Security Policies and Procedures

This course is about policies, standards and procedures, and how to think about designing software and IT procedures from a security perspective. Security policies are based on the CIA triad: confidentiality, integrity, availability. Each organization will weight these differently based on its business priorities and how it thinks about risk. These decisions lead to policies, standards, and procedures that are aligned. As a developer, you will need to understand this so that you can understand how support the organization.

As a software developer or IT staff, you will need to write software and construct tool chains that comply with the policies and procedures. In this foundational course, you will learn to apply security policies. This is a very broad area and there are variety of standards. Most importantly, you will learn to recognize what you don’t know and ask the right questions.

The course will include a comparative study of different security policies, including some that are modern and address the needs of the organization and some that are out-of-date or have gaps in coverage. We will touch on a few standards such as:

· Payment Card Industry Data Security Standard (PCI DSS),

· International Organization for Standardization - ISO 27001

· NIST Secure Software Development Framework NIST 800-218

This 4-credit course is part of the Cybersecurity Foundations Certificate sequence.