Course Title: Recognise the need for cyber security in an organisation

Part B: Course Detail

Teaching Period: Term2 2025

Course Code: INTE5060

Course Title: Recognise the need for cyber security in an organisation

School: 520T Future Technologies

Campus: City Campus

Program: C4424 - Certificate IV in Cyber Security

Course Contact: Rakesh Kumar

Course Contact Phone: +61 3 9925 1409

Course Contact Email: rakesh.kumar@rmit.edu.au


Name and Contact Details of All Other Relevant Staff

Nominal Hours: 60

Regardless of the mode of delivery, represent a guide to the relative teaching time and student effort required to successfully achieve a particular competency/module. This may include not only scheduled classes or workplace visits but also the amount of effort required to undertake, evaluate and complete all assessment requirements, including any non-classroom activities.

Pre-requisites and Co-requisites

None

Course Description

This course describes the performance outcome, knowledge and skills required to recognise threats, risks and vulnerabilities to cyber security in an organisation. The threats to an organisation include networks, machines, applications, data, users and infrastructure


National Codes, Titles, Elements and Performance Criteria

National Element Code & Title:

VU23217 Recognise the need for cyber security in an organisation

Element:

1 Identify the need for cyber security for an organisation

Performance Criteria:

1.1 Reasons to protect online identity and personal data are clarified
1.2 Reasons to protect an organisation’s data are explained
1.3 Cyber security awareness practices for an organisation are identified
1.4 Concept of cyber threat is defined
1.5 Reasons for the need for cyber security professionals are explained

Element:

2 Investigate common and emerging cyber security attacks, and techniques

Performance Criteria:

2.1 Difference between threat actors, threat vectors and threat goals are clarified
2.2 Techniques used by attackers to infiltrate a system are described
2.3 Characteristics and operation of a cyber-attack are explained
2.4 Trends of cyber threats are examined
2.5 Cyber attack methods on an organisation infrastructure are identified
2.7 Examples of IoT devices are provided
2.8 Security vulnerabilities for IoT devices are explained

Element:

3 Investigate methods to protect personal data and privacy

Performance Criteria:

3.1 Techniques to protect personal devices from cyber threats are described and demonstrated
3.2 User authentication techniques are identified and demonstrated
3.3 Methods and tools to safeguard personal privacy are identified and demonstrated

Element:

4 Examine methods used to protect an organisation's data

Performance Criteria:

4.1 Common infrastructure, equipment, and software used to protect an organisation from cyber security attacks are identified
4.2 Cyber security terms such as botnets, malware, virus’s, worms, Root Kits are clarified
4.3 Mitigation strategies such as the cyber kill chain process, the MITRE Adversarial Tactics, Techniques and Common Knowledge (ATT&CK) in the context of cyber security protection and mitigation strategies are explained
4.4 Policies, tools and systems for protecting an organisation from cyber-attacks are investigated
4.5 Behaviour based approach to cyber security is investigated
4.6 Incident response policies, processes and systems are reviewed

Element:

5 Investigate current Cyber Security Frameworks (CSF)

Performance Criteria:

5.1 Fundamentals of the National Institute of Standards and Technology Cyber Security Framework (NIST CSF) are examined and explained
5.2 Essential Eight strategies from the Australian Cyber Security Centre (ACSC) to mitigate Cyber Security incidents are identified
5.3 Centre for Internet Security (CIS) controls identified for organisations to implement for Cyber Security protection are examined

Learning Outcomes


On successful completion of this course you will have developed and applied the skills and knowledge required to demonstrate competency in the above elements.


Details of Learning Activities

You will be involved in the following learning activities to meet requirements for the two clustered competencies (VU23215 and VU23217). Both competencies's learning activities will incorporate

• Lectures
• Tutorials
• Individual work on assignments, practical labs and knowledge based assessments.

Cluster Information:

This course is delivered in a cluster referred to as Cyber Security Concepts. This cluster consists of two units of competencies from the 22603VIC National Unit Code. They are VU23215 (INTE5059) and VU23217 (INTE5060).

You must enrol in both of these courses delivered in this cluster. All the learning and assessment activities will include the components of all competencies VU23215 and VU23217.

Please click hereLinks to an external site. to view the Part A Course Guide.

Learning Activities (Mapped by Week)

Week 1 (14th Jul – 20th Jul)
Topic: Introduction to Cybersecurity – Understanding Cyber Security framework for an Organisation
VU21990 Elements: 1.1 – 1.5
Learning Activities:

  • Participate in instructor-led discussions on cybersecurity principles.
  • Read and review case studies outlining cyber security frameworks in organisational settings.
  • Complete introductory quizzes on cybersecurity concepts.

Week 2 (21st Jul – 27th Jul)
Topic: Preparing the Lab Environment – Need of Cyber Security; VM Installation; Lab Setup
VU21990 Elements: 2.1 – 2.4
Learning Activities:

  • Watch demonstrations and follow instructions to install Oracle VirtualBox and virtual machines.
  • Engage in lab setup activities for a safe cybersecurity testing environment.
  • Begin work on Assessment 1 (Project) and Assessment 2 (Report).

Week 3 (28th Jul – 3rd Aug)
Topic: Continued Lab Setup
VU21989 Elements: 3.1 – 3.2
VU21990 Elements: 2.1 – 2.4
Learning Activities:

  • Continue configuring virtual machines and testing tools.
  • Perform validation checks for virtual environments.
  • Practice snapshot and rollback techniques in Oracle VirtualBox.

Week 4 (4th Aug – 10th Aug)
Topic: End-to-End Testing Using Ping and Traceroute
VU21990 Elements: 2.1 – 2.3
Learning Activities:

  • Conduct practical network connectivity tests using ping and traceroute.
  • Record and interpret results in lab journals.
  • Identify network latency and routing paths through exercises.

Week 5 (11th Aug – 17th Aug)
Topic: Application Layer Testing & Emerging Trends
VU21989 Elements: 1.1 – 1.3
Learning Activities:

  • Participate in discussions on application vulnerabilities.
  • Use tools to simulate application layer attacks in a lab environment.
  • Read industry articles on cybersecurity trends and write summaries.

Week 6 (18th Aug – 24th Aug)
Topic: Cyber Threats, Vulnerabilities, and Data Protection
VU21990 Elements: 4.1 – 4.5, 5.1 – 5.5
Learning Activities:

  • Perform vulnerability assessments and identify common attack vectors.
  • Apply methods to secure personal and organisational data in lab simulations.
  • Document threat mitigation strategies.

Week 7 (25th Aug – 31st Aug)
Topic: String Analysis and Threat Mitigation
VU21990 Elements: 4.1 – 4.6
Learning Activities:

  • Analyse string patterns of malware in a controlled environment.
  • Practice detecting Trojans, worms, viruses, and DOS/DDoS indicators.
  • Conduct simulated DNS poisoning exercises.

Week 8 (8th Sep – 14th Sep)
Topic: Continued – String Analysis and Threat Mitigation
VU21990 Elements: 4.1 – 4.6
Learning Activities:

  • Complete in-depth malware string comparison tasks.
  • Explore zero-day exploit simulations.
  • Document mitigation strategies in lab journals.

Week 9 (15th Sep – 21st Sep)
Topic: Assessment 1 – Project Stage 1 Observation
Learning Activities:

  • Present project progress and demonstrate practical lab implementation.
  • Receive feedback from instructors and peers.

Week 10 (22nd Sep – 28th Sep)
Topic: Cyber Attacks & Ethical Hacking Practices
VU21989 Elements: 5.1 – 5.9
VU21990 Elements: 3.1 – 3.7
Learning Activities:

  • Perform port scanning and system footprinting using tools.
  • Simulate sniffing attacks in a controlled lab.
  • Begin compiling findings for Assessment 1 – Stage 1 submission.

Week 11 (29th Sep – 5th Oct)
Topic: Continued – Cyber Attacks & Ethical Hacking Practices
VU21989 Elements: 5.1 – 5.9
VU21990 Elements: 3.1 – 3.7
Learning Activities:

  • Execute enumeration techniques.
  • Practice infiltration and basic exploitation in sandbox environments.
  • Reflect and document findings for lab reports.

Week 12 (6th Oct – 12th Oct)
Topic: WLAN Security Vulnerabilities
VU21989 Elements: 6.1 – 6.2
Learning Activities:

  • Identify weak encryption protocols and open networks.
  • Use wireless analysis tools to detect vulnerabilities.
  • Complete worksheets on WLAN threat scenarios.

Week 13 (13th Oct – 19th Oct)
Topic: IoT Security Risks
VU21990 Elements: 3.8
Learning Activities:

  • Evaluate IoT devices in a network setup.
  • Simulate attacks on vulnerable IoT systems.
  • Map risks and mitigation in worksheets.

Week 14 (20th Oct – 26th Oct)
Topic: Basic Scripting for Cyber Security
VU21989 Elements: 7.1 – 7.4
Learning Activities:

  • Write and execute basic scripts in PowerShell/Bash for security automation.
  • Participate in script debugging sessions.
  • Develop short scripts for use in vulnerability detection or mitigation.

Week 15 (27th Oct – 2nd Nov)
Topic: Assessment 1 – Project Stage 2 Observation and Submission
Learning Activities:

  • Demonstrate the final project setup and security implementations.
  • Submit completed documentation and project deliverables.

Week 16 (3rd Nov – 9th Nov)
Topic: Assessment 2 – Report Observation and Submission
Learning Activities:

  • Present and explain the research report findings.
  • Submit the final version of the written report.

Week 17–18 (10th Nov – 23rd Nov)
Topic: Resubmission Period (If Applicable)
Learning Activities:

  • Receive feedback on assessments requiring resubmission.
  • Correct and resubmit project/report work.


Teaching Schedule

The proposed teaching schedule for the two clustered competencies (VU32215 & VU23217) is detailed below:

Select the semester you are enrolled in for further information.

Week

Date

Topics/Discussions

VU21989 Elements

VU21990 Elements

Assessments

1

14th Jul - 20th Jul

Topic 1 : Introduction to Cybersecurity

Understanding Cyber Security framework for an Organisation

1.1 – 1.5

2

21st Jul - 27th Jul

Topic 2 : Preparing the Lab Environment

Need of Cyber Security

Virtual Machines Installation on Oracle VM Virtual Box

Implementing the Lab Testing Environment

2.1 – 2.4

Assessment 1 - Project Released

Assessment 2 - Report Released

3

28th Jul - 3rd Aug

Topic 2 Continued...

Virtual Machines Installation on Oracle VM Virtual Box

Implementing the Lab Testing Environment

3.1 – 3.2

2.1 – 2.4

4

4th Aug - 10th Aug

Topic 3

End to End Testing Using Ping and Traceroute

2.1 – 2.3

5

11th Aug - 17th Aug

Topic 4

Application Layer Testing methodologies and tools

Current and Emerging Cyber Security Trends

1.1 – 1.3

6

18th Aug - 24th Aug

Topic 5

Cybersecurity Threats,

Vulnerabilities, and Attacks

Implementing methods to Protect Personal Data and Privacy

Implementing methods to Protect Organisation’s data

4.1 – 4.5

5.1 – 5.5

7

25th Aug - 31st Aug

Topic 6

String Analysis for common threats and their Mitigation

Threats includes Trojans, Worms, Virus, Denial of Service (DOS) attacks, Distributed Denial of Service (DDoS) attacks, Zero Day Vulnerabilities and Domain Name Service (DNS) attacks

4.1 – 4.6

Mid Semester Break

(1st Sep - 7th Sep)

8

8th Sep - 14th Sep

Topic 6 Continued...

String Analysis for common threats and their Mitigation

Threats includes Trojans, Worms, Virus, Denial of Service (DOS) attacks, Distributed Denial of Service (DDoS) attacks, Zero Day Vulnerabilities and Domain Name Service (DNS) attacks

4.1 - 4.6

9

15th Sep- 21st Sep

Assessment 1 - Project Stage 1 Observation

10

22nd Sep - 28th Sep

Topic 7

Identifying current and emerging Cyber Security Attacks which includes

Learning Ethical Hacking Practices

Base Level Troubleshooting Techniques

Port Scanning

System Hacking and Infiltration

Use of Sniffing tools

Gathering Usernames via Enumeration

Footprinting a system

5.1 – 5.9

3.1 – 3.7

Assesement 1- Project Stage 1 Due

11

29th Sep - 5th Oct

Topic 7 Continued...

Identifying current and emerging Cyber Security Attacks which includes

Learning Ethical Hacking Practices

Base Level Troubleshooting Techniques

Port Scanning

System Hacking and Infiltration

Use of Sniffing tools

Gathering Usernames via Enumeration

Footprinting a system

5.1 – 5.9

3.1 – 3.7

12

6th Oct - 12th Oct

Topic 8

Identifying Security Vulnerabilities of WLAN

6.1 – 6.2

13

13th Oct - 19th Oct

Topic 9

Use of IOT devices in the business.

Understanding risk to IOT devices

3.8

14

20th Oct - 26th Oct

Topic 10

Understanding Basic Scripting for a cyber security environment

 7.1 – 7.4

15

27th Oct - 2nd Nov

Assessment 1 - Project Stage 2 Observation

Assessment 1 Project Due

Assessment 1 Project Stage-2 Due

16

3rd Nov - 9th Nov

Assessment 2 - Report Observation

Assessment 2 Report Due

Assessment 2 Report Due

17

10th Nov - 16th Nov

Re-submission of Assessments (If applicable)

18

17th Nov - 23rd Nov

Re-submission of Assessments (If applicable)


Learning Resources

Prescribed Texts


References


Other Resources

None


Overview of Assessment

Assessment for this course is ongoing throughout the semester. Your knowledge and understanding of course content is assessed through participation in class exercises, oral/written presentations and through the application of learned skills and insights. Full assessment briefs will be provided and can be found on CANVAS


Assessment Tasks

The assessment is conducted in both theoretical and practical aspects of the course according to the performance criteria set in the National Training Package. Assessment may incorporate a variety of methods including written/oral activities and demonstration of practical skills to the relevant industry standards. Participants are advised that they are likely to be asked to personally demonstrate their assessment activities to their teacher/assessor. Feedback will be provided throughout the course. To successfully complete this course you will be required to demonstrate competency in each assessment task detailed under Assessment Tasks:

Assessment 1: Practical Assessment

Assessment 2: Cyber Security Report

You must be competent in all elements to successfully complete the course


Assessment Matrix

Assessment Mapping Matrix for VU23215 (INTE5059):

These tasks assess the following Course Learning Outcomes (CLOs):

Elements/Performance Criteria

Assessment 1

Assessment 2

1.1

X

X

1.2

X

X

1.3

X

X

2.1

x

2.2

X

2.3

X

3.1

X

3.2

X

4.1

X

X

4.2

X

X

4.3

X

X

4.4

X

X

4.5

X

X

4.6

X

X

5.1

X

X

5.2

X

X

5.3

X

X

5.4

X

X

5.5

X

X

5.6

X

X

5.7

X

X

5.8

X

X

5.9

X

X

6.1

X

X

6.2

X

X

7.1

X

X

7.2

X

X

7.3

X

X

7.4

X

X

Assessment Mapping Matrix for VU23217 (INTE5060):

These tasks assess the following Course Learning Outcomes (CLOs):

Elements/Performance Criteria

Assessment 1

Assessment 2

1.1

X

1.2

X

1.3

X

1.4

X

1.5

X

2.1

X

2.2

X

2.3

X

2.4

X

3.1

X

X

3.2

X

3.3

X

X

3.4

X

3.5

X

3.6

X

X

3.7

X

X

4.1

X

X

4.2

X

X

4.3

X

X

4.4

X

4.5

X

X

5.1

X

5.2

X

5.3

X

5.4

X

5.5

X

Other Information

Credit Transfer and/or Recognition of Prior Learning (RPL):
You may be eligible for credit towards courses in your program if you have already met the learning/competency outcomes through previous learning and/or industry experience. To be eligible for credit towards a course, you must demonstrate that you have already completed learning and/or gained industry experience that is:

  • Relevant
  • Current
  • Satisfies the learning/competency outcomes of the course

Please refer to http://www.rmit.edu.au/students/enrolment/credit to find more information about credit transfer and RPL

Study and learning Support:

Study and Learning Centre (SLC) provides free learning and academic development advice to you.
Services offered by SLC to support your numeracy and literacy skills are:

  • assignment writing, thesis writing and study skills advice
  • maths and science developmental support and advice
  • English language development

Please Refer http://www.rmit.edu.au/studyandlearningcentre to find more information about Study and learning Support

Equitable Learning Services (ELS):

If you are suffering from long-term medical condition or disability, you should contact Equitable Learning Services (ELS) to seek advice and support to complete your studies.
Please refer to https://www.rmit.edu.au/students/support-and-facilities/student-support/equitable-learning-services to find more information about services offered by Equitable Learning Services (ELS).

Late submission:

If you require an Extension of Submittable Work (assignments, reports or project work etc.) for 7 calendar days or less (from the original due date) and have valid reasons, you must complete and lodge an Application for Extension of Submittable Work (7 Calendar Days or less) form and lodge it with the Senior Educator/ Program Manager.
The application must be lodged no later than one working day before the official due date. You will be notified within no more than 2 working days of the date of lodgment as to whether the extension has been granted.
If you seek an Extension of Submittable Work for more than 7 calendar days (from the original due date) must lodge an Application for Special Consideration form under the provisions of the Special Consideration Policy, preferably prior to, but no later than 2 working days after the official due date.

Submittable Work (assignments, reports or project work etc.) submitted late without approval of an extension will not be accepted or marked.


Special consideration:

Please Refer http://www.rmit.edu.au/students/specialconsideration to find more information about special consideration

Plagiarism:

Plagiarism is a form of cheating and it is very serious academic offence that may lead to expulsion from the University.

Please Refer: www.rmit.edu.au/academicintegrity to find more information about plagiarism.

Other Information:

All email communications will be sent to your RMIT email address and you must regularly check your RMIT emails.

Course Overview: Access Course Overview