VU23221 - Evaluate and test an incident response plan for an enterprise
Nominal hours
Location
Industry
Online
St Albans
Prerequisites
Co-requisites
(Corequisite units must be studied concurrently with this unit)
Overview
This unit describes the performance outcomes knowledge and skills required to examine an organisation’s existing incident response plan (IRP) and expand it as necessary to deal with incidents more thoroughly.
The unit requires the ability to form a team, clarify roles, interpret an incident response plan (IRP), use red, blue and purple teams to test the IRP, implement an incident, evaluate the IRP for its effectiveness and if required make improvements.This unit applies to individuals working as cyber security technicians either alone or as part of a team.
Assessment
For Melbourne campuses
Assessment tasks will be designed to reinforce & extend knowledge and skill competence within set & controlled parameters in accordance with each units learning outcomes & performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines.
Students will be expected to demonstrate the following required skills:
• examine and test the effectiveness of an organisation’s existing incident response plan (IRP) and modify it as necessary to deal with incidents more thoroughly.
Students will also be expected to demonstrate the following knowledge:
• role and responsibilities of an incident response team (IRT)
• content and function of an incident response plan (IRP)
• basic level penetration testing of a simulated security system for an enterprise
• tools used to test a network for vulnerabilities. Examples are: Kali, Linux, Metasploit
• fundamental red, blue and purple teaming activities
• continual quality improvements of the IRP plan.
Required reading
The qualified trainer and assessor will provide teaching and learning materials as required in the form of workbooks produced by Victoria University and/or via the Victoria University e-learning system.
As part of a course
This unit is studied as part of the following course(s):