VU22256 - Protect critical infrastructure for an organisation

Unit code: VU22256 | Study level: TAFE

Credit points

N/A

Location

Footscray Nicholson

St Albans

Prerequisites

N/A

Overview

This unit provides the knowledge and skills to examine the key standard bodies and frameworks that offer constructive support for addressing threats and vulnerabilities of critical infrastructure.
The units also covers the development of mitigation strategies to protect an organisation’s infrastructure as well as the implementation and monitoring of its’ effectiveness.

Assessment

For Melbourne campuses

Assessment tasks will be designed to reinforce and extend knowledge and skill competence within set and controlled parameters in accordance with each unit’s learning outcomes and performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines.

Students will be expected to demonstrate the following required skills:
• Articulating relevant issues encountered in the work environment
• Reading and accurately interpreting documents and reports
• Determine changes required to work practices to implement new policies and procedures
• Assembling, participating in and coordinating a work team
• Problem solving within a team environment
• Evaluating the performance of a work team
• Contributing to the process of enhancing team performance
• Establishing project risk assessment
• Gathering, testing and allocating project resources
• Preparing technical documentation
• Making presentation to clients
• Evaluation of policies, standards and procedures effectiveness (Continuous improvement)
• Evaluating new technologies
• Educating critical infrastructure technicians
• Identifying critical infrastructure vulnerabilities
• Implementing mitigation strategies for the enterprise

Students will also be expected to demonstrate the following knowledge:
• Critical infrastructure:
o heating, ventilation and air conditioning (HVAC)
o building management
o lighting
o security
• Key aspects of the National Institute of Standards and Technology (NIST) Cybersecurity Framework (https://www.nist.gov/cyberframework)
• Key strategies from the European Union Agency for Network and Information Security (ENISA) (https://www.enisa.europa.eu)
• Anatomy of a cyber attack (ie STUXNET virus
• Strategies to defend ICS’s:
o application whitelisting
o configuration & patch management
o reduce attack surface area
o defendable environment
o manage authentication
o monitor and respond
o implement secure remote access
• Key strategies from ISO/IEC 2700X
• Risk assessment
• Differences between security frameworks, policies, standards, procedures, guidelines, and legislation
• Critical infrastructure
• Mitigation strategies to security critical infrastructure
• Communicating styles to key decision making groups

Required reading

The qualified trainer and assessor will provide teaching and learning materials as required in the form of workbooks produced by the Polytechnic and/or via the Polytechnic e-learning system.