Analysis skills are critical to ensuring cybersecurity requirements are built as part of the product solution and not an afterthought in both today and tomorrow’s technology solutions. In this course you’ll learn key techniques to utilize when working with technology and needing to address cybersecurity requirements. First, you’ll explore techniques to help you identify and elicit requirements from your stakeholders that are key to solution success. Next, you’ll dive into audits, best practices, and technology that will help you define cybersecurity from an organizational perspective. Finally, you’ll learn how to plan and map out how solutions address cybersecurity requirements. When you’re finished with this course, you’ll have the skills and knowledge of knowing how to build out an analysis plan and construct a proposed solution that directly addresses all cybersecurity needs for your organization.

Product security goes beyond the traditional information security CIA triad of confidentiality, integrity, and availability, and includes the expectation that products are secure. In this class cybersecurity is applied to hardware and software across the board with a focus on embedded systems and preventing malicious access and use. Over the last few years there has been an increase of concern regarding cybersecurity, systems, and software, especially with the Internet of Things expansion of massive interconnectivity.

The Product Cybersecurity Design course begins with a quick review of the common security attacks and strategies to prevent those attacks. Using these concepts as a baseline to illustrate the ineffectiveness of a code-last strategy, the course then moves into a discussion on the importance of reframing security and thinking about security in the context of design. Through the reframing journey, the course introduces Domain-Driven Design as a useful mechanism to apply a secure-first strategy. Throughout this discussion, the course looks at implementation strategies and techniques and common issues that introduce threats into the codebase.