Course Title: Manage network security

National Element Code & Title:

ICTNWK546 Manage network security

Performance Criteria:

Performance Criteria:

2.1 Determine major threat themes to network security

2.2 Determine the potential origin of major threats according to network security design specifications

2.3 Identify industry standard common network vulnerability types

2.4 Design and document threat model according to network security design specifications

Performance Criteria:

3.1 Determine required elements of risk management according to network security design specifications

3.2 Identify organisational assets requiring protection

3.3 Categorise and document assets and determine their value according to organisational requirements

3.4 Determine and document risk management plan according to organisational requirements

Performance Criteria:

Performance Criteria:

5.1 Design and document auditing and incidents response procedure

5.2 Submit to required personnel, seek and respond to feedback

Week

Topics/Discussions

ICTNWK511 Elements

2

Topics

• Introduction to Packet Tracer
• Common Network Types / Topologies

Labs

• Social Engineering Techniques
• Creating a Cyber Security World

Revision

• Review Netacad Quiz 1

4.1

4

Topics

• Planning, Building and Managing Network Security Design

Labs

• Exploring File and Data Encryption

Tutorial

• Implementing an Information Security Program

Assessments

• Project 1 - Section 1 Release (Due Week 7)

1.1 - 1.3, 2.3, 2.4, 2.5, 4.2, 4.4

6

Topics

• Threat Modelling

Lab

• Threat Modelling

Assessment

• Work on Project 1 - Section 3

1.1 - 1.3

8

Topics

• Cybersecurity Threats, Vulnerabilities, and Attacks

Labs

• Detecting Threats & Vulnerabilities

2.1 - 2.4, 4.1, 4.2

10

Topics

• Network Attacks, vulnerabilities and weaknesses

Lab

• Configuring WEP/WPA2 PSK/WPA2 RADIUS

Tutorial

• Cybersecurity Awareness: Security Overview

2.1 - 2.4, 4.1, 4.2

12

Topics

• Security Policies
• Project 2 Help:
  
• Identification of incoming attacks
• Identification of threats
• Network Verification
• ACLs

• Project 2 Section 1 Release (Due Week 15)

3.1 - 3.4, 5.1 - 5.4

14

Topics

• Risk Management Plan
• Incident Response Plan

Tutorial

• Protecting a Cybersecurity Domain
• Cybersecurity for IT Professionals

Revision

• Review Netacad Quiz 7

Assessments

• Work on Project 2 Section 2

1.1, 2.2 - 2.4, 3.1, 4.1, 5.1, 5.3

16

Resubmissions (If Applicable)

18

Results finalise

Unit Code

ICTNWK546

Unit Title

Manage Network Security

Position of the person/s who mapped assessments to the unit

Program Coordinator

Description

This Competency Assessment Map is a key document for assessors and must be completed for all units delivered and assessed. This document confirms that that all aspects of the unit of competency and assessment requirements have been addressed. This document is part of your assessment tool and once completed, must be filed with the other assessment documents. 

National Qualification Code

ICT50220 

Elective unit or Core unit

Elective

Assessment task number and title

Use correct Assessment Title as per Templates. For Example, Knowledge, Product or Practical

Assessment Two: Select Method/s

☐ Knowledge Assessment

ü Product Assessment

☐ Practical Assessment

Element

Performance criteria

1. Plan security design process

1.1 Define planning phase for network security design according to organisational requirements

Q4a

1.3 Define managing phase for network security design according to organisational requirements

Q4c

2.2 Determine the potential origin of major threats according to network security design specifications

Section 2d

2.4 Design and document threat model according to network security design specifications

Section 3

3.2 Identify organisational assets requiring protection

Section 2a

3.4 Determine and document risk management plan according to organisational requirements

Section 2, Task 1

4.2 Design and document network components security measures

Section 3

Section 4 a

4.4 Submit document to required personnel and seek and respond to feedback

Section 4 c

5.2 Submit to required personnel, seek and respond to feedback

Section 1: Task 3a + 3b

Foundation Skills – This section is only completed when foundation are explicitly stated in the unit of competency. In most Training Packages the foundation skills are integrated into the unit of competency and this is clearly stated.

Numeracy

Calculates equipment costs in order to assess their business-related value

AT2: Calculate the value of a variety of IT equipment to an organisation.

Writing

Uses factual information and industry related terminology to develop organisational plans, security policies and document security breaches

AT1:

Writing answers to knowledge questions

AT2:

Provide explanations on dealing with threats

Design security measures needed that can be applied to an existing network

Record the outcome of tests and identifying modifications required, if applicable.

AT3

Creating a Risk Management plan based on a scenario provided, writing clear information for staff in the event of a cybersecurity incident.

Write a security policy that is to be used for wireless connections when travelling for employees.

Creating an incident response plan which involves listing devices that require an audit, staff responsibilities, processes for alerting stakeholders and a review timeframe.

Uses digital tools to access and organise complex data and analyse multiple sources of information for strategic purposes

AT2, AT3: Students will be utilising a program called Packet Tracer which provides a simulated network for them to use. They will need to input a series of specific commands to read the outputs of different configurations so they can modify and rectify issues.

Performance Evidence 

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to:

• evaluate security information and use it to plan control methods and countermeasures to manage prescribed network security requirements on at least one occasion.

• Section 2, Tasks 3a, b

Knowledge Evidence 

industry standard ICT networks and their configuration

Standard Networks:

Q1, Q2

Configuration:

Q3

network security measures, including:

• auditing and penetration testing techniques
• logging analysis techniques
• organisational network infrastructure
• capabilities of software and hardware solutions
• general features of emerging security policies, with depth in security procedures
• network management and security process controls

• Q7, Q8,
• Q9,
• Q10,
• Q10, Q11
• Q12, Q13,
• Q14

Assessment conditions

Describe how assessments meet the assessment conditions

a site or prototype where network security may be implemented and managed

AT2 + AT3 Students will have access to network simulation software called Packet Tracer where they will be able to implement network security on different networks. The commands used in this environment replicate what they would be using on real equipment

organisational security policies, manufacturer recommendations and security standards.

AT 3: Students will be provided with a security policy document containing information on password procedures. They will also be provided with the security standards based on manufacturer recommendations required on a network that they will need to ensure are met.