Download: CSIA413:Cybersecurity Policy, Plans, and Programs UMGC Full Course .Zipped Files

Course Assignment List

• CSIA 413 Course Syllabus

• CSIA 413 Week 1 Discussion - Foundations of Information Security Governance

• CSIA 413 Week 1 Assignment - Business Impact Analysis (BIA)

• CSIA 413 Week 2 Discussion - Developing Enterprise Information Security Policies (EISP)

• CSIA 413 Week 2 Assignment - Enterprise Information Security Policy Draft

• CSIA 413 Week 3 Discussion - Regulatory Compliance Frameworks (NIST, ISO, HIPAA)

• CSIA 413 Week 3 Assignment - Regulatory Compliance Gap Analysis

• CSIA 413 Week 4 Discussion - Incident Response and Contingency Planning

• CSIA 413 Week 4 Assignment - Incident Response Plan (IRP) Design

• CSIA 413 Week 5 Discussion - Security Awareness Training and Culture

• CSIA 413 Final Capstone Project - Comprehensive Cybersecurity Program Proposal

• CSIA 413 Week 5 Final Exam

Brief Descriptions with Course Codes

Course Framework & Governance Baselines

• CSIA 413 Course Syllabus: The primary architectural guide for CSIA 413, defining upper-level security management objectives, legal frameworks, submission timelines, and strategic grading benchmarks.

• CSIA 413 Week 1 Discussion - Foundations of Information Security Governance: An introductory management forum in CSIA 413 focusing on aligning technical asset protection with high-level corporate objectives, stakeholder responsibilities, and fiduciary duties.

• CSIA 413 Week 1 Assignment - Business Impact Analysis (BIA): A hands-on asset classification project in CSIA 413 where students evaluate operational workflows to calculate Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for vital corporate business lines.

Policy Formulation & Compliance Mapping

• CSIA 413 Week 2 Discussion - Developing Enterprise Information Security Policies (EISP): A strategic documentation module in CSIA 413 examining the structure, language, and executive mandates required to construct an organization-wide security stance.

• CSIA 413 Week 2 Assignment - Enterprise Information Security Policy Draft: A practical blueprint project in CSIA 413 requiring the formal writing of an EISP, outlining user access rules, acceptable use terms, and compliance enforcement mechanisms.

• CSIA 413 Week 3 Discussion - Regulatory Compliance Frameworks (NIST, ISO, HIPAA): A comparative standards seminar in CSIA 413 mapping the overlapping security controls between government rules, privacy laws, and international security standards.

• CSIA 413 Week 3 Assignment - Regulatory Compliance Gap Analysis: A detailed defense auditing case study in CSIA 413 where students examine a mock company's current defenses against a framework to flag security gaps and propose fixes.

Contingency Planning & Human Factors

• CSIA 413 Week 4 Discussion - Incident Response and Contingency Planning: A crisis management forum in CSIA 413 detailing the life cycle of a network breach, containing malware, establishing back up communications, and post-incident forensic reviews.

• CSIA 413 Week 4 Assignment - Incident Response Plan (IRP) Design: A tactical readiness project in CSIA 413 requiring the creation of an operational manual that guides triaging teams through containment, eradication, and recovery steps after a system breach.

• CSIA 413 Week 5 Discussion - Security Awareness Training and Culture: A human-centric threat mitigation board in CSIA 413 analyzing how to run anti-phishing simulations and social engineering defenses to turn employees into a strong first line of defense.

Program Integration & Final Evaluation

• CSIA 413 Final Capstone Project - Comprehensive Cybersecurity Program Proposal: The terminal portfolio project for CSIA 413, combining policies, risk assessments, compliance frameworks, and incident recovery plans into a single corporate-level program proposal.

• CSIA 413 Week 5 Final Exam: The comprehensive assessment for CSIA 413, confirming student command over security policy models, compliance architectures, network business impacts, and incident handling protocols.