Curriculum Information

Managing Risk
• Threat Assessment and Modelling
• Information classification and protection
• Risk Assessment
• Developing Policies Standards and Guidelines
o Regulatory Frameworks
o Managing and Implementing Security Policies
• Organisation of Information Security
o Asset Management
o Human Resource Security
o Communications and Operations Management
Physical and Environmental Security
• Design and Implement Physical Security
• Implement and Manage Physical Security
Security Governance
Defence in Depth (from operational level)

Host Data and Application Security Management
• Threat Actors and Attributes
o Advanced Persistent Threat (APT)
• Use of Open Source Intelligence
• Classification of Vulnerabilities, e.g.
o Common Vulnerabilities and Exposures (CVE)
o Common Weakness Enumeration (CWE)
o Common Vulnerability Scoring System (CVSS)
o Zero-day
o Managing Patches and Reducing Vulnerabilities
• Database Security Management
o File and Database Security
o Secure Configuration

Controlling and Monitoring Access
o Virtual Private Network (VPN)
o Remote Access (e.g. SSH, RDP)
o Data Loss Prevention (e.g. DLP, SIEM)
o Hardware Security

Disaster Recovery & Business Continuity Planning
• Business continuity planning components
• Standards and best practices
• Selecting, developing, and implementing disaster and continuity solutions
• Issues associated with Business Continuity
• Incident Handling and Response Process