VU21996 - Evaluate and test an incident response plan for an enterprise

Unit code: VU21996 | Study level: TAFE

Nominal hours:

Location

Footscray Nicholson

St Albans

Sunshine

Prerequisites

N/A

Overview

This unit provides the basic knowledge and skills for a cyber security practitioner to examine, as part of a team, an organisation’s existing incident response plan (IRP) and expand it as necessary to more thoroughly deal with incidents. The unit includes forming the team, clarifying roles, interpreting an incident response plan (IRP), using red and blue teams to test the IRP, implementing an incident, evaluating the IRP for its effectiveness and developing improvement.

Assessment

For Melbourne campuses

Assessment tasks will be designed to reinforce and extend knowledge and skill competence within set and controlled parameters in accordance with each unit’s learning outcomes and performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines.

Students will be expected to demonstrate the following required skills:

communicate and contribute as a member of a team;
problem solve network security infrastructure;
interpret and follow documented material and procedures;
use a laptop or a workstation;
install and demonstrate the application of software packages;
perform basic mathematical calculations;
plan and develop an Incident Response Plan (IRP) for the enterprise;
plan and develop attack exercises to test a security system for vulnerabilities;
plan and develop mitigation strategy to defend a security system form attacks, and;
evaluating IRP effectiveness and implementing new strategies.

Students will also be expected to demonstrate the following knowledge:

methods to protect your own data and privacy;
basic level penetration testing of the security system for an enterprise;
tools used to test a network for vulnerabilities For example: Kali Linux, Metasploit;
methods and tools used to protect an organisation's data;
the concept of red, blue and purple teaming, and;
discussing better IRP strategies.

Required reading

The qualified trainer and assessor will provide teaching and learning materials as required in the form of workbooks produced by the Polytechnic and/or via the Polytechnic e-learning system.