Cyber Security Management Consulting

Overview

This unit aims to provide students with practical, industry-relevant experience in cyber security management consulting, and to address the influence of contemporary technologies like Artificial Intelligence. Through project-based learning, students will analyse organisational IT/cyber security posture against best practices and standards (e.g., NIST SP, ISO 27000 family, CIS Benchmarks, Australian Cyber Security Centre Essential Eight). They will evaluate how these technologies shape contemporary cyber security challenges and strategies, and develop strategic recommendations for improving cyber security governance, risk management, and resilience. This will develop the essential consulting, analytical, and communication skills for future professional practice.

Unit learning outcomes

Students who successfully complete this unit will be able to:

1. Evaluate an organisation's IT/cyber security posture against industry best practices and standards
2. Analyse the impact of contemporary technologies, such as Artificial Intelligence, on cyber security challenges and strategies
3. Develop strategic recommendations for enhancing an organisation's cyber security governance, risk management, and resilience
4. Demonstrate essential consulting, analytical, and communication skills in a professional context
5. Demonstrate effective collaboration within project teams to conduct cyber security analysis and communicate findings in a professional manner

Teaching methods

Hawthrorn

Assessment

Content

• Cyber Security Management consulting essentials, the role of cyber security consultant, consulting methodologies and frameworks, ethical and professional conduct
• Organisational Cyber Security Posture Analysis, Threat & Vulnerability assessment, Risk management frameworks
• Governance, policies, and procedures pertaining IT/Cyber Security
• IT Security & Cyber Security Management standards and frameworks: NIST SP publications, ISO 27000 family, Australian Cyber Security Centre (ACSC) Essential Eight
• Contemporary technology and cyber security: impact of Artificial Intelligence, cloud security implications, emerging threats and trends
• Developing strategic recommendations, cyber security strategy development, security architecture design, business continuity planning
• Technical cyber security considerations, penetration testing protocol, incident response planning, security operations
• Regulatory compliance on cyber security matters (e.g., data breach reporting, privacy regulations, industry-specific requirements)