|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/cybersecurity-and-x-factor
课程评论：没有评论
课程名称：网络安全与X因素 课程概述：X因素在网络安全中指的是组织内外部未知和不可预测的人类行为。正如大卫·K·雷诺兹所说：“没人真正知道人类为什么会做他们所做的事情。”因此，组织可能会对恶意、未经过训练或即便出于良好意图的行为感到措手不及，这些行为可能导致警报甚至无法弥补的伤害。本课程将介绍可用的培训类型，以减少X因素的影响，评估其有效性，探索安全教育、培训与意识（SETA）项目，并了解其可能失败的原因。课程最后将提供一些关键内容，以帮助您构建商业安全程序，并重点讨论黑客主义、网络保险和勒索软件等活动。 课程大纲： 1. **X因素简介** - 描述：X因素指的是组织内部和外部的人类行为。本节将概述信息安全管理及其目标，并描述非恶意内部行为造成的问题，同时讨论培训在组织网络安全工作中的目的及其实现情况。 2. **安全教育：培训与意识** - 描述：讨论传统培训工作。安全教育、培训与意识（SETA）程序旨在减少意外安全漏洞的发生。通过阅读材料，您将了解这些程序的设计与实施，以及各种培训技巧。本模块最后将讨论您对组织安全培训的经验和看法。 3. **传统培训工作的失败原因** - 描述：了解传统通过SETA程序的培训工作为何可能失败。学习人类行为如何影响管理者更好地利用其安全努力。最后，阅读材料还将展示这一全球性问题，包括英国、澳大利亚、加拿大和非洲的现有意识活动的案例。 4. **威胁情报** - 描述：识别组织正在经历的一些新问题和做法。您将通过近期的安全问题了解黑客主义、网络保险和勒索软件，并阅读相关的流行媒体文章。 该课程由一组讲师准备了一系列阅读材料、讨论、嘉宾讲座和测验，旨在使您更深入地了解这一令人兴奋的主题。
Name:Introduction to the X-Factor
Description:The X-factor within information security is human behavior within and outside your organization. Our introduction includes an overview of information security management and its goals as well as describing the problem created by non-malicious insider behavior. We include discussion about the purpose of training within organizational cybersecurity efforts and whether it is achieving its purpose.
Name:Security Education: Training & Awareness
Description:Within this topic we will discuss traditional training efforts. Security education, training and awareness (SETA) programs are designed to reduce the incidence of accidental security breaches. Through the readings you will learn about the design and delivery of these programs as well as various training techniques. This module concludes with a discussion about your experience and opinion about organizational security training.
Name:Reasons Why Traditional Training Efforts Fail
Description:In this module you will understand why traditional training efforts through SETA programs may fail. You will learn about human behavior and how understanding it can help managers better leverage their security efforts. Finally, through the readings you will also see that this is a global issue. The readings present examples of existing awareness campaigns in U.K., in Australia, in Canada and Africa.
Name:Threat Intelligence
Description:We will conclude by identifying some novel problems and practices that organizations are experiencing. You will learn about hactivism, cyberinsurance, and ransomware through popular press readings about recent security problems that landed companies on the front page.
What is the X-Factor? In Cybersecurity, the X-Factor related to unknown and unpredictable human behavior within and outside of your organization. “No one really knows why humans do what they do”, (David K. Reynolds), and because of this organizations can be unprepared for malicious, untrained, or even best intentioned behavior that can cause alarm and sometimes irreparable harm. This course will introduce you to the types of training available to reduce the impact of the X-Factor, evaluate its effectiveness, explore the Security Education, Training and Awareness (SETA) program, and learn why it may fail. The course will conclude with information designed to assist you with some critical components for your business security program. Activities focused on hactivism, cyberinsurance, and ransomware will round out your knowledge base. Your team of instructors has prepared a series of readings, discussions, guest lectures, and quizzes to engage you in this exciting topic.
