8. Cybersecurity

Cybersecurity protects systems, data, operations, and trust. This chapter introduces threats, controls, privacy protections, and resilience as management concerns rather than purely technical chores.

Video

What Is the CIA Triad in Cybersecurity? by IBM Technology

This video is embedded from YouTube for course reference. It remains hosted by YouTube and belongs to its creator or rightsholder.

Learning Objectives

By the end of this chapter, you will be able to:

1. Describe a cybersecurity risk through assets, threats, vulnerabilities, and business consequences.

2. Explain the purposes and limits of identity, access, encryption, monitoring, and organizational controls.

3. Distinguish continuity, recovery, and incident-response responsibilities.

4. Evaluate control effectiveness using tests, evidence, and business recovery objectives.

Concept Map

Cybersecurity

Threats

• Malware
• Phishing
• Insiders

Controls

• Authentication
• Encryption
• Privacy

Resilience

• Backup
• Continuity
• Recovery

Glossary

#	Term	Explanation
1	Cybersecurity	The protection of systems, networks, devices, and data from unauthorized access, disruption, or misuse.
2	Threat	A potential cause of harm to a system or organization.
3	Vulnerability	A weakness that can be exploited to cause harm.
4	Risk	The likelihood and impact of a threat exploiting a vulnerability.
5	Control	A safeguard used to reduce security risk.
6	Confidentiality	Protection against unauthorized access to information.
7	Integrity	Protection against unauthorized or improper alteration of data or systems.
8	Availability	Ensuring authorized users can access systems and data when needed.
9	Authentication	Verifying that a user, device, or service is who it claims to be.
10	Authorization	Determining what an authenticated user or system is allowed to do.
11	Encryption	Transforming data so it can be read only by someone with the proper key.
12	Malware	Software designed to damage, disrupt, spy on, or gain unauthorized access to systems.
13	Phishing	A deceptive message or site designed to trick people into revealing information or taking unsafe action.
14	Ransomware	Malware that blocks access to systems or data and demands payment.
15	Firewall	A control that filters network traffic based on rules.
16	Intrusion detection	Monitoring that looks for signs of unauthorized or suspicious activity.
17	Security policy	A rule or standard that defines expected security behavior and responsibilities.
18	Audit	A formal review of systems, controls, evidence, or compliance.
19	Incident response	The coordinated actions taken to detect, contain, investigate, and recover from a security event.
20	Business continuity	Planning that keeps critical work operating during and after disruption.

Lecture Slides

Chapter 8 Slides

These lecture drafts follow the authored sections and aligned assignments.