Module 3 · Unit 6 · Outcomes & Mapping
COMP 6660 · Enterprise Cybersecurity Unit 6 Learning Outcomes
The authoritative learning outcomes for Unit 6 — Enterprise Cybersecurity Governance, Risk, and Compliance — together with their lesson coverage, module mapping, and assessment alignment.
01 Unit learning outcomes
Upon completion of Unit 6, students will be able to:
U6.1 — Governance frameworks
- Develop cybersecurity governance frameworks and supporting policy hierarchies.
- Explain board and executive accountability, operating models, and the three lines of defence.
- Conduct risk assessments using recognised risk-management frameworks.
- Conduct compliance assessments against regulatory and standards-based requirements.
- Plan and support cybersecurity auditing activities.
- Evaluate security awareness and human-factor programmes.
U6.2 — Compliance assessments
- Conduct compliance assessments against relevant regulatory and standards-based requirements.
- Evaluate the difference between compliance and security.
U6.3 — Incident-response processes
- Design incident-response processes across the full lifecycle.
- Develop an enterprise incident-response plan.
U6.4 — Cyber-resilience strategies
- Develop cyber-resilience strategies for enterprise recovery.
- Design business continuity and disaster recovery arrangements.
- Evaluate the opportunities and risks of artificial intelligence in enterprise cybersecurity.
- Assess emerging cybersecurity technologies, trends, and governance challenges.
How to read these outcomes
The outcomes above are the authoritative statements for Unit 6. The four unit outcomes (U6.1–U6.4) unpack into eleven finer-grained module outcomes (M3.1–M3.11). They are verified by Forum 6, Assignment 3, and Part C of the final examination. The relationship between the unit and module outcomes is set out in Section 03 below.
02 Lesson coverage
| Outcome | Introduced in | Developed in |
|---|---|---|
| U6.1 — Governance frameworks | Lesson 6.1 | Lessons 6.1–6.6 |
| U6.2 — Compliance assessments | Lesson 6.4 | Lessons 6.4–6.6 |
| U6.3 — Incident-response processes | Lesson 6.7 | Lessons 6.7–6.8 |
| U6.4 — Cyber-resilience strategies | Lesson 6.9 | Lessons 6.9–6.10 |
03 Mapping to module outcomes
The four unit outcomes unpack into the eleven module outcomes for Module 3. The table below shows which module outcomes each unit outcome supports.
| Unit outcome | Module outcomes supported |
|---|---|
| U6.1 — Governance frameworks | M3.1 (governance frameworks), M3.2 (risk assessment frameworks), M3.4 (awareness and human factors), M3.5 (auditing) |
| U6.2 — Compliance assessments | M3.3 (compliance assessment) |
| U6.3 — Incident-response processes | M3.6 (incident-response processes), M3.7 (business continuity and DR) |
| U6.4 — Cyber-resilience strategies | M3.8 (cyber-resilience strategies), M3.9 (emerging trends), M3.10 (AI in cybersecurity), M3.11 (scholarly communication) |
04 Mapping to course learning outcomes
| CLO | Statement | Coverage in Unit 6 |
|---|---|---|
| CLO1 | Define scope, objectives, principles, and strategic importance. | Reinforced at strategic level |
| CLO2 | Analyse threats, vulnerabilities, risks, and attack vectors. | Reinforced (risk assessment) |
| CLO3 | Evaluate cryptographic, authentication, authorization, and access-control technologies. | Not addressed (Modules 1–2) |
| CLO4 | Design and assess enterprise cybersecurity architectures and controls. | Applied (governance of architecture) |
| CLO5 | Apply cybersecurity principles to secure enterprise systems and services. | Applied (resilience and continuity) |
| CLO6 | Develop governance, risk, compliance, and policy frameworks. | Developed and assessed |
| CLO7 | Evaluate incident response, continuity, and resilience strategies. | Developed and assessed |
| CLO8 | Assess emerging cybersecurity technologies, trends, and challenges. | Developed and assessed |
| CLO9 | Conduct scholarly research and communicate findings effectively. | Assessed (Forum 6; Assignment 3; final exam Part C) |
05 Assessment alignment
| Outcome | Forum 6 | Assignment 3 | Final exam |
|---|---|---|---|
| U6.1 — Governance frameworks | ✓ | ✓ | ✓ |
| U6.2 — Compliance assessments | ✓ | ✓ | ✓ |
| U6.3 — Incident-response processes | ✓ | ✓ | ✓ |
| U6.4 — Cyber-resilience strategies | ✓ | ✓ | ✓ |
Final examination weighting
Part C of the final examination (40% of the exam mark) presents an enterprise case study requiring risk assessment, architectural analysis, governance considerations, and strategic recommendations. All four elements draw directly on Unit 6 outcomes, particularly U6.1 and U6.3–U6.4.
06 Progression and integration
Unit 6 outcomes integrate the whole course. Each builds on prior modules and, in most cases, requires students to draw on material from across the course.
- U6.1 — Governance frameworks Builds on Module 1 outcomes M1.4–M1.5 (frameworks and posture) and Module 2 outcomes M2.2 and M2.5 (risk and architecture).
- U6.2 — Compliance assessments Builds on Module 1 outcome M1.4 (frameworks) and Module 2 outcome M2.2 (risk assessment).
- U6.3 — Incident-response processes Builds on Module 2, Unit 3 (threat classes) and Unit 4, Lessons 4.6–4.7 (detection and SOC operations).
- U6.4 — Cyber-resilience strategies Builds on Module 2, Unit 5 (platform security and critical infrastructure) and completes the course's treatment of resilience.
Are these outcomes examinable?
Yes. All four Unit 6 outcomes are examinable. U6.1 and U6.3–U6.4 are the most heavily weighted, particularly in Part C, but all four may appear in Parts A and B as well.
Why do the four unit outcomes map to eleven module outcomes?
Module 3 covers a wide range of distinct capabilities within a single unit — governance, risk, compliance, awareness, auditing, incident response, continuity, resilience, and emerging trends. The module outcomes are more granular so that each capability can be assessed individually, while the unit outcomes provide a more compact summary.
How does U6.4 relate to CLO7 and CLO8?
CLO7 covers incident response, continuity, disaster recovery, and resilience, which U6.3 and U6.4 together address. CLO8 covers emerging technologies and trends, which U6.4 addresses through the AI, digital sovereignty, quantum, and regulatory material in Lesson 6.10.
Where can I find the module-level outcomes?
Module outcomes are published on the Module 3 learning outcomes page, along with their mapping to the nine course learning outcomes.
Course completion
After completing Unit 6, Assignment 3, and Forum 6, return to the course home for a summary of the full course structure and assessment scheme.