WIXLIB

T HE S CHO OL OF C Y B ER SECUR I T YEnterprise SecurityNANODEGREE SYLLABUS

OverviewEnterprise Security Nanodegree ProgramThe goal of the Enterprise SecurityNanodegree program is to equip learnerswith the foundational skills of securityengineering within an enterprise setting. Thisprogram addresses security topics relatedto corporate environments, which are oftendistinct from production environmentsand center around the devices, identities,and infrastructure used by the company’spersonnel on a daily basis.Graduates of this Nanodegree programwill be able to:Build a siem and implement enterprisenetwork security best practices to monitorand control network traffic into an enterpriseDevelop an asset and patch management toincrease security posture of endpointsDesign a security baseline for applicationdevelopment as well conduct an internalapplication security assessment consisting ofthreat modeling, vulnerability scanning, andcode review.Establish data integrity checks as well dataloss prevention mechanisms that control thetypes of data that can be transferred out ofan enterprise2Program InformationTIME4 monthsStudy 5-10 hours/weekLEVELIntermediatePREREQUISITESLinux and AzureHARDWARE/SOFTWAREREQUIREDThere are no software andversion requirements to completethis Nanodegree program. Allcoursework and projects can becompleted via Student Workspacesin the Udacity online classroom.Udacity’s basic tech requirementscan be found at https://www.udacity.com/tech/requirements.LEARN MORE ABOUT THISNANODEGREEContact us atenterpriseNDs@udacity.comTHE SCHOOL OF C YBERSECURIT Y

Our Classroom ExperienceREAL-WORLD PROJECTSLearners build new skills through industry-relevantprojects and receive personalized feedback from ournetwork of 900 project reviewers. Our simple userinterface makes it easy to submit projects as often asneeded and receive unlimited feedback.KNOWLEDGEAnswers to most questions can be found withKnowledge, our proprietary wiki. Learners can searchquestions asked by others and discover in real-timehow to solve challenges.LEARNER HUBLearners leverage the power of community througha simple, yet powerful chat interface built within theclassroom. Learner Hub connects learners with theirtechnical mentor and fellow learners.WORKSPACESLearners can check the output and quality of theircode by testing it on interactive workspaces that areintegrated into the classroom.QUIZZESUnderstanding concepts learned during lessons ismade simple with auto-graded quizzes. Learners caneasily go back and brush up on concepts at anytimeduring the course.CUSTOM STUDY PLANSMentors create a custom study plan tailored tolearners’ needs. This plan keeps track of progresstoward learner goals.PROGRESS TRACKERPersonalized milestone reminders help learners stayon track and focused as they work to complete theirNanodegree program.Learn More at WWW.UDACITY.COM/ENTERPRISEENTERPRISE SECURIT Y

Learn with the BestMilind AdariJerry SmithSECURIT Y ENGINEERI N F O R M AT I O N S E C U R I T YENGINEERMilind Adari is a Security Engineer atThe Associated Press and an AdjunctInstructor at Columbia University. He isresponsible for protecting journalists allaround the world from malicious threatactors and state-sponsored attacks,all while educating students andprofessionals in cybersecurity.Vamsee KandimallaC Y B E R S E C U R I T Y A R C H I T E C T,HE AD OF PRODUC T TECHNOLOGYVamsee has wide-ranging securityexperience, including in sectors suchas defense, consumer electronics,and automotive. He studied electricalengineering, then focused on cybersecurityduring graduate school at Carnegie Mellon.He enjoys working on the latest technologiesand high-impact solutions.4Jerry is a member of the SecurityOperations Center for the Universityof Alabama at Birmingham, wherehe is the Lead Threat Hunter anda member of the firewall team.Previously he was an InformationSecurity Engineer for HibbettSporting Goods.Christine Izuakor,PhD, CISSPF O U N D E R & C E O, C Y B E R P O P - U PDr. Christine Izuakor is the CEO of CyberPop-up, an on-demand cybersecurityplatform powered by vetted cyberfreelancers. She has over a decadeof experience leading cybersecurityfunctions within Fortune 100 companiesand has her PhD in Security Engineering.THE SCHOOL OF C YBERSECURIT Y

Nanodegree Program OverviewCourse 1: Enterprise Perimeter andNetwork SecurityThis course is designed to take you through the perspective of an enterprise and how they design asecure network architecture. The topics in this course will cover current enterprise perimeter and networksecurity, network security architecture, building an enterprise network, continuous monitoring with aSIEM, and Zero Trust.ProjectSecuring the PerimeterStudents will get hands-on experience in building a secure enterprise network. They will segment thenetwork across different security topologies and employ the principle of least privilege to restrict accessacross the various segmentations. Students will then build a VPN to access the enterprise networkfrom a remote location, then set up a SIEM and a web server. Students will monitor web server logs andbuild alerts to help identify security incidents. Students will then write incident response playbooks forcertain attack scenarios. Lastly, students will design a Zero Trust model and write a comparative analysisbetween current network architecture and Zero Trust.5THE SCHOOL OF C YBERSECURIT Y

Nanodegree Program OverviewLESSON TITLELEARNING OUTCOMESNETWORKSECURITYARCHITECTURE Identify weaknesses in network topologies Design the placement of security devices in an enterprise network Use the SABSA framework to align enterprise business andBUILDING ANENTERPRISENETWORK Connect from public to private network over a NAT gateway Partition a virtual network into multiple segments Build a VPN solution to connect to an enterprise networkCONTINUOUSMONITORING WITHA SIEM Deploy a SIEM Set up alerts and monitor traffic Build an Incident Response PlaybookZERO TRUST Define the principles of Zero Trust Identify key components in Zero Trust architecture Design a Zero Trust modelLearn More at WWW.UDACITY.COM/ENTERPRISEsecurity needsENTERPRISE SECURIT Y

Nanodegree Program OverviewCourse 2: Enterprise Endpoint SecurityWith data being a core driver of today’s growth and the number of devices increasing, businesses haveseen a rise in the number of types of endpoints. These factors make enterprise endpoint securitymore difficult since there are more potential vulnerable channels of cyberattack, and they have beencompounded by remote work and the growing number of connected devices (i.e. mobile phones, tablets,etc). Moreover, 89% of security leaders believe that mobile devices will serve as your digital ID to accessenterprise services and data. This course covers best practices for safeguarding the data and workflowsassociated with the individual devices that connect to your enterprise network.ProjectFedF1rst Security AssessmentYou are a security engineer for Fed F1rst Control Systems. Fed F1rst has recently spun out of a largerorganization into a stand-alone company. You have been tasked with implementing the endpoint portionof the organization’s security policy.The tasks that follow represent real tasks that would be performed on a scheduled and on an as-neededbasis (for instance, server hardening is typically performed upon installation). You will recommendhardening strategies on a Windows 10 desktop as well as a Windows 2016 server. In the exercises youperformed during the course, you performed these tasks on a CentOS Linux server. Those skills will comein handy here.Next, you will create several security policies for the organization. As with hardening, you also performedthis activity, but for different areas of the Information Technology department areas during the course.Additionally, you will create build sheets for Windows and Linux cloud servers using the knowledge youhave gained throughout the course.Finally, you will conduct a subset of a server self-assessment that is common during pre-work forcompliance audits.7THE SCHOOL OF C YBERSECURIT Y

Nanodegree Program OverviewLESSON TITLESYSTEMHARDENINGLEARNING OUTCOMES Identify Assets in an Organization Recommend mitigation of discovered vulnerabilities Recommend hardening strategy for commonly usedoperating systems Recommend a security configuration for IoT and Control SystemsPOLICIES ANDCOMPLIANCECLOUDMANAGEMENTLearn More at WWW.UDACITY.COM/ENTERPRISE Define BYOD StrategyCreate an NDA PolicyConduct a compliance self-assessmentCreate a remote work policy Recommend a public access configuration strategy Recommend a configuration for cloud broker Recommend a management solution for cloud deploymentsENTERPRISE SECURIT Y

Nanodegree Program OverviewCourse 3: Enterprise Wide Application SecurityApplication security is a critical part of any enterprise security plan. Similar to the application securitycourse in the Security Engineer Nanodegree, we will be covering how to perform a threat assessment butwill get more granular by doing threat modeling and looking at how to harden applications. This course willteach students mitigation and defensive strategies in an application software development lifecycle. Thefocus will be on covering how enterprises bake security into their lifecycle by shifting security left and thedifferent ways they enhance their security posture across on prem, cloud, containers, and APIs.ProjectCryptoV4ULT Enterprise SecurityAssessmentIn this project, the students are the lead security engineers for a newly released application. Theapplications backend has recently stood up a new infrastructure to offer new features to its base of over 1million users. Students will be tasked with reviewing the security for this new application technology stackand helping identify areas of concern with threat models. After pinpointing vulnerabilities, students willrun scans against the enterprise application and attempt to exploit these potential issues.Students’ scope includes a variety of entities within the architecture, such as the application itself, thecontainers running services, and the external-facing API. Finally, students will create a remediation plan tohelp prevent these vulnerabilities and harden your existing security standards.9LESSON TITLELEARNING OUTCOMESDESIGNING SECURITYARCHITECTURE Identify all steps of enterprise DevSecOps Plan all stages of the SDLC lifecycle Design security architecture with specific constraintsTHE SCHOOL OF C YBERSECURIT Y

Nanodegree Program OverviewLESSON TITLELEARNING OUTCOMESTHREAT HUNTING Conduct threat modeling to identify architecture vulnerabilities Exploit vulnerabilities to prove they exist Run industry-standard application vulnerability scanners withNessus Create pen-testing roadmap to secure solutionsCONTAINERVULNERABILITIES Scan containers to identify vulnerabilities Research container vulnerabilities Create plans to mitigate container vulnerabilitiesAPI VULNERABILITIES Identify coding vulnerabilities in APIs Research coding vulnerabilities in APIs Mitigate coding vulnerabilities in APIsLearn More at WWW.UDACITY.COM/ENTERPRISEENTERPRISE SECURIT Y