CYB 380 · Fall 2026
Schedule
Watch the recorded lecture before Monday. Monday night is for doing the
work. Live slides post after class, not before.
Recorded lecture
Watch before you sit down. Posted by Wednesday. After week 1, the usual post is Monday night for the next lecture.
Monday 6–7 PM
In the room unless the week says 6–8 PM. Aug 31 was remote. Sep 21 you are in the room; Joey is on Meet.
Due dates
Firm. The writing, the program-plan milestones, and the module assignments are listed on the week they belong to.
Wk 01 Foundations Mon Aug 24 · 6–8 PM
Watch
Course intro. How the course runs. Why risk management.
Monday
Primer check, then first principles: asset, CIA, risk, the four treatments.
Due
Read the business-primer packet before you sit down.
Wk 02 GOVERN Remote Mon Aug 31 · 6–7 PM
Watch
Org context, roles, policy, risk strategy, supply-chain risk.
Monday
Communicating risk to people who do not speak security.
Due
A1 organization brief · Sun Aug 30
Break Labor Day Mon Sep 7
Watch
No recorded lecture required this week. A good window to start A0.
Monday
No class.
Due
—
Wk 03 IDENTIFY Mon Sep 14 · 6–7 PM
Watch
Assets, business environment, risk assessment.
Monday
Discovery walk, then a risk-register workshop.
Due
W1 risk memo · Wed Sep 9. CPP-M1 · Fri Sep 11
Wk 04 Quantitative risk Mon Sep 21 · 6–7 PM
Watch
Two recordings: Count the Cost (FAIR), then threat modeling (STRIDE).
Monday
FAIR workshop in the room, 6 to 7. Joey is on Meet. Draft A3.
Due
A2 inventory + register · Fri Sep 18. A3 FAIR · Fri Sep 25
Wk 05 RESPOND Mon Sep 28 · 6–7 PM
Watch
Incident-response lifecycle, roles, out-of-band comms.
Monday
IR deep-dive. Tabletop game launches. Groups assigned.
Due
A3 FAIR · Fri Sep 25. A0 certificate recommended Wed Sep 23, hard Wed Sep 30
Wk 06 Midterm Exam Mon Oct 5 · 6–8 PM
Watch
A short review capsule. No new lecture.
Monday
In-class applied exam. 6–8 PM.
Due
CPP-M2 · Fri Oct 2
Wk 07 PROTECT Mon Oct 12 · 6–8 PM
Watch
Access, awareness, data security. Zero Trust as a design idea.
Monday
Full team-work session for the tabletop. Design-doc checkpoint in class.
Due
A7 LinkedIn · Fri Oct 9. A4 policy framework · Mon Oct 19
Wk 08 Game Day Mon Oct 19 · 6–8 PM
Watch
Platform security and supply-chain depth (SBOM, SolarWinds, XZ).
Monday
Tabletop Game Day. You play each other's games.
Due
A4 is due tonight. W-withdrawal is Oct 22
Wk 09 DETECT Mon Oct 26 · 6–7 PM
Watch
Monitoring, SIEM/XDR, plus a short RECOVER primer for milestone 3.
Monday
Detection workshop.
Due
W2 after-action · Fri Oct 23
Wk 10 RECOVER Mon Nov 2 · 6–7 PM
Watch
Recovery planning, RPO/RTO, business continuity.
Monday
BC/DR workshop and a backup-time calculation.
Due
CPP-M3 · Fri Oct 30. A5 detection-tech · Wed Nov 4
Wk 11 AI and careers Mon Nov 9 · 6–7 PM
Watch
Defensive AI, AI-written threats, prompt injection, ethics.
Monday
Red-team the model. Then how this field actually hires.
Due
A6 backup experiment · Fri Nov 6
Wk 12 Capstone Mon Nov 16 · 6–7 PM
Watch
One real CISA alert walked through all six functions.
Monday
Applied-scenario workshop. CPP clinic.
Due
W3 LLM critique · Fri Nov 13
Break Thanksgiving Mon Nov 23
Watch
No lecture. Light week on purpose.
Monday
No class.
Due
CPP-M4 · Fri Nov 20. Early-bonus Final CPP · Wed Nov 25
Wk 13 Defenses Mon Nov 30 · 6–8 PM
Watch
None. Finish the plan.
Monday
Wrap, then the first live CPP defenses. Remaining slots that week.
Due
Final CPP · Mon Nov 30
Wk 14 Final exam Exam Mon Dec 7 · 6–8 PM
Watch
None.
Monday
In-class final. Applied core plus a short reflective section.
Due
The exam is the due date.
The program plan
The Cybersecurity Program Plan is 30% of the course. You build it in four
milestones, then defend it.