| Instructor | Ben Weintraub (pronounced WINE-trowb) |
| Room | Mendoza 331D |
| Time (Section 1) | MW 9:30-10:45am |
| Time (Section 2) | MW 11:00-12:15pm |
| Office Hours | TBD |
| Grades | TBD |
| Submissions | TBD |
Cybersecurity is at the heart of protecting modern organizations, ensuring the confidentiality, integrity, and availability of critical information and systems. In this course, students will build an understanding of the principles, processes, and practices that underlie effective security programs. We will examine the roles of risk management, access control, network and system defense, incident response, and continuity planning, while also considering the human, organizational, and strategic dimensions of security. Through a combination of analytical frameworks, applied exercises, and discussions, students will develop the knowledge and skills needed to assess vulnerabilities, design security controls, and support resilient operations in diverse environments.
| Date | Topic (slides/notes) | Reading | Comments |
|---|---|---|---|
| 8/24 | Cybersecurity Concepts | Atlanta Randomware Attack | |
| 8/26 | Case Discussion: Atlanta Ransomware Attack |
Case Analysis #1 due Practice quiz |
|
| 8/31 | Risk Assessment Lab | Cybersecurity at FireEye: Human + AI | |
| 9/2 | Case Discussion: Cybersecurity at FireEye: Human + AI |
Module 1 quiz Case Analysis #2 due |
|
| 9/7 | Disaster Recovery Lab | CrowdStrike | Risk Assessment Lab due |
| 9/9 | Case Discussion: CrowdStrike |
Module 2 quiz Case Analysis #3 due |
|
| 9/14 | Digital Certificate Lab | Disaster Recovery Lab due | |
| 9/16 | No meeting - time for asynchronous work | ||
| 9/21 | Network Security Lab | Ransomware Attack at Colonial Pipeline Company |
Module 3 quiz Digital Certificate Lab due |
| 9/23 | Case Discussion: Ransomware Attack at Colonial Pipeline Company |
Module 4 quiz Case Analysis #4 due |
|
| 9/28 | Cryptography Lab | Apple: Privacy v. Safety | Network Security Lab due |
| 9/30 | Case Discussion: Apple: Privacy v. Safety | Case Analysis #5 due | |
| 10/5 | Wrap-Up/Review for Exam |
Module 5 quiz Cryptography Lab due |
|
| 10/7 | TBD | ||
| 10/12 | Final Exam |
ISC2 CC Certified in Cybersecurity Study Guide, Mike Chapple, ISBN 978-1394213832
HBS Course Pack. We will be using a set of case studies throughout the semester. You will need the HBS CoursePack for this course, which you may purchase directly from Harvard Business School Publishing.
Amazon Web Services account. You will be able to access this through Canvas. Your account will include $75 of credit through a grant supported by the Accenture Endowment for Excellence in Business Technology. If you follow the instructions in labs and course exercises, this should be more than sufficient to complete the course successfully. Please do not use this AWS account for anything other than class activities or you may deplete the account credit and be unable to finish the lab exercises.
Video Lectures. Professor Mike Chapple has recorded video lectures covering all of the factual material in this course. You are expected to watch those videos prior to each module and will be assessed on that content. The use of these video lectures will free up our class time for discussion and hands-on activities.
This class is conducted in accordance with the University’s Academic Code of Honor. I have a zero-tolerance policy for violations of this policy. To quote from du Lac, “At a minimum, a student found responsible for an Honor Code violation usually fails the assignment in question. A more serious offense may result in failure of an entire course, or suspension or dismissal from the university.”
My expectation for this course is that you will collaborate with other students during our in-class hands-on exercises. I expect that you will complete your lab reports, exams, quizzes, and other assignments on your own. You may discuss general strategies for solving problems with other students, but the assignment you turn in should be entirely your own work.
Exams and quizzes are to be taken in a closed-book manner, with no access to external resources or collaboration of any kind.
Grades for the course will be determined using the following weightings:
| Final Exam | 40% |
| Labs | 25% |
| Quizzes | 15% |
| Case Studies | 10% |
| Participation | 10% |
The final exam will take place in class on October 12th.
I generally use the following grade scale: [0-59.9] F, [60-69.9] D, [70-72.9] C-, [73-76.9] C, [77-79.9] C+, [80-82.9] B-, [83-86.9] B, [87-89.9] B+, [90-94.9] A-, [95+] A.
However, it is important to note that the IT, Analytics and Operations department follows a grading policy for undergraduate courses that the overall GPA for a course must fall into the range of 3.0-3.6. After computing final grades according to my standard formula, I will compute the overall GPA for the class. If the overall GPA falls outside the required range, I will adjust the grading scale accordingly.
The last day to drop is prior to the 9th class meeting.
Be careful to follow the specific instructions for the content, formatting, and submission of each assignment.
You are expected to turn assignments in on time. All assignments are due by 9AM on the indicated date. Assignments turned in after the deadline but on the same day that they were due will be assessed a 25% penalty. Assignments turned in within one week of the due date/time will be assessed a 50% penalty. No assignments will be accepted more than one week after the deadline. Late submissions are not accepted after the last day of class, regardless of the original due date. Exceptions may be made for extenuating circumstances. If you think this pertains to you, email me directly.
Some class sessions (noted on the syllabus) will begin with a short quiz on content covered in the asynchronous material. This quiz will be given in Canvas and will assess high-level understanding of the material.
Thank you to Mike Chapple from whom much of this content is derived.