Brightspace, in the Unit 5 Discussion topic under the Discussions tool.
02 Discussion prompts
Choose one of the following prompts.
Prompt A — Cloud security governance
Cloud adoption changes not just the technology but the governance arrangements around it. Analyse:
- how the shared responsibility model redistributes accountability between provider and customer;
- which governance mechanisms are needed to manage cloud risk at enterprise scale (policy-as-code, cloud security posture management, FinOps integration);
- the challenge of maintaining visibility and control across multiple cloud providers;
- what governance failures most commonly lead to cloud-related breaches.
Support your analysis with at least three scholarly or authoritative sources.
Prompt B — Container and container orchestration security
Containers and orchestration platforms introduce a distinct set of security challenges. Analyse:
- where risk concentrates in the container lifecycle (image build, registry, deployment, runtime);
- the controls that most reduce container-specific risk (image provenance, runtime protection, orchestration hardening);
- how container security differs from traditional virtualisation security;
- whether container security is adequately governed in most enterprises.
Support your analysis with at least three scholarly or authoritative sources.
Prompt C — Critical infrastructure protection
Critical infrastructure protection raises challenges distinct from general enterprise security. Analyse:
- why OT/IT convergence creates governance and architectural problems;
- the constraints that OT environments impose (availability and safety priority, long equipment lifecycles, physical access limitations);
- the regulatory landscape and whether it is adequate;
- what a defensible critical-infrastructure security strategy looks like.
Support your analysis with at least three scholarly or authoritative sources.
03 Participation requirements
Initial contribution
One substantive posting of approximately 300–500 words that:
- demonstrates understanding of the Unit 5 readings;
- incorporates at least three scholarly sources;
- contributes original analysis;
- links theory to enterprise practice.
Peer responses
At least two meaningful responses to classmates that:
- extend the discussion;
- critically evaluate ideas;
- present alternative perspectives;
- introduce supporting evidence or examples.
Simple agreement is not sufficient.
04 Grading rubric
| Criterion | Weight |
|---|---|
| Relevance and quality of contributions | 30% |
| Critical analysis and reflection | 30% |
| Integration of research evidence | 20% |
| Engagement with peers | 20% |
| Total | 100% |
05 Alignment with unit outcomes
| Outcome | How the forum addresses it |
|---|---|
| U5.1 — Secure infrastructure | All prompts require analysis of infrastructure controls. |
| U5.2 — Cloud and platform security | Prompts A and B directly evaluate cloud and container security. |
| U5.3 — Emerging infrastructure threats | Prompt C addresses critical infrastructure; Prompts A and B address emerging platform risk. |
| CLO9 — Scholarly communication | All prompts require scholarly argument supported by sources. |
06 Guidance for a strong contribution
Do I need hands-on cloud or container experience?
No. The forum evaluates platform security conceptually. Students without hands-on experience can still produce strong contributions by drawing on case studies, standards, and authoritative reports. Where hands-on experience helps, it is usually as illustration rather than as the primary analytical content.
Should I focus on one platform or compare several?
Either can work, but depth is usually rewarded over breadth. A contribution that analyses one platform thoroughly — with its specific risk concentration and control options — is typically stronger than one that compares several superficially.
What counts as authoritative for cloud security?
Cloud provider security documentation (AWS, Azure, Google), CSA guidance, NIST publications, ENISA reports, and peer-reviewed literature on cloud security are all strong. Marketing material and blog posts should be used carefully.
How does Forum 5 help with Assignment 2?
Assignment 2 asks you to design a secure cloud-migration architecture and design a defence-in-depth strategy for a financial institution. Forum 5 exercises exactly the platform-security reasoning those questions require.
Is critical infrastructure relevant if I don't work in that sector?
Yes. The governance and architectural challenges of OT/IT convergence are instructive even for students whose organisations are not classified as critical infrastructure. Many of the same constraints — legacy systems, availability priority, physical access limitations — appear in other contexts.
Next
After posting to Forum 5, complete Assignment 2 and then continue to Module 3 — Governance, Operations, and Enterprise Resilience.