Cybersecurity and Business Risk

This course introduces cybersecurity as a business risk, emphasizing its impact beyond IT and into areas such as regulation, governance, finance, and reputation. Students explore core concepts in cybersecurity, risk management frameworks, and the evolving threat landscape. The course examines how leading organizations assess, quantify, and address cyber risk through strategies such as risk mitigation, transfer, and resilience. Topics include incident response, supply chain vulnerabilities, regulatory compliance, critical infrastructure, and cyber conflict. Through policy memos and a group-designed risk taxonomy, students build practical tools for evaluating and managing cyber threats in public, private, and nonprofit sectors.