CYSE 425W

Cybersecurity and Policy

The Cybersecurity and Policy class gave me a deeper understanding of the intersection between cybersecurity practices and broader societal structures like government and business. In this course, we explored how cybersecurity policies are developed, implemented, and assessed, which is crucial for shaping the future of cyber defense strategies.

One of the key takeaways from this class was learning how to create and evaluate cybersecurity strategies, especially in the context of risk management. We studied real-world frameworks, such as the National Cybersecurity Framework, which helped me understand how governments and businesses align their strategies to protect national security. The ethical, social, and political considerations that come with cybersecurity policy were also explored, which is something I hadn’t fully considered before but now see as a crucial element in policy development.

This course really helped connect the dots between the technical side of cybersecurity and the high-level strategic decisions made by institutions. It gave me insight into how policies are crafted, how they affect not just cybersecurity teams but entire nations and industries, and the ethical implications that come with decision-making in cybersecurity.

Understanding these aspects is critical for anyone pursuing a career in cybersecurity, and it has equipped me with the knowledge to think critically about policy and strategy. Whether working in policy advocacy, as a security professional, or even in roles that involve the legal and regulatory side of cybersecurity, the lessons from this course will continue to guide my understanding of the bigger picture.

To see examples of my work please go to the My Work page.