Course Title: Install, configure and test network security

Part B: Course Detail

Teaching Period: Term2 2020

Course Code: ISYS7579C

Course Title: Install, configure and test network security

School: 174T School of VE Engineering, Health & Science

Campus: City Campus

Program: C4401 - Certificate IV in Information Technology Networking

Course Contact: Program Manager

Course Contact Phone: +61 3 9925 4468

Course Contact Email: vehs@rmit.edu.au


Name and Contact Details of All Other Relevant Staff

Nominal Hours: 50

Regardless of the mode of delivery, represent a guide to the relative teaching time and student effort required to successfully achieve a particular competency/module. This may include not only scheduled classes or workplace visits but also the amount of effort required to undertake, evaluate and complete all assessment requirements, including any non-classroom activities.

Pre-requisites and Co-requisites

Nil

Course Description

This unit describes the skills and knowledge required to install, configure and test network security in an organisational environment.

It applies to individuals who are involved in the installation, configuration, and testing of network security for networks of any size in job roles including network administrator, penetration tester, and security consultant.


National Codes, Titles, Elements and Performance Criteria

National Element Code & Title:

ICTNWK421 Install, configure and test network security

Element:

1. Assess network security threats and vulnerabilities

Performance Criteria:

ELEMENT

PERFORMANCE CRITERIA

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Assess network security threats and vulnerabilities

1.1 Review current system security against organisational asset security requirements to identify security threats and vulnerabilities

1.2 Analyse network, software, hardware and system security threats and vulnerabilities to prioritise deficiencies to be addressed

1.3 Make recommendations to management to address security  deficiencies according to organisational asset security requirements

2. Implement countermeasures for identified threats and vulnerabilities

2.1 Implement required level of perimeter security to meet organisational asset security requirements and according to identified threats and vulnerabilities

2.2 Assess and implement server and network hardening techniques and measures

2.3 Implement secure authentication and user account controls to secure data integrity and transmission

3. Test and verify functionality and performance of countermeasures implemented

3.1 Design function and performance test items to verify key functions and performance of countermeasures

3.2 Conduct function and performance tests to modify and debug countermeasures

3.3 Develop documentation on the current system settings and file according to organisational guidelines

4. Maintain and improve network security

4.1 Review logs and audit reports to identify and record security incidents, intrusions and attempts

4.2 Carry out spot checks and audits to ensure that procedures are not being bypassed

4.3 Document newly discovered security threats vulnerabilities and recommendations in a report for presentation to superior to gain approval recommendations to be implemented

Element:

2. Implement countermeasures for identified threats and vulnerabilities

Performance Criteria:

ELEMENT

PERFORMANCE CRITERIA

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Assess network security threats and vulnerabilities

1.1 Review current system security against organisational asset security requirements to identify security threats and vulnerabilities

1.2 Analyse network, software, hardware and system security threats and vulnerabilities to prioritise deficiencies to be addressed

1.3 Make recommendations to management to address security  deficiencies according to organisational asset security requirements

2. Implement countermeasures for identified threats and vulnerabilities

2.1 Implement required level of perimeter security to meet organisational asset security requirements and according to identified threats and vulnerabilities

2.2 Assess and implement server and network hardening techniques and measures

2.3 Implement secure authentication and user account controls to secure data integrity and transmission

3. Test and verify functionality and performance of countermeasures implemented

3.1 Design function and performance test items to verify key functions and performance of countermeasures

3.2 Conduct function and performance tests to modify and debug countermeasures

3.3 Develop documentation on the current system settings and file according to organisational guidelines

4. Maintain and improve network security

4.1 Review logs and audit reports to identify and record security incidents, intrusions and attempts

4.2 Carry out spot checks and audits to ensure that procedures are not being bypassed

4.3 Document newly discovered security threats vulnerabilities and recommendations in a report for presentation to superior to gain approval recommendations to be implemented

Element:

3. Test and verify functionality and performance of countermeasures implemented

Performance Criteria:

ELEMENT

PERFORMANCE CRITERIA

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Assess network security threats and vulnerabilities

1.1 Review current system security against organisational asset security requirements to identify security threats and vulnerabilities

1.2 Analyse network, software, hardware and system security threats and vulnerabilities to prioritise deficiencies to be addressed

1.3 Make recommendations to management to address security  deficiencies according to organisational asset security requirements

2. Implement countermeasures for identified threats and vulnerabilities

2.1 Implement required level of perimeter security to meet organisational asset security requirements and according to identified threats and vulnerabilities

2.2 Assess and implement server and network hardening techniques and measures

2.3 Implement secure authentication and user account controls to secure data integrity and transmission

3. Test and verify functionality and performance of countermeasures implemented

3.1 Design function and performance test items to verify key functions and performance of countermeasures

3.2 Conduct function and performance tests to modify and debug countermeasures

3.3 Develop documentation on the current system settings and file according to organisational guidelines

4. Maintain and improve network security

4.1 Review logs and audit reports to identify and record security incidents, intrusions and attempts

4.2 Carry out spot checks and audits to ensure that procedures are not being bypassed

4.3 Document newly discovered security threats vulnerabilities and recommendations in a report for presentation to superior to gain approval recommendations to be implemented

Element:

4. Maintain and improve network security

Performance Criteria:

ELEMENT

PERFORMANCE CRITERIA

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Assess network security threats and vulnerabilities

1.1 Review current system security against organisational asset security requirements to identify security threats and vulnerabilities

1.2 Analyse network, software, hardware and system security threats and vulnerabilities to prioritise deficiencies to be addressed

1.3 Make recommendations to management to address security  deficiencies according to organisational asset security requirements

2. Implement countermeasures for identified threats and vulnerabilities

2.1 Implement required level of perimeter security to meet organisational asset security requirements and according to identified threats and vulnerabilities

2.2 Assess and implement server and network hardening techniques and measures

2.3 Implement secure authentication and user account controls to secure data integrity and transmission

3. Test and verify functionality and performance of countermeasures implemented

3.1 Design function and performance test items to verify key functions and performance of countermeasures

3.2 Conduct function and performance tests to modify and debug countermeasures

3.3 Develop documentation on the current system settings and file according to organisational guidelines

4. Maintain and improve network security

4.1 Review logs and audit reports to identify and record security incidents, intrusions and attempts

4.2 Carry out spot checks and audits to ensure that procedures are not being bypassed

4.3 Document newly discovered security threats vulnerabilities and recommendations in a report for presentation to superior to gain approval recommendations to be implemented


Learning Outcomes


Activities in this course aim to enhance your knowledge required to Install, configure and test network security in an ICT network such as the use of VPN’s and firewalls.


Details of Learning Activities

You will be involved in the following learning activities to meet requirements for the two clustered competencies (ICTNWK403 and ICTNWK421). Both learning activities will incorporate

  • Lectures
  • Tutorials
  • Individual work on assignments, practical labs and knowledge based assessments.

 

Cluster Information:

This course is delivered in a cluster referred to as Data Management and Security. This cluster consists of two units of competencies from the 40418 National Unit Code. They are ICTNWK403 (COSC6194C) and ICTNWK421 (ISYS7579C).

You must enrol in all two courses delivered in this cluster. All the learning and assessment activities will include the components of all competencies ICTNWK403 and ICTNWK421.

Elements and Performance Criteria of ICTNWK421 (ISYS7579C)

ELEMENT

PERFORMANCE CRITERIA

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Assess network security threats and vulnerabilities

1.1 Review current system security against organisational asset security requirements to identify security threats and vulnerabilities

1.2 Analyse network, software, hardware and system security threats and vulnerabilities to prioritise deficiencies to be addressed

1.3 Make recommendations to management to address security  deficiencies according to organisational asset security requirements

2. Implement countermeasures for identified threats and vulnerabilities

2.1 Implement required level of perimeter security to meet organisational asset security requirements and according to identified threats and vulnerabilities

2.2 Assess and implement server and network hardening techniques and measures

2.3 Implement secure authentication and user account controls to secure data integrity and transmission

3. Test and verify functionality and performance of countermeasures implemented

3.1 Design function and performance test items to verify key functions and performance of countermeasures

3.2 Conduct function and performance tests to modify and debug countermeasures

3.3 Develop documentation on the current system settings and file according to organisational guidelines

4. Maintain and improve network security

4.1 Review logs and audit reports to identify and record security incidents, intrusions and attempts

4.2 Carry out spot checks and audits to ensure that procedures are not being bypassed

4.3 Document newly discovered security threats vulnerabilities and recommendations in a report for presentation to superior to gain approval recommendations to be implemented


Teaching Schedule

As this course is delivered in cluster, please refer to the course guide Part B for course ICTNWK403 (COSC6194C) for the proposed teaching schedule.


Learning Resources

Prescribed Texts


References


Other Resources

None


Overview of Assessment

Assessment occurs throughout the program and includes learning and assessment activities conducted in the classroom, online and in the workplace giving you the opportunity to practice and be assessed on what you are learning in a work context. You must demonstrate an understanding of all elements of a particular competency to be deemed competent. Assessment methods have been designed to measure achievement of each competency in a flexible manner over a range of assessment tasks.

Assessment will incorporate a variety of methods including technical requirements, documentation, in class exercises, quizzes, practical problem solving exercises and presentations. Participants are advised that they are likely to be asked to personally demonstrate their assessment work to their teacher to ensure that the relevant competency standards are being met.

Assessment in this course will involve the following activities
Task 1. Assignment: You are required to assess and identify security threats, vulnerabilities and risks, determine appropriate countermeasure for threats
Task 2. Assignment: You are required to implement security and monitoring to a live system based on the assessment brief.
Task 3. Assignment. You will be required to verify and modify the functionality of an implemented security system

Task 4. Assignment. You will be required to implement secure data transmission, test, monitor, log and update security systems.

Assessment Mapping Matrix

       Elements/Performance Criteria           Task 1 Assignment 1  Task 2 Assignment 2  Task 3 Assignment 3   Task 4 Assignment 4
 1.1  X   X    
 1.2  X   X    
 1.3  X   X    
 2.1  X   X  X  X
 2.2  X   X   X  X
 2.3 X   X   X  X
 3.1       X  X
 3.2       X  X
 3.3       X  X
 4.1     X    X
 4.2     X    X
 4.3     X    X


Assessment Tasks

As this course is delivered in cluster, please refer to the course guide Part B for course ICTNWK403 (COSC6194C) for the assessment tasks.


Assessment Matrix

As this course is delivered in cluster, please refer to the course guide Part B for course ICTNWK403 (COSC6194C) for the assessment matrix.

Other Information

Credit Transfer and/or Recognition of Prior Learning (RPL):
You may be eligible for credit towards courses in your program if you have already met the learning/competency outcomes through previous learning and/or industry experience. To be eligible for credit towards a course, you must demonstrate that you have already completed learning and/or gained industry experience that is:

  • Relevant
  • Current
  • Satisfies the learning/competency outcomes of the course

Please refer to http://www.rmit.edu.au/students/enrolment/credit to find more information about credit transfer and RPL

Study and learning Support:

Study and Learning Centre (SLC) provides free learning and academic development advice to you. 
Services offered by SLC to support your numeracy and literacy skills are: 

  • assignment writing, thesis writing and study skills advice 
  • maths and science developmental support and advice 
  • English language development 

Please Refer http://www.rmit.edu.au/studyandlearningcentre to find more information about Study and learning Support 

Equitable Learning Services (ELS):

If you are suffering from long-term medical condition or disability, you should contact Equitable Learning Services (ELS) to seek advice and support to complete your studies.
Please refer to https://www.rmit.edu.au/students/support-and-facilities/student-support/equitable-learning-services to find more information about services offered by Equitable Learning Services (ELS).

Late submission: 

If you require an Extension of Submittable Work (assignments, reports or project work etc.) for 7 calendar days or less (from the original due date) and have valid reasons, you must complete and lodge an Application for Extension of Submittable Work (7 Calendar Days or less) form and lodge it with the Senior Educator/ Program Manager. 
The application must be lodged no later than one working day before the official due date. You will be notified within no more than 2 working days of the date of lodgment as to whether the extension has been granted. 
If you seek an Extension of Submittable Work for more than 7 calendar days (from the original due date) must lodge an Application for Special Consideration form under the provisions of the Special Consideration Policy, preferably prior to, but no later than 2 working days after the official due date. 

Submittable Work (assignments, reports or project work etc.) submitted late without approval of an extension will not be accepted or marked. 


Special consideration: 

Please Refer http://www.rmit.edu.au/students/specialconsideration to find more information about special consideration 

Plagiarism: 

Plagiarism is a form of cheating and it is very serious academic offence that may lead to expulsion from the University. 

Please Refer: www.rmit.edu.au/academicintegrity to find more information about plagiarism. 

Other Information: 

All email communications will be sent to your RMIT email address and you must regularly check your RMIT emails.

Course Overview: Access Course Overview