Official government website of the Government of Kingdom of Saudi Arabia
Link to official Saudi websites end with edu.sa

All links to official educational websites in the Kingdom of Saudi Arabia end with sch.sa or edu.sa

Government websites use the HTTPS protocol for encryption and security.

Secure websites in the Kingdom of Saudi Arabia use the HTTPS protocol for encryption.

Registered with the Digital Government Authority under number:

20250417892
Main
UQU Programs
Cybersecurity

Cyber Threats & Incident Response

SEC2401
4 hours English

Cyber Threats & Incident Response

Cyber threats and Incident Response
SEC1101 Introduction to Cybersecurity
4 hours No requisites
1 Adversary and Threat Landscape (Understanding Adversaries, Adversary Techniques and Motivation, APT and Insider Threats)
2 Types and Techniques of Cyber threats and legal issues(Malware and Exploit Types, Phishing, Social Engineering, and Covert Channels, DoS/DDoS and Web Application Attacks, Cloud and Zero-Day Exploits, password guessing and cracking, cryptographic threat)
3 Detection and Indicators of Attacks (Identifying Attack Indicators, Analyzing Attack Surfaces and Vectors, Understanding Attack Timing and Anomalies)
4 Cyber Threat Modeling and Analysis (Cyber Threat Modeling Tools, Risk Assessment and Threat Evaluation, Developing Effective Cyber Threat Models)
5 Security Solutions and Technology Recommendations (Mapping Business Objectives to Security Goals, Selecting the Right Security Solutions, Evaluating Security Tools and Technologies)
6 Security Best Practices for Protection (Best Practices for Securing IT Assets, Data Protection and Cryptography Techniques, Implementing Security Controls and Compliance)
7 Monitoring and Maintaining IT Security (IT System Monitoring and Anomaly Detection, Patch Management and Vulnerability Updates, Security Maintenance and System Management)
8 Incident Response and Recovery Strategies (Incident Identification and Breach Response, Managing Cyber Incidents, Response Processes and Blackout Planning, Testing and Evaluating Incident Response)
1.1 Mapped to: K1

Describe adversary models based on resources, capabilities, techniques, motivations, and access.

Teaching Strategy Lectures Readings Tutorials
Assessment Methods Midterm Final Exam
1.2 Mapped to: K1

Explain and compare various types of cyber attacks, including their techniques, objectives, and impact on IT systems.

Teaching Strategy Lectures Readings Tutorials
Assessment Methods Midterm Final Exam
1.3 Mapped to: K1

Recognize attack indications by interpreting events, attack surfaces, vectors, and timing.

Teaching Strategy Lectures Readings Tutorials
Assessment Methods Midterm Final Exam
2.1 Mapped to: S6

Apply cyber threat modeling tools and strategies to assess and mitigate risks effectively.

Teaching Strategy Lab tutorials Lectures Project
Assessment Methods Lab assessments Project
2.2 Mapped to: S4

Evaluate and recommend cybersecurity solutions and technologies to address identified threats while aligning with business objectives.

Teaching Strategy Lab tutorials Lectures Project
Assessment Methods Lab assessments Project
2.3 Mapped to: S2

Implement security best practices to protect IT assets, infrastructure, and data, considering organizational risk tolerance.

Teaching Strategy Lab tutorials Lectures Project
Assessment Methods Lab assessments Project
2.4 Mapped to: S2

Monitor IT systems for anomalies, perform regular updates, and manage software and hardware deployment processes.

Teaching Strategy Lab tutorials Lectures Project
Assessment Methods Lab assessments Project
2.5 Mapped to: S6

Demonstrate effective incident response activities, including identification, management, and resolution of breaches, intrusions, and cyber incidents.

Teaching Strategy Lab tutorials Lectures Project
Assessment Methods Lab assessments Project
Assessment
Weight
Lab assessments
20%
Midterm
20%
Project
20%
Final Exam
40%
Total
100%