Western Governors University

E019: Cybersecurity Strategy

A study guide to WGU's graduate course on evaluating cybersecurity challenges, weighing investment and roadmapping culture change from a management view.

Updated October 2026 · 5 min read

E019 is a three-unit graduate course in WGU's Master of Science, Information Technology. WGU lists no prerequisites.

The guidebook says the course approaches an organization's cybersecurity needs from a management perspective. Students analyze threats across policies, people and culture as well as technology, evaluate costs and investment, and map out a cybersecurity plan.

WGU states clearly that it is strictly strategic: learners are not expected to implement solutions or perform technical tasks.

That note shapes how to write. Evaluators want prioritized decisions and justified spending, not command lines or configuration steps.

Course at a Glance

ItemDetails
UniversityWestern Governors University (WGU)
CourseE019, Cybersecurity Strategy
Competency units3
LevelGraduate
ProgramMS Information Technology
PrerequisitesNone listed

What E019 Covers

Competency (WGU wording, summarized)What it asks of you
Evaluate cybersecurity challenges within an organizationIdentify and rank threats across policy, people, culture and technology
Evaluate the investment in cybersecurity approaches using industry best practicesWeigh cost against benefit and justify where money goes
Design a cybersecurity roadmap, including how to change cultureSequence actions over time, with behavior change built in

Key Concepts Explained

Challenges Beyond Technology

Many breaches begin with people and process. A strong evaluation looks at weak policies, uneven training, shadow IT and a culture that treats security as someone else's job, alongside technical gaps.

Investment Logic

Spending is justified by the risk it reduces. Show roughly what an incident could cost, what the control costs, and why the control is proportionate.

Illustration: A firm of 200 staff has no multi-factor authentication and sees repeated phishing. The challenge evaluation ranks credential theft first. The investment section compares enabling multi-factor authentication and awareness training against a more expensive monitoring platform, and recommends the former first because it addresses the leading risk at lower cost.

Roadmaps and Culture

A roadmap sequences work: quick wins, then structural changes. The culture element names behaviors to change and how leaders will model and reinforce them.

Typical Assignments and How to Approach Them

Task elementWhat it testsHow to approach it
Challenge evaluationBreadth and prioritizationCover policy, people, culture and technology, then rank
Investment evaluationCost-benefit reasoningCompare options, cite a recognized best-practice source and justify the choice
RoadmapPlanningPhase the actions, assign owners and show how culture will shift

Phasing a Roadmap

A roadmap reads best in phases. Early actions are cheap and reduce the biggest risk. Middle phases build capability, such as policy updates and training programs. Later phases mature the program with measurement and review.

PhaseTypical focusCulture element
Quick winsAddress the top-ranked riskLeaders explain why it matters
BuildPolicies, training, ownershipMake reporting suspicious activity easy and blame-free
MatureMeasure, test and reviewShare results and recognize good practice

A Short Worked Challenge Evaluation

Imagine a regional logistics company with drivers, warehouse staff and an office team. Security policy exists on paper, but few staff have read it, and several share logins on warehouse terminals.

Reasoning: The policy challenge is that rules exist but are not communicated. The people challenge is shared logins, which hide who did what. The culture challenge is that managers treat security as an obstacle to speed. The technology challenge is old terminals with no lockout. Ranking by impact and ease of fix, the roadmap begins with unique logins and short role-based training, moves on to updated policy and terminal replacement, and ends with regular reviews reported to leadership.

The ranking is the valuable part. It shows the reader why those actions come first and how the investment is proportionate to the risk.

A Study Approach for Each Competency

For the challenges competency, build your evidence list first. Note every fact in the scenario that signals weakness, then sort the facts under policy, people, culture and technology. Rank them by how much harm each could cause and how likely it is.

For the investment competency, treat each option as a small business case: what it costs, which risk it reduces and what happens if the organization does nothing. For the roadmap, turn your ranking into phases and add the culture work that makes each technical or policy change stick.

Where Students Get Stuck

Study Tips for E019

How We Help with E019

Send the scenario, task instructions and rubric. A writer can prepare a model roadmap, explain how to justify investment, or review your draft for gaps. This is study support; submit your own work under WGU's academic integrity policy.

GradeEssays is independent of Western Governors University. Orders are written from scratch, include free revisions within the scope of your original request, and are refunded in full if late. See also our policy brief guide.

Get Your Cybersecurity Roadmap Clear

Share the case, your draft and feedback. We explain how to justify spending and plan culture change.

Start My E019 Help

Free revisions · Full refund if late · Written from scratch for your order

Frequently Asked Questions

Does E019 have prerequisites?

WGU lists none.

How many competency units is E019?

The guidebook lists 3.

Do I need to implement security tools?

No. The guidebook states the course is strictly strategic and learners are not expected to implement solutions or perform technical tasks.

Which program includes E019?

The MS Information Technology (standard) program.

How is E019 different from E016?

E016 centers on risk, governance and incident response. E019 centers on cybersecurity challenges, investment and a culture-aware roadmap.

Can you review my roadmap?

Yes. We check prioritization, justification and rubric match, and explain what to change.