VU23221 - Evaluate and test an incident response plan for an enterprise
Overview
This unit describes the performance outcomes knowledge and skills required to examine an organisation’s existing incident response plan (IRP) and expand it as necessary to deal with incidents more thoroughly.
The unit requires the ability to form a team, clarify roles, interpret an incident response plan (IRP), use red, blue and purple teams to test the IRP, implement an incident, evaluate the IRP for its effectiveness and if required make improvements.This unit applies to individuals working as cyber security technicians either alone or as part of a team.
Assessment
For Melbourne campuses
Assessment tasks will be designed to reinforce & extend knowledge and skill competence within set & controlled parameters in accordance with each units learning outcomes & performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines.
Students will be expected to demonstrate the following required skills:
• examine and test the effectiveness of an organisation’s existing incident response plan (IRP) and modify it as necessary to deal with incidents more thoroughly.
Required reading
The qualified trainer and assessor will provide teaching and learning materials as required in the form of workbooks produced by the VU Polytechnic and/or via the VU Polytechnic e-learning system.
As part of a course
This unit is studied as part of the following course(s):