Course Title: Recognise the need for cyber security in an organisation

Part B: Course Detail

Teaching Period: Term1 2022

Course Code: COSC6236

Course Title: Recognise the need for cyber security in an organisation

School: 520T Future Technologies

Campus: City Campus

Program: C4408 - Certificate IV in Cyber Security

Course Contact: Luke Eberbach

Course Contact Phone: +61 3 9925 4381

Course Contact Email: luke.eberbach@rmit.edu.au


Name and Contact Details of All Other Relevant Staff

Nominal Hours: 60

Regardless of the mode of delivery, represent a guide to the relative teaching time and student effort required to successfully achieve a particular competency/module. This may include not only scheduled classes or workplace visits but also the amount of effort required to undertake, evaluate and complete all assessment requirements, including any non-classroom activities.

Pre-requisites and Co-requisites

NIL

Course Description

This unit provides introductory knowledge and skills to recognize threats, risks and vulnerabilities to cyber security in an organisation. It includes the threats an organisation encompasses such as networks, machines, applications, data, users and infrastructure. The unit also covers an introduction to common cyber security attack mechanisms and an introduction to identity and threat management as well as security issues surrounding Internet of Things (IOT) devices. Finally, the unit introduces the implementation of tools and systems an organisation can use to protect from cyber-attacks.


National Codes, Titles, Elements and Performance Criteria

National Element Code & Title:

VU21990 Recognise the need for cyber security in an organisation

Element:

1.Define a cyber security framework for an organisation

Performance Criteria:

1.1 Definition of information security is developed 1.2 Threat sources for an organisation are identified 1.3 Relationship between data, networks, machines, users and applications in an enterprise is defined 1.4 Introduction to identity and access management (IAM) is clarified 1.5 Security of physical infrastructure of the enterprise is identified and evaluated

Element:

2.Identify the need for cyber security

Performance Criteria:

2.1 Reasons to protect online identity and personal data are clarified 2.2 Reasons to protect an organisation's data are explained 2.3 Concept of cyber threat is defined 2.4 Reasons for the need of cyber security professionals are explained

Element:

3.Identify common and emerging cyber security attacks, and techniques

Performance Criteria:

3.1 Security vulnerabilities and malware are identified and demonstrated 3.2 Threat actors, threat vectors and threat goals are defined 3.3 Techniques used by attackers to infiltrate a system are described and demonstrated 3.4 Characteristics and operation of a cyber-attack are explained 3.5 Trends of cyber threats are investigated 3.6 Cyber-attacks on enterprise infrastructure are identified 3.7 Examples of IOT devices are described and demonstrated 3.8 Security vulnerabilities for IOT devices are defined

Element:

4.Implement methods to protect your data and privacy

Performance Criteria:

4.1 Techniques to protect personal devices and data are described and implemented 4.2 Authentication techniques are identified and demonstrated 4.3 Methods to protect personal devices from threats are implemented 4.4 Methods and tools to safeguard personal privacy are defined 4.5 Logical and physical access controls are defined and implemented


Learning Outcomes


Refer to Elements


Details of Learning Activities

You will be involved in the following learning activities to meet requirements for the two clustered competencies (VU21989 and VU21990). Both competencies's learning activities will incorporate

• Lectures
• Tutorials
• Individual work on assignments, practical labs and knowledge based assessments.

Cluster Information:

This course is delivered in a cluster referred to as Cyber Security Concepts. This cluster consists of two units of competencies from the 22334VIC National Unit Code. They are VU21989 (COSC6235) and VU21990 (COSC6236).

You must enrol in both of these courses delivered in this cluster. All the learning and assessment activities will include the components of all competencies VU21989 and VU21990.


Elements and Performance Criteria of VU21990 (COSC6236)

ELEMENT 

PERFORMANCE CRITERIA 

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Define a cyber security framework for an organisation

1.1 Definition of information security is developed

1.2 Threat sources for an organisation are identified

1.3 Relationship between data, networks, machines, users and applications in an enterprise is defined

1.4 Introduction to identity and access management (IAM) is clarified

1.5 Security of physical infrastructure of the enterprise is identified and evaluated

2. Identify the need for cyber security

2.1 Reasons to protect online identity and personal data are clarified

2.2 Reasons to protect an organisation’s data are explained

2.3 Concept of cyber threat is defined

2.4 Reasons for the need of cyber security professionals are explained

3. Identify common and emerging cyber security attacks, and techniques

3.1 Security vulnerabilities and malware are identified and demonstrated

3.2 Threat actors, threat vectors and threat goals are defined

3.3 Techniques used by attackers to infiltrate a system are described and demonstrated

3.4 Characteristics and operation of a cyber-attack are explained

3.5 Trends of cyber threats are investigated

3.6 Cyber-attacks on enterprise infrastructure are identified

3.7 Examples of IOT devices are described and demonstrated

3.8 Security vulnerabilities for IOT devices are defined

4. Implement methods to protect your data and privacy

4.1 Techniques to protect personal devices and data are described and implemented

4.2 Authentication techniques are identified and demonstrated

4.3 Methods to protect personal devices from threats are implemented

4.4 Methods and tools to safeguard personal privacy are defined

4.5 Logical and physical access controls are defined and implemented

5. Implement methods to protect an organisation’s data

5.1 Common equipment used to protect an organisation from cyber security attacks is identified

5.2 Terms such as botnets, the cyber kill chain process and behavior based security in the context of cyber security protection methodologies are explained.

5.3 Methods for protecting an organisation from cyber-attacks are developed and evaluated

5.4 Introduction to behavior based approach to cyber security is presented

5.5 Incident response standards are defined


Teaching Schedule

As this course is delivered in cluster, please refer to the course guide Part B for course VU21989 (COSC6235) for the proposed teaching schedule.


Learning Resources

Prescribed Texts


References


Other Resources

None


Overview of Assessment

Assessment 1: Practical
Assessment 2: Cyber security Report

These tasks assesses the following Course Learning Outcomes (CLOs):

Assessment Mapping Matrix

Elements/Performance Criteria

Assessment 1

Assessment 2

1.1


X

1.2 


X

1.3


X

1.4


X

1.5


X

2.1 


X

2.2 


X

2.3


X

2.4


X

3.1 

X

X

3.2 


X

3.3 

X

X

3.4


X

3.5


X

3.6

X

X

3.7

X

X

4.1

X

X

4.2

X

X

4.3

X

X

4.4


X

4.5

X

X

5.1


X

5.2


X

5.3


X

5.4


X

5.5


X



Assessment Tasks

As this course is delivered in cluster, please refer to the course guide Part B for course VU21989 (COSC6235) for the assessment tasks.


Assessment Matrix

As this course is delivered in cluster, please refer to the course guide Part B for course VU21989 (COSC6235) for the assessment matrix.

Other Information

Credit Transfer and/or Recognition of Prior Learning (RPL):
You may be eligible for credit towards courses in your program if you have already met the learning/competency outcomes through previous learning and/or industry experience. To be eligible for credit towards a course, you must demonstrate that you have already completed learning and/or gained industry experience that is:

  • Relevant
  • Current
  • Satisfies the learning/competency outcomes of the course

Please refer to http://www.rmit.edu.au/students/enrolment/credit to find more information about credit transfer and RPL

Study and learning Support:

Study and Learning Centre (SLC) provides free learning and academic development advice to you. 
Services offered by SLC to support your numeracy and literacy skills are: 

  • assignment writing, thesis writing and study skills advice 
  • maths and science developmental support and advice 
  • English language development 

Please Refer http://www.rmit.edu.au/studyandlearningcentre to find more information about Study and learning Support 

Equitable Learning Services (ELS):

If you are suffering from long-term medical condition or disability, you should contact Equitable Learning Services (ELS) to seek advice and support to complete your studies.
Please refer to https://www.rmit.edu.au/students/support-and-facilities/student-support/equitable-learning-services to find more information about services offered by Equitable Learning Services (ELS).

Late submission: 

If you require an Extension of Submittable Work (assignments, reports or project work etc.) for 7 calendar days or less (from the original due date) and have valid reasons, you must complete and lodge an Application for Extension of Submittable Work (7 Calendar Days or less) form and lodge it with the Senior Educator/ Program Manager. 
The application must be lodged no later than one working day before the official due date. You will be notified within no more than 2 working days of the date of lodgment as to whether the extension has been granted. 
If you seek an Extension of Submittable Work for more than 7 calendar days (from the original due date) must lodge an Application for Special Consideration form under the provisions of the Special Consideration Policy, preferably prior to, but no later than 2 working days after the official due date. 

Submittable Work (assignments, reports or project work etc.) submitted late without approval of an extension will not be accepted or marked. 


Special consideration: 

Please Refer http://www.rmit.edu.au/students/specialconsideration to find more information about special consideration 

Plagiarism: 

Plagiarism is a form of cheating and it is very serious academic offence that may lead to expulsion from the University. 

Please Refer: www.rmit.edu.au/academicintegrity to find more information about plagiarism. 

Other Information: 

All email communications will be sent to your RMIT email address and you must regularly check your RMIT emails.

Course Overview: Access Course Overview