Master of Science: Cybersecurity

Master’s Degree in Cybersecurity Program Requirements:

In order to gain a rigorous base of knowledge, students in the Cybersecurity master’s program must complete 10 courses (30 credits). Students are encouraged to tailor their coursework to their interests and career goals. All students must complete 18 credits through our 6 required Cybersecurity courses listed below (18 credits). The remaining 12 credits can be completed by choosing 4 of our elective Cybersecurity course.

Required Core Cybersecurity Courses (18 credits):

(Please note: Some required core courses may be substituted via transfer credits or alternative UMBC courses with approval from the Graduate Program Director)

CYBR 620: Intro to Cybersecurity

This course introduces students to the interdisciplinary field of cybersecurity by discussing the evolution of information security into cybersecurity, cybersecurity theory, and the relationship of cybersecurity to nations, businesses, society, and people. Students will be exposed to multiple cybersecurity technologies, processes, and procedures, learn how to analyze the threats, vulnerabilities and risks present in these environments, and develop appropriate strategies to mitigate potential cybersecurity problems.

Prospective students who have earned the CISSP designation within the past 5 years may, if admitted, substitute another course for CYBR 620 “Introduction to Cybersecurity” in their first semester of the CYBR MS program. Students should provide evidence of successful completion of the CISSP exam within that timeframe (such as a transcript or official documentation from the certifying authority) to UMBC as part of their application.

Prerequisite: Enrollment in the CYBR program or in at least the second semester of graduate study. Other students may be admitted with instructor permission.

CYBR 624: Cybersecurity Project

This is the capstone experience for graduate students in the MS Cybersecurity program. Normally taken in the final semester before graduation, the Cybersecurity Project provides an opportunity for students to carry out an individual piece of research (or project activity) on a specified topic in the cybersecurity or cyber operations domain. Their work should make an original contribution to the body of knowledge in the area of study or otherwise demonstrate the student’s comprehensive knowledge of cybersecurity or cyber operations.

Prerequisite: Enrollment in CYBR MS program and completion of at least CYBR 620, CYBR 650, CYBR 655.

CYBR 650: Managing Cybersecurity Operations

This course takes an operational approach to implementing and managing effective cybersecurity in highly networked enterprises. Topics include an evaluation of government and commercial security management models; security program development; risk assessment and mitigation; threat/vulnerability analysis and risk remediation; cybersecurity operations; incident handling; business continuity planning and disaster recovery; security policy formulation and implementation; large-scale cybersecurity program coordination; management controls related to cybersecurity programs; information-sharing; and privacy, legal, compliance, and ethical issues.

CYBR 652: Enterprise Security

This class will take a technical approach in protection of information assets and systems by integrating technical controls with policies, best practices, and guidelines of cybersecurity. Taking both a policy-based and technical approach, this course examines external and internal security threats in highly connected enterprises and risks to the core business relative to people, processes, data, facilities, and technologies. How to implement and manage effective the major technical components of security architectures (firewalls, virtual private networks, etc.) and selected methods of attacking enterprise architectures also will be addressed.

CYBR 655: Security of Distributed Systems

This course focuses on a broad range of topics relative to securing distributed systems. Students will gain an understanding of the principles and techniques behind the design of distributed systems along with their associated cybersecurity issues and remediation techniques. Cloud computing and the Internet of Things (IoT) will be some of the major types of distributed environments examined.

CYBR 658: Risk Analysis and Compliance

This course focuses the student on a broad range of topics relative to risk-based planning for enterprise cybersecurity. The intent is focusing on creating risk assessment and modeling approaches to solve cybersecurity issues so that organizations can build security framework and sustain a healthy security posture. This course analyzes external and internal security threats, failed systems development and system processes and explores their respective risk mitigation solutions through policies, best practices, operational procedures, and government regulations. Risk frameworks covered include NIST SP 800-12, SP 800-37, SP 800-39, and CERT/CC risk analysis guidelines.

Elective Courses (12 credits)

Students must select four courses (12 credits) of electives. Some elective pathway courses may lead to a post-Baccalaureate certificate, in that plan of study.