Information Technology · Capella FlexPath

IT-FPX4993: Cybersecurity Capstone

The culminating course in Capella's IT FlexPath cybersecurity track. Students synthesize skills from prior security courses in a comprehensive enterprise cybersecurity project covering threat analysis, security architecture, policy development, and professional communication.

Get Help With IT-FPX4993 →

IT-FPX4993 is the capstone for the cybersecurity track. Assessments expect students to demonstrate integrated command of security concepts across risk, architecture, operations, and policy, not just competency in any one area. The project-based format means early assessment choices constrain later ones, and weak scoping at the start creates compounding problems. This guide explains the capstone structure and how academic support for IT-FPX4993 can help you produce a coherent, complete project from start to finish.

Course Overview

IT-FPX4993 requires students to select or be assigned a realistic enterprise scenario and develop a comprehensive cybersecurity solution across a sequence of linked assessments. The capstone draws on skills developed in prior courses (including IT-FPX4803 and related security courses) and requires students to apply them in an integrated way. Moving from threat landscape analysis through security architecture design, policy and procedure development, and a final professional presentation of the complete security program. The course is designed to mirror the experience of producing a security assessment and program recommendation for a real organization.

Key Assessments

How We Help With IT-FPX4993

Common Challenges in This Course

The most frequent capstone failure mode is an Assessment 1 threat analysis that is too vague. Identifying "phishing" and "ransomware" as threats without connecting them to the specific scenario organization's industry, size, data types, and attack surface. When Assessment 1 is vague, Assessment 2's architecture becomes generic (not tied to actual threats), and the policies in Assessment 3 become boilerplate. Students often discover this in Assessment 3 when they realize their policies don't reference anything scenario-specific. Starting with a specific, well-scoped scenario in Assessment 1 is the single highest-leverage investment in this capstone.

Need Help With IT-FPX4993?

Send us your capstone scenario and the assessment you're working on. We'll help you build a coherent, technically sound project from threat analysis through final presentation.

Related Courses

IT-FPX4993 FAQ

Can I choose my own organization scenario for the capstone?

Some sections allow you to propose a scenario; others assign one. If you can choose, select an organization type with enough publicly available information to support the threat analysis. A mid-size healthcare provider, a regional financial institution, or a retail company are well-documented scenario types. Avoid overly niche or fictional organizations where threat data is hard to source.

Which security framework should I use for the architecture design?

The NIST Cybersecurity Framework (CSF) is the most commonly required or accepted framework for the architecture assessment. NIST SP 800-53 controls are often used to populate the specific control selections. If your section specifies ISO 27001 or another framework, follow that specification.

How long should the Assessment 3 security policies be?

Each policy should be long enough to be actionable. Typically 2-4 pages per policy covering purpose, scope, policy statements, roles and responsibilities, enforcement, and review cycle. A policy that is too short will not cover enforcement and accountability; a policy that is too long will be impractical. Quality over length.

Is the Assessment 4 presentation a slide deck or a written document?

Most sections require a slide presentation (PowerPoint or similar) with narrated audio or speaker notes. Check your section's specific format requirement. Some sections accept a video presentation, and a few may accept a written executive summary instead.