Risk Management and Threat Modelling

Students develop practical skills in cybersecurity risk management and threat modelling to support secure system design and organizational resilience. Students apply risk management frameworks to assess and communicate risk using qualitative and quantitative methods, while developing asset inventories and threat profiles that reflect system dependencies. Emphasis is placed on identifying and analyzing technical, physical, and procedural vulnerabilities, and integrating findings into comprehensive risk assessments. Students apply threat modelling methodologies to identify and visualize threats and plan structured threat modelling activities within defined system contexts. The course also explores the integration of security-by-design principles into the software development life cycle (SDLC). Students evaluate risk treatment strategies, implement appropriate controls, and monitor risk using key risk indicators (KRIs) to support continuous improvement.