Fundamentals in Cybersecurity

Course description

In the rapidly evolving inter-networked world, cyberspace has become particularly difficult to secure due to a number of factors including inter alia the ability of malicious actors to operate from anywhere in the world, the linkages between cyberspace and physical systems, and the difficulty of reducing vulnerabilities and consequences in complex cyber networks. The Cybersecurity domain encompasses technologies, policies, procedures and practices designed to protect organisations and institutions from attacks. Organisations need a more proactive, holistic and flexible approach, which is the domain of the cybersecurity professional.

An emerging South African legislative environment also places additional obligations on organisations, and Cybersecurity professionals and will demand a higher level of knowledge of the Cybersecurity domain within organisations, both public and private. Thus, an improved cybersecurity awareness level and a development of a cybersecurity culture in the organisation is being increasingly desired.

The Short Programme in Cybersecurity will enhance cybersecurity skills which are required to improve a firm’s cybersecurity response strategy. In addition, the course will enhance students’ skills, knowledge and understanding of the cybersecurity domain for improved performance.

Given the foregoing, the course is designed as an interdisciplinary course, focusing on equipping IT, IS managers, Cybersecurity practitioners and Senior Business Managers with relevant strategic responses to the security challenges posed to the digital communications ecosystem. Thus, the course will build the analytical skills for all participants by inculcating the following key themes:
• Identification of complex cybersecurity issues
• Developing appropriate cybersecurity mitigation strategies
• Understanding emerging cybersecurity technologies and policies
• Developing an awareness of the implications of cyber-attacks and threats

Course details

• Topic 1: Introduction to the Cybersecurity domain (including Cyber-attacks and threats)
a) Identifying the structural components of cyberspace
b) Basic architecture and rudiments of cybersecurity
c) Significance of emerging technologies
d) Cyber-attacks and threats

• Topic 2: Policy, legislative, regulatory and institutional frameworks underpinning the cybersecurity domain
a) Legislative process in South Africa
b) Cybersecurity legal challenges and limitations
c) Purpose of national policy and legislation
d) National Cyber Security Incidents Response Teams (CSIRTs) within the context of national cybersecurity plans

• Topic 3: An organisational view of cybersecurity and future-proofing organisations
a) Role of leadership and management in mitigating threats and achieving organisational goals
b) Overview of risk, audit, governance and compliance
c) Continuity and disaster recovery plans
d) Build effective teams and lead in contested cyber environments

• Topic 4: Emerging cybersecurity technology trends
a) Emerging technical and management issues in the cyber domain
b) Emerging role of Chief Information Security Officer (CISO)
c) Emerging technologies and vulnerabilities

Statement of purpose

To develop knowledgeable cybersecurity professionals and business managers with the foundational knowledge to successfully conceptualize and implement strategic initiatives that mitigate cybersecurity threats and attacks to organisations.

Course outcomes

On completion of this course participants should be able to:
• Understand the complex nature of the cybersecurity domain and the interdependencies between cybersecurity and traditional information security;
• Identify and explain the range of threats and attacks facing organisations, institutions and nation-states;
• Discuss the effects of cyber-attacks on organisations and various levels of defence required to ensure the integrity of organisations, their data and reputations;
• Analyse the current organisational environment;
• Discuss the value of the various cybersecurity roles and responsibilities and the benefits to institutional governance;
• Evaluate the technology available to defend the organisation, and explore solutions for ensuring the integrity of systems.

Entry level requirements

• RPL or
• Any NQF level 5 qualification or
• 5 years working experience in an IT/IS environment

Planned course dates

To be confirmed

Course evaluation

Students will complete online evaluation forms, to assess all aspects of the programme. Evaluation forms will be analysed by the coordinator to inform weaknesses, gaps or shortcomings in terms of content, facilitator skills, logistical challenges etc. The analysis should guide course improvements.

Assessment criteria

• The complex nature of the cybersecurity domain and the interdependencies between cybersecurity and traditional information security is analysed.
• The range of threats and threat actors facing organisations, institutions and nation-states are identified and categorized.
• The effects of cyber-attacks on organisations and various levels of defence required to ensure the integrity of organisations, their data and reputations are identified and explained.
• Formulate a foundational cybersecurity strategy by analysing the current organizational environment.
• The value of the various cybersecurity roles and responsibilities are discussed and the benefits to institutional governance are explained.
• The technology trends available to defend the organisation are evaluated, and various solutions for ensuring the integrity of systems are considered.

Assessment methods

• 100% Continuous Assessment comprising:
• Individual take-home assignment (one per topic) requiring 50% minimum mark in each individual assignment. (1 per topic)
• 1 capstone group assignment requiring a 50% minimum mark.

Teaching & learning strategies

• Course presentation material supplemented by academic peer-reviewed readings, industry reports, videos and case studies
• Electronic classroom (Zoom, Google Meet) for virtual classes

Course material & equipment

All materials will be hosted and presented via a Learning Management System, and will include:
• A course guide
• PowerPoint presentations, videos and webinars
• Guided group and individual activities

Modes of delivery

The programme will be delivered only via online teaching and learning approaches. This comprises both interactive electronic presentations and course materials hosted on an e-learning platform. The blend of online and offline resources will include online discussion forums, as well as dedicated lecturer consultations to participants.

Course venue

The course venue is Online (Zoom, Google Meet)
Students should have their own devices or access to Internet-enabled resources. This is a requirement for one to be considered for the short programme.

Alignment with UWC mission & strategic initiatives

The rationale for the cybersecurity short course is inextricably linked to UWC’s strategic goals which seeks to locate the academic project to serve the emerging digital era in South Africa and beyond. Short courses which support the advancement of the South African digital society, bring to fruition our stated IOP intent to “provide responsive and enabling academic programmes to enable our graduates to equip themselves to meet 21st century challenges”.

We envisage that new courses in relation to the fourth industrial revolution is a targeted act of expansion of our curriculum to equip our client base for the emerging South African Information and Knowledge Society.

Contract CE course development

The Department will appoint external experts to develop content over the next 3 months, to ensure readiness to launch in Semester 1, 2023.