Introductory description

This module focuses on enterprise cyber security, developing students’ ability to design, evaluate, and communicate secure architectures for complex organisational systems. Developed in collaboration with a globally recognised industry organisation, the module adopts the perspective of a security architect, emphasising architectural thinking as a structured approach to creating secure, resilient enterprise environments. Students explore how security architecture supports risk-based decision-making across people, processes, and technology.

The module introduces systematic methodologies for enterprise security design and applies them through a realistic case study. Students examine how modern enterprise environments, including cloud infrastructure, cloud-native development, and emerging technologies such as AI, expand the threat landscape and require integrated security strategies. The module provides frameworks to identify, protect, detect, respond to, and recover from security threats within complex digital ecosystems.

A key outcome of the module is the development of professional communication skills for translating secure designs into forms understood by security architects, engineers, and business stakeholders. Students follow a comprehensive secure design lifecycle covering requirements analysis, architecture design, threat modelling, solution assurance, operational security processes, and governance. Assessments are aligned with industry practice and focus on developing practical skills in collaborative working, technical reporting, and professional presentation within an enterprise cyber security context.

Module aims

Outline syllabus

This is an indicative module outline only to give an indication of the sort of topics that may be covered. Actual sessions held may differ.

The module walks through the architectural thinking for the secure design process, including:

Architecture and Enterprise Context
Requirements and Constraints
System Context
Application Security
Infrastructure Security
Architecture Patterns and Decisions
Secure Development and Assurance
Security Operations
Structuring Presentations and Reports

Learning outcomes

By the end of the module, students should be able to:

• Demonstrate a critical awareness of the secure design lifecycle of enterprise systems. (AHEP 3.1.1, 3.1.2, 3.2.3, 3.3.5, 3.3.6, 3.3.7, M1.)
• Evaluate security threats in complex enterprise environments and assess their impact on organisational systems. (AHEP 3.1.2, 3.3.5, 3.3.7, M1.)
• Apply architectural thinking to design secure enterprise systems integrating people, processes, and technology. (AHEP 3.1.2, 3.2.3, 3.3.5, 3.3.6, M1., M5.)
• Communicate a secure design to executive stakeholders using industry-standard practices. (AHEP 3.1.1, 3.1.2, 3.2.3, 3.3.5, M5., M17.)

Indicative reading list

Reading lists can be found in Talis

Specific reading list for the module

Subject specific skills

Students will be able to build these subject-specific skills:

• Apply enterprise cyber security and secure design principles
• Analyse security risks within complex organisational environments
• Develop and evaluate secure security architectures
• Apply threat modelling and risk assessment techniques
• Communicate secure design decisions to technical and executive audiences

Transferable skills

Teamwork and working effectively with others, professionalism, clear communication, problem-solving, and organisational awareness