Cyber Security

Intake Dates & Course Length

Career Outcomes

Entry Requirements

Applying

Pathways & Accreditation

Fees & Finance Options

Course Structure

Core



• BSBWOR502 Lead and manage team effectiveness
  60.0 hours
  
  

  This unit describes the skills and knowledge required to lead teams in the workplace and to actively engage with the management of the organisation. It applies to individuals working at a managerial level who facilitate work teams and build a positive culture within their work teams. At this level, work will normally be carried out using complex and diverse methods and procedures requiring the exercise of considerable discretion and judgement, using a range of problem solving and decision making strategies.

• ICTNWK525 Configure an enterprise virtual computing environment
  60.0 hours
  
  

  This unit describes the skills and knowledge required to develop and implement virtualisation technologies, with the goal of providing a more sustainable information and communications technology (ICT) environment.

  It applies to individuals working as senior networking staff responsible for increasing the sustainability of an organisation, by using virtualisation technologies.

• VU22240 Communicate cyber security incidents within the organisation
  40.0 hours
  
  

  This unit provides the knowledge and skills for a practitioner to communicate the effects of cyber security incidents to appropriate personnel in the organisation. This involves understanding communication styles, setting up and contributing to the team that deals with cyber security incidents for the organisation. It also includes gathering and sorting the appropriate information and presenting it using the appropriate communication style for different groups and personnel in the organisation.

• VU22241 Interpret and utilise key security frameworks, policies and procedures for an organisation
  40.0 hours
  
  

  This unit provides the knowledge and skills to recognise and utilise key security standards, organisations and bodies that offer resources and support to an organisation addressing cyber security risk. Resources are reviewed for potential implementation within the organisation.

• VU22242 Assess and secure cloud services
  80.0 hours
  
  

  This unit introduces learners to the principles and operation of the cloud model and cloud services. It provides the knowledge and skills to categorise and select cloud services for an organisation as well as the ability to examine the security issues relating to cloud data and services.

  
  

  The unit also introduces the current industry practices that support an organisation to secure its’ cloud based data and application services.

• VU22243 Develop software skills for the cyber security practitioner
  80.0 hours
  
  

  The unit provides the knowledge and skills to examine concepts and operation of an executable (exe) file and an assembler instruction set, principles of the software development process and software vulnerabilities. The unit also develops skills in writing and reading scripts, utilising software troubleshooting techniques and finally, examining the principles of writing secure code.
  

• VU22244 Implement best practices for identity management
  40.0 hours
  
  

  This unit provides the knowledge and skills to apply strategies to deal with issues associated with fraudulent identity and to deploy best practices for identity and access management for an organisation.

• VU22245 Plan and implement a cyber security project
  80.0 hours
  
  

  This unit provides the knowledge and skills to plan and implement a cyber security project that either simulates a real cyber security environment or is an actual workplace project. Learners are required to actively participate and contribute to the project team. They are required to receive tasks, communicate outcomes, design solutions, solve project problems and meet required deadlines to ensure effective and timely delivery of the project. The project may include using a Cyber Security Operations Centre (CSOC) sandbox or equivalent laboratory environment. This environment allows the learner to demonstrate configuring and testing of firewalls, implementing Intrusion Detection System (IDS) and evaluating and identifying any traffic anomalies. The use of Red and Blue teaming exercises to identify security breaches and apply mitigation strategies to minimise further risk should be included as part of the project
  Prerequisites: Prerequisite VU22240 - Communicate cyber security incidents within the organisation VU22243 - Develop software skills for the cyber security practitioner VU22244 - Implement best practice for identity management

• VU22246 Evaluate an organisation's compliance with relevant cyber security standards and law
  40.0 hours
  
  

  This unit provides the knowledge and skills to enable a cyber security paraprofessional as part of a team, to identify relevant cyber standards and laws pertaining to the organisation, evaluate current working practices in light of these standards and laws and to plan and implement any required work practice changes.




Electives



• VU22250 Respond to cyber security incidents
  40.0 hours
  
  

  This unit provides the knowledge and skills for a paraprofessional working as a team member to prepare for and respond to a cyber security incident within an organisation. The unit includes identifying when the incident occurred, developing and implementing an appropriate response’ strategy, evaluate the success of the response and any long term effects of the incident.

  
  

  The unit also includes the knowledge and skills required to accurately document the incident and update the organisation’s incident response plan to reduce the risk of further incidents.

• VU22251 Gather, analyse and interpret threat data
  40.0 hours
  
  

  This unit provides the knowledge and skills to demonstrate the function and operation of hardware and software tools used to detect cyber incidents. The unit includes the selection and use of tools to analyse logged data, detection of malicious data streams as well as analysis of the results and evaluation of the selected tools in their effectiveness in detecting data patterns.

• VU22252 Implement cyber security operations
  60.0 hours
  
  

  The unit provides the knowledge and skills to implement and monitor a cyber security operation for an organisation. The unit addresses the key elements of implementation which include preparing the organisation for an incident, knowing how it could occur, and the processes and procedures to respond. The unit also includes the use of tools and processes to analyse data and detect intrusions.

  The unit applies procedures and processes developed by the National Institute of Standards and Technology (NIST) and it aligns with the Cisco Cyber Operations course.

• VU22253 Undertake penetration testing of the security infrastructure for an organisation
  80.0 hours
  
  

  This unit provides the knowledge and skills required to use a series of tools to test the vulnerabilities of the security infrastructure for an organisation. The unit includes the compiling of information on the existing security infrastructure design, evaluating and selecting testing tools and preforming vulnerability scanning and penetration testing. It also includes developing a report which assesses the weaknesses and includes mitigation strategies that can be implemented to ‘harden’ the organisation’s cyber security infrastructure.

• VU22254 Undertake advanced penetration testing for web site vulnerabilities
  80.0 hours
  
  

  This unit provides the knowledge and skills to expand the testing capability for web vulnerabilities. The unit includes skills in using advance features of current toolsets in order identify weaknesses in the security of an organisation’s website. It also includes the development of a penetration (PEN) test report which will identify the root cause of the issues and includes mitigation strategies for the identified web site weaknesses. This unit utilises the current security framework Open Web Application Security Project (OWASP) security methodology and open source tools provide a sound foundation to develop these skills.

• VU22255 Evaluate threats and vulnerabilities of internet of things (iot) devices
  40.0 hours
  
  

  This unit provides the knowledge and skills to examine the function and operation of IoT devices and to identify what threats and vulnerabilities exit when using them. The unit also includes strategies to minimise the threats.

• VU22256 Protect critical infrastructure for an organisation
  40.0 hours
  
  

  This unit provides the knowledge and skills to examine the key standard bodies and frameworks that offer constructive support for addressing threats and vulnerabilities of critical infrastructure.

  The units also covers the development of mitigation strategies to protect an organisation’s infrastructure as well as the implementation and monitoring of its’ effectiveness.

• VU22257 Configure security devices for an organisation
  80.0 hours
  
  

  This unit seeks to build on previous skills in configuring security devices by providing knowledge and skills to configure and modify where required an organisation’s existing security devices. After implementation the devices will be monitored and assessed for their effectiveness. New security devices and technologies will be researched, evaluated and implemented in order to improve the security performance of the organisation.

• VU22258 Design and implement a virtualised cyber security infrastructure for an organisation
  80.0 hours
  
  

  This unit provides the knowledge and skills required to design, implement and monitor a fundamental virtualised cyber security infrastructure for an organisation. The unit includes designing an infrastructure to suit key specifications, the utilisation of testing procedures in the development stage, implementation process, monitoring functionality following implementation and continuous improvement processes.

• VU22249 Perform a security risk assessment for an organisation
  40.0 hours
  
  

  This unit provides skills and knowledge required to perform a risk assessment for the organisation; this assessment is most likely performed as part of a team. The unit covers; assessing current assets, identify current threats and vulnerabilities, identify a risk process and performing the assessment.

• ICTNWK607 Design and implement wireless network security
  60.0 hours
  
  

  This unit describes the skills and knowledge required to mitigate security threats to a wireless local area network (WLAN) by implementing security standards and policies.

  
  

  It applies to individuals with advanced information and communications technology (ICT) skills who are working as wireless help desk support technicians, wireless network support specialists and wireless network engineers.