2. 安心を担う： セキュリティリスクの管理

Google via Coursera

Go to Course: https://www.coursera.org/learn/manage-security-risks-jp

Introduction

### Course Review and Recommendation: "安心を担う：セキュリティリスクの管理" on Coursera In the rapidly evolving world of cybersecurity, having a robust understanding of security risk management is essential for anyone looking to enter this field. The course titled "安心を担う：セキュリティリスクの管理," part of the Google Cybersecurity Professional Certificate program on Coursera, provides an excellent foundation for beginners aspiring to build a successful career in cybersecurity. #### Overview This course serves as the second stepping stone in the Google Cybersecurity Professional certification program. It goes beyond the concepts introduced in the first course and delves into practical strategies for utilizing frameworks and controls to safeguard businesses. The focus here is on understanding the steps of risk management, exploring common threats, vulnerabilities, and risks, and employing Security Information and Event Management (SIEM) data. Learners will also gain hands-on experience with security audits, which are critical for anyone entering the cybersecurity field. In addition to the technical knowledge, this course is structured to assist learners in preparing for job opportunities in the cybersecurity sector, providing insights from current Google employees who guide students through the effective use of industry tools and resources. #### Syllabus Breakdown 1. **Understanding Security Domains**: The course begins by deepening your understanding of the eight security domains outlined by the CISSP certification. Students will explore primary threats, risks, and vulnerabilities within a business context while learning about the NIST Risk Management Framework and its steps. 2. **Security Frameworks and Controls**: This section focuses on significant security frameworks and controls, emphasizing the CIA triad (Confidentiality, Integrity, Availability). Additionally, learners will study security principles from the Open Web Application Security Project (OWASP) and gain insights into conducting security audits. 3. **Introduction to Cybersecurity Tools**: Students will be introduced to cutting-edge SIEM tools, which are pivotal for defending business operations. The lessons include practical applications and the daily operations of a junior security analyst employing SIEM dashboards. 4. **Utilizing Playbooks for Incident Response**: This module covers the objectives and common uses of playbooks in cybersecurity. Students will examine how cybersecurity professionals deploy playbooks to address identified threats, risks, and vulnerabilities effectively. #### Why You Should Take This Course This course is ideally suited for anyone looking to enhance their cybersecurity knowledge and skills. Here are a few reasons to consider enrolling: - **Expert Instruction**: Learn from industry professionals at Google who provide firsthand knowledge and practical insights that can elevate your understanding of cybersecurity. - **Comprehensive Curriculum**: The structured syllabus covers essential topics that are vital for anyone entering the field of cybersecurity, ensuring a well-rounded education. - **Hands-On Experience**: Gaining practical experience with tools like SIEM and learning how to conduct security audits prepares you for real-world challenges. - **Career Preparation**: The course includes resources and guidance to help you prepare for job applications and interviews in an increasingly competitive job market. #### Conclusion In conclusion, "安心を担う：セキュリティリスクの管理" on Coursera is a highly recommended course for those aspiring to start a career in cybersecurity. Its comprehensive curriculum, offered by professionals who are deeply entrenched in the field, provides invaluable knowledge and skills that are crucial for entry-level positions. If you're looking to expand your cybersecurity capabilities and secure your future in this thriving industry, this course is a fantastic choice!

Syllabus

セキュリティドメインとは

ここでは、CISSP の 8 つのセキュリティドメインに関する理解を深めます。そして、ビジネスにおける主な脅威やリスク、脆弱性について学んでいきます。さらに、米国立標準技術研究所（NIST）が作成したリスクマネジメントフレームワークとリスクマネジメントのステップについても学びます。

セキュリティフレームワークとコントロール

ここでは、セキュリティフレームワークとコントロール、CIA（機密性、完全性、可用性）トライアドのコアコンポーネントに焦点を当てます。また、Open Web Application Security Project (OWASP) のセキュリティ原則とセキュリティ監査についても学びます。

サイバーセキュリティ ツール入門

ここでは、セキュリティ職がビジネスの運用を防御するために活用する、業界最先端の SIEM (セキュリティ情報イベント管理)ツールについて学びます。また初級セキュリティアナリストが日常業務で SIEM ダッシュボードをどのように活用しているかについても学びます。

インシデント対応にプレイブックを活用する

ここでは、プレイブックの目的と一般的な使用方法について学びます。また、サイバーセキュリティ職が脅威やリスク、脆弱性に対応するために、どのようにプレイブックを使っているかについても探ります。