Blended Learning

Box Hill Campus - Elgar

Box Hill Campus - Nelson

Box Hill Campus - Whitehorse 

City Campus

Lilydale Lakeside Campus

Online

Phone Appointment

Accessibility

AMEP

Coronavirus 

COVID-19 Updates

Fees & Financial Support

How to Apply

International Students

Facilities

Our Facilities

Pathways

Recognition of Prior Learning

Resources for schools

Resources For Schools

Scholarships

Student Information

Study abroad

Study Abroad

Study Options

Support Services

Fees

Tuition Fees & Associated Costs

Study With Us

About  Us

About Us

Awards

Industry

International Business Development

Jobs & Careers

Our history

Our History

About

Our Leadership

Partners

Our Partners

Our Services

About us

Our Vision 

Policies and procedures

Policies & Procedures 

Procurement

Why Choose Us

Alumni & Giving

Events

News

Publications

News & Events

Box Hill Restaurants

Flowers on Elgar

Hair & Beauty Salon 

Hair and Beauty Salon

Lilydale Lakeside Children’s Centre 

Lilydale Lakeside Day Care

Lilydale Lakeside Conference Centre

Pets on Elgar

Retail 

Animal Care

Art, Fashion & Design

Biosecurity & Science

Business & Finance

Community Services

Cyber Security & ICT

Education

Hair & Beauty

Horticulture, Landscaping & Conservation

Hospitality & Tourism

Music Industry

Nursing & Health

Senior Secondary Programs

Sports & Recreation

Trades & Transport

Work Preparation & Foundation

Contact Us

Current Staff

Located 14 kilometres east of Melbourne City, the Elgar campus can be found on Elgar Rd in Box Hill.

Located 14 kilometres east of Melbourne City, the Nelson campus is the second location in Box Hill situated on Whitehorse Road.

Located 15 kilometres east of Melbourne City, the Whitehorse campus can be found on Whitehorse Road in Box Hill.

Our CBD campus is co-located with the Centre for Adult Education in the heart of Melbourne&rsquo;s Central Business District.

Our Lakeside Lilydale campus serves the local community as an active learning centre with a range of vocational and higher education courses. The campus is also home to the Yarra Ranges Tech School.

Certificate IV in Cyber Security

Certificate IV in

Cyber Security

This unit supports students collect, organise, analyse and present information using available systems and sources. This includes identifying research requirements and sources of information, evaluating the quality and reliability of the information, and preparing and producing reports.
Throughout the unit students will:
<ul>
<li>Identify and confirm research strategy</li>
<li>Collect and store research information</li>
<li>Analyse and synthesise research information</li>
<li>Present research information</li>
</ul>
The relevance to industry is that it provides learners with the skills and knowledge necessary to collect, analyse, and present data and information effectively, which is a critical part of many IT roles. By completing this unit, learners will be able to improve their analytical and research skills, and develop their ability to present information in a clear and concise manner. These skills are highly valued in the IT and cyber security industry, where data analysis and effective communication are essential for success. This unit can help students to advance their careers and improve their employability in the IT and cyber Security industry.

This unit supports students contribute to work health and safety (WHS) communication and consultation in the workplace. It involves communicating WHS information to required personnel, and taking appropriate follow-up action to assist in ensuring that communication and consultation processes are effective and conducive to others in the workplace who raise WHS issues.
Throughout this unit students will:
<ul>
<li>Participate in establishing consultation processes</li>
<li>Contribute to WHS consultation</li>
<li>Consult and communicate effectively with required personnel</li>
<li>Raise WHS issues with required personnel</li>
</ul>
The relevance to industry is highlighted by how it provides learners with the knowledge and skills necessary to identify hazards and assess risks in a variety of work environments. By completing this unit, learners will be able to contribute to a safer workplace and demonstrate their commitment to workplace health and safety. This can help individuals to advance their careers and improve their employability, as employers are increasingly looking for workers with strong health and safety knowledge and skills.

This unit develops students skills to configure core cloud services including compute, storage, databases and autoscaling according to business needs and workload.
Throughout this unit will:
<ul>
<li>Select and secure access to cloud environment</li>
<li>Deploy virtual network</li>
<li>Set up automatic scaling</li>
<li>Finalise virtual network infrastructure</li>
</ul>
This unit is highly relevant to IT industry skills as cloud computing has become an essential part of modern technology, and businesses are increasingly relying on cloud computing solutions to streamline their operations. By completing this unit, students will be able to design cloud computing solutions that meet industry standards and business requirements. They will be able to apply their skills to design cloud computing solutions for a wide range of settings and purposes, including business, education, and government. These skills are highly valued in the IT industry, where cloud computing has become a standard practice. This unit can help students to advance their careers and improve their employability in the IT and cyber security industry, particularly in roles that require expertise in cloud computing, such as cloud architects, cloud engineers, and cloud consultants.

This unit builds the students ability to work collaboratively in virtual Information and Communications (ICT) team environments to achieve organisational objectives. It includes contributing to performance and capability within teams, participating in team activities, exchanging knowledge and skills and providing support to team members.
Throughout the unit students will:
<ul>
<li>Identify team protocols requirements for working collaboratively in a virtual environment</li>
<li>Develop protocols to work collaboratively in a virtual environment</li>
<li>Review compliance with protocols to work collaboratively in a virtual environment</li>
</ul>
The relevance to industry is that it demonstrates that IT projects are often complex and require collaboration among team members to achieve success. By completing this unit, students will be able to work effectively as part of a team in the IT industry. They will be able to communicate effectively, solve problems collaboratively, and resolve conflicts constructively. These skills are highly valued in the IT industry, where successful project delivery requires a collaborative effort. This unit can help students to advance their careers and improve their employability in the IT and cyber security industry, particularly in roles that require effective teamwork, such as project managers, team leaders, and security analysts.

This unit develops students&rsquo; skills to plan, design and build scripts, using a scripting language to construct highly interactive and automated software products to solves business needs. This unit is taught in the python scripting language.
Throughout this unit students will:
<ul>
<li>Specify software application requirements.</li>
<li>Determine script requirements.</li>
<li>Design and build scripts.</li>
<li>Finalise scripts.</li>
</ul>
This unit is highly relevant to IT industry skills as python is one of the most popular cyber security scripting languages in the world, with widespread use in the IT industry. By completing this unit, students will be able to develop software scripts using Python, which is highly valued in the IT industry. Python is used extensively in a wide range of industries, and Python developers are in high demand. Python programming skills can be applied to a wide range of applications, making them highly transferable across different technology industries and job roles.

This unit covers how data travels around networks and the internet, it includes the function and operation of protocols and protocol models such as Open System Interconnection (OSI) and Transmission Control Protocol/Internet Protocol (TCP/IP) suite and devices that facilitate data transfer. The exposure to these protocols is at an introductory level in this unit.
Throughout this unit students will
<ul>
<li>Outline key network security concepts.</li>
<li>Define key features of the TCP/IP suite of protocols.</li>
<li>Define services, standards and protocols that facilitate security and the functional operation of a network.</li>
<li>Implement and demonstrate the function and operation of key networking devices.</li>
<li>Implement the components of a network security laboratory and testing environment.</li>
<li>Present current examples of cyber network attacks and resources.</li>
</ul>
In the IT and cyber security industry, networks are essential for the communication and transfer of data between devices and systems. However, networks are vulnerable to cyber-attacks, and cybercriminals can exploit vulnerabilities in networks to steal data, disrupt operations, and cause damage to businesses and organizations.
By completing this unit, students will be able to utilise basic network concepts and protocols required in cybersecurity, which is highly valued in the IT and cyber security industry. This unit can help individuals to advance their careers and improve their employability in the IT industry, particularly in roles that require expertise in cyber security, such as cyber security analysts, network security engineers, and security operations centre (SOC) analysts. With the growing importance of cyber security in the IT industry, completing this unit can be an excellent way for students to enhance their IT industry skills and increase their employability in the job market.

This unit introduces how to configure an operating system on a personal computer, adding security, setting user level passwords and privileges to limit and identify user access. These key security principles are all required to increase protection of the end point from cyber security attacks.
The unit also provides an overview of internet of things (IoT) devices, an introduction to computer networking virtualisation and base level Linux commands.
Throughout this unit students will
<ul>
<li>Identify the role of personal computers and other computing devices in cyber security.</li>
<li>Undertake preventative maintenance and base level troubleshooting procedures .</li>
<li>Configure and use a computer operating system and relevant applications.</li>
<li>Define principles of safe software upgrade security practises</li>
<li>Configure and use virtualised images.</li>
<li>Identify key concepts in networking personal computers.</li>
<li>Connect devices to networks.</li>
<li>Demonstrate base level Linux commands.</li>
</ul>
The relevance to industry is highlighted in as endpoints of a network are the entry and exit points where data and devices connect to the network. Securing these endpoints is important because they can be vulnerable to security threats such as malware, viruses, and unauthorised access.

This unit introduces the use of testing procedures for computer systems in an organisation. The unit examines common threats, ethical hacking principles, and an introduction to penetration testing, social engineering security issues, enumeration, port scanning, foot printing, traffic sniffers and wireless local area network (WLAN) vulnerabilities and also includes treatment of intrusions.
This unit also discusses the ability to apply layer testing frameworks and tools as well as network testing and monitoring tools.
Throughout this unit students will:
<ul>
<li>Identify typical cyber security application layer testing methodologies and tools.</li>
<li>Use networking security testing methodologies, tools and commands.</li>
<li>Implement the laboratory testing environment.</li>
<li>Identify common threats and mitigation strategies.</li>
<li>Demonstrate ethical hacking principles and procedures.</li>
<li>Identify security vulnerabilities of WLANs.</li>
<li>Demonstrate basic scripting for a cyber security environment.</li>
</ul>
The relevance to industry is highlighted by proving an introduction to penetration testing methodologies and activities, with a focus on current tools and local network based attacks.
This provides opportunities to build solid foundations for Penetration Tester career pathways. The technical based skills development in this unit with focuses on Linux usage, command line interfaces and scripting languages will prepare students for further penetration testing subjects. The practical usage of virtualised testing environments using industry standard software gives student the opportunities to work through complex scenarios and ideas around migration of common threats.

This unit introduces common security frameworks and the importance of recognising the threats, risks and vulnerabilities to cyber security in an organisation. Some threats to an organisation include networks, machines, applications, data, users and infrastructure.
The unit addresses common cyber security attack mechanisms and an introduction to threat management as well as security issues surrounding Internet of Things (IoT) devices.
The unit also includes the implementation of tools and systems an organisation can use for protection against cyber-attacks.
Throughout this unit student will:
<ul>
<li>Identify the need for cyber security for an organisation.</li>
<li>Investigate common and emerging cyber security attacks, and techniques.</li>
<li>Investigate methods to protect personal data and privacy.</li>
<li>Examine methods used to protect an organisation&rsquo;s data.</li>
<li>Investigate current Cyber Security Frameworks (CSF).</li>
</ul>
The relevance to industry is highlighted as the sophistication of cyber security attacks increase so does the knowledge and mitigation strategies required for an organisation. This unit helps student get a baseline understanding of the key frameworks adopted by organisations to keep secure and in an ever change technology landscape.

This unit explains the key features that make up the network security for an organisation. Students will investigate threats and mitigation techniques, network security models, administration protection and user access methods, introduction to firewall setup and configuration, intrusion prevention, intrusion detection systems (IPS/IDS) and software used to protect an organisation, examine proxy server vulnerabilities, Wireless Local Area Network (WLAN), security vulnerabilities and the application of Virtual Private Networks (VPN&rsquo;s) and cryptography fundamentals.
Throughout the unit student will:
<ul>
<li>Examine the different models of security solutions for an organisation.</li>
<li>Investigate methods used to authenticate users to a network.</li>
<li>Investigate the operation and role of software tools to monitor traffic and security in an organisation.</li>
<li>Prepare and implement a firewall.</li>
<li>Investigate intrusion prevention and intrusion detection systems (IPS/IDS).</li>
<li>Examine proxy server vulnerability issues.</li>
<li>Investigate wireless security access and common vulnerabilities.</li>
<li>Demonstrate the fundamental operation of cryptographic systems.</li>
<li>Demonstrate the fundamentals of Virtual Private Networks (VPN&rsquo;s).</li>
</ul>
The relevance to industry is highlighted by the training involved within this unit exposed the student to the security challenges that are faced within enterprise networking environment. Understanding how these security implementations and solutions operate, allow for a greater understanding of the troubleshooting process, designing secure and resilient infrastructure. Prerequisites: VU23213 - Utilise basic network concepts and protocols required in cyber security

This unit discusses how to manage the security infrastructure for an organisation. It includes assessing risk, implementing appropriate controls, monitoring their effectiveness and compiling reports for future audit purposes.
This unit requires students to monitor and evaluate the physical security infrastructure of the organisation, and implement a security infrastructure maintenance program.
Throughout the unit students will:
<ul>
<li>Identify the key features from information and security policies for an organisation.</li>
<li>Determine risk category for the security infrastructure.</li>
<li>Identify the physical security vulnerabilities of the organisation&rsquo;s security infrastructure.</li>
<li>Implement appropriate security system controls for managing the risk.</li>
<li>Monitor security infrastructure tools and procedures.</li>
<li>Promote cyber security awareness in the organisation.</li>
<li>Implement cyber hygiene principles.</li>
</ul>
The relevance to industry is highlighted by students having an understanding and contributing to GRC initiatives (Governance, Risk and Compliance) that will lead to the following industry alignment and pathways:
<ul>
<li>Effective implementation of security policies helps organisations to reduce risk. Every organisation that collects data has a role to play in secures infrastructure and data management.</li>
<li>Enhance and improve an organisation&rsquo;s compliance with government standards, legislation, and laws.</li>
<li>Implement and manage Change Management process in organisations to secure infrastructure, access management and reduce redundancies.</li>
<li>Increase security awareness of businesses, employees, and their clients.</li>
</ul>

This unit supports students to develop and undertake a project that simulates a real cyber security industry environment. The project may include using a Cyber Security Operations Centre (CSOC) sandbox or equivalent laboratory environment. This environment allows the participant to demonstrate configuring and testing of firewalls, implementing Intrusion Detection/Prevention Systems (IDS/IPS) and evaluating and identifying any traffic anomalies. The use of Red &amp; Blue teaming exercises to identify security breaches and apply mitigation strategies to minimise further risk are included as part of the project.
Throughout the unit students will:
<ul>
<li>Establish a project team.</li>
<li>Determine context of business need or problem (project).</li>
<li>Support the project plan development.</li>
<li>Evaluate the suitability of the gathered resources.</li>
<li>Implement the project design.</li>
<li>Support project completion and handover.</li>
</ul>
The relevance to industry is highlighted by having students working as part of a team of solution consultants to identify threats and suggest remedies to support holistic security enhancements. Students gain exposure to business processes and professional practices. Students also gain an understanding of the Cyber Security Analyst roles including activities and CSOC working environments. This unit uses practical application risk assessments for realistic client facing roles and provides students essential communication skills both in written and verbal presentation formats. Prerequisites: VU23213 - Utilise basic network concepts and protocols required in cyber security. VU23215 - Test concepts and procedures for cyber security.

This unit requires students to examine an organisation&rsquo;s existing incident response plan (IRP) and expand it as necessary to deal with incidents new and emerging threats.
The unit requires the ability to form a team, clarify roles, interpret an incident response plan (IRP), use red, blue and purple teams to test the IRP, implement an incident, evaluate the IRP for its effectiveness and if required make improvements.
Throughout this unit students will:
<ul>
<li>Form an incident response team</li>
<li>Define red, blue and purple team tasks</li>
<li>Plan the implementation of the organisation&rsquo;s incident response plan (IRP)</li>
<li>Implement the IRP for prescribed incidents</li>
<li>Evaluate the IRP</li>
</ul>
The relevance to industry is highlighted by student gaining an understanding that no organisation, either a start-up or a medium scale organisation has the privilege to assume that the adversaries would not be interested in them. Even if they are not the targets, they can be victims if they have not taken appropriate steps to be prepared in case of an Incident. This unit will advance your knowledge in the following.
Students gain an understanding of the roles associated with an Incident Response Team
to create an Incident Response Plan documentation for an organisation in accordance with the Incident Response Plan template as devised by the ACSC (Australian Cyber Security Centre). Student gain practical awareness in relation to the training strategy associated with Incident Response Teams: Role of Red Teams, Blue Teams and Purple teams.

This unit develops the skills required to maintain the security of an organisation&rsquo;s web infrastructure by utilising the outcomes of the Open Web Application Security Project (OWASP). In this unit students apply penetration testing tools to determine the vulnerabilities of a web site, assess the vulnerabilities and report to appropriate personnel.
Throughout this unit students will:
<ul>
<li>Explain the Hypertext Transfer Protocol (HTTP) and web server architectures.</li>
<li>Identify web site content.</li>
<li>Install web application proxy testing tools.</li>
<li>Use current frameworks that identify common software vulnerabilities.</li>
<li>Report web application vulnerabilities.</li>
</ul>
The relevance to industry is highlighted by enabling student to develop their skills in web penetration testing concepts. Students use common frameworks like OWASP to establishes understanding of security in the web stack which lays the groundwork for a career in Application or Website Security.

This unit introduces knowledge required to identify the current Australian cyber security legislation and to be cognisance of the interdependence between the key regulators.
It requires the ability to apply the current cyber security privacy policies and procedures for an organisation. The unit also includes the ethical practices required for students to conduct themselves professionally both privately and when working for an organisation.
Throughout the unit students will:
<ul>
<li>Review the cyber security legislative and regulatory landscape for Australian organisations</li>
<li>Examine an organisations policies and procedures for compliance with relevant standards</li>
<li>Review the ethical practises and procedures for an organisation</li>
</ul>
The relevance to industry is highlighted by students gaining an understanding of the audit process by assessing and preparing a written report on the level of compliance or non-compliance which is important to an organisation in its requirements to be in adhering to current legislative instruments and reporting duties. Students will also be able to identify unethical behaviour by ICT/cyber security technicians within an organisation or privately and explain the potential impact of the behaviour.

This unit investigates the fundamentals of Windows security features. It requires the ability to comprehend the basic architecture of Windows, identify security features such as log files, instrumentation and how a basic attack might occur. The unit investigates tools to collect security data centrally and query it to identify potential threats.
In this unit students will:
<ul>
<li>Examine the structure of the Windows Operating System</li>
<li>Examine System Administration tools</li>
<li>Investigate tools used to examine basic Windows attacks</li>
<li>Investigate the function and role of a Security Operation Centre (SOC) and Security Information Event Management (SIEM) tool</li>
<li>Examine methods to collect data from multiple end points into a SIEM tool</li>
<li>Implement mitigation strategies for threats</li>
</ul>
The relevance to industry is highlighted by the need for cyber security analysis to investigate basic attacks within an organisation. This analysis of data can be used to develop organisation wide security awareness decisions and mitigations strategies for whole of business defences. Students will discover different types of security monitoring tools and develop the right approach for an organisation based on its needs.

This unit supports students to develop and undertake a project that simulates a real cyber security industry environment. The project may include using a Cyber Security Operations Centre (CSOC) sandbox or equivalent laboratory environment. This environment allows the participant to demonstrate configuring and testing of firewalls, implementing Intrusion Detection/Prevention Systems (IDS/IPS) and evaluating and identifying any traffic anomalies. The use of Red &amp; Blue teaming exercises to identify security breaches and apply mitigation strategies to minimise further risk are included as part of the project.
Throughout the unit students will:
<ul>
<li>Establish a project team.</li>
<li>Determine context of business need or problem (project).</li>
<li>Support the project plan development.</li>
<li>Evaluate the suitability of the gathered resources.</li>
<li>Implement the project design.</li>
<li>Support project completion and handover.</li>
</ul>
The relevance to industry is highlighted by having students working as part of a team of solution consultants to identify threats and suggest remedies to support holistic security enhancements. Students gain exposure to business processes and professional practices. Students also gain an understanding of the Cyber Security Analyst roles including activities and CSOC working environments. This unit uses practical application risk assessments for realistic client facing roles and provides students essential communication skills both in written and verbal presentation formats. Prerequisites: VU23213 - Utilise basic network concepts and protocols required in cyber security. VU23215 - Test concepts and procedures for cyber security

Advanced Diploma of Cyber Security

Advanced Diploma of

This unit describes the skills and knowledge required to lead teams in the workplace and to actively engage with the management of the organisation.

It applies to individuals working at a managerial level who facilitate work teams and build a positive culture within their work teams. At this level, work will normally be carried out using complex and diverse methods and procedures requiring the exercise of considerable discretion and judgement, using a range of problem solving and decision making strategies.

This unit describes the skills and knowledge required to develop and
implement virtualisation technologies, with the goal of providing a more
sustainable information and communications technology (ICT) environment.<o:p></o:p>

It applies to individuals working as senior networking staff
responsible for increasing the sustainability of an organisation, by using
virtualisation technologies.<o:p></o:p>

<div>This unit describes the skills and knowledge required to mitigate security threats to a wireless local area network (WLAN) by implementing security standards and policies.</div><div> </div><div>It applies to individuals with advanced information and communications technology (ICT) skills who are working as wireless help desk support technicians, wireless network support specialists and wireless network engineers.</div>

This unit provides the knowledge and skills for a
practitioner to communicate the effects of cyber security incidents to
appropriate personnel in the organisation. This involves understanding
communication styles, setting up and contributing to the team that deals with
cyber security incidents for the organisation. It also includes gathering and
sorting the appropriate information and presenting it using the appropriate
communication style for different groups and personnel in the organisation.<o:p></o:p>

This unit provides the knowledge and skills to recognise and utilise key security standards, organisations and bodies that offer resources and support to an organisation addressing cyber security risk. Resources are reviewed for potential implementation within the organisation.

<div>This unit introduces learners to the principles and operation of the cloud model and cloud services. It provides the knowledge and skills to categorise and select cloud services for an organisation as well as the ability to examine the security issues relating to cloud data and services.</div><div> </div><div>The unit also introduces the current industry practices that support an organisation to secure its’ cloud based data and application services.</div>

The unit provides the knowledge and skills to examine concepts and operation of an executable (exe) file and an assembler instruction set, principles of the software development process and software vulnerabilities. The unit also develops skills in writing and reading scripts, utilising software troubleshooting techniques and finally, examining the principles of writing secure code.

This unit provides the knowledge and skills to apply strategies to deal with issues associated with fraudulent identity and to deploy best practices for identity and access management for an organisation.

This unit provides the knowledge and skills to plan and implement a cyber security project that either simulates a real cyber security environment or is an actual workplace project. Learners are required to actively participate and contribute to the project team. They are required to receive tasks, communicate outcomes, design solutions, solve project problems and meet required deadlines to ensure effective and timely delivery of the project. The project may include using a Cyber Security Operations Centre (CSOC) sandbox or equivalent laboratory environment. This environment allows the learner to demonstrate configuring and testing of firewalls, implementing Intrusion Detection System (IDS) and evaluating and identifying any traffic anomalies. The use of Red and Blue teaming exercises to identify security breaches and apply mitigation strategies to minimise further risk should be included as part of the project Prerequisites: Prerequisite VU22240 - Communicate cyber security incidents within the organisation VU22243 - Develop software skills for the cyber security practitioner VU22244 - Implement best practice for identity management

This unit provides the knowledge and skills to enable a cyber security paraprofessional as part of a team, to identify relevant cyber standards and laws pertaining to the organisation, evaluate current working practices in light of these standards and laws and to plan and implement any required work practice changes.

This unit provides skills and knowledge required to perform a risk assessment for the organisation; this assessment is most likely performed as part of a team. The unit covers; assessing current assets, identify current threats and vulnerabilities, identify a risk process and performing the assessment.

<div>This unit provides the knowledge and skills for a paraprofessional working as a team member to prepare for and respond to a cyber security incident within an organisation. The unit includes identifying when the incident occurred, developing and implementing an appropriate response’ strategy, evaluate the success of the response and any long term effects of the incident.</div><div> </div><div>The unit also includes the knowledge and skills required to accurately document the incident and update the organisation’s incident response plan to reduce the risk of further incidents.</div>

This unit provides the knowledge and skills to demonstrate the function and operation of hardware and software tools used to detect cyber incidents. The unit includes the selection and use of tools to analyse logged data, detection of malicious data streams as well as analysis of the results and evaluation of the selected tools in their effectiveness in detecting data patterns.

<div>The unit provides the knowledge and skills to implement and monitor a cyber security operation for an organisation. The unit addresses the key elements of implementation which include preparing the organisation for an incident, knowing how it could occur, and the processes and procedures to respond. The unit also includes the use of tools and processes to analyse data and detect intrusions.</div><div>The unit applies procedures and processes developed by the National Institute of Standards and Technology (NIST) and it aligns with the Cisco Cyber Operations course.</div>

This unit provides the knowledge and skills required to use a series of tools to test the vulnerabilities of the security infrastructure for an organisation. The unit includes the compiling of information on the existing security infrastructure design, evaluating and selecting testing tools and preforming vulnerability scanning and penetration testing. It also includes developing a report which assesses the weaknesses and includes mitigation strategies that can be implemented to ‘harden’ the organisation’s cyber security infrastructure.

This unit provides the knowledge and skills to expand the testing capability for web vulnerabilities. The unit includes skills in using advance features of current toolsets in order identify weaknesses in the security of an organisation’s website. It also includes the development of a penetration (PEN) test report which will identify the root cause of the issues and includes mitigation strategies for the identified web site weaknesses. This unit utilises the current security framework Open Web Application Security Project (OWASP) security methodology and open source tools provide a sound foundation to develop these skills.

This unit provides the knowledge and skills to examine the function and operation of IoT devices and to identify what threats and vulnerabilities exit when using them. The unit also includes strategies to minimise the threats.

<div>This unit provides the knowledge and skills to examine the key standard bodies and frameworks that offer constructive support for addressing threats and vulnerabilities of critical infrastructure.</div><div>The units also covers the development of mitigation strategies to protect an organisation’s infrastructure as well as the implementation and monitoring of its’ effectiveness.</div>

This unit seeks to build on previous skills in configuring security devices by providing knowledge and skills to configure and modify where required an organisation’s existing security devices. After implementation the devices will be monitored and assessed for their effectiveness. New security devices and technologies will be researched, evaluated and implemented in order to improve the security performance of the organisation.

This unit provides the knowledge and skills required to design, implement and monitor a fundamental virtualised cyber security infrastructure for an organisation. The unit includes designing an infrastructure to suit key specifications, the utilisation of testing procedures in the development stage, implementation process, monitoring functionality following implementation and continuous improvement processes.

IT Courses & Cyber Security Courses | Box Hill Institute

twitter:title

Box Hill Institute offers a range of it and cyber security courses to prepare you for a successful career in one of Australia's most prominent industries. Learn more here!

description

twitter:description

https://www.datocms-assets.com/6783/1554271058-ca-it-cyber.png?auto=format&fit=max&w=1200

twitter:image

twitter:image:alt

twitter:card

twitter:site

Box Hill Institute are a leading Victorian provider of TAFE courses, vocational training and international degrees in Melbourne CBD, Box Hill and Lilydale.

Box Hill Institute

 | Box Hill Institute

<h2>On Demand Webinar: Cyber Security and IT</h2>
Explore studying Cyber Security or IT at Box Hill Institute and discover how you can create a fascinating career path that could take you around the world.
In our courses you will acquire much sought after cyber security skills for a wide range of business and enterprise settings. You&rsquo;ll learn to analyse, design, implement, and manage IT security programs for enterprises, and develop strategy, planning, governance, policy, and risk management architectures.
You&rsquo;ll also gain the practical skills and gain in-depth knowledge of network security, including firewalls; virtual private networks; and intrusion prevention systems.
Become a Cyber Security or IT professional and tackle the intricate digital world in a way that best suits your skills.

LiveStorm Registration - Cyber & ICT

Our Cyber Security Operations Centre (Training CSOC) provides you with the opportunity to work in a simulated setting, designed by industry.

Learn More

Become a Cyber Security Expert

Using the official VMware course "VMware vSphere: Install, Configure, Manage [V7]"
This hands on training course features focuses on installing, configuring, and managing VMware vSphere&reg; 7, which includes VMware ESXi&trade; 7 and VMware vCenter Server&reg; 7. This course prepares you to administer a vSphere infrastructure for an organization of any size. This course is the foundation for most of the other VMware technologies in the software-defined data center..
<ul>
<li>Completion of this course also satisfies as a prerequisite to take the VMware Certified Professional - Data Center Virtualization (VCP-DCV) exam.</li>
</ul>

The course covers the following:
<ol>
<li>Course Introduction
<ul>
<li>Introductions and course logistics</li>
<li>Course objectives</li>
</ul>
</li>
<li>Introduction to vSphere and the Software-Defined Data Center
<ul>
<li>Explain basic virtualization concepts</li>
<li>Describe how vSphere fits into the software-defined data center and the cloud infrastructure</li>
<li>Explain how vSphere interacts with CPUs, memory, networks, and storage</li>
<li>Recognize the user interfaces for accessing the vCenter Server system and ESXi hosts</li>
<li>Describe the ESXi host architecture</li>
<li>Navigate the Direct Console User Interface (DCUI) to configure an ESXi host</li>
<li>Recognize ESXi host user account best practices</li>
<li>Install an ESXi host</li>
<li>Use VMware Host Client&trade; to configure ESXi host settings</li>
<li>Describe how to proactively manage your vSphere environment using VMware Skyline</li>
</ul>
</li>
<li>Virtual Machines
<ul>
<li>Create and provision a virtual machine</li>
<li>Explain the importance of VMware Tools&trade;</li>
<li>Install VMware Tools</li>
<li>Identify the files that make up a VM</li>
<li>Recognize the components of a VM</li>
<li>Recognize virtual devices supported by a VM</li>
<li>Describe the benefits and use cases for containers</li>
<li>Identify the parts of a container system</li>
</ul>
</li>
<li>vCenter Server
<ul>
<li>Describe the vCenter Server architecture</li>
<li>Discuss how ESXi hosts communicate with vCenter Server</li>
<li>Deploy and configure vCenter Server Appliance</li>
<li>Use vSphere Client to manage the vCenter Server inventory</li>
<li>Add data center, organizational objects, and hosts to vCenter Server</li>
<li>Use roles and permissions to enable users to access objects in the vCenter Server inventory</li>
<li>Back up vCenter Server Appliance</li>
<li>Monitor vCenter Server tasks, events, and appliance health</li>
<li>Use VMware vCenter Server&reg; High Availability to protect a vCenter Server Appliance</li>
</ul>
</li>
<li>Configure and Manage Virtual Networks
<ul>
<li>Create and manage standard switches</li>
<li>Describe the virtual switch connection types</li>
<li>Configure virtual switch security, traffic-shaping, and load-balancing policies</li>
<li>Compare vSphere distributed switches and standard switches</li>
</ul>
</li>
<li>Configure and Manage Virtual Storage
<ul>
<li>Identify storage protocols and storage device types</li>
<li>Discuss ESXi hosts using iSCSI, NFS, and Fibre Channel storage&bull;&nbsp;&nbsp;</li>
<li>Create and manage VMFS and NFS datastores</li>
<li>Explain how multipathing works with iSCSI, NFS, and Fibre Channel storage</li>
<li>Recognize the components of a VMware vSAN&trade; configuration</li>
</ul>
</li>
<li>Virtual Machine Management
<ul>
<li>Use templates and cloning to deploy new virtual machines</li>
<li>Modify and manage virtual machines</li>
<li>Create a content library and deploy virtual machines from templates in the library</li>
<li>Use customization specification files to customize a new virtual machine</li>
<li>Perform vSphere vMotion and vSphere Storage vMotion migrations</li>
<li>Describe the Enhanced vMotion Compatibility feature</li>
<li>Create and manage virtual machine snapshots</li>
<li>Examine the features and functions of VMware vSphere&reg; Replication&trade;</li>
<li>Describe the benefits of VMware vSphere&reg; Storage APIs &ndash; Data Protection</li>
</ul>
</li>
<li>Resource Management and Monitoring
<ul>
<li>Discuss CPU and memory concepts in a virtualized environment</li>
<li>Describe what overcommitment of a resource means</li>
<li>Describe methods for optimizing CPU and memory usage</li>
<li>Use various tools to monitor resource use</li>
<li>Create and use alarms to report certain conditions or events</li>
</ul>
</li>
<li>vSphere Clusters
<ul>
<li>Describe the functions of a vSphere DRS cluster</li>
<li>Create a vSphere DRS cluster</li>
<li>Monitor a vSphere cluster configuration</li>
<li>Describe options for making a vSphere environment highly available</li>
<li>Explain the vSphere HA architecture</li>
<li>Configure and manage a vSphere HA cluster</li>
<li>Examine the features and functions of VMware vSphere&reg; Fault Tolerance</li>
<li>Describe the function of the vSphere&reg; Cluster Service</li>
</ul>
</li>
<li>vSphere Lifecycle Management
<ul>
<li>Recognize the importance of vCenter Server Update Planner</li>
<li>Describe how VMware vSphere&reg; Lifecycle Manager&trade; works</li>
<li>Describe how to update ESXi hosts using baselines</li>
<li>Validate ESXi host compliance using a cluster image</li>
<li>Describe how to upgrade VMware Tools and VM hardware</li>
<li>Describe VMware vSphere&reg; Lifecycle Manager&trade; and VMware vSAN&trade; integration</li>
</ul>
</li>
</ol>

Short Course

VMware vSphere - Software Defined IT Using VMware

<table style="border-collapse: collapse; width: 66.0961%; height: 1238px;" border="1">
<tbody>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter/Section</td>
<td style="height: 18px; width: 40.642%;">Goals/Objectives</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 1. Cybersecurity and the Security Operations Centre</td>
<td style="height: 18px; width: 40.642%;">Explain the role of the Cybersecurity Operations Analyst in the enterprise.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">1.1 The Danger</td>
<td style="height: 18px; width: 40.642%;">Explain why networks and data are attacked.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">1.2 Fighters in the War Against Cybercrime</td>
<td style="height: 18px; width: 40.642%;">Explain how to prepare for a career in Cybersecurity operations.</td>
</tr>
<tr style="height: 36px;">
<td style="height: 36px; width: 25.4815%;">Chapter 2. Windows Operating System</td>
<td style="height: 36px; width: 40.642%;">Explain the Windows Operating System features and characteristics needed to support cybersecurity analysis.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">2.1 Windows Overview</td>
<td style="height: 18px; width: 40.642%;">Explain the operation of the Windows Operating System.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">2.2 Windows Administration</td>
<td style="height: 18px; width: 40.642%;">Explain how to secure Windows endpoints.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 3. Linux Operating System</td>
<td style="height: 18px; width: 40.642%;">Explain the features and characteristics of the Linux Operating System</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">3.1 Using Linux</td>
<td style="height: 18px; width: 40.642%;">Perform basic operations in the Linux shell.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">3.2 Linux Administration</td>
<td style="height: 18px; width: 40.642%;">Perform basic Linux administration tasks.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">&nbsp;</td>
<td style="height: 18px; width: 40.642%;">Perform basic security-related tasks on a Linux host.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 4. Network Protocols and Services</td>
<td style="height: 18px; width: 40.642%;">Analyse the operation of network protocols and services.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">4.1 Network Protocols</td>
<td style="height: 18px; width: 40.642%;">Explain how protocols enable network operations.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">4.2 Ethernet and Internet Protocol (IP)</td>
<td style="height: 18px; width: 40.642%;">Explain how the Ethernet and IP protocols support network communication.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">4.3 Connectivity Verification</td>
<td style="height: 18px; width: 40.642%;">Use common testing utilities to verify and test network connectivity.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">4.4 Address Resolution Protocol</td>
<td style="height: 18px; width: 40.642%;">Explain how the address resolution protocol enables communication on a network.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">4.5 The Transport Layer and Network Services</td>
<td style="height: 18px; width: 40.642%;">Explain how transport layer protocols and network services support network functionality.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">4.6 Network Services</td>
<td style="height: 18px; width: 40.642%;">Explain how network services enable network functionality.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 5. Network Infrastructure</td>
<td style="height: 18px; width: 40.642%;">Explain the operation&nbsp; of the network&nbsp; infrastructure.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">5.1 Network Communication Devices</td>
<td style="height: 18px; width: 40.642%;">Explain how network devices enable wired and wireless network communication.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">5.2 Network Security Infrastructure</td>
<td style="height: 18px; width: 40.642%;">Explain how devices and services are used to enhance network security.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">5.3 Network Representations</td>
<td style="height: 18px; width: 40.642%;">Explain how networks and network topologies are represented.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 6. Principles of Network Security</td>
<td style="height: 18px; width: 40.642%;">Classify&nbsp; the various&nbsp; types of network&nbsp; attacks.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">6.1 Attackers and Their Tools</td>
<td style="height: 18px; width: 40.642%;">Explain how networks are attacked.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">6.2 Common Threats and Attacks</td>
<td style="height: 18px; width: 40.642%;">Explain the various types of threats and attacks.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 7. Network Attacks: A Deeper Look</td>
<td style="height: 18px; width: 40.642%;">Use network&nbsp; monitoring tools to identify attacks that against&nbsp; network&nbsp; protocols and services.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">7.1 Observing Network Operation</td>
<td style="height: 18px; width: 40.642%;">Explain network traffic monitoring.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">7.2 Attacking the Foundation</td>
<td style="height: 18px; width: 40.642%;">Explain how TCP/IP vulnerabilities enable network attacks.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">7.3 Attacking What We Do</td>
<td style="height: 18px; width: 40.642%;">Explain how common network applications and services are vulnerable to attack.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 8. Protecting the Network</td>
<td style="height: 18px; width: 40.642%;">Use various&nbsp; methods to prevent malicious access to computer&nbsp; networks,&nbsp; hosts, and data.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">8.1 Understanding defence</td>
<td style="height: 18px; width: 40.642%;">Explain approaches to network security defence.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">8.2 Access Control</td>
<td style="height: 18px; width: 40.642%;">Explain access control as a method of protecting a network.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">8.3 Network Firewalls and Intrusion Prevention</td>
<td style="height: 18px; width: 40.642%;">Explain how firewalls and other devices prevent network intrusions.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">8.4 Content Filtering</td>
<td style="height: 18px; width: 40.642%;">Explain how content filtering prevents unwanted data from entering the network.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">8.5 Threat Intelligence</td>
<td style="height: 18px; width: 40.642%;">Use various intelligence sources to locate current security threats.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 9. Cryptography and the Public Key Infrastructure</td>
<td style="height: 18px; width: 40.642%;">Explain the impacts&nbsp; of cryptography on network&nbsp; security monitoring.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">9.1 Cryptography</td>
<td style="height: 18px; width: 40.642%;">Use tools to encrypt and decrypt data.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">9.2 Public Key Cryptography</td>
<td style="height: 18px; width: 40.642%;">Explain how the public key infrastructure (PKI) supports network security.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 10. Endpoint Security and Analysis&nbsp;</td>
<td style="height: 18px; width: 40.642%;">Explain how to investigate endpoint vulnerabilities and attacks.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">10.1 Endpoint Protection</td>
<td style="height: 18px; width: 40.642%;">Use a tool to generate a malware analysis report.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">10.2 Endpoint Vulnerability Assessment</td>
<td style="height: 18px; width: 40.642%;">Classify endpoint vulnerability assessment information.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 11. Security Monitoring&nbsp;</td>
<td style="height: 18px; width: 40.642%;">Evaluate network security alerts.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">11.1 Technologies and Protocols</td>
<td style="height: 18px; width: 40.642%;">Explain how security technologies affect security monitoring.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">11.2 Log Files</td>
<td style="height: 18px; width: 40.642%;">Explain the types of log files used in security monitoring</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 12. Intrusion Data Analysis</td>
<td style="height: 18px; width: 40.642%;">Analyze network&nbsp; intrusion data to identify compromised hosts and vulnerabilities</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">12.1 Data Collection</td>
<td style="height: 18px; width: 40.642%;">Explain how security-related data is collected.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">12.2 Data Preparation</td>
<td style="height: 18px; width: 40.642%;">Arrange a variety of log files in preparation for intrusion data analysis.</td>
</tr>
<tr style="height: 17px;">
<td style="height: 17px; width: 25.4815%; padding-left: 40px;">12.3 Data Analysis</td>
<td style="height: 17px; width: 40.642%;">Analyse intrusion data to determine the source of an attack.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%;">Chapter 13. Incident Response and Handling&nbsp;</td>
<td style="height: 18px; width: 40.642%;">Explain how network security incidents are handled by CSIRTs.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">13.1 Incident Response Models</td>
<td style="height: 18px; width: 40.642%;">Apply incident response models to an intrusion event.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">13.2 CSIRTs and NIST 800-61r2</td>
<td style="height: 18px; width: 40.642%;">Apply standards specified in NIST 800-61r2 to a computer security incident.</td>
</tr>
<tr style="height: 18px;">
<td style="height: 18px; width: 25.4815%; padding-left: 40px;">13.3 Case-Based Practice</td>
<td style="height: 18px; width: 40.642%;">Given a set of logs, isolate a threat actor and recommend an incident response plan.</td>
</tr>
</tbody>
</table>

Qualifications	Delivery Mode	National Code
Certificate IV in Cyber Security	Online	22603VIC
Certificate IV in Cyber Security	On Campus	22603VIC
Advanced Diploma of Cyber Security		22445VIC

Short Courses	Duration
VMware vSphere - Software Defined IT Using VMware
CCNA Cybersecurity Operations