Cyber Risk Management: CMMC
Course Overview
This is one of a few cyber risk management courses that ODU provides to complete the graduate Risk Management Certificate. This class specifically focuses on the Department of Defense's (DoD's) Cybersecurity Maturity Model Certification (CMMC), which ensures contractors are meeting standards to keep Controlled Unclassified Information (CUI) secure.
Lab 02
This is one of the labs I completed in the course that specifically outlines basic cybersecurity terms/concepts such as cybersecurity design principles, vulnerability identification, ethical data handling, organizational mission/values/policies, Intrusion Detection System (IDS), Intrusion Prevention System (IPS), firewalls, confidentiality, integrity, availability, and cybersecurity controls. These cybersecurity core competencies are essential to understand before considering CMMC compliance. Without an understanding, it may be difficult to understand why CMMC has these requirements in place. It makes the individual better informed. This hands-on practice was a nice review of terms.
Lab 03
This is one of the labs I completed in the course that specifically outlines specific attacks, motives behind attacks, and penetration testing. Those seeking to gain CMMC approval will need to conduct a penetration test to ensure that the system is secure. Therefore, it is fundamental to understand how penetration testing works. It was nice to be able to map the specific tools related to each step of the penetration testing process.
Lab 04
This is one of the labs I completed in the course that specifically outlines encryption methods and their importance to confidentiality and integrity. The lab included hands-on practice of converting ASCII into binary, decimal, or hexadecimal. Encryption methods are a requirement in CMMC certification to ensure CUI remains secure. It is also a common cybersecurity control implemented in Risk Management Frameworks. All of which I will encounter when entering the professional world.