Course Title: Manage the security infrastructure for an organisation
Part B: Course Detail
Teaching Period: Term1 2025
Course Code: INTE5064
Course Title: Manage the security infrastructure for an organisation
School: 520T Future Technologies
Campus: City Campus
Program: C4424 - Certificate IV in Cyber Security
Course Contact: Smita Jhajaria
Course Contact Phone: +61 3 9925 4448
Course Contact Email: smita.jhajharia@rmit.edu.au
Name and Contact Details of All Other Relevant Staff
Nominal Hours: 80
Regardless of the mode of delivery, represent a guide to the relative teaching time and student effort required to successfully achieve a particular competency/module. This may include not only scheduled classes or workplace visits but also the amount of effort required to undertake, evaluate and complete all assessment requirements, including any non-classroom activities.
Pre-requisites and Co-requisites
None
Course Description
In this course you will gain knowledge and skills required to manage the security infrastructure for an organisation. It includes assessing risk, implementing appropriate controls, monitoring their effectiveness and compiling reports for future audit purposes
National Codes, Titles, Elements and Performance Criteria
National Element Code & Title: |
VU23219 Manage the security infrastructure for an organisation |
Element: |
1 Identify the key features from information and security policies for an organisation |
Performance Criteria: |
1.1 Information and security policy documents for the organisation are accessed and examined 1.2 Implications of the organisation’s employees work habits relating to its security policy are evaluated 1.3 Implications of the organisation’s configuration and change management capability are evaluated 1.4 Levels of security clearances to access organisational data are identified |
Element: |
2 Determine risk category for the security infrastructure |
Performance Criteria: |
2.1 Audit of existing tools and security infrastructure for the organisation is conducted 2.2 Asset valuation for the organisation is determined 2.3 Security infrastructure baseline is determined 2.4 Risk assessment of the organisation assets is conducted and associated risks categorised 2.5 Resources required by risk categories to minimise disruption to business operation is identified |
Element: |
3 Identify the physical security vulnerabilities of the organisation's security infrastructure |
Performance Criteria: |
3.1 Physical structure of the organisation’s security infrastructure is examined 3.2 Security infrastructure vulnerabilities are identified and documented 3.3 Physical security infrastructure vulnerabilities are communicated to appropriate management personnel |
Element: |
4 Implement appropriate security system controls for managing the risk |
Performance Criteria: |
4.1 Effective controls to manage risk are devised and implemented 4.2 Policies and procedures to cover user access to the system are developed 4.3 Security recovery plan is developed 4.4 System controls to reduce risks in human interaction with the system are implemented |
Element: |
5 Monitor security infrastructure tools and procedures |
Performance Criteria: |
5.1 Controls that manage risks are reviewed and monitored 5.2 Vendor products that monitor risk rating criteria for an organisation are reviewed |
Element: |
6 Promote cyber security awareness in the organisation |
Performance Criteria: |
6.1 Strategies to promote security policy awareness amongst the staff of the organisation are planned and implemented 6.2 Security policy awareness strategies are evaluated for their effectiveness within the organisation and if required modified for increased impact 6.3 Training to implement the organisation’s security policy practices is planned and implemented |
Element: |
7 Implement cyber hygiene principles |
Performance Criteria: |
7.1 Best practices in cyber hygiene are identified 7.2 Cyber hygiene process is identified and implemented |
Learning Outcomes
: On successful completion of this course you will have developed and applied the skills and knowledge required to demonstrate competency in the above elements.
Details of Learning Activities
Throughout the course, you will participate in activities that are specifically designed to build your competencies and prepare you for a career in cyber security. Here's how these activities can help:
Weekly Lectorials: These sessions will provide you with foundational knowledge and theoretical understanding of key cyber security concepts, which are essential for any role in the field.
Hands-on Lab Activities: By engaging in practical, hands-on exercises, you will gain valuable experience in applying cyber security techniques and tools. This practical experience is crucial for developing the skills needed to handle real-world security challenges.
Study Resources: The curated list of reading materials, internet references, and YouTube links will offer additional insights into current trends, technologies, and best practices in cyber security, helping you stay informed and up-to-date.
Industry Guest Lectures: Hearing from professionals working in the cyber security industry will provide you with insights into the latest industry practices, challenges, and career opportunities. These lectures can also offer networking opportunities and inspire you with real-world success stories.
Overall, these activities are designed to equip you with the knowledge, skills, and industry insights necessary to pursue a successful career in cyber security.
Teaching Schedule
| Week 1 | 10- 14 Feb |
The Danger of Cyber Attack Cyber Security Attacks, Concepts and Techniques |
|
| Week 2 | 17-22 Feb |
The Need for Cybersecurity Protecting Data and Privacy Protecting the Organization |
|
| Week 3 | 24 - 28 Feb | Attackers and Their Tools |
|
| Week 4 | 03-07 March |
Understanding Defense, policies Threat Intelligence |
|
| Week 5 |
10-14 March |
Endpoint Vulnerability Assessment, NIST |
|
| Week 6 | 17-21 March |
Security Management, change management Cloud Security |
|
| Week 7 | 24 - 28 March | Risk Management Process /Framework |
|
| week 8 | 31 Mar- 6 Apr |
Project work |
|
| Week 9 | 07-13 Apr |
System Hardening -Security Maintenance and Management |
|
| Week 10 | 14-20 Apr | Digital Forensics and Incident Analysis and Response |
|
8 Apr- 25 Apr |
Mid Semester Break | ||
| Week 11 | 28 Apr - 4 May |
Cyber Hygiene - Security Planning and Risk Management Complete Short answer questions |
|
| Week 12 | 05-11 May |
Cyber Hygiene - Cyber Incident Response Plan Security tools, Encryption |
|
| Week 13 | 12-18 May |
Will Your Future be in Cybersecurity? Evaluating Alerts |
|
| Week 14 | 19-25 May | Promote cyber security awareness in the organisation |
|
| Week 15 | 26 May - 01 June |
Fighters in the War Against Cybercrime Project work |
|
| Week 16 | 02-08 June | Project work |
|
| Week 17 | 09-15 June |
Resubmission if available |
|
| Week 18 | 16-22 June |
|
Learning Resources
Prescribed Texts
References
Other Resources
Course Overview:Access Course Overview
Overview of Assessment
Assessment for this course is ongoing throughout the semester. Your knowledge and understanding of course content is assessed through participation in class exercises, oral/written presentations and through the application of learned skills and insights. Full assessment briefs will be provided and can be found on CANVAS
Assessment Tasks
Assessment in this course is competency-based. To be deemed competent for this course, students must satisfactorily complete all assessment tasks.
There are two (2) assessment tasks in this course.
Assessment Task 1: Product Assessment Task
- Project_Part 1 Observation - Individual task, attendance mandatory - released in week 5, due week 7,8
- Project_Part 2 Observation - Individual task, attendance mandatory - released in week 9, due week 15,16
Assessment Task 2: Practical Assessment Task
- Practical Observation - Group of 2 tasks, attendance mandatory - released in week13, due week 14
Results that apply to courses that are delivered and assessed per competency-based assessment are:
CA: Competency Achieved
NYC: Not Yet Competent
DNS: Did not Submit for Assessment
Assessment Matrix
| Elements/Performance Criteria | Assessment 1 | Assessment 2 |
| 1.1 | X | |
| 1.2 | X | |
| 1.3 | X | |
| 1.4 | X | |
| 2.1 | X | |
| 2.2 | X | |
| 2.3 | X | |
| 2.4 | X | |
| 2.5 | X | |
| 3.1 | X | |
| 3.2 | X | |
| 3.3 | X | |
| 4.1 | X | |
| 4.2 | X | |
| 4.3 | X | |
| 4.4 | X | |
| 5.1 | X | |
| 5.2 | X | |
| 6.1 | X | |
| 6.2 | X | |
| 6.3 | X | |
| 7.1 | X | X |
| 7.2 | X | X |
Other Information
Credit Transfer and/or Recognition of Prior Learning (RPL):
You may be eligible for credit towards courses in your program if you have already met the learning/competency outcomes through previous learning and/or industry experience. To be eligible for credit towards a course, you must demonstrate that you have already completed learning and/or gained industry experience that is:
- Relevant
- Current
- Satisfies the learning/competency outcomes of the course
Please refer to http://www.rmit.edu.au/students/enrolment/credit to find more information about credit transfer and RPL
Study and learning Support:
Study and Learning Centre (SLC) provides free learning and academic development advice to you.
Services offered by SLC to support your numeracy and literacy skills are:
- assignment writing, thesis writing and study skills advice
- maths and science developmental support and advice
- English language development
Please Refer http://www.rmit.edu.au/studyandlearningcentre to find more information about Study and learning Support
Equitable Learning Services (ELS):
If you are suffering from a long-term medical condition or disability, you should contact Equitable Learning Services (ELS) to seek advice and support to complete your studies.
Please refer to https://www.rmit.edu.au/students/support-and-facilities/student-support/equitable-learning-services to find more information about services offered by Equitable Learning Services (ELS).
Late submission:
If you require an Extension of Submittable Work (assignments, reports project work etc.) for 7 calendar days or less (from the original due date) and have valid reasons, you must complete and lodge an Application for an Extension of Submittable Work (7 Calendar Days or less) form and lodge it with the Senior Educator/ Program Manager. Application-for-extension-of-time-to-submit-work.pdf
The application must be lodged no later than one working day before the official due date. You will be notified within no more than 2 working days of the date of lodgment as to whether the extension has been granted.
If you seek an Extension of Submittable Work for more than 7 calendar days (from the original due date) must lodge an Application for Special Consideration form under the provisions of the Special Consideration Policy, preferably prior to, but no later than 5 working days after the official due date.
Submittable Work (assignments, reports or project work etc.) submitted late without approval of an extension will not be accepted or marked.
Special consideration:
Please Refer http://www.rmit.edu.au/students/specialconsideration to find more information about special consideration
Plagiarism:
Plagiarism is a form of cheating and it is a very serious academic offence that may lead to expulsion from the University.
Please Refer www.rmit.edu.au/academicintegrity to find more information about plagiarism.
All email communications will be sent to your RMIT email address and you must regularly check your RMIT emails.
Course Overview: Access Course Overview