Cyber Strategy and Policy
Course Description
This course explores cybersecurity policy and strategy and introduces students to the essentials of strategy development and policy making in cybersecurity. Topics considered include planning principles in cyber strategy; risk management and cybersecurity policy; the connections between cybersecurity policies, businesses, and governmental institutions; the knowledge, skills, and abilities needed to develop and implement cybersecurity policy; the social, political and ethical implications that arise in cybersecurity policies and strategies; strategies to assess cybersecurity policy; and the ties between national security and cybersecurity policy.
After completing this course, students will be able to:
- Describe the goal and structure of a national security strategy and compare it to cybersecurity strategy.
- Critically communicate the political and social implications that arise with cybersecurity policies and strategies.
- Compare and interpret cybersecurity policy issues and make recommendations on policy choices.
- Identify international cyber crisis management and conflict resolution mechanisms.
- Debate ethical issues that arise with cybersecurity policies
- Identify possible developments in cybersecurity strategy and policy.
- Assess cybersecurity strategy and policy
Course Material
Policy Analysis Papers
These will be structured papers you write about a specific cybersecurity policy or strategy you select. All papers were two-pages long and all citations were presented in APA style. Below are the prompts in which I was given for each paper to follow and answer the questions in each one. The first policy paper, I chose to write about the National Cybersecurity Protection Act of 2014. For the rest of the class papers, I chose to write about the Cybersecurity Enhancement Act of 2014.
Paper 1. What is the cybersecurity policy/strategy you have selected? The focus should be on the overview of the policy, why it was developed, how it is applied, how the policy fits within a national (and international) cybersecurity policy, and how at least three scholarly journal articles have described the policy.
Policy_Analysis_Paper1Paper 2. What are the political implications that arise from the cybersecurity policy/strategy you have selected? Attention should be given to how politicians or policy makers have addressed the policy/strategy, why those politicians or policy makers came to those conclusions, and the ramifications (Outcome) of those decisions. The paper must include at least three scholarly articles from political science/international studies that address the policy.
Policy_Analysis_Paper2Paper 3. What are the ethical implications that arise from the cybersecurity policy/strategy you have selected? Attention should be given to the costs and benefits of the policy/strategy, the types of rights that are protected and potentially limited with the policy/strategy, and whether the policy/strategy appropriately addresses individuals’ rights. The paper must include at least three scholarly journal articles that frame the discussion.
Policy_Analysis_Paper3Paper 4. What are the social implications that arise from the cybersecurity policy/strategy you have selected? Attention should be given to the social factors that led to the development of the policy/strategy, the social consequences of the policy/strategy, and the way that cultural and sub-cultural influences have shaped the policy. The paper must include at least three scholarly journal articles to support the discussion.
Policy_Analysis_Paper4Paper 5. Write a paper focused on how you would assess the effectiveness of the policy/strategy? Attention should be given to how experts have evaluated the policy/strategy in at least three different scholarly journal articles, how those policy assessments lead to additional policy implications, how you would assess the policy, and whether you believe the assessment would demonstrate success. This paper should incorporate the previous papers and summarize the ethical, political, and social implications in framing the assessment.
Policy_Analysis_Paper5