Corporate Threat Analysis and Security Requirements

This week’s topics

Corporate Threat Analysis and Security Requirements

1. Threat vector identification
2. Attack surface mapping
3. Compliance and regulatory requirements
4. Security requirements gathering for enterprise case scenarios
5. Part 2 - The Achilles Systems Hack Assessment Series: Revisiting Enterprise Controls
6. SANS Threat Analysis Rundown - Kaseya VSA attack
7. What is ASM (Attack Surface Management)?

What you will be able to do

• 3.2 Critically analyse the purpose and requirements of a secure network in a given scenario.

Activity

Start with this week’s 3 videos, then: Seminar, guided reading and a short written task: critically analyse the purpose and requirements of a secure network in a given scenario.

Study materials

Videos

• Part 2 - The Achilles Systems Hack Assessment Series: Revisiting Enterprise Controls · YouTube · SANS Institute · 58 min · for registered students
• SANS Threat Analysis Rundown - Kaseya VSA attack · YouTube · SANS Institute · 50 min · for registered students
• What is ASM (Attack Surface Management)? · YouTube · IBM Technology · 5 min · for registered students

Further resources

• Security Engineering (3rd ed.), ch. 27: Secure Systems Development · PDF · Other, textbook chapter; pp. 965–1013 · for registered students
• NCSC: Cyber Assessment Framework (CAF) 4.0 · PDF · NCSC, framework; 68 pages · for registered students
• NIST SP 800-115, section 4: Target Identification and Analysis Techniques · PDF · NIST, textbook chapter; pp. 4-1–4-11 · for registered students