{"text_format":"1","workbook":"xlsx","n_sheets":7,"sheets":["Guide","Structure","ST1021","ST1021  Security Engineer (1)","ST1021 Risk Analyst (2)","ST1021  Cyber Defend and Res(3)","Source filters "],"not_rendered":{"charts":0,"images":0,"macros":1,"external_links":0,"defined_names":4,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Guide","index":0,"n_rows":34,"n_cols":8,"rows_kept":34,"cut":false,"hidden":false,"merged":[[0,2,0,3]]}
["Quick reference guide to KSB mapping",null,"Table to assist with B11-13",null,null,"Ed2"]
[null,null,"Reference","Name of occupational standard"]
["1. START HERE",null,"ST0117","Business analyst (level 4) (ST0117)"]
["Awarding body:",null,"ST1021 - CSE","Cyber security technologist (level 4) (ST1021) - Cyber security engineer"]
["University of Brighton",null,"ST1021 - CRA","Cyber security technologist (level 4) (ST1021) - Cyber risk analyst"]
["Qualification name:",null,"ST1021 - D&R","Cyber security technologist (level 4) (ST1021) - Cyber defend & respond"]
["Cyber Security Technologist",null,"ST0118","Data analyst (level 4) (ST0118)"]
["Programme title if applicable:",null,"ST0825","DevOps engineer (level 4) (ST0825)"]
["DipHE Cyber Security Technologist ",null,"ST0863","Digital accessibility specialist (level 4) (ST0863)"]
["Please select the occupational standard(s) you are mapping in this spreadsheet","Dropdown Options","ST0345","Digital community manager (level 4) (ST0345)"]
["Standard 1 - select from the dropdown list to the right","ST1021 - CSE","ST0127","Network engineer (level 4) (ST0127)"]
["Standard 2 - select from the dropdown list to the right","ST1021 - CRA","ST0116","Software developer (level 4) (ST0116)"]
["Standard 3 - select from the dropdown list to the right","ST1021 - D&R","ST0129","Software tester (level 4) (ST0129)"]
["If your qualification maps to more than three occupational standards, please contact us at HTQ.approvals@education.gov.uk"]
[]
["2. GUIDE TO KSB MAPPING  "]
["Awarding bodies must demonstrate that a qualification will enable a person to demonstrate that they have attained as many of the knowledge, skills and behaviours set out in the standard as may be reasonably expected by undertaking a course of education. "]
[]
["Before you begin, please list your qualification modules in the 'Structure' tab."]
["1. You can map your qualification to one or more occupational standards. "]
["2. Select the occupational standard(s) you wish to map to your qualification by clicking the blue STxxxx link in the reference column, to the right."]
["3. When the occupational standard opens, double check the name of the standard is correct. "]
["4. Please respond to each KSB statement."]
["5. Populate the Detailed page/paragraph reference, KSB coverage, Evidence, Assessment method and Supporting comments/rationale columns, as shown in the example below. "]
["6. Please be as specific as possible about which content in the qualification aligns to each KSB statement. "]
["7. You may delete sheets/tabs that are not relevant to  your qualification. "]
["8. Submit the completed spreadsheet along with any documents you have cited in the 'EVIDENCE UPLOAD' part of the application form. Where we have capacity we are happy to feedback on early drafts of your KSB mapping."]
["9. Please contact HTQ.approvals@education.gov.uk if you need further help or guidance on mapping."]
[]
["3. EXAMPLE OF KSB MAPPING"]
["Please see the KSB mapping examples to the right. ","KSB Number","This is the list of KSB statements","Where in the qualification is the content? \nIndicate the reference document(s)/module(s)/unit(s) and page/paragraph number(s) you are citing as evidence of coverage","Select the coverage from the drop down list","Paste or type clear evidence supporting your KSB coverage. For example, learning outcomes or indicative module content","Provide information on how this KSB is assessed, i.e. the method of assessment used.  ","Provide comments and/or a rationale to support the evidence you have cited. If the KSB mentions key terms not explicitly referenced in your evidence, please explain how they are covered. If you have partially met or not met a KSB, provide a rationale to support your judgement"]
[null,"KSB","KSB Statement ","Detailed page/paragraph reference","KSB coverage","Evidence","Assessment method","Supporting comments/rationale"]
[null,"K1","Understand the background legislation and regulatory frameworks (such as IBL 188) relating to the occupation. ","Module 1.1 Legal and Ethical Considerations; p44-45, para 4-7.\nModule 4.2 Professional Issues and CPD; p9, para 3-4. \nQualification specification p4.","FULLY MET","MO1.1 LO3 Understand and critically reflect on legislation relating to and affecting the occupation.\nIndicative content\nLegal background; legislation; role of industry bodies; national/international considerations. \n\nMO4.2 LO2 Understand the importance of staying up to date with professional developments in the field, including legal frameworks, industry best practice, guidelines and relevant standards. ","Students are required to produce a written report using a brief provided. Within this report students are expected to cover relevant laws, legislation and industry body standards relevant to the brief. ","The detailed coverage of relevant law and legislation is taught in Year 1. It is covered again in Year 2, where learners reflect on it from a  professional perspective. The national regulatory framework and industry body standards (e.g. IBL 188) are covered in detail. "]
[null,"K2","The principles, features and differences of waterfall and agile methodologies for project delivery and software development.","Module 3. Software development; p.6, para 4-7.","FULLY MET","MO3 LO 1 Critically analyse and evaluate approaches to software development methodologies. Theory, method and application.\n\nIndicative content \nUse of different software methodologies; matching methodology to function. \nA range of software methodologies are covered and applied to software problems.","K2 is assessed via a project. Within this project students will be expected to demonstrate practical application and produce written project report(s) which evidence methodologies and methods. ","Waterfall and agile are not explicitly referred to in the LO or indicative content, although they are both fully covered in this module. We cover four approaches to software development, providing background, theory and practical applications. Learners will get 'hands on' experience of evaluating waterfall and agile, including their use in real-world problem solving and project delivery."]

{"sheet":"Structure","index":1,"n_rows":20,"n_cols":12,"rows_kept":20,"cut":false,"hidden":false,"merged":[]}
["Return to Guide"]
["Please list all the modules in the qualification",null,null,null,null,null,null,null,null,null,null,"Response"]
["Does every possible combination of modules/units/pathways ensure that a learner achieves competence in the occupation(s) which the TQ is in respect of and for which the Institute has published an occupational standard ",null,null,null,null,null,null,null,null,null,null,"Yes"]
[]
["Note: If a module is not aligned/mapped to an occupational standard it is classed as additional content"]
[]
["Module Code","Module Name","Full-Time Year","Part-Time Year","Core/Option","Mapped to Standard(s)","Credits","Level","Delivery Method","Delivery comments"]
[]
["CI401","Introduction to Programming","Year 1",null,"Core ","ST1021",20,4,"Provider setting (e.g. classroom)","100% classroom"]
["CI435","Introduction to Web Development","Year 1",null,"Core ","ST1021",20,4,"Provider setting (e.g. classroom)","100% classroom"]
["CI405","Computing Technologies","Year 1",null,"Core ","ST1021",20,4,"Provider setting (e.g. classroom)","100% classroom"]
["CI404","Introduction to Cyber Security","Year 1",null,"Core ","ST1021",20,4,"Provider setting (e.g. classroom)","100% classroom"]
["CI406","Introduction to Artificial Intelligence","Year 1",null,"Core ","ST1021",20,4,"Provider setting (e.g. classroom)","100% classroom"]
["CI453","Working in the Computing Industry","Year 1",null,"Core ","ST1021",20,4,"Provider setting (e.g. classroom)","100% classroom"]
["CI553","Object Oriented Development and Testing","Year 2",null,"Core ","ST1021",20,5,"Provider setting (e.g. classroom)","100% classroom"]
["CI506","Secure Systems Analysis and Design","Year 2",null,"Core ","ST1021",20,5,"Provider setting (e.g. classroom)","100% classroom"]
["CI515","Network Security","Year 2",null,"Core ","ST1021",20,5,"Provider setting (e.g. classroom)","100% classroom"]
["CI510","Security and Dependability","Year 2",null,"Core ","ST1021",20,5,"Provider setting (e.g. classroom)","100% classroom"]
["CI502","Large Scale Data Processing","Year 2",null,"Core ","ST1021",20,5,"Provider setting (e.g. classroom)","100% classroom"]
["CI536","Integrated Group Project","Year 2",null,"Core ","ST1021",20,5,"Provider setting (e.g. classroom)","100% classroom"]

{"sheet":"ST1021","index":2,"n_rows":175,"n_cols":8,"rows_kept":175,"cut":false,"hidden":false,"merged":[]}
[null,"Cyber security technologist (level 4) (ST1021)"]
[null,"Return to Guide"]
[null,"Three optrions are availale. Please choose. "]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber security engineer"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber risk analyst"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber defend & respond"]
[]
[]
[null,"KSB Statement ","Detailed page/paragraph reference","Documents Present","KSB coverage","Evidence","Assessment method","Supporting comments/rationale"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber security engineer"]
[null,"This list contains the core KSBs for the Cyber security technologist occupation, plus the specific KSBs for the Cyber security engineer option. "]
[null,"Knowledge"]
["K1","K1: Principles of networks: OSI and TCP/IP models, data, protocols and how they relate to each other; the main routing protocols; the main factors affecting network performance including typical failure modes in protocols and approaches to error control; virtual networking","Module CI404 Introduction to Cyber Security\nModule CI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nNetwork protocols; VPNs and IPSec,PKI and digital signatures.","K1 in CI404 is assessed via an exam. \n\nK1 in CI515 is assessed via an exam. ","Students in year 1 are introduced to the fundamentals of networking, while in year 2 they gain a deep understanding of networking. "]
["K2","k2: the concepts, main functions and features of at least three Operating Systems (OS) and their security functions and associated security features.","Module CI515 Network Security\n\nModule CI510 Security and Dependability\n\nModule CI405 Computing Technologies",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nOS security; network security tools, (e.g. nmpap, wireshark, scapy); firewalls.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware taxonomy (e.g. viruses, Trojan horses, rootkits, backdoors, worms) and analysis; penetration testing approaches and tools.\n\nMO CI405 LO2 Utilise the basic features of an operating system \nIndicative Content \nsystem software","K2 in CI515 is assessed via an exam\n\nK2 in CI510 is assessed via an exam.\n\nK2 in CI405 is assessed via a report that contains a learning journal.\n\n","In both modules students learn the principles, primitives, and practices for ensuring security at the operating system. CI5 focuses on the lowest levels of software stack while CI510 focuses on attacks that aim to evade system's security mechanisms. "]
["K3","K3: Cyber security concepts and why cyber security matters to business and society; Security assurance concepts and how assurance may be achieved in practice including penetration testing and extrinsic assurance methods.","Module CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability\n\n",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems\nMO CI506 LO3 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nSecurity requirements engineering; Formal security modelling and analysis; security metrics; Regulatory processes for secure system development, evaluation, and certification.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nPenetration testing approaches and tools;","K3 in CI506 is assessed via a group report. Students are expected to analyse and design a system described by a case study.\n\nK3 in CI510 is assessed in via an individual security analysis report. Students are expected to attempt to penetrate a system and report on their results.","Students are expected in a group to analyse and design a system that meets business requirements and consider the security aspect of that system for the business. Students are also expected to attempt to penetrate a system and report on their results. "]
["K4","K4: the main types of common attack techniques; also the role of human behaviour, including the significance of the 'insider threat'. Including: how attack techniques combine with motive and opportunity to become a threat. Techniques and strategies to defend against attack techniques and mitigate hazards","Module CI404 Introduction to Cyber Security\n\nModule CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content \nInformation security fundamentals; Access control models and techniques, and security mechanisms; security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Human factors - social engineering attacks, phising; secure coding techniques and standards, manual code review/automatic code review tools.\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling; security requirements engineering.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO4 Implement security countermeasures against cyber attacks\nIndivative Content\nweb applications and database security; data and application security in the cloud; cyber attacks to web applications (e.g. SQL injection, XSS); malware taxonomy.","K4 in CI404 is assessed via an exam. \n\nK4 in CI506 is assessed via a group project. \n\nK4 in CI510 is assessed via an exam. ","Students in year 1 are introduced to cyber security threats, the human factor, while in year 2 they learn how to carry out threat modelling at a design stage, and protect systems from cyber threats. "]
["K5","K5: the significance of identified trends in cyber security threats and understand the value and risk of this analysis. How to deal with emerging attack techniques (including 'zero day'), hazards and vulnerabilities relevant to the digital systems and business environment.","Module CI404 Introduction to Cyber Security\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels. \nMO CI404 LO3 Explain privacy fundamentals and recognise privacy engineering techniques.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content\nInformation security fundamentals; Security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Privacy fundamentals, data privacy legislation; Secure coding techniques and standards, manual code review / automatic code review tools.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nCyber-attacks to web applications (e.g. SQL injection, XSS);  Cyber threat intelligence; \nPrivacy threats and Privacy Enhancing Technologies (PETs) (e.g. anonymity protocols, crowds, onion routing, ToR).","K5 in CI404 is assessed by an exam.\n\nK5 in CI510 is assessed by an individual security analysis report and an exam. ","Students in year 1 learn to recognise the significance of cyber threats and their value and risk, while in year 2 they learn how to deal with attacks. "]
["K6","K6: lifecycle and service management practices to an established standard to a foundation level for example Information Technology Infrastructure Library (ITIL) foundation level.","Module CI506 Secure Systems Analysis and Design\n",null,"PARTIALLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nRegulatory processes for secure system development, evaluation, and certification.","K6 is assessed via a group project.","Students are expected to learn regulatory processes for secure development lifecycle, evaluation, and certification. "]
["K7","K7: cyber incident response processes, incident management processes and evidence collection/preservation requirements to support incident investigation","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; incident response..\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk assessment. \nIndicative Content\ninformation security management; incident resposnse; disaster recovery; business continuity.","K7 in CI404 is assessed via an exam.\n\nK7 in CI506 is assessed via a group project. ","Students in year 1 are expected to learn how to respond to incidents, while in year 2 they are expected to learn how to manage incidents and ensure business continutity. "]
["K8","K8: Understands the main features, applicability and how to apply the significant law, regulations and standards relevant specifically to cyber security. To include: laws, regulations & standards relating to personal data and privacy (e.g. Data Protection Act 2018 implementing General Data Protection Regulation); use of digital systems (e.g. Computer Misuse Act 1990 ); regulatory standards for cyber security, intelligence collection and law enforcement (e.g. Intelligence Services Act 1994, Regulation of Investigatory Powers Act 2000; standards for good practice in cyber security (e.g. ISO 27001, CyberEssentials, NIST) and any updates or additions","CI404 Introduction to Cyber Security\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; privacy fundamentals, data privacy legislation; secure coding standards.\n\nMO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K8 in CI404 is assessed by an exam.\n\nK8 in CI453 is assesed by an individual project  and a group project.\n\nK8 in CI536 is assessed by either a group project report or group presentation,  where students develop a software and apply security standards and regulations.","In CI404 and CI453 students learn about security and privacy standards and regulations, while in CI536 they have the opportunity to apply them in practice while developing a software. "]
["K9","K9: ethical principles and codes of good practice of at least one significant cyber security professional body and the ethical responsibilities of a cyber security professional.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K9 in CI453 is assessed by an individual project  and a group project.\n\nK9 in CI536 is assessed by a group project or presentation,  where students develop a software and apply security standards and regulations.\n\n","In CI453 students learn about ethical and codes of good practice while in CI536 they have the opportunity to apply them in practice. "]
["K10","K10: how to analyse employer or customer requirements to derive security objectives and taking account of the threats and overall context develop a security case which sets out the proposed security measures in the context with reasoned justification","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems.\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity requirements engineering; formal security modelling and design; security threat modelling; security and privacy patterns.\n\nMO CI 536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nproject lifecycle; requirements management; design techniques; ","K10 in CI506 is a assessed by a group report  where students are carrying out security analysis and design of a system.\n\nK10 in CI536 is assessed by an individual  group project and a group project,  where students develop a software taking into consideration security and privacy.","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledfge in practice. "]
["K11","K11: horizon scanning including use of recognised sources of threat intelligence and vulnerabilities.","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy.","K11 is assessed by an individual report where students have to carry horizon scanning and use cyber threat intelligence feeds and also by an exam where they are expected to demonstrate knowledge of quality characteristics of cyvber threat intelligence.","We cover vulnerability repositories (e.g. NIST CVS and NVD), cyber threat intelligence inluding its process and quality characteristics, and also framework such as MITRE's ATT&CK."]
["K12","K12: common security architectures and methodologies; be aware of reputable security architectures that incorporates hardware and software components, and sources of architecture patterns and guidance. How cyber security technology components are typically deployed in digital systems to provide security functionality including: hardware and software to implement security controls","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork security tools, (e.g. nmpap, wireshark, scapy); firewwalls; intrusion and anomaly detection and prevention systems; PKI and digital signatures; VPNS and IPSec.\n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nsecurity and privacy patterns; formal security modelling and analysis\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content\nweb applications and database security; data and application security in the cloud.","K12 in CI515 is assessed by an individual security analysis report and an exam.\n\nK12 in CI506 is assessed by a group report.\n\nK12 in CI510 is assessed by an exam. ","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["K13","K13: the basic terminology and concepts of cryptography; common cryptography techniques in use; the importance of effective key management and the main techniques used; legal, regulatory and export issues specific to the use of cryptography","CI404 Introduction to Cyber Security\n\nCI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\ncryptography and cryptanalysis; PKI and digital signatures; VPNs and IPSec.","K13 in CI404 is assessed via an exam.\n\nK13 in CI515 is assesse via an individual security analysis report.","Students in CI404 are introduced to the fundamental of cryptography while  in CI515 are expected to use cryptographic primitives to review and evaluate cryptographic protocols, and examine the rational decisions in the design of tokens and secure elements."]
["K14","K14: risk assessment and audit methodologies and approaches to risk treatment; approaches to identifying the vulnerabilities in organisations and security management systems; the threat intelligence lifecycle; the role of the risk owner in contrast with other stakeholders","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content \ncyber threat intelligence;","K14 in CI404 is assessed via an exam.\n\nK14 in CI506 is assessed via a  group report.\n\nK14 in CI510 is assessed via an individual security analysis  report.","Students in CI404 are introduced to the fundamentals of risk management, while in CI506 learn about risk managemetn methodolgies and in CI510 learn about the cyber threat intelligence lifecycle. "]
["K15","K15: principles of security management systems, including governance, organisational structure, roles, policies, standards, guidelines and how these all work together to deliver the identified security outcomes.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.","K15 in CI404 is assessed via an exam.\n\nK15 in CI506 is assessed via a  group report..\n","Students in CI404 are introduced to the fundamentals of security management systems,, while in CI506 learn techniques on how to develop security management systems."]
["K16","K16: function and features of significant digital system components; typical architectures; common vulnerabilities in digital systems; principles and common practice in digital system security","CI404 Introduction to Cyber Security\n\nCI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; access control models and techniques; security mechanisms.\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork protocols; network security tools; Internet of Things security; Intrusion and anomaly detection and prevention systems.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; web applications and database security; data and application security in the cloud.","K16 in CI404 is assessed via an exam.\n\nK16 in CI515 is assessed via an exam and an individual security analysis report.\n\nK16 in CI510 is assessed via an exam and an individual security analysis report. ","Students in CI404 learn about the principles and practices in digital system security while in CI515 and CI510 learn about system components and common vulnerabilities respectively. "]
["K17","K17: programming or scripting languages","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI401 Introduction to Programming\n\nCI435 Introduction to Web Development\n\nCI553 Object Oriented Development and Testing\n\n",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nNetwork security tools;\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI401 LO1 Use sequence, selection and iteration to develop simple  applications \nMO CI401 LO2 Utilise a variety of data types and collections\nMO CI401 LO3 Design and develop simple programs, including detection and correction of errors in both logic and syntax\nMO CI401 LO5 Demonstrate a practical understanding of Object Oriented programming techniques\nIndicative Content\nProblem solving techniques; Data types and expressions; Control structures including loops and conditional statements; Input and output; Functions; Objects including attributes, methods and parameters\n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.\n","K17 in CI515 is assessed via a security analysis report.\n\nK17 in CI510 is assessed via an exam.\n\nK17 in CI536 is assessed via a delivered software.\n\nK17 in CI401 is assessed via a software application an en exam.\n\nK17 in CI435 is assessed via a project and an exam.\n\nK17 in CI553 is assessed via an exam.","In CI515 and CI510 students are expected to use a scripting language while in CI536 and in CI401, CI553  and CI435 they are expected to use an appropriate high-level language such as Java."]
[null,"Skills"]
["S1","S1: Discover vulnerabilities in a system by using a mix of research and practical exploration","CI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence.","S1 in CI515 is assessed via an individual security analysis report.\n\nS2 in CI510 is assessed via an individual security analysis report. ","In CI510 students learn how to identify security vulnerabilities and consider countermeasures that can mitigate their exploitation, while in CI515 students gain a practical understanding and the opportunity to apply techniques for detecting network security threats and corresponding countermeasures. "]
["S2","S2: Analyse and evaluate security threats and hazards to a system or service or processes. Use relevant external source of threat intelligence or advice (e.g. National Cyber Security Centre) Combine different sources to create an enriched view of cyber threats and hazards","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware. \nIndicative Content\nCyber attacks to web applications; malware taxonomy and analysis; cyber threat intelligence.","S2 in CI506 is assessed via a group report  where students are expected to model and reason about cyber threats.\n\nS2 in CI510 is assessed via an exam.","In CI506 students learn threat modelling techniques and methods, while in CI510 learn how to utilise cyber threat intelligence feeds."]
["S3","S3: Research and investigate common attack techniques and relate these to normal and observed digital system behaviour and recommend how to defend against them. Interpret and demonstrate use of external source of vulnerabilities (e.g. OWASP, intelligence sharing initiatives, open source)","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy and analysis; cyber attacks to web applications ","S3 is assessed via an individual security analysis report and an exam.","Students learn models and frameworks such as the cyber kill chain and MITRE's ATT&CK and utilise cyber threat intelligence sources."]
["S4","S4: Undertake security risk assessments for simple systems without direct supervision and propose basic remediation advice in the context of the employer.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content \nrisk management; risk assessment.","S4 in CI404 is assessed via an exam.\n\nS4 in CI506 is assessed via a group report.","In year 1 studenst learn about the fundamentals of risk management while in year 2 they learn techniques on how to carry out risk management. "]
["S5","S5: Source and analyse security cases and describe what threats, vulnerability or risks are mitigated and identify any residual areas of concern.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nNetwork security tools; firewalls.\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative content\nrisk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; vunerability management; cyber attacks to web applicatons.","S5 in CI515 is assessed via an individual security analysis report.\n\nS5 in CI506 is assessed via a group report.\n\nS5 in CI510 is assessed via an individual security analysis report and an exam.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S6","S6: Analyse employer or customer requirements to derive security objectives and taking account of the threats and overall context develop a security case which sets out the proposed security measures in the context with reasoned justification","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity requirements engineering; security threat modelling; security and privacy by design.\n\nMO CI510 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nRequirements management.","S6 in CI506 is assessed via a group report.\n\nS6 in CI536 is assessed via the development of a software artefact taking into consideration security and privacy.","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledge in practice. "]
["S7","S7: Identify and follow organisational policies and standards for information and cyber security and operate according to service level agreements or other defined performance targets.","This skill cannot be achieved in a classroom, it refers to a particular organization's  policy.",null,"NOT MET ","This skill cannot be achieved in a classroom, it refers to a particular organization's  policy.",null,"This skill cannot be achieved in a classroom, it refers to a particular organization's  policy."]
["S8","S8: Configure, deploy and use computer, digital network and cyber security technology.","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI502 Large Scale Data Processing\n",null,"FULLY MET","MO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nintrusion and anomaly detection and prevention systems; network security tools; firewalls.\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nweb security; cyber attacks to web applications; privacy enhancing technologies; malware analysis.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements.\nIndicative Content\ncoding, both backend and frontend; testing.\n\nMO CI502 LO5 Configure security features for enterprise level application\nIndicative Content\ndistributed computing; fault tolerance; service oriented architecture.","S8 in CI515 is assessed by a security analysis report.\n\nS8 in CI510 is assessed by a security analysis report.\n\nS8 in CI536 is assessed via the development of a software artefact with consideration to the security and privacy issues.\n\nS8 in CI502 is assessed via a report that contains a learning journal.","In CI515, CI 502, and CI510 students are expected to deploy and configure security technology while in CI536  they are expected to use that technology as part of a group project."]
["S9","S9: Recommend improvements to the cyber security posture of an employer or customer based on research into future potential cyber threats and considering threat trends.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling;\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence; web security.\n\n","S9 in CI515 is assessed via an exam.\n\nS9 in CI506 is assessed via a group report.\n\nS9 in CI510 is assessed via security analysis report.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S10","S10: Design, build, test and troubleshoot a network incorporating more than one subnet with static and dynamic routes, to a given design requirement without supervision. Provide evidence that the system meets the design requirement.","CI515 Network Security",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nnetwork protocols; Network security tools; firewalls; VPNs and IPSec.","S10 is assessed via an individual security analysis report.","CI515  provides a understanding of areas related to security that will allow graduates to act professionally in the design, analysis, implementation, and reporting of network security strategies."]
["S11","S11: Analyse security requirements given (functional and non-functional security requirements that may be presented in a security case) against other design requirements (e.g. usability, cost, size, weight, power, heat, supportability etc.) for a given system or product. Identify conflicting requirements and propose, with reasoning, resolution through appropriate trade-offs.","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nsecurity requirements engineering; security and privacy be design.\n\nMO CI536 LO2 Rsearch and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nRequirements management.","S11 in CI506 is assessed via a group report.\n\nS11 in CI536 is assessed via the development of a software artefact (project)..","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledfge in practice. "]
["S12","S12: Design and build, systems in accordance with a security case within broad but generally well-defined parameters. This should include selection and configuration of typical security hardware and software components. Provide evidence that the system has properly implemented the security controls required by the security case","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI405 Computing Technologies\n",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nnetwork protocols; Network security tools; firewalls; VPNs and IPSec.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nweb security; database security; privacy enhancing technologies.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nMO CI536 LO6 Assess the fitness for purpose of such an ICT solution.\nIndicative Content\nDesign techniques; Coding, both backend and front end; Testing\n\nMO CI405 LO1 Demonstrate an understanding of the main hardware and software components of a computer system\nIndicative Content\nComputer organisation and organisation","S12 in CI515 is assessed via a security analysis report.\n\nS12 in CI510 is assessed via a security analysis report and an exam.\n\nS12 in CI536 is assessed via the development of a software artefact with the considertion of security and privacy issues. \n\nS12 in CI405 is assessed via a report that contains a learning journal","In CI515 and CI510 students are expected to learn how to design and build systems  while in CI536  they are expected to practice that knowledge in the  context of a complete  group project."]
["S13","S13: Write program code or scripts to meet a given design requirement in accordance with employers' coding standards","CI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI435 Introduction to Web Development\n\nCI553 Object Oriented Development and Testing",null,"FULLY MET","MO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.","S13 in CI510 is assessed via an exam.\n\nS13 in CI536 is assessed via a delivered software.\n\nS13 in CI435 is assessed via a project and an exam.\n\nS13 in CI553 is assessed via an exam. ","In CI510 students are expected to use a scripting language while in CI536, CI435, and CI553 they are expected to use an appropriate high-level language such as Java."]
["S14","S14: Design systems employing encryption to meet defined security objectives. Develop and implement a plan for managing the associated encryption keys for the given scenario or system.","CI515 Network Security",null,"FULLY MET","MO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nCryptography and cryptanalysis; public key infrastructures and digital signatures.","S13 is assessed via a security analysis report. ","Student are expected to use cryptographic primitives to review and evaluate cryptographic protocols, and examine the rational decisions in the design of tokens and secure elements."]
["S15","S15: Use tools, techniques and processes to actively prevent breaches to digital system security.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nnetwork protocols; Network security tools; firewalls; VPNs and IPSec; intrusion prevention systems.\n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nformal security modellin; threat modelling.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware taxonomy and analysis; reverse engineering; cyber threat intelligence.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements.\nIndicative Content\nCoding, both backend and front end; Testing","S15 in CI515 is assessed by a security analysis report.\n\nS15 in CI506 is assessed by a group report.\n\nS15 in CI510 is assessed by a security analysis report and an exam.\n\nS15 in CI536 is assessed via the development of a software artefact with the consideration of security and privacy issues.","In CI515, CI506, and CI510 students learn tools, techniques and processes,  while in CI536 students have the opportunity to apply those in the context of a group project. . "]
["S17","S17: Identify cyber security threats relevant to a defined context","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\nmalware analysis; cyber threat intelligence; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nIndicative Content\nTesting.","S17 in CI515 is assessed via an exam.\n\nS17 in CI506 is assessed via a group report..\n\nS17 in CI510 is assessed via an exam.\n\nS17 in CI536 is assessed via the development of a software artefact (project).","In CI515, CI506, and CI510 students learn threat modelling and threat identification techniques  while in CI536 students have the opportunity to apply these techniques  in the context of a group project. . "]
["S27","S27: Accurately, objectively and concisely record and report the appropriate cyber security information, including in written reports within a structure or template provided.","CI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nproject documentation.","S27 in CI510 is assessed via a security analysis report\n\nS27 in CI536 is assessed via the development of a software artefact and its documentation.","Students are expected to follow specific template for their written reports. "]
["S28","S28: Configure digital system monitoring and analysis tools (e.g. SIEM tools), taking account of threat & vulnerability intelligence, indicators of compromise.","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy and analysis; cyber attacks.","S28 is assessed via a security analysis report and an exam. ","Students are expected to use open source SIEM tools, such as AlienVault OSSIM."]
[null,"Behaviours"]
["B1","B1: Logical - Applies logical thinking, for example, uses clear and valid reasoning when making decisions related to undertaking the work instructions","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nMO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\n\nMO CI453 LO5 Demonstrate an understanding of issues relating to information security in a professional context.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nMO CI536 LO6 Assess the fitness for purpose of such an ICT solution","B1 in CI515 is assessed via a security analysis report and an exam.\n\nB1 in CI506 is assessed via a group report.\n\nB1 in CI510 is assessed via a security analysis report and an exam.\n\nB1 in CI453 is assessed via a group presentation or report..\n\nB1 in CI536 is assessed via a group presentation or project.","In all assessments students are expected to apply logical thinking. "]
["B2","B2: Analytical - working with data effectively to see patterns, trends and draw meaningful conclusions.","CI404 Introduction to Cyber Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI406 Introduction to Artificial Intelligence\n\nCI502 Large Scale Data Processing",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nMO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\n\nMO CI406 LO2 Apply AI algorithms and techniques.\nIndicative Content\nApplications of AI; Intelligent reasoning; machine learning.\n\nMO CI502 LO3 Configure Hadoop clusters for processing large datasets.\nIndicative Content\nbig data and hadoop.","B2 in CI404 is assessed via an exam.\n\nB2 in CI510 is assessed via a security analysis report and an exam.\n\nB2 in CI536 is assessed via a group project or presentation.\n\nB2 in CI406 is assessed via an exam.\n\nB2 in CI502 is assessed via a report that contains a learning journal.","Students in CI404 , CI510, CI502 and CI406 are expected to work  with data gathered from security tools while in CI536 to work with data collected from humans through questionaires in order to elicit application requirements. "]
["B3","B3: Works independently and takes responsibility. For example works diligently regardless of how much they are being supervised, and stays motivated and committed when facing challenges","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B4","B4: Shows initiative, being resourceful when faced with a problem and taking responsibility for solving problems within their own remit","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B5","B5: Thorough & organised. For example uses their time effectively to complete work to schedule and takes responsibility for managing their own work load and time","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B6","B6: Works effectively with a wide range of people in different roles, internally and externally, with a regard to inclusion & diversity policy","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO4 U nderstand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues\nMO CI536 LO3 Work effectively in an agile team, plan projects and manage time","B6 in both modules is assessed via a group project or group presentation.","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B7","B7: Communicates effectively in a wide variety of situations for example contributing effectively to meetings and presenting complex information to technical and non-technical audiences","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B6 in both modules is assessed via a group project or group presentation.","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B8","B8: Maintains a productive, professional and secure working environment.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\nMO CI453 LO4 Effectively manage the development process, adhering to an agile project process\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B6 in both modules is assessed via a group project or group presentation.","In both modules students are expected to assess the performane of their peers."]
["B9","B9: Creative - taking a variety of perspectives, taking account of unpredictable adversary and threat behaviours and approaches, bring novel and unexpected solutions to address cyber security challenges","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware analysis; cyber attacks to web applciations; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B9 in CI506 is assessed via a group report.\n\nB9 in CI510 is assessed via an exam.\n\nB9 in CI536 is assessed via a group presentation or project.","Students in all three  modules are expected to identify threats and security mechanisms for mitigating those threats using also their creativity. "]
["B10","B10: Problem Solving - Identifies issues quickly, solves complex problems and applies appropriate solutions. Dedicated to finding the true root cause of any problem and find solutions that prevent recurrence.","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Implement security countermeasures against cyber attacks.\nMO CI510 LO4 Evaluate the best available techniques for mitigating important privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B10 in CI506 is assessed  via group report.\n\nB10 in CI510 is assessed via a security analysis report and an exam.\n\nB10 in CI536 is assessed via a group project or presentation.","Students in all three modules are expected to apply problem solving techniques to successfully complete the assignments. "]
[]
[]
[]
[null,"KSB Statement ",null,"Documents Present","KSB coverage","Evidence","Assessment method","Supporting comments/rationale"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber risk analyst"]
[null,"This list contains the core KSBs for the Cyber security technologist occupation, plus the specific KSBs for the Cyber risk analyst option. "]
[null,"Knowledge"]
["K1","K1: Principles of networks: OSI and TCP/IP models, data, protocols and how they relate to each other; the main routing protocols; the main factors affecting network performance including typical failure modes in protocols and approaches to error control; virtual networking","Module CI404 Introduction to Cyber Security\nModule CI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nNetwork protocols; VPNs and IPSec,PKI and digital signatures.","K1 in CI404 is assessed via an exam. \n\nK1 in CI515 is assessed via an exam. ","Students in year 1 are introduced to the fundamentals of networking, while in year 2 they gain a deep understanding of networking. "]
["K2","K2: the concepts, main functions and features of at least three Operating Systems (OS) and their security functions and associated security features.","Module CI515 Network Security\n\nModule CI510 Security and Dependability\n\nModule CI405 Computing Technologies",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nOS security; network security tools, (e.g. nmpap, wireshark, scapy); firewalls.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware taxonomy (e.g. viruses, Trojan horses, rootkits, backdoors, worms) and analysis; penetration testing approaches and tools.\n\nMO CI405 LO2 Utilise the basic features of an operating system \nIndicative Content \nsystem software","K2 in CI515 is assessed via an exam\n\nK2 in CI510 is assessed via an exam.\n\nK2 in CI405 is assessed via a report that contains a learning journal.\n\n","In both modules students learn the principles, primitives, and practices for ensuring security at the operating system. CI5 focuses on the lowest levels of software stack while CI510 focuses on attacks that aim to evade system's security mechanisms. "]
["K3","K3: Cyber security concepts and why cyber security matters to business and society; Security assurance concepts and how assurance may be achieved in practice including penetration testing and extrinsic assurance methods.","Module CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability\n\n",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems\nMO CI506 LO3 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nSecurity requirements engineering; Formal security modelling and analysis; security metrics; Regulatory processes for secure system development, evaluation, and certification.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nPenetration testing approaches and tools;","K3 in CI506 is assessed via a group report. Students are expected to analyse and design a system described by a case study.\n\nK3 in CI510 is assessed in via an individual security analysis report. Students are expected to attempt to penetrate a system and report on their results.","Students are expected in a group to analyse and design a system that meets business requirements and consider the security aspect of that system for the business. Students are also expected to attempt to penetrate a system and report on their results. "]
["K4","K4: the main types of common attack techniques; also the role of human behaviour, including the significance of the 'insider threat'. Including: how attack techniques combine with motive and opportunity to become a threat. Techniques and strategies to defend against attack techniques and mitigate hazards","Module CI404 Introduction to Cyber Security\n\nModule CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content \nInformation security fundamentals; Access control models and techniques, and security mechanisms; security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Human factors - social engineering attacks, phising; secure coding techniques and standards, manual code review/automatic code review tools.\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling; security requirements engineering.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO4 Implement security countermeasures against cyber attacks\nIndivative Content\nweb applications and database security; data and application security in the cloud; cyber attacks to web applications (e.g. SQL injection, XSS); malware taxonomy.","K4 in CI404 is assessed via an exam. \n\nK4 in CI506 is assessed via a group project. \n\nK4 in CI510 is assessed via an exam. ","Students in year 1 are introduced to cyber security threats, the human factor, while in year 2 they learn how to carry out threat modelling at a design stage, and protect systems from cyber threats. "]
["K5","K5: the significance of identified trends in cyber security threats and understand the value and risk of this analysis. How to deal with emerging attack techniques (including 'zero day'), hazards and vulnerabilities relevant to the digital systems and business environment.","Module CI404 Introduction to Cyber Security\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels. \nMO CI404 LO3 Explain privacy fundamentals and recognise privacy engineering techniques.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content\nInformation security fundamentals; Security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Privacy fundamentals, data privacy legislation; Secure coding techniques and standards, manual code review / automatic code review tools.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nCyber-attacks to web applications (e.g. SQL injection, XSS);  Cyber threat intelligence; \nPrivacy threats and Privacy Enhancing Technologies (PETs) (e.g. anonymity protocols, crowds, onion routing, ToR).","K5 in CI404 is assessed by an exam.\n\nK5 in CI510 is assessed by an individual security analysis report and an exam. ","Students in year 1 learn to recognise the significance of cyber threats and their value and risk, while in year 2 they learn how to deal with attacks. "]
["K6","K6: lifecycle and service management practices to an established standard to a foundation level for example Information Technology Infrastructure Library (ITIL) foundation level.","Module CI506 Secure Systems Analysis and Design\n",null,"PARTIALLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nRegulatory processes for secure system development, evaluation, and certification.","K6 is assessed via a group project.","Students are expected to learn regulatory processes for secure development lifecycle, evaluation, and certification. "]
["K7","K7: cyber incident response processes, incident management processes and evidence collection/preservation requirements to support incident investigation","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; incident response..\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk assessment. \nIndicative Content\ninformation security management; incident resposnse; disaster recovery; business continuity.","K7 in CI404 is assessed via an exam.\n\nK7 in CI506 is assessed via a group project. ","Students in year 1 are expected to learn how to respond to incidents, while in year 2 they are expected to learn how to manage incidents and ensure business continutity. "]
["K8","K8: Understands the main features, applicability and how to apply the significant law, regulations and standards relevant specifically to cyber security. To include: laws, regulations & standards relating to personal data and privacy (e.g. Data Protection Act 2018 implementing General Data Protection Regulation); use of digital systems (e.g. Computer Misuse Act 1990 ); regulatory standards for cyber security, intelligence collection and law enforcement (e.g. Intelligence Services Act 1994, Regulation of Investigatory Powers Act 2000; standards for good practice in cyber security (e.g. ISO 27001, CyberEssentials, NIST) and any updates or additions","CI404 Introduction to Cyber Security\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; privacy fundamentals, data privacy legislation; secure coding standards.\n\nMO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K8 in CI404 is assessed by an exam.\n\nK8 in CI453 is assesed by an individual project  and a group project.\n\nK8 in CI536 is assessed by a group project or presentation,  where students develop a software and apply security standards and regulations.","In CI404 and CI453 students learn about security and privacy standards and regulations, while in CI536 they have the opportunity to apply them in practice while developing a software. "]
["K9","K9: ethical principles and codes of good practice of at least one significant cyber security professional body and the ethical responsibilities of a cyber security professional.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K9 in CI453 is assesed by an individual project  and a group project.\n\nK9 in CI536 is assessed by a group project or presentation  where students develop a software and apply security standards and regulations.\n\n","In CI453 students learn about ethical and codes of good practice while in CI536 they have the opportunity to apply them in practice. "]
["K10","K10: how to analyse employer or customer requirements to derive security objectives and taking account of the threats and overall context develop a security case which sets out the proposed security measures in the context with reasoned justification","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems.\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity requirements engineering; formal security modelling and design; security threat modelling; security and privacy patterns.\n\nMO CI 536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nproject lifecycle; requirements management; design techniques; ","K10 in CI506 is a assessed by a group report  where students are carrying out security analysis and design of a system.\n\nK10 in CI536 is assessed by a group project or presentation  where students develop a software taking into consideration security and privacy.","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledfge in practice. "]
["K11","K11: horizon scanning including use of recognised sources of threat intelligence and vulnerabilities.","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy.","K11 is assessed by an individual report where students have to carry horizon scanning and use cyber threat intelligence feeds and also by an exam where they are expected to demonstrate knowledge of quality characteristics of cyvber threat intelligence.","We cover vulnerability repositories (e.g. NIST CVS and NVD), cyber threat intelligence inluding its process and quality characteristics, and also framework such as MITRE's ATT&CK."]
["K12","K12: common security architectures and methodologies; be aware of reputable security architectures that incorporates hardware and software components, and sources of architecture patterns and guidance. How cyber security technology components are typically deployed in digital systems to provide security functionality including: hardware and software to implement security controls","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork security tools, (e.g. nmpap, wireshark, scapy); firewwalls; intrusion and anomaly detection and prevention systems; PKI and digital signatures; VPNS and IPSec.\n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nsecurity and privacy patterns; formal security modelling and analysis\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content\nweb applications and database security; data and application security in the cloud.","K12 in CI515 is assessed by an individual security analysis report and an exam.\n\nK12 in CI506 is assessed by a group report.\n\nK12 in CI510 is assessed by an exam. ","The focus of CI506 is from a design perspective, while the focus of C1510 and especially CI515 is from an implementation perspective. "]
["K13","K13: the basic terminology and concepts of cryptography; common cryptography techniques in use; the importance of effective key management and the main techniques used; legal, regulatory and export issues specific to the use of cryptography","CI404 Introduction to Cyber Security\n\nCI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\ncryptography and cryptanalysis; PKI and digital signatures; VPNs and IPSec.","K13 in CI404 is assessed via an exam.\n\nK13 in CI515 is assesse via an individual security analysis report.","Students in CI404 are introduced to the fundamental of cryptography while  in CI515 are expected to use cryptographic primitives to review and evaluate cryptographic protocols, and examine the rational decisions in the design of tokens and secure elements."]
["K14","K14: risk assessment and audit methodologies and approaches to risk treatment; approaches to identifying the vulnerabilities in organisations and security management systems; the threat intelligence lifecycle; the role of the risk owner in contrast with other stakeholders","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content \ncyber threat intelligence;","K14 in CI404 is assessed via an exam.\n\nK14 in CI506 is assessed via a  group report.\n\nK14 in CI510 is assessed via an individual security analysis  report.","Students in CI404 are introduced to the fundamentals of risk management, while in CI506 learn about risk managemetn methodolgies and in CI510 learn about the cyber threat intelligence lifecycle. "]
["K15","K15: principles of security management systems, including governance, organisational structure, roles, policies, standards, guidelines and how these all work together to deliver the identified security outcomes.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.","K15 in CI404 is assessed via an exam.\n\nK15 in CI506 is assessed via a  group report.\n","Students in CI404 are introduced to the fundamentals of security management systems,, while in CI506 learn techniques on how to develop security management systems."]
["K16","K16: function and features of significant digital system components; typical architectures; common vulnerabilities in digital systems; principles and common practice in digital system security","CI404 Introduction to Cyber Security\n\nCI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; access control models and techniques; security mechanisms.\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork protocols; network security tools; Internet of Things security; Intrusion and anomaly detection and prevention systems.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; web applications and database security; data and application security in the cloud.","K16 in CI404 is assessed via an exam.\n\nK16 in CI515 is assessed via an exam and an individual security analysis report.\n\nK16 in CI510 is assessed via an exam and an individual security analysis report. ","Students in CI404 learn about the principles and practices in digital system security while in CI515 and CI510 learn about system components and common vulnerabilities respectively. "]
["K17","K17: programming or scripting languages","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI401 Introduction to Programming\n\nCI435 Introduction to Web Development\n\nCI553 Object Oriented Development and Testing\n\n",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nNetwork security tools;\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI401 LO1 Use sequence, selection and iteration to develop simple  applications \nMO CI401 LO2 Utilise a variety of data types and collections\nMO CI401 LO3 Design and develop simple programs, including detection and correction of errors in both logic and syntax\nMO CI401 LO5 Demonstrate a practical understanding of Object Oriented programming techniques\nIndicative Content\nProblem solving techniques; Data types and expressions; Control structures including loops and conditional statements; Input and output; Functions; Objects including attributes, methods and parameters\n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.\n","K17 in CI515 is assessed via a security analysis report.\n\nK17 in CI510 is assessed via an exam.\n\nK17 in CI536 is assessed via a delivered software.\n\nK17 in CI401 is assessed via a software application an en exam.\n\nK17 in CI435 is assessed via a project and an exam.\n\nK17 in CI553 is assessed via an exam.","In CI515 and CI510 students are expected to use a scripting language while in CI536 and in CI401, CI553  and CI435 they are expected to use an appropriate high-level language such as Java."]
[null,"Skills"]
["S1","S1: Discover vulnerabilities in a system by using a mix of research and practical exploration","CI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence.","S1 in CI515 is assessed via an individual security analysis report.\n\nS2 in CI510 is assessed via an individual security analysis report. ","In CI510 students learn how to identify security vulnerabilities and consider countermeasures that can mitigate their exploitation, while in CI515 students gain a practical understanding and the opportunity to apply techniques for detecting network security threats and corresponding countermeasures. "]
["S2","S2: Analyse and evaluate security threats and hazards to a system or service or processes. Use relevant external source of threat intelligence or advice (e.g. National Cyber Security Centre) Combine different sources to create an enriched view of cyber threats and hazards","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware. \nIndicative Content\nCyber attacks to web applications; malware taxonomy and analysis; cyber threat intelligence.","S2 in CI506 is assessed via a group report  where students are expected to model and reason about cyber threats.\n\nS2 in CI510 is assessed via an exam.","In CI506 students learn threat modelling techniques and methods, while in CI510 learn how to utilise cyber threat intelligence feeds."]
["S3","S3: Research and investigate common attack techniques and relate these to normal and observed digital system behaviour and recommend how to defend against them. Interpret and demonstrate use of external source of vulnerabilities (e.g. OWASP, intelligence sharing initiatives, open source)","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy and analysis; cyber attacks to web applications ","S3 is assessed via an individual security analysis report and an exam.","Students learn models and frameworks such as the cyber kill chain and MITRE's ATT&CK and utilise cyber threat intelligence sources."]
["S4","S4: Undertake security risk assessments for simple systems without direct supervision and propose basic remediation advice in the context of the employer.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content \nrisk management; risk assessment.","S4 in CI404 is assessed via an exam.\n\nS4 in CI506 is assessed via a group report.","In year 1 studenst learn about the fundamentals of risk management while in year 2 they learn techniques on how to carry out risk management. "]
["S5","S5: Source and analyse security cases and describe what threats, vulnerability or risks are mitigated and identify any residual areas of concern.\n\n\n","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nNetwork security tools; firewalls.\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative content\nrisk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; vunerability management; cyber attacks to web applicatons.","S5 in CI515 is assessed via an individual security analysis report.\n\nS5 in CI506 is assessed via a group report..\n\nS5 in CI510 is assessed via an individual security analysis report and an exam.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S6","S6: Analyse employer or customer requirements to derive security objectives and taking account of the threats and overall context develop a security case which sets out the proposed security measures in the context with reasoned justification","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity requirements engineering; security threat modelling; security and privacy by design.\n\nMO CI510 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nRequirements management.","S6 in CI506 is assessed via a group report.\n\nS6 in CI536 is assessed via the development of a software artefact taking into consideration security and privacy.","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledge in practice. "]
["S7","S7: Identify and follow organisational policies and standards for information and cyber security and operate according to service level agreements or other defined performance targets."]
["S8","S8: Configure, deploy and use computer, digital network and cyber security technology.","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI502 Large Scale Data Processing\n",null,"FULLY MET","MO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nintrusion and anomaly detection and prevention systems; network security tools; firewalls.\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nweb security; cyber attacks to web applications; privacy enhancing technologies; malware analysis.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements.\nIndicative Content\ncoding, both backend and frontend; testing.\n\nMO CI502 LO5 Configure security features for enterprise level application\nIndicative Content\ndistributed computing; fault tolerance; service oriented architecture.","S8 in CI515 is assessed by a security analysis report.\n\nS8 in CI510 is assessed by a security analysis report.\n\nS8 in CI536 is assessed via the development of a software artefact with consideration to the security and privacy issues.\n\nS8 in CI502 is assessed via a report that contains a learning journal.","In CI515, CI 502, and CI510 students are expected to deploy and configure security technology while in CI536  they are expected to use that technology as part of a group project."]
["S9","S9: Recommend improvements to the cyber security posture of an employer or customer based on research into future potential cyber threats and considering threat trends.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling;\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence; web security.\n\n","S9 in CI515 is assessed via an exam.\n\nS9 in CI506 is assessed via a group report..\n\nS9 in CI510 is assessed via security analysis report.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S13","S13: Write program code or scripts to meet a given design requirement in accordance with employers' coding standards","CI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI435 Introduction to Web Development\n\nCI553 Object Oriented Development and Testing",null,"FULLY MET","MO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.","S13 in CI510 is assessed via an exam.\n\nS13 in CI536 is assessed via a delivered software.\n\nS13 in CI435 is assessed via a project and an exam.\n\nS13 in CI553 is assessed via an exam. ","In CI510 students are expected to use a scripting language while in CI536, CI435, and CI553 they are expected to use an appropriate high-level language such as Java."]
["S16","S16: Conduct cyber-risk assessments against an externally (market) recognised cyber security standard using a recognised risk assessment methodology.","CI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nRisk assessment.","S16 is assessed via a group report.","Students are expected to use a recognised risk assessment methodology from NIST."]
["S17","S17: Identify cyber security threats relevant to a defined context","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\nmalware analysis; cyber threat intelligence; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nIndicative Content\nTesting.","S17 in CI515 is assessed via an exam.\n\nS17 in CI506 is assessed via a group report.\n\nS17 in CI510 is assessed via an exam.\n\nS17 in CI536 is assessed via the development of a software artefact.","In CI515, CI506, and CI510 students learn threat modelling and threat identification techniques  while in CI536 students have the opportunity to apply these techniques  in the context of a group project. . "]
["S18","S18: Develop information security policies or processes to address a set of identified risks, for example from security audit recommendations."]
["S19","S19: Develop information security policies within a defined scope to take account of legislation and regulation relevant to cyber security."]
["S20","S20: Take an active part in a security audits against recognised cyber security standards, undertake gap analysis and make recommendations for remediation.."]
["S22","S22: Develop plans for local business continuity for approval within defined governance arrangements for business continuity.","CI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nsecurity management; business continuity ","S21 is assessed via a group report.","Students develop a business continuity  plan for a given case study."]
["S23","S23: Assess security culture using a recognised approach."]
["S24","S24: Design and implement a simple ‘security awareness’ campaign to address a specific aspect of a security culture.","CI453 Working in the Computing Industry",null,"FULLY MET","MO CI453 LO5D emonstrate an understanding of issues relating to information security in a professional context.\nIndicative Content\nWorking practices in computing and business IT industries.","S24 is assessed via a group report.","Students develop a web application for increasing security awareness. "]
["S27","S27: Accurately, objectively and concisely record and report the appropriate cyber security information, including in written reports within a structure or template provided.","CI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nproject documentation.","S27 in CI510 is assessed via a security analysis report\n\nS27 in CI536 is assessed via the development of a software artefact and its documentation (project)","Students are expected to follow specific template for their written reports. "]
[null,"Behaviours"]
["B1","B1: Logical - Applies logical thinking, for example, uses clear and valid reasoning when making decisions related to undertaking the work instructions","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nMO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\n\nMO CI453 LO5 Demonstrate an understanding of issues relating to information security in a professional context.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nMO CI536 LO6 Assess the fitness for purpose of such an ICT solution","B1 in CI515 is assessed via a security analysis report and an exam.\n\nB1 in CI506 is assessed via a group report..\n\nB1 in CI510 is assessed via a security analysis report and an exam.\n\nB1 in CI453 is assessed via a group project or presentation..\n\nB1 in CI536 is assessed via a group project or presentation.","In all assessments students are expected to apply logical thinking. "]
["B2","B2: Analytical - working with data effectively to see patterns, trends and draw meaningful conclusions.","CI404 Introduction to Cyber Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI406 Introduction to Artificial Intelligence\n\nCI502 Large Scale Data Processing",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nMO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\n\nMO CI406 LO2 Apply AI algorithms and techniques.\nIndicative Content\nApplications of AI; Intelligent reasoning; machine learning.\n\nMO CI502 LO3 Configure Hadoop clusters for processing large datasets.\nIndicative Content\nbig data and hadoop.","B2 in CI404 is assessed via an exam.\n\nB2 in CI510 is assessed via a security analysis report and an exam.\n\nB2 in CI536 is assessed via a group project or presentation.\n\nB2 in CI406 is assessed via an exam.\n\nB2 in CI502 is assessed via a report that contains a learning journal.","Students in CI404 , CI510, CI502 and CI406 are expected to work  with data gathered from security tools while in CI536 to work with data collected from humans through questionaires in order to elicit application requirements. "]
["B3","B3: Works independently and takes responsibility. For example works diligently regardless of how much they are being supervised, and stays motivated and committed when facing challenges","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B4","B4: Shows initiative, being resourceful when faced with a problem and taking responsibility for solving problems within their own remit","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B5","B5: Thorough & organised. For example uses their time effectively to complete work to schedule and takes responsibility for managing their own work load and time","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B6","B6: Works effectively with a wide range of people in different roles, internally and externally, with a regard to inclusion & diversity policy","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO4 U nderstand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues\nMO CI536 LO3 Work effectively in an agile team, plan projects and manage time","B6 in both modules is assessed via a group project or presentation.","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B7","B7: Communicates effectively in a wide variety of situations for example contributing effectively to meetings and presenting complex information to technical and non-technical audiences","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B7 in both modules is assessed via a group project or presentation","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B8","B8: Maintains a productive, professional and secure working environment.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\nMO CI453 LO4 Effectively manage the development process, adhering to an agile project process\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B8 in both modules is assessed via a group project or presentation.","In both modules students are expected to assess the performane of their peers."]
["B9","B9: Creative - taking a variety of perspectives, taking account of unpredictable adversary and threat behaviours and approaches, bring novel and unexpected solutions to address cyber security challenges","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware analysis; cyber attacks to web applciations; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B9 in CI506 is assessed via a group report.\n\nB9 in CI510 is assessed via an exam.\n\nB9 in CI536 is assessed via a project or presentation.","Students in all three  modules are expected to identify threats and security mechanisms for mitigating those threats using also their creativity. "]
["B10","B10: Problem Solving - Identifies issues quickly, solves complex problems and applies appropriate solutions. Dedicated to finding the true root cause of any problem and find solutions that prevent recurrence.","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Implement security countermeasures against cyber attacks.\nMO CI510 LO4 Evaluate the best available techniques for mitigating important privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B10 in CI506 is assessed  via group report..\n\nB10 in CI510 is assessed via a security analysis report and an exam.\n\nB10 in CI536 is assessed via a group project or presentation..","Students in all three modules are expected to apply problem solving techniques to successfully complete the assignments. "]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[null,"KSB Statement ",null,"Documents Present","KSB coverage","Evidence","Assessment method","Supporting comments/rationale"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber defend & respond"]
[null,"This list contains the core KSBs for the Cyber security technologist occupation, plus the specific KSBs for the Cyber defend & respond option."]
[null,"Knowledge"]
["K1","K1: Principles of networks: OSI and TCP/IP models, data, protocols and how they relate to each other; the main routing protocols; the main factors affecting network performance including typical failure modes in protocols and approaches to error control; virtual networking","Module CI404 Introduction to Cyber Security\nModule CI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nNetwork protocols; VPNs and IPSec,PKI and digital signatures.","K1 in CI404 is assessed via an exam. \n\nK1 in CI515 is assessed via an exam. ","Students in year 1 are introduced to the fundamentals of networking, while in year 2 they gain a deep understanding of networking. "]
["K2","K2: the concepts, main functions and features of at least three Operating Systems (OS) and their security functions and associated security features.","Module CI515 Network Security\n\nModule CI510 Security and Dependability\n\nModule CI405 Computing Technologies",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nOS security; network security tools, (e.g. nmpap, wireshark, scapy); firewalls.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware taxonomy (e.g. viruses, Trojan horses, rootkits, backdoors, worms) and analysis; penetration testing approaches and tools.\n\nMO CI405 LO2 Utilise the basic features of an operating system \nIndicative Content \nsystem software","K2 in CI515 is assessed via an exam\n\nK2 in CI510 is assessed via an exam.\n\nK2 in CI405 is assessed via a report that contains a learning journal.\n\n","In both modules students learn the principles, primitives, and practices for ensuring security at the operating system. CI5 focuses on the lowest levels of software stack while CI510 focuses on attacks that aim to evade system's security mechanisms. "]
["K3","K3: Cyber security concepts and why cyber security matters to business and society; Security assurance concepts and how assurance may be achieved in practice including penetration testing and extrinsic assurance methods.","Module CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability\n\n",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems\nMO CI506 LO3 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nSecurity requirements engineering; Formal security modelling and analysis; security metrics; Regulatory processes for secure system development, evaluation, and certification.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nPenetration testing approaches and tools;","K3 in CI506 is assessed via a group report. Students are expected to analyse and design a system described by a case study.\n\nK3 in CI510 is assessed in via an individual security analysis report. Students are expected to attempt to penetrate a system and report on their results.","Students are expected in a group to analyse and design a system that meets business requirements and consider the security aspect of that system for the business. Students are also expected to attempt to penetrate a system and report on their results. "]
["K4","K4: the main types of common attack techniques; also the role of human behaviour, including the significance of the 'insider threat'. Including: how attack techniques combine with motive and opportunity to become a threat. Techniques and strategies to defend against attack techniques and mitigate hazards","Module CI404 Introduction to Cyber Security\n\nModule CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content \nInformation security fundamentals; Access control models and techniques, and security mechanisms; security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Human factors - social engineering attacks, phising; secure coding techniques and standards, manual code review/automatic code review tools.\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling; security requirements engineering.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO4 Implement security countermeasures against cyber attacks\nIndivative Content\nweb applications and database security; data and application security in the cloud; cyber attacks to web applications (e.g. SQL injection, XSS); malware taxonomy.","K4 in CI404 is assessed via an exam. \n\nK4 in CI506 is assessed via a group project. \n\nK4 in CI510 is assessed via an exam. ","Students in year 1 are introduced to cyber security threats, the human factor, while in year 2 they learn how to carry out threat modelling at a design stage, and protect systems from cyber threats. "]
["K5","K5: the significance of identified trends in cyber security threats and understand the value and risk of this analysis. How to deal with emerging attack techniques (including 'zero day'), hazards and vulnerabilities relevant to the digital systems and business environment.","Module CI404 Introduction to Cyber Security\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels. \nMO CI404 LO3 Explain privacy fundamentals and recognise privacy engineering techniques.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content\nInformation security fundamentals; Security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Privacy fundamentals, data privacy legislation; Secure coding techniques and standards, manual code review / automatic code review tools.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nCyber-attacks to web applications (e.g. SQL injection, XSS);  Cyber threat intelligence; \nPrivacy threats and Privacy Enhancing Technologies (PETs) (e.g. anonymity protocols, crowds, onion routing, ToR).","K5 in CI404 is assessed by an exam.\n\nK5 in CI510 is assessed by an individual security analysis report and an exam. ","Students in year 1 learn to recognise the significance of cyber threats and their value and risk, while in year 2 they learn how to deal with attacks. "]
["K6","K6: lifecycle and service management practices to an established standard to a foundation level for example Information Technology Infrastructure Library (ITIL) foundation level.","Module CI506 Secure Systems Analysis and Design\n",null,"PARTIALLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nRegulatory processes for secure system development, evaluation, and certification.","K6 is assessed via a group project.","Students are expected to learn regulatory processes for secure development lifecycle, evaluation, and certification. "]
["K7","K7: cyber incident response processes, incident management processes and evidence collection/preservation requirements to support incident investigation","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; incident response..\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk assessment. \nIndicative Content\ninformation security management; incident resposnse; disaster recovery; business continuity.","K7 in CI404 is assessed via an exam.\n\nK7 in CI506 is assessed via a group project. ","Students in year 1 are expected to learn how to respond to incidents, while in year 2 they are expected to learn how to manage incidents and ensure business continutity. "]
["K8","K8: Understands the main features, applicability and how to apply the significant law, regulations and standards relevant specifically to cyber security. To include: laws, regulations & standards relating to personal data and privacy (e.g. Data Protection Act 2018 implementing General Data Protection Regulation); use of digital systems (e.g. Computer Misuse Act 1990 ); regulatory standards for cyber security, intelligence collection and law enforcement (e.g. Intelligence Services Act 1994, Regulation of Investigatory Powers Act 2000; standards for good practice in cyber security (e.g. ISO 27001, CyberEssentials, NIST) and any updates or additions","CI404 Introduction to Cyber Security\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; privacy fundamentals, data privacy legislation; secure coding standards.\n\nMO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K8 in CI404 is assessed by an exam.\n\nK8 in CI453 is assesed by an individual project and a group project..\n\nK8 in CI536 is assessed by a group project or presentation,  where students develop a software and apply security standards and regulations.","In CI404 and CI453 students learn about security and privacy standards and regulations, while in CI536 they have the opportunity to apply them in practice while developing a software. "]
["K9","K9: ethical principles and codes of good practice of at least one significant cyber security professional body and the ethical responsibilities of a cyber security professional.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K9 in CI453 is assesed by an individual project  and a group project.\n\nK9 in CI536 is assessed by a group project or presentation,  where students develop a software and apply security standards and regulations.\n\n","In CI453 students learn about ethical and codes of good practice while in CI536 they have the opportunity to apply them in practice. "]
["K10","K10: how to analyse employer or customer requirements to derive security objectives and taking account of the threats and overall context develop a security case which sets out the proposed security measures in the context with reasoned justification","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems.\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity requirements engineering; formal security modelling and design; security threat modelling; security and privacy patterns.\n\nMO CI 536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nproject lifecycle; requirements management; design techniques; ","K10 in CI506 is a assessed by a group report  where students are carrying out security analysis and design of a system.\n\nK10 in CI536 is assessed by a group project or presentation  where students develop a software taking into consideration security and privacy.","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledfge in practice. "]
["K11","K11: horizon scanning including use of recognised sources of threat intelligence and vulnerabilities.","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy.","K11 is assessed by an individual report where students have to carry horizon scanning and use cyber threat intelligence feeds and also by an exam where they are expected to demonstrate knowledge of quality characteristics of cyvber threat intelligence.","We cover vulnerability repositories (e.g. NIST CVS and NVD), cyber threat intelligence inluding its process and quality characteristics, and also framework such as MITRE's ATT&CK."]
["K12","K12: common security architectures and methodologies; be aware of reputable security architectures that incorporates hardware and software components, and sources of architecture patterns and guidance. How cyber security technology components are typically deployed in digital systems to provide security functionality including: hardware and software to implement security controls","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork security tools, (e.g. nmpap, wireshark, scapy); firewwalls; intrusion and anomaly detection and prevention systems; PKI and digital signatures; VPNS and IPSec.\n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nsecurity and privacy patterns; formal security modelling and analysis\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content\nweb applications and database security; data and application security in the cloud.","K12 in CI515 is assessed by an individual security analysis report and an exam.\n\nK12 in CI506 is assessed by a group report.\n\nK12 in CI510 is assessed by an exam. ","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["K13","K13: the basic terminology and concepts of cryptography; common cryptography techniques in use; the importance of effective key management and the main techniques used; legal, regulatory and export issues specific to the use of cryptography","CI404 Introduction to Cyber Security\n\nCI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\ncryptography and cryptanalysis; PKI and digital signatures; VPNs and IPSec.","K13 in CI404 is assessed via an exam.\n\nK13 in CI515 is assesse via an individual security analysis report.","Students in CI404 are introduced to the fundamental of cryptography while  in CI515 are expected to use cryptographic primitives to review and evaluate cryptographic protocols, and examine the rational decisions in the design of tokens and secure elements."]
["K14","K14: risk assessment and audit methodologies and approaches to risk treatment; approaches to identifying the vulnerabilities in organisations and security management systems; the threat intelligence lifecycle; the role of the risk owner in contrast with other stakeholders","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content \ncyber threat intelligence;","K14 in CI404 is assessed via an exam.\n\nK14 in CI506 is assessed via a  group report.\n\nK14 in CI510 is assessed via an individual security analysis  report.","Students in CI404 are introduced to the fundamentals of risk management, while in CI506 learn about risk managemetn methodolgies and in CI510 learn about the cyber threat intelligence lifecycle. "]
["K15","K15: principles of security management systems, including governance, organisational structure, roles, policies, standards, guidelines and how these all work together to deliver the identified security outcomes.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.","K15 in CI404 is assessed via an exam.\n\nK15 in CI506 is assessed via a  group report.\n","Students in CI404 are introduced to the fundamentals of security management systems,, while in CI506 learn techniques on how to develop security management systems."]
["K16","K16: function and features of significant digital system components; typical architectures; common vulnerabilities in digital systems; principles and common practice in digital system security","CI404 Introduction to Cyber Security\n\nCI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; access control models and techniques; security mechanisms.\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork protocols; network security tools; Internet of Things security; Intrusion and anomaly detection and prevention systems.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; web applications and database security; data and application security in the cloud.","K16 in CI404 is assessed via an exam.\n\nK16 in CI5 is assessed via an exam and an individual security analysis report.\n\nK16 in CI510 is assessed via an exam and an individual security analysis report. ","Students in CI404 learn about the principles and practices in digital system security while in CI515 and CI510 learn about system components and common vulnerabilities respectively. "]
["K17","K17: programming or scripting languages","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI401 Introduction to Programming\n\nCI435 Introduction to Web Development\n\nCI553 Object Oriented Development and Testing",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nNetwork security tools;\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI401 LO1 Use sequence, selection and iteration to develop simple  applications \nMO CI401 LO2 Utilise a variety of data types and collections\nMO CI401 LO3 Design and develop simple programs, including detection and correction of errors in both logic and syntax\nMO CI401 LO5 Demonstrate a practical understanding of Object Oriented programming techniques\nIndicative Content\nProblem solving techniques; Data types and expressions; Control structures including loops and conditional statements; Input and output; Functions; Objects including attributes, methods and parameters\n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.\n","K17 in CI515 is assessed via a security analysis report.\n\nK17 in CI510 is assessed via an exam.\n\nK17 in CI536 is assessed via a delivered software.\n\nK17 in CI401 is assessed via a software application an en exam.\n\nK17 in CI435 is assessed via a project and an exam.\n\nK17 in CI553 is assessed via an exam.","In CI515 and CI510 students are expected to use a scripting language while in CI536 and in CI401, CI553  and CI435 they are expected to use an appropriate high-level language such as Java."]
[null,"Skills"]
["S1","S1: Discover vulnerabilities in a system by using a mix of research and practical exploration","CI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence.","S1 in CI515 is assessed via an individual security analysis report.\n\nS2 in CI510 is assessed via an individual security analysis report. ","In CI510 students learn how to identify security vulnerabilities and consider countermeasures that can mitigate their exploitation, while in CI515 students gain a practical understanding and the opportunity to apply techniques for detecting network security threats and corresponding countermeasures. "]
["S2","S2: Analyse and evaluate security threats and hazards to a system or service or processes. Use relevant external source of threat intelligence or advice (e.g. National Cyber Security Centre) Combine different sources to create an enriched view of cyber threats and hazards","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware. \nIndicative Content\nCyber attacks to web applications; malware taxonomy and analysis; cyber threat intelligence.","S2 in CI506 is assessed via a group report  where students are expected to model and reason about cyber threats.\n\nS2 in CI510 is assessed via an exam.","In CI506 students learn threat modelling techniques and methods, while in CI510 learn how to utilise cyber threat intelligence feeds."]
["S3","S3: Research and investigate common attack techniques and relate these to normal and observed digital system behaviour and recommend how to defend against them. Interpret and demonstrate use of external source of vulnerabilities (e.g. OWASP, intelligence sharing initiatives, open source)","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy and analysis; cyber attacks to web applications ","S3 is assessed via an individual security analysis report and an exam.","Students learn models and frameworks such as the cyber kill chain and MITRE's ATT&CK and utilise cyber threat intelligence sources."]
["S4","S4: Undertake security risk assessments for simple systems without direct supervision and propose basic remediation advice in the context of the employer.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content \nrisk management; risk assessment.","S4 in CI404 is assessed via an exam.\n\nS4 in CI506 is assessed via a group report. ","In year 1 studenst learn about the fundamentals of risk management while in year 2 they learn techniques on how to carry out risk management. "]
["S5","S5: Source and analyse security cases and describe what threats, vulnerability or risks are mitigated and identify any residual areas of concern.\n\n\n","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nNetwork security tools; firewalls.\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative content\nrisk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; vunerability management; cyber attacks to web applicatons.","S5 in CI515 is assessed via an individual security analysis report.\n\nS5 in CI506 is assessed via a group report.\n\nS5 in CI510 is assessed via an individual security analysis report and an exam.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S7","S7: Identify and follow organisational policies and standards for information and cyber security and operate according to service level agreements or other defined performance targets."]
["S8","S8: Configure, deploy and use computer, digital network and cyber security technology.","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI502 Large Scale Data Processing \n",null,"FULLY MET","MO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nintrusion and anomaly detection and prevention systems; network security tools; firewalls.\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nweb security; cyber attacks to web applications; privacy enhancing technologies; malware analysis.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements.\nIndicative Content\ncoding, both backend and frontend; testing.\n\nMO CI502 LO5 Configure security features for enterprise level application\nIndicative Content\ndistributed computing; fault tolerance; service oriented architecture.","S8 in CI515 is assessed by a security analysis report.\n\nS8 in CI510 is assessed by a security analysis report.\n\nS8 in CI536 is assessed via the development of a software artefact with consideration to the security and privacy issues.\n\nS8 in CI502 is assessed via a report that contains a learning journal.","In CI515, CI 502, and CI510 students are expected to deploy and configure security technology while in CI536  they are expected to use that technology as part of a group project."]
["S9","S9: Recommend improvements to the cyber security posture of an employer or customer based on research into future potential cyber threats and considering threat trends.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling;\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence; web security.\n\n","S9 in CI515 is assessed via an exam.\n\nS9 in CI506 is assessed via a group report..\n\nS9 in CI510 is assessed via security analysis report.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S13","S13: Write program code or scripts to meet a given design requirement in accordance with employers' coding standards","CI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI435 Introduction to Web Development \n\nCI553 Object Oriented Development and Testing",null,"FULLY MET","MO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.","S13 in CI510 is assessed via an exam.\n\nS13 in CI536 is assessed via a delivered software.\n\nS13 in CI435 is assessed via a project and an exam.\n\nS13 in CI553 is assessed via an exam. ","In CI510 students are expected to use a scripting language while in CI536, CI435, and CI553 they are expected to use an appropriate high-level language such as Java."]
["S15","S15: Use tools, techniques and processes to actively prevent breaches to digital system security.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nnetwork protocols; Network security tools; firewalls; VPNs and IPSec; intrusion prevention systems.\n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nformal security modellin; threat modelling.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware taxonomy and analysis; reverse engineering; cyber threat intelligence.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements.\nIndicative Content\nCoding, both backend and front end; Testing","S15 in CI515 is assessed by a security analysis report.\n\nS15 in CI506 is assessed by a group report..\n\nS15 in CI510 is assessed by a security analysis report and an exam.\n\nS15 in CI536 is assessed via the development of a software artefact with the consideration of security and privacy issues.","In CI515, CI506, and CI510 students learn tools, techniques and processes,  while in CI536 students have the opportunity to apply those in the context of a group project. . "]
["S17","S17: Identify cyber security threats relevant to a defined context","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\nmalware analysis; cyber threat intelligence; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nIndicative Content\nTesting.","S17 in CI155 is assessed via an exam.\n\nS17 in CI506 is assessed via a group report..\n\nS17 in CI510 is assessed via an exam.\n\nS17 in CI536 is assessed via the development of a software artefact (project)","In CI515, CI506, and CI510 students learn threat modelling and threat identification techniques  while in CI536 students have the opportunity to apply these techniques  in the context of a group project. . "]
["S21","S21: Develop plans for incident response for approval within defined governance arrangements for incident response.","CI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nsecurity management; incident response.","S21 is assessed via a group report. ","Students develop an incident response plan for a given case study."]
["S25","S25: Integrate and correlate information from various sources (including log files from different sources, digital system monitoring tools, Secure Information and Event Management (SIEM) tools, access control systems, physical security systems) and compare to known threat and vulnerability data to form a judgement based on evidence with reasoning that the anomaly represents a digital system security breach","CI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI510 LO1 Ientify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware analysis;","S25 in CI515 is assessed via security analysis report and an exam.\n\nS25 in CI510 is assessed via a security analysis report and an exam.","Students in CI515 learn how to use internal sources, while in CI510 learn how to utilise external sources, such as cyber threat intelligence feeds."]
["S26","S26: Recognise anomalies in observed digital system data structures (including by inspection of network packet data structures) and digital system behaviours (including by inspection of protocol behaviours) and by inspection of log files and by investigation of alerts raised by automated tools including SIEM tools.","CI515 Network Security",null,"FULLY MET","MO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nNetwork security tools; firewalls; Intrusion and anomaly detection and prevention tools","S26 in CI515 is assessed via a security analysis report","Students are expected to use anomaly detection tools and networks security tools such as wireshark. "]
["S27","S27: Accurately, objectively and concisely record and report the appropriate cyber security information, including in written reports within a structure or template provided.","CI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nproject documentation.","S27 in CI510 is assessed via a security analysis report\n\nS27 in CI536 is assessed via the development of a software artefact and its documentation.","Students are expected to follow specific template for their written reports. "]
["S28","S28: Configure digital system monitoring and analysis tools (e.g. SIEM tools), taking account of threat & vulnerability intelligence, indicators of compromise.","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy and analysis; cyber attacks.","S28 is assessed via a security analysis report and an exam. ","Students are expected to use open source SIEM tools, such as AlienVault OSSIM."]
["S29","S29: Undertake root cause analysis of events and make recommendations to reduce false positives and false negatives."]
["S30","S30: Manage local response to non-major incidents in accordance with a defined procedure.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\nincident reponse.\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nincident response.","S30 in CI404 is assessed via an exam.\n\nS30 in CI506 is assessed via a group report.","Students in CI404 are introduced to incident reponse  while in CI506 learn how  to develop incidents reponse plans."]
[null,"Behaviours"]
["B1","B1: Logical - Applies logical thinking, for example, uses clear and valid reasoning when making decisions related to undertaking the work instructions","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nMO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\n\nMO CI453 LO5 Demonstrate an understanding of issues relating to information security in a professional context.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nMO CI536 LO6 Assess the fitness for purpose of such an ICT solution","B1 in CI506 is assessed via a security analysis report and an exam.\n\nB1 in CI506 is assessed via a group report.\n\nB1 in CI510 is assessed via a security analysis report and an exam.\n\nB1 in CI453 is assessed via a group project or presentation..\n\nB1 in CI536 is assessed via a group project or presentation.","In all assessments students are expected to apply logical thinking. "]
["B2","B2: Analytical - working with data effectively to see patterns, trends and draw meaningful conclusions.","CI404 Introduction to Cyber Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI406 Introduction to Artificial Intelligence\n\nCI502 Large Scale Data Processing",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nMO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\n\nMO CI406 LO2 Apply AI algorithms and techniques.\nIndicative Content\nApplications of AI; Intelligent reasoning; machine learning.\n\nMO CI502 LO3 Configure Hadoop clusters for processing large datasets.\nIndicative Content\nbig data and hadoop.","B2 in CI404 is assessed via an exam.\n\nB2 in CI510 is assessed via a security analysis report and an exam.\n\nB2 in CI536 is assessed via a group project or presentation.\n\nB2 in CI406 is assessed via an exam.\n\nB2 in CI502 is assessed via a report that contains a learning journal.","Students in CI404 , CI510, CI502 and CI406 are expected to work  with data gathered from security tools while in CI536 to work with data collected from humans through questionaires in order to elicit application requirements. "]
["B3","B3: Works independently and takes responsibility. For example works diligently regardless of how much they are being supervised, and stays motivated and committed when facing challenges","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B4","B4: Shows initiative, being resourceful when faced with a problem and taking responsibility for solving problems within their own remit","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B5","B5: Thorough & organised. For example uses their time effectively to complete work to schedule and takes responsibility for managing their own work load and time","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B6","B6: Works effectively with a wide range of people in different roles, internally and externally, with a regard to inclusion & diversity policy","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI404 LO4 U nderstand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues\nMO CI536 LO3 Work effectively in an agile team, plan projects and manage time","B6 in both modules is assessed via a group project or presentation.","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B7","B7: Communicates effectively in a wide variety of situations for example contributing effectively to meetings and presenting complex information to technical and non-technical audiences","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B6 in both modules is assessed via a group project or presentation.","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B8","B8: Maintains a productive, professional and secure working environment.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\nMO CI453 LO4 Effectively manage the development process, adhering to an agile project process\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B6 in both modules is assessed via a group project or presentation.","In both modules students are expected to assess the performane of their peers."]
["B9","B9: Creative - taking a variety of perspectives, taking account of unpredictable adversary and threat behaviours and approaches, bring novel and unexpected solutions to address cyber security challenges","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware analysis; cyber attacks to web applciations; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B9 in CI506 is assessed via a group report..\n\nB9 in CI510 is assessed via an exam.\n\nB9 in CI536 is assessed via a project or presentation..","Students in all three  modules are expected to identify threats and security mechanisms for mitigating those threats using also their creativity. "]
["B10","B10: Problem Solving - Identifies issues quickly, solves complex problems and applies appropriate solutions. Dedicated to finding the true root cause of any problem and find solutions that prevent recurrence.","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Implement security countermeasures against cyber attacks.\nMO CI510 LO4 Evaluate the best available techniques for mitigating important privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B10 in CI506 is assessed  via group report.\n\nB10 in CI510 is assessed via a security analysis report and an exam.\n\nB10 in CI536 is assessed via a group project or presentation..","Students in all three modules are expected to apply problem solving techniques to successfully complete the assignments. "]

{"sheet":"ST1021  Security Engineer (1)","index":3,"n_rows":59,"n_cols":8,"rows_kept":59,"cut":false,"hidden":false,"merged":[]}
[null,"Cyber security technologist (level 4) (ST1021)"]
[null,"Return to Guide"]
[null,"Three optrions are availale. Please choose. "]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber security engineer"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber risk analyst"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber defend & respond"]
[]
[]
[null,"KSB Statement ","Detailed page/paragraph reference","Documents Present","KSB coverage","Evidence","Assessment method","Supporting comments/rationale"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber security engineer"]
[null,"This list contains the core KSBs for the Cyber security technologist occupation, plus the specific KSBs for the Cyber security engineer option. "]
[null,"Knowledge"]
["K1","K1: Principles of networks: OSI and TCP/IP models, data, protocols and how they relate to each other; the main routing protocols; the main factors affecting network performance including typical failure modes in protocols and approaches to error control; virtual networking","Module CI404 Introduction to Cyber Security\nModule CI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nNetwork protocols; VPNs and IPSec,PKI and digital signatures.","K1 in CI404 is assessed via an exam. \n\nK1 in CI515 is assessed via an exam. ","Students in year 1 are introduced to the fundamentals of networking, while in year 2 they gain a deep understanding of networking. "]
["K2","k2: the concepts, main functions and features of at least three Operating Systems (OS) and their security functions and associated security features.","Module CI515 Network Security\n\nModule CI510 Security and Dependability\n\nModule CI405 Computing Technologies",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nOS security; network security tools, (e.g. nmpap, wireshark, scapy); firewalls.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware taxonomy (e.g. viruses, Trojan horses, rootkits, backdoors, worms) and analysis; penetration testing approaches and tools.\n\nMO CI405 LO2 Utilise the basic features of an operating system \nIndicative Content \nsystem software","K2 in CI515 is assessed via an exam\n\nK2 in CI510 is assessed via an exam.\n\nK2 in CI405 is assessed via a report that contains a learning journal.\n\n","In both modules students learn the principles, primitives, and practices for ensuring security at the operating system. CI5 focuses on the lowest levels of software stack while CI510 focuses on attacks that aim to evade system's security mechanisms. "]
["K3","K3: Cyber security concepts and why cyber security matters to business and society; Security assurance concepts and how assurance may be achieved in practice including penetration testing and extrinsic assurance methods.","Module CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability\n\n",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems\nMO CI506 LO3 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nSecurity requirements engineering; Formal security modelling and analysis; security metrics; Regulatory processes for secure system development, evaluation, and certification.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nPenetration testing approaches and tools;","K3 in CI506 is assessed via a group report. Students are expected to analyse and design a system described by a case study.\n\nK3 in CI510 is assessed in via an individual security analysis report. Students are expected to attempt to penetrate a system and report on their results.","Students are expected in a group to analyse and design a system that meets business requirements and consider the security aspect of that system for the business. Students are also expected to attempt to penetrate a system and report on their results. "]
["K4","K4: the main types of common attack techniques; also the role of human behaviour, including the significance of the 'insider threat'. Including: how attack techniques combine with motive and opportunity to become a threat. Techniques and strategies to defend against attack techniques and mitigate hazards","Module CI404 Introduction to Cyber Security\n\nModule CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content \nInformation security fundamentals; Access control models and techniques, and security mechanisms; security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Human factors - social engineering attacks, phising; secure coding techniques and standards, manual code review/automatic code review tools.\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling; security requirements engineering.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO4 Implement security countermeasures against cyber attacks\nIndivative Content\nweb applications and database security; data and application security in the cloud; cyber attacks to web applications (e.g. SQL injection, XSS); malware taxonomy.","K4 in CI404 is assessed via an exam. \n\nK4 in CI506 is assessed via a group project. \n\nK4 in CI510 is assessed via an exam. ","Students in year 1 are introduced to cyber security threats, the human factor, while in year 2 they learn how to carry out threat modelling at a design stage, and protect systems from cyber threats. "]
["K5","K5: the significance of identified trends in cyber security threats and understand the value and risk of this analysis. How to deal with emerging attack techniques (including 'zero day'), hazards and vulnerabilities relevant to the digital systems and business environment.","Module CI404 Introduction to Cyber Security\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels. \nMO CI404 LO3 Explain privacy fundamentals and recognise privacy engineering techniques.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content\nInformation security fundamentals; Security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Privacy fundamentals, data privacy legislation; Secure coding techniques and standards, manual code review / automatic code review tools.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nCyber-attacks to web applications (e.g. SQL injection, XSS);  Cyber threat intelligence; \nPrivacy threats and Privacy Enhancing Technologies (PETs) (e.g. anonymity protocols, crowds, onion routing, ToR).","K5 in CI404 is assessed by an exam.\n\nK5 in CI510 is assessed by an individual security analysis report and an exam. ","Students in year 1 learn to recognise the significance of cyber threats and their value and risk, while in year 2 they learn how to deal with attacks. "]
["K6","K6: lifecycle and service management practices to an established standard to a foundation level for example Information Technology Infrastructure Library (ITIL) foundation level.","Module CI506 Secure Systems Analysis and Design\n",null,"PARTIALLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nRegulatory processes for secure system development, evaluation, and certification.","K6 is assessed via a group project.","Students are expected to learn regulatory processes for secure development lifecycle, evaluation, and certification. "]
["K7","K7: cyber incident response processes, incident management processes and evidence collection/preservation requirements to support incident investigation","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; incident response..\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk assessment. \nIndicative Content\ninformation security management; incident resposnse; disaster recovery; business continuity.","K7 in CI404 is assessed via an exam.\n\nK7 in CI506 is assessed via a group project. ","Students in year 1 are expected to learn how to respond to incidents, while in year 2 they are expected to learn how to manage incidents and ensure business continutity. "]
["K8","K8: Understands the main features, applicability and how to apply the significant law, regulations and standards relevant specifically to cyber security. To include: laws, regulations & standards relating to personal data and privacy (e.g. Data Protection Act 2018 implementing General Data Protection Regulation); use of digital systems (e.g. Computer Misuse Act 1990 ); regulatory standards for cyber security, intelligence collection and law enforcement (e.g. Intelligence Services Act 1994, Regulation of Investigatory Powers Act 2000; standards for good practice in cyber security (e.g. ISO 27001, CyberEssentials, NIST) and any updates or additions","CI404 Introduction to Cyber Security\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; privacy fundamentals, data privacy legislation; secure coding standards.\n\nMO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K8 in CI404 is assessed by an exam.\n\nK8 in CI453 is assesed by an individual project  and a group project.\n\nK8 in CI536 is assessed by either a group project report or group presentation,  where students develop a software and apply security standards and regulations.","In CI404 and CI453 students learn about security and privacy standards and regulations, while in CI536 they have the opportunity to apply them in practice while developing a software. "]
["K9","K9: ethical principles and codes of good practice of at least one significant cyber security professional body and the ethical responsibilities of a cyber security professional.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K9 in CI453 is assessed by an individual project  and a group project.\n\nK9 in CI536 is assessed by a group project or presentation,  where students develop a software and apply security standards and regulations.\n\n","In CI453 students learn about ethical and codes of good practice while in CI536 they have the opportunity to apply them in practice. "]
["K10","K10: how to analyse employer or customer requirements to derive security objectives and taking account of the threats and overall context develop a security case which sets out the proposed security measures in the context with reasoned justification","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems.\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity requirements engineering; formal security modelling and design; security threat modelling; security and privacy patterns.\n\nMO CI 536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nproject lifecycle; requirements management; design techniques; ","K10 in CI506 is a assessed by a group report  where students are carrying out security analysis and design of a system.\n\nK10 in CI536 is assessed by an individual  group project and a group project,  where students develop a software taking into consideration security and privacy.","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledfge in practice. "]
["K11","K11: horizon scanning including use of recognised sources of threat intelligence and vulnerabilities.","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy.","K11 is assessed by an individual report where students have to carry horizon scanning and use cyber threat intelligence feeds and also by an exam where they are expected to demonstrate knowledge of quality characteristics of cyvber threat intelligence.","We cover vulnerability repositories (e.g. NIST CVS and NVD), cyber threat intelligence inluding its process and quality characteristics, and also framework such as MITRE's ATT&CK."]
["K12","K12: common security architectures and methodologies; be aware of reputable security architectures that incorporates hardware and software components, and sources of architecture patterns and guidance. How cyber security technology components are typically deployed in digital systems to provide security functionality including: hardware and software to implement security controls","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork security tools, (e.g. nmpap, wireshark, scapy); firewwalls; intrusion and anomaly detection and prevention systems; PKI and digital signatures; VPNS and IPSec.\n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nsecurity and privacy patterns; formal security modelling and analysis\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content\nweb applications and database security; data and application security in the cloud.","K12 in CI515 is assessed by an individual security analysis report and an exam.\n\nK12 in CI506 is assessed by a group report.\n\nK12 in CI510 is assessed by an exam. ","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["K13","K13: the basic terminology and concepts of cryptography; common cryptography techniques in use; the importance of effective key management and the main techniques used; legal, regulatory and export issues specific to the use of cryptography","CI404 Introduction to Cyber Security\n\nCI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\ncryptography and cryptanalysis; PKI and digital signatures; VPNs and IPSec.","K13 in CI404 is assessed via an exam.\n\nK13 in CI515 is assesse via an individual security analysis report.","Students in CI404 are introduced to the fundamental of cryptography while  in CI515 are expected to use cryptographic primitives to review and evaluate cryptographic protocols, and examine the rational decisions in the design of tokens and secure elements."]
["K14","K14: risk assessment and audit methodologies and approaches to risk treatment; approaches to identifying the vulnerabilities in organisations and security management systems; the threat intelligence lifecycle; the role of the risk owner in contrast with other stakeholders","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content \ncyber threat intelligence;","K14 in CI404 is assessed via an exam.\n\nK14 in CI506 is assessed via a  group report.\n\nK14 in CI510 is assessed via an individual security analysis  report.","Students in CI404 are introduced to the fundamentals of risk management, while in CI506 learn about risk managemetn methodolgies and in CI510 learn about the cyber threat intelligence lifecycle. "]
["K15","K15: principles of security management systems, including governance, organisational structure, roles, policies, standards, guidelines and how these all work together to deliver the identified security outcomes.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.","K15 in CI404 is assessed via an exam.\n\nK15 in CI506 is assessed via a  group report..\n","Students in CI404 are introduced to the fundamentals of security management systems,, while in CI506 learn techniques on how to develop security management systems."]
["K16","K16: function and features of significant digital system components; typical architectures; common vulnerabilities in digital systems; principles and common practice in digital system security","CI404 Introduction to Cyber Security\n\nCI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; access control models and techniques; security mechanisms.\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork protocols; network security tools; Internet of Things security; Intrusion and anomaly detection and prevention systems.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; web applications and database security; data and application security in the cloud.","K16 in CI404 is assessed via an exam.\n\nK16 in CI515 is assessed via an exam and an individual security analysis report.\n\nK16 in CI510 is assessed via an exam and an individual security analysis report. ","Students in CI404 learn about the principles and practices in digital system security while in CI515 and CI510 learn about system components and common vulnerabilities respectively. "]
["K17","K17: programming or scripting languages","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI401 Introduction to Programming\n\nCI435 Introduction to Web Development\n\nCI553 Object Oriented Development and Testing\n\n",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nNetwork security tools;\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI401 LO1 Use sequence, selection and iteration to develop simple  applications \nMO CI401 LO2 Utilise a variety of data types and collections\nMO CI401 LO3 Design and develop simple programs, including detection and correction of errors in both logic and syntax\nMO CI401 LO5 Demonstrate a practical understanding of Object Oriented programming techniques\nIndicative Content\nProblem solving techniques; Data types and expressions; Control structures including loops and conditional statements; Input and output; Functions; Objects including attributes, methods and parameters\n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.\n","K17 in CI515 is assessed via a security analysis report.\n\nK17 in CI510 is assessed via an exam.\n\nK17 in CI536 is assessed via a delivered software.\n\nK17 in CI401 is assessed via a software application an en exam.\n\nK17 in CI435 is assessed via a project and an exam.\n\nK17 in CI553 is assessed via an exam.","In CI515 and CI510 students are expected to use a scripting language while in CI536 and in CI401, CI553  and CI435 they are expected to use an appropriate high-level language such as Java."]
[null,"Skills"]
["S1","S1: Discover vulnerabilities in a system by using a mix of research and practical exploration","CI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence.","S1 in CI515 is assessed via an individual security analysis report.\n\nS2 in CI510 is assessed via an individual security analysis report. ","In CI510 students learn how to identify security vulnerabilities and consider countermeasures that can mitigate their exploitation, while in CI515 students gain a practical understanding and the opportunity to apply techniques for detecting network security threats and corresponding countermeasures. "]
["S2","S2: Analyse and evaluate security threats and hazards to a system or service or processes. Use relevant external source of threat intelligence or advice (e.g. National Cyber Security Centre) Combine different sources to create an enriched view of cyber threats and hazards","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware. \nIndicative Content\nCyber attacks to web applications; malware taxonomy and analysis; cyber threat intelligence.","S2 in CI506 is assessed via a group report  where students are expected to model and reason about cyber threats.\n\nS2 in CI510 is assessed via an exam.","In CI506 students learn threat modelling techniques and methods, while in CI510 learn how to utilise cyber threat intelligence feeds."]
["S3","S3: Research and investigate common attack techniques and relate these to normal and observed digital system behaviour and recommend how to defend against them. Interpret and demonstrate use of external source of vulnerabilities (e.g. OWASP, intelligence sharing initiatives, open source)","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy and analysis; cyber attacks to web applications ","S3 is assessed via an individual security analysis report and an exam.","Students learn models and frameworks such as the cyber kill chain and MITRE's ATT&CK and utilise cyber threat intelligence sources."]
["S4","S4: Undertake security risk assessments for simple systems without direct supervision and propose basic remediation advice in the context of the employer.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content \nrisk management; risk assessment.","S4 in CI404 is assessed via an exam.\n\nS4 in CI506 is assessed via a group report.","In year 1 studenst learn about the fundamentals of risk management while in year 2 they learn techniques on how to carry out risk management. "]
["S5","S5: Source and analyse security cases and describe what threats, vulnerability or risks are mitigated and identify any residual areas of concern.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nNetwork security tools; firewalls.\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative content\nrisk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; vunerability management; cyber attacks to web applicatons.","S5 in CI515 is assessed via an individual security analysis report.\n\nS5 in CI506 is assessed via a group report.\n\nS5 in CI510 is assessed via an individual security analysis report and an exam.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S6","S6: Analyse employer or customer requirements to derive security objectives and taking account of the threats and overall context develop a security case which sets out the proposed security measures in the context with reasoned justification","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity requirements engineering; security threat modelling; security and privacy by design.\n\nMO CI510 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nRequirements management.","S6 in CI506 is assessed via a group report.\n\nS6 in CI536 is assessed via the development of a software artefact taking into consideration security and privacy.","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledge in practice. "]
["S7","S7: Identify and follow organisational policies and standards for information and cyber security and operate according to service level agreements or other defined performance targets.","This skill cannot be achieved in a classroom, it refers to a particular organization's  policy.",null,"NOT MET ","This skill cannot be achieved in a classroom, it refers to a particular organization's  policy.",null,"This skill cannot be achieved in a classroom, it refers to a particular organization's  policy."]
["S8","S8: Configure, deploy and use computer, digital network and cyber security technology.","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI502 Large Scale Data Processing\n",null,"FULLY MET","MO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nintrusion and anomaly detection and prevention systems; network security tools; firewalls.\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nweb security; cyber attacks to web applications; privacy enhancing technologies; malware analysis.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements.\nIndicative Content\ncoding, both backend and frontend; testing.\n\nMO CI502 LO5 Configure security features for enterprise level application\nIndicative Content\ndistributed computing; fault tolerance; service oriented architecture.","S8 in CI515 is assessed by a security analysis report.\n\nS8 in CI510 is assessed by a security analysis report.\n\nS8 in CI536 is assessed via the development of a software artefact with consideration to the security and privacy issues.\n\nS8 in CI502 is assessed via a report that contains a learning journal.","In CI515, CI 502, and CI510 students are expected to deploy and configure security technology while in CI536  they are expected to use that technology as part of a group project."]
["S9","S9: Recommend improvements to the cyber security posture of an employer or customer based on research into future potential cyber threats and considering threat trends.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling;\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence; web security.\n\n","S9 in CI515 is assessed via an exam.\n\nS9 in CI506 is assessed via a group report.\n\nS9 in CI510 is assessed via security analysis report.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S10","S10: Design, build, test and troubleshoot a network incorporating more than one subnet with static and dynamic routes, to a given design requirement without supervision. Provide evidence that the system meets the design requirement.","CI515 Network Security",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nnetwork protocols; Network security tools; firewalls; VPNs and IPSec.","S10 is assessed via an individual security analysis report.","CI515  provides a understanding of areas related to security that will allow graduates to act professionally in the design, analysis, implementation, and reporting of network security strategies."]
["S11","S11: Analyse security requirements given (functional and non-functional security requirements that may be presented in a security case) against other design requirements (e.g. usability, cost, size, weight, power, heat, supportability etc.) for a given system or product. Identify conflicting requirements and propose, with reasoning, resolution through appropriate trade-offs.","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nsecurity requirements engineering; security and privacy be design.\n\nMO CI536 LO2 Rsearch and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nRequirements management.","S11 in CI506 is assessed via a group report.\n\nS11 in CI536 is assessed via the development of a software artefact (project)..","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledfge in practice. "]
["S12","S12: Design and build, systems in accordance with a security case within broad but generally well-defined parameters. This should include selection and configuration of typical security hardware and software components. Provide evidence that the system has properly implemented the security controls required by the security case","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI405 Computing Technologies\n",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nnetwork protocols; Network security tools; firewalls; VPNs and IPSec.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nweb security; database security; privacy enhancing technologies.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nMO CI536 LO6 Assess the fitness for purpose of such an ICT solution.\nIndicative Content\nDesign techniques; Coding, both backend and front end; Testing\n\nMO CI405 LO1 Demonstrate an understanding of the main hardware and software components of a computer system\nIndicative Content\nComputer organisation and organisation","S12 in CI515 is assessed via a security analysis report.\n\nS12 in CI510 is assessed via a security analysis report and an exam.\n\nS12 in CI536 is assessed via the development of a software artefact with the considertion of security and privacy issues. \n\nS12 in CI405 is assessed via a report that contains a learning journal","In CI515 and CI510 students are expected to learn how to design and build systems  while in CI536  they are expected to practice that knowledge in the  context of a complete  group project."]
["S13","S13: Write program code or scripts to meet a given design requirement in accordance with employers' coding standards","CI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI435 Introduction to Web Development\n\nCI553 Object Oriented Development and Testing",null,"FULLY MET","MO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.","S13 in CI510 is assessed via an exam.\n\nS13 in CI536 is assessed via a delivered software.\n\nS13 in CI435 is assessed via a project and an exam.\n\nS13 in CI553 is assessed via an exam. ","In CI510 students are expected to use a scripting language while in CI536, CI435, and CI553 they are expected to use an appropriate high-level language such as Java."]
["S14","S14: Design systems employing encryption to meet defined security objectives. Develop and implement a plan for managing the associated encryption keys for the given scenario or system.","CI515 Network Security",null,"FULLY MET","MO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nCryptography and cryptanalysis; public key infrastructures and digital signatures.","S13 is assessed via a security analysis report. ","Student are expected to use cryptographic primitives to review and evaluate cryptographic protocols, and examine the rational decisions in the design of tokens and secure elements."]
["S15","S15: Use tools, techniques and processes to actively prevent breaches to digital system security.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nnetwork protocols; Network security tools; firewalls; VPNs and IPSec; intrusion prevention systems.\n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nformal security modellin; threat modelling.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware taxonomy and analysis; reverse engineering; cyber threat intelligence.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements.\nIndicative Content\nCoding, both backend and front end; Testing","S15 in CI515 is assessed by a security analysis report.\n\nS15 in CI506 is assessed by a group report.\n\nS15 in CI510 is assessed by a security analysis report and an exam.\n\nS15 in CI536 is assessed via the development of a software artefact with the consideration of security and privacy issues.","In CI515, CI506, and CI510 students learn tools, techniques and processes,  while in CI536 students have the opportunity to apply those in the context of a group project. . "]
["S17","S17: Identify cyber security threats relevant to a defined context","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\nmalware analysis; cyber threat intelligence; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nIndicative Content\nTesting.","S17 in CI515 is assessed via an exam.\n\nS17 in CI506 is assessed via a group report..\n\nS17 in CI510 is assessed via an exam.\n\nS17 in CI536 is assessed via the development of a software artefact (project).","In CI515, CI506, and CI510 students learn threat modelling and threat identification techniques  while in CI536 students have the opportunity to apply these techniques  in the context of a group project. . "]
["S27","S27: Accurately, objectively and concisely record and report the appropriate cyber security information, including in written reports within a structure or template provided.","CI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nproject documentation.","S27 in CI510 is assessed via a security analysis report\n\nS27 in CI536 is assessed via the development of a software artefact and its documentation.","Students are expected to follow specific template for their written reports. "]
["S28","S28: Configure digital system monitoring and analysis tools (e.g. SIEM tools), taking account of threat & vulnerability intelligence, indicators of compromise.","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy and analysis; cyber attacks.","S28 is assessed via a security analysis report and an exam. ","Students are expected to use open source SIEM tools, such as AlienVault OSSIM."]
[null,"Behaviours"]
["B1","B1: Logical - Applies logical thinking, for example, uses clear and valid reasoning when making decisions related to undertaking the work instructions","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nMO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\n\nMO CI453 LO5 Demonstrate an understanding of issues relating to information security in a professional context.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nMO CI536 LO6 Assess the fitness for purpose of such an ICT solution","B1 in CI515 is assessed via a security analysis report and an exam.\n\nB1 in CI506 is assessed via a group report.\n\nB1 in CI510 is assessed via a security analysis report and an exam.\n\nB1 in CI453 is assessed via a group presentation or report..\n\nB1 in CI536 is assessed via a group presentation or project.","In all assessments students are expected to apply logical thinking. "]
["B2","B2: Analytical - working with data effectively to see patterns, trends and draw meaningful conclusions.","CI404 Introduction to Cyber Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI406 Introduction to Artificial Intelligence\n\nCI502 Large Scale Data Processing",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nMO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\n\nMO CI406 LO2 Apply AI algorithms and techniques.\nIndicative Content\nApplications of AI; Intelligent reasoning; machine learning.\n\nMO CI502 LO3 Configure Hadoop clusters for processing large datasets.\nIndicative Content\nbig data and hadoop.","B2 in CI404 is assessed via an exam.\n\nB2 in CI510 is assessed via a security analysis report and an exam.\n\nB2 in CI536 is assessed via a group project or presentation.\n\nB2 in CI406 is assessed via an exam.\n\nB2 in CI502 is assessed via a report that contains a learning journal.","Students in CI404 , CI510, CI502 and CI406 are expected to work  with data gathered from security tools while in CI536 to work with data collected from humans through questionaires in order to elicit application requirements. "]
["B3","B3: Works independently and takes responsibility. For example works diligently regardless of how much they are being supervised, and stays motivated and committed when facing challenges","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B4","B4: Shows initiative, being resourceful when faced with a problem and taking responsibility for solving problems within their own remit","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B5","B5: Thorough & organised. For example uses their time effectively to complete work to schedule and takes responsibility for managing their own work load and time","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B6","B6: Works effectively with a wide range of people in different roles, internally and externally, with a regard to inclusion & diversity policy","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO4 U nderstand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues\nMO CI536 LO3 Work effectively in an agile team, plan projects and manage time","B6 in both modules is assessed via a group project or group presentation.","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B7","B7: Communicates effectively in a wide variety of situations for example contributing effectively to meetings and presenting complex information to technical and non-technical audiences","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B6 in both modules is assessed via a group project or group presentation.","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B8","B8: Maintains a productive, professional and secure working environment.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\nMO CI453 LO4 Effectively manage the development process, adhering to an agile project process\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B6 in both modules is assessed via a group project or group presentation.","In both modules students are expected to assess the performane of their peers."]
["B9","B9: Creative - taking a variety of perspectives, taking account of unpredictable adversary and threat behaviours and approaches, bring novel and unexpected solutions to address cyber security challenges","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware analysis; cyber attacks to web applciations; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B9 in CI506 is assessed via a group report.\n\nB9 in CI510 is assessed via an exam.\n\nB9 in CI536 is assessed via a group presentation or project.","Students in all three  modules are expected to identify threats and security mechanisms for mitigating those threats using also their creativity. "]
["B10","B10: Problem Solving - Identifies issues quickly, solves complex problems and applies appropriate solutions. Dedicated to finding the true root cause of any problem and find solutions that prevent recurrence.","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Implement security countermeasures against cyber attacks.\nMO CI510 LO4 Evaluate the best available techniques for mitigating important privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B10 in CI506 is assessed  via group report.\n\nB10 in CI510 is assessed via a security analysis report and an exam.\n\nB10 in CI536 is assessed via a group project or presentation.","Students in all three modules are expected to apply problem solving techniques to successfully complete the assignments. "]

{"sheet":"ST1021 Risk Analyst (2)","index":4,"n_rows":59,"n_cols":8,"rows_kept":59,"cut":false,"hidden":false,"merged":[]}
[null,"Cyber security technologist (level 4) (ST1021)"]
[null,"Return to Guide"]
[null,"Three optrions are availale. Please choose. "]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber security engineer"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber risk analyst"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber defend & respond"]
[]
[null,"KSB Statement ",null,"Documents Present","KSB coverage","Evidence","Assessment method","Supporting comments/rationale"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber risk analyst"]
[null,"This list contains the core KSBs for the Cyber security technologist occupation, plus the specific KSBs for the Cyber risk analyst option. "]
[null,"Knowledge"]
["K1","K1: Principles of networks: OSI and TCP/IP models, data, protocols and how they relate to each other; the main routing protocols; the main factors affecting network performance including typical failure modes in protocols and approaches to error control; virtual networking","Module CI404 Introduction to Cyber Security\nModule CI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nNetwork protocols; VPNs and IPSec,PKI and digital signatures.","K1 in CI404 is assessed via an exam. \n\nK1 in CI515 is assessed via an exam. ","Students in year 1 are introduced to the fundamentals of networking, while in year 2 they gain a deep understanding of networking. "]
["K2","K2: the concepts, main functions and features of at least three Operating Systems (OS) and their security functions and associated security features.","Module CI515 Network Security\n\nModule CI510 Security and Dependability\n\nModule CI405 Computing Technologies",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nOS security; network security tools, (e.g. nmpap, wireshark, scapy); firewalls.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware taxonomy (e.g. viruses, Trojan horses, rootkits, backdoors, worms) and analysis; penetration testing approaches and tools.\n\nMO CI405 LO2 Utilise the basic features of an operating system \nIndicative Content \nsystem software","K2 in CI515 is assessed via an exam\n\nK2 in CI510 is assessed via an exam.\n\nK2 in CI405 is assessed via a report that contains a learning journal.\n\n","In both modules students learn the principles, primitives, and practices for ensuring security at the operating system. CI5 focuses on the lowest levels of software stack while CI510 focuses on attacks that aim to evade system's security mechanisms. "]
["K3","K3: Cyber security concepts and why cyber security matters to business and society; Security assurance concepts and how assurance may be achieved in practice including penetration testing and extrinsic assurance methods.","Module CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability\n\n",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems\nMO CI506 LO3 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nSecurity requirements engineering; Formal security modelling and analysis; security metrics; Regulatory processes for secure system development, evaluation, and certification.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nPenetration testing approaches and tools;","K3 in CI506 is assessed via a group report. Students are expected to analyse and design a system described by a case study.\n\nK3 in CI510 is assessed in via an individual security analysis report. Students are expected to attempt to penetrate a system and report on their results.","Students are expected in a group to analyse and design a system that meets business requirements and consider the security aspect of that system for the business. Students are also expected to attempt to penetrate a system and report on their results. "]
["K4","K4: the main types of common attack techniques; also the role of human behaviour, including the significance of the 'insider threat'. Including: how attack techniques combine with motive and opportunity to become a threat. Techniques and strategies to defend against attack techniques and mitigate hazards","Module CI404 Introduction to Cyber Security\n\nModule CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content \nInformation security fundamentals; Access control models and techniques, and security mechanisms; security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Human factors - social engineering attacks, phising; secure coding techniques and standards, manual code review/automatic code review tools.\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling; security requirements engineering.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO4 Implement security countermeasures against cyber attacks\nIndivative Content\nweb applications and database security; data and application security in the cloud; cyber attacks to web applications (e.g. SQL injection, XSS); malware taxonomy.","K4 in CI404 is assessed via an exam. \n\nK4 in CI506 is assessed via a group project. \n\nK4 in CI510 is assessed via an exam. ","Students in year 1 are introduced to cyber security threats, the human factor, while in year 2 they learn how to carry out threat modelling at a design stage, and protect systems from cyber threats. "]
["K5","K5: the significance of identified trends in cyber security threats and understand the value and risk of this analysis. How to deal with emerging attack techniques (including 'zero day'), hazards and vulnerabilities relevant to the digital systems and business environment.","Module CI404 Introduction to Cyber Security\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels. \nMO CI404 LO3 Explain privacy fundamentals and recognise privacy engineering techniques.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content\nInformation security fundamentals; Security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Privacy fundamentals, data privacy legislation; Secure coding techniques and standards, manual code review / automatic code review tools.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nCyber-attacks to web applications (e.g. SQL injection, XSS);  Cyber threat intelligence; \nPrivacy threats and Privacy Enhancing Technologies (PETs) (e.g. anonymity protocols, crowds, onion routing, ToR).","K5 in CI404 is assessed by an exam.\n\nK5 in CI510 is assessed by an individual security analysis report and an exam. ","Students in year 1 learn to recognise the significance of cyber threats and their value and risk, while in year 2 they learn how to deal with attacks. "]
["K6","K6: lifecycle and service management practices to an established standard to a foundation level for example Information Technology Infrastructure Library (ITIL) foundation level.","Module CI506 Secure Systems Analysis and Design\n",null,"PARTIALLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nRegulatory processes for secure system development, evaluation, and certification.","K6 is assessed via a group project.","Students are expected to learn regulatory processes for secure development lifecycle, evaluation, and certification. "]
["K7","K7: cyber incident response processes, incident management processes and evidence collection/preservation requirements to support incident investigation","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; incident response..\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk assessment. \nIndicative Content\ninformation security management; incident resposnse; disaster recovery; business continuity.","K7 in CI404 is assessed via an exam.\n\nK7 in CI506 is assessed via a group project. ","Students in year 1 are expected to learn how to respond to incidents, while in year 2 they are expected to learn how to manage incidents and ensure business continutity. "]
["K8","K8: Understands the main features, applicability and how to apply the significant law, regulations and standards relevant specifically to cyber security. To include: laws, regulations & standards relating to personal data and privacy (e.g. Data Protection Act 2018 implementing General Data Protection Regulation); use of digital systems (e.g. Computer Misuse Act 1990 ); regulatory standards for cyber security, intelligence collection and law enforcement (e.g. Intelligence Services Act 1994, Regulation of Investigatory Powers Act 2000; standards for good practice in cyber security (e.g. ISO 27001, CyberEssentials, NIST) and any updates or additions","CI404 Introduction to Cyber Security\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; privacy fundamentals, data privacy legislation; secure coding standards.\n\nMO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K8 in CI404 is assessed by an exam.\n\nK8 in CI453 is assesed by an individual project  and a group project.\n\nK8 in CI536 is assessed by a group project or presentation,  where students develop a software and apply security standards and regulations.","In CI404 and CI453 students learn about security and privacy standards and regulations, while in CI536 they have the opportunity to apply them in practice while developing a software. "]
["K9","K9: ethical principles and codes of good practice of at least one significant cyber security professional body and the ethical responsibilities of a cyber security professional.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K9 in CI453 is assesed by an individual project  and a group project.\n\nK9 in CI536 is assessed by a group project or presentation  where students develop a software and apply security standards and regulations.\n\n","In CI453 students learn about ethical and codes of good practice while in CI536 they have the opportunity to apply them in practice. "]
["K10","K10: how to analyse employer or customer requirements to derive security objectives and taking account of the threats and overall context develop a security case which sets out the proposed security measures in the context with reasoned justification","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems.\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity requirements engineering; formal security modelling and design; security threat modelling; security and privacy patterns.\n\nMO CI 536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nproject lifecycle; requirements management; design techniques; ","K10 in CI506 is a assessed by a group report  where students are carrying out security analysis and design of a system.\n\nK10 in CI536 is assessed by a group project or presentation  where students develop a software taking into consideration security and privacy.","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledfge in practice. "]
["K11","K11: horizon scanning including use of recognised sources of threat intelligence and vulnerabilities.","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy.","K11 is assessed by an individual report where students have to carry horizon scanning and use cyber threat intelligence feeds and also by an exam where they are expected to demonstrate knowledge of quality characteristics of cyvber threat intelligence.","We cover vulnerability repositories (e.g. NIST CVS and NVD), cyber threat intelligence inluding its process and quality characteristics, and also framework such as MITRE's ATT&CK."]
["K12","K12: common security architectures and methodologies; be aware of reputable security architectures that incorporates hardware and software components, and sources of architecture patterns and guidance. How cyber security technology components are typically deployed in digital systems to provide security functionality including: hardware and software to implement security controls","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork security tools, (e.g. nmpap, wireshark, scapy); firewwalls; intrusion and anomaly detection and prevention systems; PKI and digital signatures; VPNS and IPSec.\n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nsecurity and privacy patterns; formal security modelling and analysis\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content\nweb applications and database security; data and application security in the cloud.","K12 in CI515 is assessed by an individual security analysis report and an exam.\n\nK12 in CI506 is assessed by a group report.\n\nK12 in CI510 is assessed by an exam. ","The focus of CI506 is from a design perspective, while the focus of C1510 and especially CI515 is from an implementation perspective. "]
["K13","K13: the basic terminology and concepts of cryptography; common cryptography techniques in use; the importance of effective key management and the main techniques used; legal, regulatory and export issues specific to the use of cryptography","CI404 Introduction to Cyber Security\n\nCI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\ncryptography and cryptanalysis; PKI and digital signatures; VPNs and IPSec.","K13 in CI404 is assessed via an exam.\n\nK13 in CI515 is assesse via an individual security analysis report.","Students in CI404 are introduced to the fundamental of cryptography while  in CI515 are expected to use cryptographic primitives to review and evaluate cryptographic protocols, and examine the rational decisions in the design of tokens and secure elements."]
["K14","K14: risk assessment and audit methodologies and approaches to risk treatment; approaches to identifying the vulnerabilities in organisations and security management systems; the threat intelligence lifecycle; the role of the risk owner in contrast with other stakeholders","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content \ncyber threat intelligence;","K14 in CI404 is assessed via an exam.\n\nK14 in CI506 is assessed via a  group report.\n\nK14 in CI510 is assessed via an individual security analysis  report.","Students in CI404 are introduced to the fundamentals of risk management, while in CI506 learn about risk managemetn methodolgies and in CI510 learn about the cyber threat intelligence lifecycle. "]
["K15","K15: principles of security management systems, including governance, organisational structure, roles, policies, standards, guidelines and how these all work together to deliver the identified security outcomes.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.","K15 in CI404 is assessed via an exam.\n\nK15 in CI506 is assessed via a  group report.\n","Students in CI404 are introduced to the fundamentals of security management systems,, while in CI506 learn techniques on how to develop security management systems."]
["K16","K16: function and features of significant digital system components; typical architectures; common vulnerabilities in digital systems; principles and common practice in digital system security","CI404 Introduction to Cyber Security\n\nCI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; access control models and techniques; security mechanisms.\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork protocols; network security tools; Internet of Things security; Intrusion and anomaly detection and prevention systems.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; web applications and database security; data and application security in the cloud.","K16 in CI404 is assessed via an exam.\n\nK16 in CI515 is assessed via an exam and an individual security analysis report.\n\nK16 in CI510 is assessed via an exam and an individual security analysis report. ","Students in CI404 learn about the principles and practices in digital system security while in CI515 and CI510 learn about system components and common vulnerabilities respectively. "]
["K17","K17: programming or scripting languages","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI401 Introduction to Programming\n\nCI435 Introduction to Web Development\n\nCI553 Object Oriented Development and Testing\n\n",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nNetwork security tools;\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI401 LO1 Use sequence, selection and iteration to develop simple  applications \nMO CI401 LO2 Utilise a variety of data types and collections\nMO CI401 LO3 Design and develop simple programs, including detection and correction of errors in both logic and syntax\nMO CI401 LO5 Demonstrate a practical understanding of Object Oriented programming techniques\nIndicative Content\nProblem solving techniques; Data types and expressions; Control structures including loops and conditional statements; Input and output; Functions; Objects including attributes, methods and parameters\n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.\n","K17 in CI515 is assessed via a security analysis report.\n\nK17 in CI510 is assessed via an exam.\n\nK17 in CI536 is assessed via a delivered software.\n\nK17 in CI401 is assessed via a software application an en exam.\n\nK17 in CI435 is assessed via a project and an exam.\n\nK17 in CI553 is assessed via an exam.","In CI515 and CI510 students are expected to use a scripting language while in CI536 and in CI401, CI553  and CI435 they are expected to use an appropriate high-level language such as Java."]
[null,"Skills"]
["S1","S1: Discover vulnerabilities in a system by using a mix of research and practical exploration","CI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence.","S1 in CI515 is assessed via an individual security analysis report.\n\nS2 in CI510 is assessed via an individual security analysis report. ","In CI510 students learn how to identify security vulnerabilities and consider countermeasures that can mitigate their exploitation, while in CI515 students gain a practical understanding and the opportunity to apply techniques for detecting network security threats and corresponding countermeasures. "]
["S2","S2: Analyse and evaluate security threats and hazards to a system or service or processes. Use relevant external source of threat intelligence or advice (e.g. National Cyber Security Centre) Combine different sources to create an enriched view of cyber threats and hazards","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware. \nIndicative Content\nCyber attacks to web applications; malware taxonomy and analysis; cyber threat intelligence.","S2 in CI506 is assessed via a group report  where students are expected to model and reason about cyber threats.\n\nS2 in CI510 is assessed via an exam.","In CI506 students learn threat modelling techniques and methods, while in CI510 learn how to utilise cyber threat intelligence feeds."]
["S3","S3: Research and investigate common attack techniques and relate these to normal and observed digital system behaviour and recommend how to defend against them. Interpret and demonstrate use of external source of vulnerabilities (e.g. OWASP, intelligence sharing initiatives, open source)","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy and analysis; cyber attacks to web applications ","S3 is assessed via an individual security analysis report and an exam.","Students learn models and frameworks such as the cyber kill chain and MITRE's ATT&CK and utilise cyber threat intelligence sources."]
["S4","S4: Undertake security risk assessments for simple systems without direct supervision and propose basic remediation advice in the context of the employer.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content \nrisk management; risk assessment.","S4 in CI404 is assessed via an exam.\n\nS4 in CI506 is assessed via a group report.","In year 1 studenst learn about the fundamentals of risk management while in year 2 they learn techniques on how to carry out risk management. "]
["S5","S5: Source and analyse security cases and describe what threats, vulnerability or risks are mitigated and identify any residual areas of concern.\n\n\n","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nNetwork security tools; firewalls.\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative content\nrisk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; vunerability management; cyber attacks to web applicatons.","S5 in CI515 is assessed via an individual security analysis report.\n\nS5 in CI506 is assessed via a group report..\n\nS5 in CI510 is assessed via an individual security analysis report and an exam.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S6","S6: Analyse employer or customer requirements to derive security objectives and taking account of the threats and overall context develop a security case which sets out the proposed security measures in the context with reasoned justification","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity requirements engineering; security threat modelling; security and privacy by design.\n\nMO CI510 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nRequirements management.","S6 in CI506 is assessed via a group report.\n\nS6 in CI536 is assessed via the development of a software artefact taking into consideration security and privacy.","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledge in practice. "]
["S7","S7: Identify and follow organisational policies and standards for information and cyber security and operate according to service level agreements or other defined performance targets.",null,null,"NOT MET ","This skill cannot be achieved in a classroom, it refers to a particular organization's  policy.",null,"This skill cannot be achieved in a classroom, it refers to a particular organization's  policy."]
["S8","S8: Configure, deploy and use computer, digital network and cyber security technology.","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI502 Large Scale Data Processing\n",null,"FULLY MET","MO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nintrusion and anomaly detection and prevention systems; network security tools; firewalls.\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nweb security; cyber attacks to web applications; privacy enhancing technologies; malware analysis.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements.\nIndicative Content\ncoding, both backend and frontend; testing.\n\nMO CI502 LO5 Configure security features for enterprise level application\nIndicative Content\ndistributed computing; fault tolerance; service oriented architecture.","S8 in CI515 is assessed by a security analysis report.\n\nS8 in CI510 is assessed by a security analysis report.\n\nS8 in CI536 is assessed via the development of a software artefact with consideration to the security and privacy issues.\n\nS8 in CI502 is assessed via a report that contains a learning journal.","In CI515, CI 502, and CI510 students are expected to deploy and configure security technology while in CI536  they are expected to use that technology as part of a group project."]
["S9","S9: Recommend improvements to the cyber security posture of an employer or customer based on research into future potential cyber threats and considering threat trends.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling;\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence; web security.\n\n","S9 in CI515 is assessed via an exam.\n\nS9 in CI506 is assessed via a group report..\n\nS9 in CI510 is assessed via security analysis report.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S13","S13: Write program code or scripts to meet a given design requirement in accordance with employers' coding standards","CI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI435 Introduction to Web Development\n\nCI553 Object Oriented Development and Testing",null,"FULLY MET","MO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.","S13 in CI510 is assessed via an exam.\n\nS13 in CI536 is assessed via a delivered software.\n\nS13 in CI435 is assessed via a project and an exam.\n\nS13 in CI553 is assessed via an exam. ","In CI510 students are expected to use a scripting language while in CI536, CI435, and CI553 they are expected to use an appropriate high-level language such as Java."]
["S16","S16: Conduct cyber-risk assessments against an externally (market) recognised cyber security standard using a recognised risk assessment methodology.","CI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nRisk assessment.","S16 is assessed via a group report.","Students are expected to use a recognised risk assessment methodology from NIST."]
["S17","S17: Identify cyber security threats relevant to a defined context","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\nmalware analysis; cyber threat intelligence; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nIndicative Content\nTesting.","S17 in CI515 is assessed via an exam.\n\nS17 in CI506 is assessed via a group report.\n\nS17 in CI510 is assessed via an exam.\n\nS17 in CI536 is assessed via the development of a software artefact.","In CI515, CI506, and CI510 students learn threat modelling and threat identification techniques  while in CI536 students have the opportunity to apply these techniques  in the context of a group project. . "]
["S18","S18: Develop information security policies or processes to address a set of identified risks, for example from security audit recommendations.",null,null,"NOT MET ","The security policies are addressed in the lectures, but audit recommendations are not available.",null,"The security policies are addressed in the lectures, but audit recommendations are not available."]
["S19","S19: Develop information security policies within a defined scope to take account of legislation and regulation relevant to cyber security.",null,null,"NOT MET ","The security policies are addressed from a theoretical aspect only.",null,"The security policies are addressed from a theoretical aspect only."]
["S20","S20: Take an active part in a security audits against recognised cyber security standards, undertake gap analysis and make recommendations for remediation..",null,null,"NOT MET ","This is not possible to achieve in a classroom environment.",null,"This is not possible to achieve in a classroom environment."]
["S22","S22: Develop plans for local business continuity for approval within defined governance arrangements for business continuity.","CI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nsecurity management; business continuity ","S21 is assessed via a group report.","Students develop a business continuity  plan for a given case study."]
["S23","S23: Assess security culture using a recognised approach.",null,null,"NOT MET ","This is covered only in general terms (not using recognized approach).",null,"This is covered only in general terms (not using recognized approach)."]
["S24","S24: Design and implement a simple ‘security awareness’ campaign to address a specific aspect of a security culture.","CI453 Working in the Computing Industry",null,"FULLY MET","MO CI453 LO5D emonstrate an understanding of issues relating to information security in a professional context.\nIndicative Content\nWorking practices in computing and business IT industries.","S24 is assessed via a group report.","Students develop a web application for increasing security awareness. "]
["S27","S27: Accurately, objectively and concisely record and report the appropriate cyber security information, including in written reports within a structure or template provided.","CI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nproject documentation.","S27 in CI510 is assessed via a security analysis report\n\nS27 in CI536 is assessed via the development of a software artefact and its documentation (project)","Students are expected to follow specific template for their written reports. "]
[null,"Behaviours"]
["B1","B1: Logical - Applies logical thinking, for example, uses clear and valid reasoning when making decisions related to undertaking the work instructions","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nMO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\n\nMO CI453 LO5 Demonstrate an understanding of issues relating to information security in a professional context.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nMO CI536 LO6 Assess the fitness for purpose of such an ICT solution","B1 in CI515 is assessed via a security analysis report and an exam.\n\nB1 in CI506 is assessed via a group report..\n\nB1 in CI510 is assessed via a security analysis report and an exam.\n\nB1 in CI453 is assessed via a group project or presentation..\n\nB1 in CI536 is assessed via a group project or presentation.","In all assessments students are expected to apply logical thinking. "]
["B2","B2: Analytical - working with data effectively to see patterns, trends and draw meaningful conclusions.","CI404 Introduction to Cyber Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI406 Introduction to Artificial Intelligence\n\nCI502 Large Scale Data Processing",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nMO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\n\nMO CI406 LO2 Apply AI algorithms and techniques.\nIndicative Content\nApplications of AI; Intelligent reasoning; machine learning.\n\nMO CI502 LO3 Configure Hadoop clusters for processing large datasets.\nIndicative Content\nbig data and hadoop.","B2 in CI404 is assessed via an exam.\n\nB2 in CI510 is assessed via a security analysis report and an exam.\n\nB2 in CI536 is assessed via a group project or presentation.\n\nB2 in CI406 is assessed via an exam.\n\nB2 in CI502 is assessed via a report that contains a learning journal.","Students in CI404 , CI510, CI502 and CI406 are expected to work  with data gathered from security tools while in CI536 to work with data collected from humans through questionaires in order to elicit application requirements. "]
["B3","B3: Works independently and takes responsibility. For example works diligently regardless of how much they are being supervised, and stays motivated and committed when facing challenges","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B4","B4: Shows initiative, being resourceful when faced with a problem and taking responsibility for solving problems within their own remit","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B5","B5: Thorough & organised. For example uses their time effectively to complete work to schedule and takes responsibility for managing their own work load and time","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B6","B6: Works effectively with a wide range of people in different roles, internally and externally, with a regard to inclusion & diversity policy","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO4 U nderstand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues\nMO CI536 LO3 Work effectively in an agile team, plan projects and manage time","B6 in both modules is assessed via a group project or presentation.","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B7","B7: Communicates effectively in a wide variety of situations for example contributing effectively to meetings and presenting complex information to technical and non-technical audiences","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B7 in both modules is assessed via a group project or presentation","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B8","B8: Maintains a productive, professional and secure working environment.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\nMO CI453 LO4 Effectively manage the development process, adhering to an agile project process\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B8 in both modules is assessed via a group project or presentation.","In both modules students are expected to assess the performane of their peers."]
["B9","B9: Creative - taking a variety of perspectives, taking account of unpredictable adversary and threat behaviours and approaches, bring novel and unexpected solutions to address cyber security challenges","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware analysis; cyber attacks to web applciations; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B9 in CI506 is assessed via a group report.\n\nB9 in CI510 is assessed via an exam.\n\nB9 in CI536 is assessed via a project or presentation.","Students in all three  modules are expected to identify threats and security mechanisms for mitigating those threats using also their creativity. "]
["B10","B10: Problem Solving - Identifies issues quickly, solves complex problems and applies appropriate solutions. Dedicated to finding the true root cause of any problem and find solutions that prevent recurrence.","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Implement security countermeasures against cyber attacks.\nMO CI510 LO4 Evaluate the best available techniques for mitigating important privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B10 in CI506 is assessed  via group report..\n\nB10 in CI510 is assessed via a security analysis report and an exam.\n\nB10 in CI536 is assessed via a group project or presentation..","Students in all three modules are expected to apply problem solving techniques to successfully complete the assignments. "]

{"sheet":"ST1021  Cyber Defend and Res(3)","index":5,"n_rows":61,"n_cols":8,"rows_kept":61,"cut":false,"hidden":false,"merged":[]}
[null,"Cyber security technologist (level 4) (ST1021)"]
[null,"Return to Guide"]
[null,"Three optrions are availale. Please choose. "]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber security engineer"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber risk analyst"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber defend & respond"]
[]
[]
[]
[]
[null,"KSB Statement ",null,"Documents Present","KSB coverage","Evidence","Assessment method","Supporting comments/rationale"]
[null,"Cyber security technologist (level 4) (ST1021) - Cyber defend & respond"]
[null,"This list contains the core KSBs for the Cyber security technologist occupation, plus the specific KSBs for the Cyber defend & respond option."]
[null,"Knowledge"]
["K1","K1: Principles of networks: OSI and TCP/IP models, data, protocols and how they relate to each other; the main routing protocols; the main factors affecting network performance including typical failure modes in protocols and approaches to error control; virtual networking","Module CI404 Introduction to Cyber Security\nModule CI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nNetwork protocols; VPNs and IPSec,PKI and digital signatures.","K1 in CI404 is assessed via an exam. \n\nK1 in CI515 is assessed via an exam. ","Students in year 1 are introduced to the fundamentals of networking, while in year 2 they gain a deep understanding of networking. "]
["K2","K2: the concepts, main functions and features of at least three Operating Systems (OS) and their security functions and associated security features.","Module CI515 Network Security\n\nModule CI510 Security and Dependability\n\nModule CI405 Computing Technologies",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nIndicative Content\nOS security; network security tools, (e.g. nmpap, wireshark, scapy); firewalls.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware taxonomy (e.g. viruses, Trojan horses, rootkits, backdoors, worms) and analysis; penetration testing approaches and tools.\n\nMO CI405 LO2 Utilise the basic features of an operating system \nIndicative Content \nsystem software","K2 in CI515 is assessed via an exam\n\nK2 in CI510 is assessed via an exam.\n\nK2 in CI405 is assessed via a report that contains a learning journal.\n\n","In both modules students learn the principles, primitives, and practices for ensuring security at the operating system. CI5 focuses on the lowest levels of software stack while CI510 focuses on attacks that aim to evade system's security mechanisms. "]
["K3","K3: Cyber security concepts and why cyber security matters to business and society; Security assurance concepts and how assurance may be achieved in practice including penetration testing and extrinsic assurance methods.","Module CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability\n\n",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems\nMO CI506 LO3 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nSecurity requirements engineering; Formal security modelling and analysis; security metrics; Regulatory processes for secure system development, evaluation, and certification.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nPenetration testing approaches and tools;","K3 in CI506 is assessed via a group report. Students are expected to analyse and design a system described by a case study.\n\nK3 in CI510 is assessed in via an individual security analysis report. Students are expected to attempt to penetrate a system and report on their results.","Students are expected in a group to analyse and design a system that meets business requirements and consider the security aspect of that system for the business. Students are also expected to attempt to penetrate a system and report on their results. "]
["K4","K4: the main types of common attack techniques; also the role of human behaviour, including the significance of the 'insider threat'. Including: how attack techniques combine with motive and opportunity to become a threat. Techniques and strategies to defend against attack techniques and mitigate hazards","Module CI404 Introduction to Cyber Security\n\nModule CI506 Secure Systems Analysis and Design\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content \nInformation security fundamentals; Access control models and techniques, and security mechanisms; security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Human factors - social engineering attacks, phising; secure coding techniques and standards, manual code review/automatic code review tools.\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling; security requirements engineering.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO4 Implement security countermeasures against cyber attacks\nIndivative Content\nweb applications and database security; data and application security in the cloud; cyber attacks to web applications (e.g. SQL injection, XSS); malware taxonomy.","K4 in CI404 is assessed via an exam. \n\nK4 in CI506 is assessed via a group project. \n\nK4 in CI510 is assessed via an exam. ","Students in year 1 are introduced to cyber security threats, the human factor, while in year 2 they learn how to carry out threat modelling at a design stage, and protect systems from cyber threats. "]
["K5","K5: the significance of identified trends in cyber security threats and understand the value and risk of this analysis. How to deal with emerging attack techniques (including 'zero day'), hazards and vulnerabilities relevant to the digital systems and business environment.","Module CI404 Introduction to Cyber Security\n\nModule CI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels. \nMO CI404 LO3 Explain privacy fundamentals and recognise privacy engineering techniques.\nMO CI404 LO4 Describe and evaluate techniques of secure coding.\nIndicative Content\nInformation security fundamentals; Security threats and countermeasures (e.g. flooding/spoofing/man-in-the-middle attacks, DDoS attacks); Privacy fundamentals, data privacy legislation; Secure coding techniques and standards, manual code review / automatic code review tools.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\nCyber-attacks to web applications (e.g. SQL injection, XSS);  Cyber threat intelligence; \nPrivacy threats and Privacy Enhancing Technologies (PETs) (e.g. anonymity protocols, crowds, onion routing, ToR).","K5 in CI404 is assessed by an exam.\n\nK5 in CI510 is assessed by an individual security analysis report and an exam. ","Students in year 1 learn to recognise the significance of cyber threats and their value and risk, while in year 2 they learn how to deal with attacks. "]
["K6","K6: lifecycle and service management practices to an established standard to a foundation level for example Information Technology Infrastructure Library (ITIL) foundation level.","Module CI506 Secure Systems Analysis and Design\n",null,"PARTIALLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nRegulatory processes for secure system development, evaluation, and certification.","K6 is assessed via a group project.","Students are expected to learn regulatory processes for secure development lifecycle, evaluation, and certification. "]
["K7","K7: cyber incident response processes, incident management processes and evidence collection/preservation requirements to support incident investigation","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; incident response..\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk assessment. \nIndicative Content\ninformation security management; incident resposnse; disaster recovery; business continuity.","K7 in CI404 is assessed via an exam.\n\nK7 in CI506 is assessed via a group project. ","Students in year 1 are expected to learn how to respond to incidents, while in year 2 they are expected to learn how to manage incidents and ensure business continutity. "]
["K8","K8: Understands the main features, applicability and how to apply the significant law, regulations and standards relevant specifically to cyber security. To include: laws, regulations & standards relating to personal data and privacy (e.g. Data Protection Act 2018 implementing General Data Protection Regulation); use of digital systems (e.g. Computer Misuse Act 1990 ); regulatory standards for cyber security, intelligence collection and law enforcement (e.g. Intelligence Services Act 1994, Regulation of Investigatory Powers Act 2000; standards for good practice in cyber security (e.g. ISO 27001, CyberEssentials, NIST) and any updates or additions","CI404 Introduction to Cyber Security\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; privacy fundamentals, data privacy legislation; secure coding standards.\n\nMO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K8 in CI404 is assessed by an exam.\n\nK8 in CI453 is assesed by an individual project and a group project..\n\nK8 in CI536 is assessed by a group project or presentation,  where students develop a software and apply security standards and regulations.","In CI404 and CI453 students learn about security and privacy standards and regulations, while in CI536 they have the opportunity to apply them in practice while developing a software. "]
["K9","K9: ethical principles and codes of good practice of at least one significant cyber security professional body and the ethical responsibilities of a cyber security professional.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO4 Understand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\nIndicative Content\nLegal, social, ethical, and professional issues; information security; professional codes of conduct and practice.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues.\nIndicative Content\nsecurity standards; privacy regulation.","K9 in CI453 is assesed by an individual project  and a group project.\n\nK9 in CI536 is assessed by a group project or presentation,  where students develop a software and apply security standards and regulations.\n\n","In CI453 students learn about ethical and codes of good practice while in CI536 they have the opportunity to apply them in practice. "]
["K10","K10: how to analyse employer or customer requirements to derive security objectives and taking account of the threats and overall context develop a security case which sets out the proposed security measures in the context with reasoned justification","CI506 Secure Systems Analysis and Design\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO1 Discuss a variety of challenges in the development of secure and usable systems.\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity requirements engineering; formal security modelling and design; security threat modelling; security and privacy patterns.\n\nMO CI 536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\nIndicative Content\nproject lifecycle; requirements management; design techniques; ","K10 in CI506 is a assessed by a group report  where students are carrying out security analysis and design of a system.\n\nK10 in CI536 is assessed by a group project or presentation  where students develop a software taking into consideration security and privacy.","In CI506 students learn how to elicit, model, analyse, and document security and privacy requirements and how to select an  appropriate design that satisfies those requirements. In CI536 students have the opportunity to apply that knowledfge in practice. "]
["K11","K11: horizon scanning including use of recognised sources of threat intelligence and vulnerabilities.","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy.","K11 is assessed by an individual report where students have to carry horizon scanning and use cyber threat intelligence feeds and also by an exam where they are expected to demonstrate knowledge of quality characteristics of cyvber threat intelligence.","We cover vulnerability repositories (e.g. NIST CVS and NVD), cyber threat intelligence inluding its process and quality characteristics, and also framework such as MITRE's ATT&CK."]
["K12","K12: common security architectures and methodologies; be aware of reputable security architectures that incorporates hardware and software components, and sources of architecture patterns and guidance. How cyber security technology components are typically deployed in digital systems to provide security functionality including: hardware and software to implement security controls","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork security tools, (e.g. nmpap, wireshark, scapy); firewwalls; intrusion and anomaly detection and prevention systems; PKI and digital signatures; VPNS and IPSec.\n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nIndicative Content\nsecurity and privacy patterns; formal security modelling and analysis\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content\nweb applications and database security; data and application security in the cloud.","K12 in CI515 is assessed by an individual security analysis report and an exam.\n\nK12 in CI506 is assessed by a group report.\n\nK12 in CI510 is assessed by an exam. ","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["K13","K13: the basic terminology and concepts of cryptography; common cryptography techniques in use; the importance of effective key management and the main techniques used; legal, regulatory and export issues specific to the use of cryptography","CI404 Introduction to Cyber Security\n\nCI515 Network Security",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents\nIndicative Content \nInformation security fundamentals;\n\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\ncryptography and cryptanalysis; PKI and digital signatures; VPNs and IPSec.","K13 in CI404 is assessed via an exam.\n\nK13 in CI515 is assesse via an individual security analysis report.","Students in CI404 are introduced to the fundamental of cryptography while  in CI515 are expected to use cryptographic primitives to review and evaluate cryptographic protocols, and examine the rational decisions in the design of tokens and secure elements."]
["K14","K14: risk assessment and audit methodologies and approaches to risk treatment; approaches to identifying the vulnerabilities in organisations and security management systems; the threat intelligence lifecycle; the role of the risk owner in contrast with other stakeholders","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content \ncyber threat intelligence;","K14 in CI404 is assessed via an exam.\n\nK14 in CI506 is assessed via a  group report.\n\nK14 in CI510 is assessed via an individual security analysis  report.","Students in CI404 are introduced to the fundamentals of risk management, while in CI506 learn about risk managemetn methodolgies and in CI510 learn about the cyber threat intelligence lifecycle. "]
["K15","K15: principles of security management systems, including governance, organisational structure, roles, policies, standards, guidelines and how these all work together to deliver the identified security outcomes.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nrisk assessment; risk analysis and management.","K15 in CI404 is assessed via an exam.\n\nK15 in CI506 is assessed via a  group report.\n","Students in CI404 are introduced to the fundamentals of security management systems,, while in CI506 learn techniques on how to develop security management systems."]
["K16","K16: function and features of significant digital system components; typical architectures; common vulnerabilities in digital systems; principles and common practice in digital system security","CI404 Introduction to Cyber Security\n\nCI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\nIndicative Content\nInformation security fundamentals; access control models and techniques; security mechanisms.\n\nMO CI515 LO1 Describe information and network security principles, challenges, and goals that are relevant for the protection of information and network communication.\nMO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nnetwork protocols; network security tools; Internet of Things security; Intrusion and anomaly detection and prevention systems.\n\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; web applications and database security; data and application security in the cloud.","K16 in CI404 is assessed via an exam.\n\nK16 in CI5 is assessed via an exam and an individual security analysis report.\n\nK16 in CI510 is assessed via an exam and an individual security analysis report. ","Students in CI404 learn about the principles and practices in digital system security while in CI515 and CI510 learn about system components and common vulnerabilities respectively. "]
["K17","K17: programming or scripting languages","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI401 Introduction to Programming\n\nCI435 Introduction to Web Development\n\nCI553 Object Oriented Development and Testing",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nNetwork security tools;\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI401 LO1 Use sequence, selection and iteration to develop simple  applications \nMO CI401 LO2 Utilise a variety of data types and collections\nMO CI401 LO3 Design and develop simple programs, including detection and correction of errors in both logic and syntax\nMO CI401 LO5 Demonstrate a practical understanding of Object Oriented programming techniques\nIndicative Content\nProblem solving techniques; Data types and expressions; Control structures including loops and conditional statements; Input and output; Functions; Objects including attributes, methods and parameters\n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.\n","K17 in CI515 is assessed via a security analysis report.\n\nK17 in CI510 is assessed via an exam.\n\nK17 in CI536 is assessed via a delivered software.\n\nK17 in CI401 is assessed via a software application an en exam.\n\nK17 in CI435 is assessed via a project and an exam.\n\nK17 in CI553 is assessed via an exam.","In CI515 and CI510 students are expected to use a scripting language while in CI536 and in CI401, CI553  and CI435 they are expected to use an appropriate high-level language such as Java."]
[null,"Skills"]
["S1","S1: Discover vulnerabilities in a system by using a mix of research and practical exploration","CI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence.","S1 in CI515 is assessed via an individual security analysis report.\n\nS2 in CI510 is assessed via an individual security analysis report. ","In CI510 students learn how to identify security vulnerabilities and consider countermeasures that can mitigate their exploitation, while in CI515 students gain a practical understanding and the opportunity to apply techniques for detecting network security threats and corresponding countermeasures. "]
["S2","S2: Analyse and evaluate security threats and hazards to a system or service or processes. Use relevant external source of threat intelligence or advice (e.g. National Cyber Security Centre) Combine different sources to create an enriched view of cyber threats and hazards","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware. \nIndicative Content\nCyber attacks to web applications; malware taxonomy and analysis; cyber threat intelligence.","S2 in CI506 is assessed via a group report  where students are expected to model and reason about cyber threats.\n\nS2 in CI510 is assessed via an exam.","In CI506 students learn threat modelling techniques and methods, while in CI510 learn how to utilise cyber threat intelligence feeds."]
["S3","S3: Research and investigate common attack techniques and relate these to normal and observed digital system behaviour and recommend how to defend against them. Interpret and demonstrate use of external source of vulnerabilities (e.g. OWASP, intelligence sharing initiatives, open source)","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy and analysis; cyber attacks to web applications ","S3 is assessed via an individual security analysis report and an exam.","Students learn models and frameworks such as the cyber kill chain and MITRE's ATT&CK and utilise cyber threat intelligence sources."]
["S4","S4: Undertake security risk assessments for simple systems without direct supervision and propose basic remediation advice in the context of the employer.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\ninformation security fundamentals; \n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content \nrisk management; risk assessment.","S4 in CI404 is assessed via an exam.\n\nS4 in CI506 is assessed via a group report. ","In year 1 studenst learn about the fundamentals of risk management while in year 2 they learn techniques on how to carry out risk management. "]
["S5","S5: Source and analyse security cases and describe what threats, vulnerability or risks are mitigated and identify any residual areas of concern.\n\n\n","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nNetwork security tools; firewalls.\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative content\nrisk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\npenetration testing approaches and tools; vunerability management; cyber attacks to web applicatons.","S5 in CI515 is assessed via an individual security analysis report.\n\nS5 in CI506 is assessed via a group report.\n\nS5 in CI510 is assessed via an individual security analysis report and an exam.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S7","S7: Identify and follow organisational policies and standards for information and cyber security and operate according to service level agreements or other defined performance targets."]
["S8","S8: Configure, deploy and use computer, digital network and cyber security technology.","CI515 Network Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI502 Large Scale Data Processing \n",null,"FULLY MET","MO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nintrusion and anomaly detection and prevention systems; network security tools; firewalls.\n\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nweb security; cyber attacks to web applications; privacy enhancing technologies; malware analysis.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements.\nIndicative Content\ncoding, both backend and frontend; testing.\n\nMO CI502 LO5 Configure security features for enterprise level application\nIndicative Content\ndistributed computing; fault tolerance; service oriented architecture.","S8 in CI515 is assessed by a security analysis report.\n\nS8 in CI510 is assessed by a security analysis report.\n\nS8 in CI536 is assessed via the development of a software artefact with consideration to the security and privacy issues.\n\nS8 in CI502 is assessed via a report that contains a learning journal.","In CI515, CI 502, and CI510 students are expected to deploy and configure security technology while in CI536  they are expected to use that technology as part of a group project."]
["S9","S9: Recommend improvements to the cyber security posture of an employer or customer based on research into future potential cyber threats and considering threat trends.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling;\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\npenetration testing approaches and tools; cyber threat intelligence; web security.\n\n","S9 in CI515 is assessed via an exam.\n\nS9 in CI506 is assessed via a group report..\n\nS9 in CI510 is assessed via security analysis report.","The focus of CI506 is from a design perspective, while the focus of CI10 and especially CI515 is from an implementation perspective. "]
["S13","S13: Write program code or scripts to meet a given design requirement in accordance with employers' coding standards","CI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI435 Introduction to Web Development \n\nCI553 Object Oriented Development and Testing",null,"FULLY MET","MO CI510 LO4 Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware analyisis; reverse engineering techniques and code obfuscation.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nCoding, both backend and frontend. \n\nMO CI435 LO3 Specify, design, create and maintain responsive, accessible and standards-compliant web sites\nMO CI435 LO4A pply client-side scripting to the Document Object Model\nIndicative Content\nClient side scripting\n\nMO CI553 LO3 Use an object oriented programming language to construct effective software solutions for problems\nIndicative Content\nimplementation; testing; software development tools.","S13 in CI510 is assessed via an exam.\n\nS13 in CI536 is assessed via a delivered software.\n\nS13 in CI435 is assessed via a project and an exam.\n\nS13 in CI553 is assessed via an exam. ","In CI510 students are expected to use a scripting language while in CI536, CI435, and CI553 they are expected to use an appropriate high-level language such as Java."]
["S15","S15: Use tools, techniques and processes to actively prevent breaches to digital system security.","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO4  Design and practically implement networking security solutions appropriate for a given application and context. \nIndicative Content\nnetwork protocols; Network security tools; firewalls; VPNs and IPSec; intrusion prevention systems.\n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nformal security modellin; threat modelling.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4Implement security countermeasures against cyber attacks.\nIndicative Content\nMalware taxonomy and analysis; reverse engineering; cyber threat intelligence.\n\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements.\nIndicative Content\nCoding, both backend and front end; Testing","S15 in CI515 is assessed by a security analysis report.\n\nS15 in CI506 is assessed by a group report..\n\nS15 in CI510 is assessed by a security analysis report and an exam.\n\nS15 in CI536 is assessed via the development of a software artefact with the consideration of security and privacy issues.","In CI515, CI506, and CI510 students learn tools, techniques and processes,  while in CI536 students have the opportunity to apply those in the context of a group project. . "]
["S17","S17: Identify cyber security threats relevant to a defined context","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nIndicative Content\nsecurity threat modelling.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nIndicative Content\nmalware analysis; cyber threat intelligence; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nIndicative Content\nTesting.","S17 in CI155 is assessed via an exam.\n\nS17 in CI506 is assessed via a group report..\n\nS17 in CI510 is assessed via an exam.\n\nS17 in CI536 is assessed via the development of a software artefact (project)","In CI515, CI506, and CI510 students learn threat modelling and threat identification techniques  while in CI536 students have the opportunity to apply these techniques  in the context of a group project. . "]
["S21","S21: Develop plans for incident response for approval within defined governance arrangements for incident response.","CI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nsecurity management; incident response.","S21 is assessed via a group report. ","Students develop an incident response plan for a given case study."]
["S25","S25: Integrate and correlate information from various sources (including log files from different sources, digital system monitoring tools, Secure Information and Event Management (SIEM) tools, access control systems, physical security systems) and compare to known threat and vulnerability data to form a judgement based on evidence with reasoning that the anomaly represents a digital system security breach","CI515 Network Security\n\nCI510 Security and Dependability",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nIntrusion and anomaly detection and prevention systems; network security tools (e.g. nmap, wireshark, scapy)\n\nMO CI510 LO1 Ientify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware analysis;","S25 in CI515 is assessed via security analysis report and an exam.\n\nS25 in CI510 is assessed via a security analysis report and an exam.","Students in CI515 learn how to use internal sources, while in CI510 learn how to utilise external sources, such as cyber threat intelligence feeds."]
["S26","S26: Recognise anomalies in observed digital system data structures (including by inspection of network packet data structures) and digital system behaviours (including by inspection of protocol behaviours) and by inspection of log files and by investigation of alerts raised by automated tools including SIEM tools.","CI515 Network Security",null,"FULLY MET","MO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nIndicative Content\nNetwork security tools; firewalls; Intrusion and anomaly detection and prevention tools","S26 in CI515 is assessed via a security analysis report","Students are expected to use anomaly detection tools and networks security tools such as wireshark. "]
["S27","S27: Accurately, objectively and concisely record and report the appropriate cyber security information, including in written reports within a structure or template provided.","CI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nIndicative Content\nproject documentation.","S27 in CI510 is assessed via a security analysis report\n\nS27 in CI536 is assessed via the development of a software artefact and its documentation.","Students are expected to follow specific template for their written reports. "]
["S28","S28: Configure digital system monitoring and analysis tools (e.g. SIEM tools), taking account of threat & vulnerability intelligence, indicators of compromise.","CI510 Security and Dependability",null,"FULLY MET","MO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nIndicative Content\ncyber threat intelligence; malware taxonomy and analysis; cyber attacks.","S28 is assessed via a security analysis report and an exam. ","Students are expected to use open source SIEM tools, such as AlienVault OSSIM."]
["S29","S29: Undertake root cause analysis of events and make recommendations to reduce false positives and false negatives.",null,null,"NOT MET ","This is covered only in general terms (not using recognized approach).",null,"This is covered only in general terms (not using recognized approach)."]
["S30","S30: Manage local response to non-major incidents in accordance with a defined procedure.","CI404 Introduction to Cyber Security\n\nCI506 Secure Systems Analysis and Design",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nIndicative Content\nincident reponse.\n\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\nIndicative Content\nincident response.","S30 in CI404 is assessed via an exam.\n\nS30 in CI506 is assessed via a group report.","Students in CI404 are introduced to incident reponse  while in CI506 learn how  to develop incidents reponse plans."]
[null,"Behaviours"]
["B1","B1: Logical - Applies logical thinking, for example, uses clear and valid reasoning when making decisions related to undertaking the work instructions","CI515 Network Security\n\nCI506 Secure Analysis and Design\n\nCI510 Security and Dependability\n\nCI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI515 LO2 Identify and address computer network vulnerabilities and attacks.\nMO CI515 LO3 Explain and evaluate security controls designed to protect and monitor computer networks.\nMO CI515 LO4 Design and practically implement networking security solutions appropriate for a given application and context. \n\nMO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures.\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\nMO CI510 LO4 Implement security countermeasures against cyber attacks.\n\nMO CI453 LO5 Demonstrate an understanding of issues relating to information security in a professional context.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation\nMO CI536 LO5 Design, specify and implement secure and usable ICT solutions which address the problems and requirements\nMO CI536 LO6 Assess the fitness for purpose of such an ICT solution","B1 in CI506 is assessed via a security analysis report and an exam.\n\nB1 in CI506 is assessed via a group report.\n\nB1 in CI510 is assessed via a security analysis report and an exam.\n\nB1 in CI453 is assessed via a group project or presentation..\n\nB1 in CI536 is assessed via a group project or presentation.","In all assessments students are expected to apply logical thinking. "]
["B2","B2: Analytical - working with data effectively to see patterns, trends and draw meaningful conclusions.","CI404 Introduction to Cyber Security\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project\n\nCI406 Introduction to Artificial Intelligence\n\nCI502 Large Scale Data Processing",null,"FULLY MET","MO CI404 LO1 Recognise the benefits, concerns, and risks associated with security of business information systems at both technical and commercial levels.\nMO CI404 LO2 Explain the functionality, advantages and disadvantages of main protection mechanisms and protocols for securing network communications and mechanisms for responding to incidents.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware.\nMO CI510 LO3 Understand and apply approaches to detecting software vulnerabilities.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation.\n\nMO CI406 LO2 Apply AI algorithms and techniques.\nIndicative Content\nApplications of AI; Intelligent reasoning; machine learning.\n\nMO CI502 LO3 Configure Hadoop clusters for processing large datasets.\nIndicative Content\nbig data and hadoop.","B2 in CI404 is assessed via an exam.\n\nB2 in CI510 is assessed via a security analysis report and an exam.\n\nB2 in CI536 is assessed via a group project or presentation.\n\nB2 in CI406 is assessed via an exam.\n\nB2 in CI502 is assessed via a report that contains a learning journal.","Students in CI404 , CI510, CI502 and CI406 are expected to work  with data gathered from security tools while in CI536 to work with data collected from humans through questionaires in order to elicit application requirements. "]
["B3","B3: Works independently and takes responsibility. For example works diligently regardless of how much they are being supervised, and stays motivated and committed when facing challenges","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B4","B4: Shows initiative, being resourceful when faced with a problem and taking responsibility for solving problems within their own remit","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B5","B5: Thorough & organised. For example uses their time effectively to complete work to schedule and takes responsibility for managing their own work load and time","All contributing modules",null,"FULLY MET","All module learning outcomes.","A combination of individual security analysis reports, group project or presentation, and exams"]
["B6","B6: Works effectively with a wide range of people in different roles, internally and externally, with a regard to inclusion & diversity policy","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI404 LO4 U nderstand the legal, social and ethical issues relevant to studying and working in the computing and business IT industries.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues\nMO CI536 LO3 Work effectively in an agile team, plan projects and manage time","B6 in both modules is assessed via a group project or presentation.","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B7","B7: Communicates effectively in a wide variety of situations for example contributing effectively to meetings and presenting complex information to technical and non-technical audiences","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B6 in both modules is assessed via a group project or presentation.","In CI453,  working in groups of 3-4, students will complete a development project to an agreed brief.  Each group will be required to submit the project and the source code.\n\nIn CI536, students in groups of 4-6 will complete and submit project deliverables in iterations, such as documentation and code, as well as planning documentation"]
["B8","B8: Maintains a productive, professional and secure working environment.","CI453 Working in the Computing Industry\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI453 LO3 Demonstrate academic, employability and communication skills.\nMO CI453 LO4 Effectively manage the development process, adhering to an agile project process\n\nMO CI536 LO1 Function as a computing professional, with understanding of professional, legal, ethical and information security issues","B6 in both modules is assessed via a group project or presentation.","In both modules students are expected to assess the performane of their peers."]
["B9","B9: Creative - taking a variety of perspectives, taking account of unpredictable adversary and threat behaviours and approaches, bring novel and unexpected solutions to address cyber security challenges","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nIndicative Content\nsecurity threat modelling; formal security modelling and analysis.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nIndicative Content \nMalware analysis; cyber attacks to web applciations; privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B9 in CI506 is assessed via a group report..\n\nB9 in CI510 is assessed via an exam.\n\nB9 in CI536 is assessed via a project or presentation..","Students in all three  modules are expected to identify threats and security mechanisms for mitigating those threats using also their creativity. "]
["B10","B10: Problem Solving - Identifies issues quickly, solves complex problems and applies appropriate solutions. Dedicated to finding the true root cause of any problem and find solutions that prevent recurrence.","CI506 Secure Systems Analysis and Design\n\nCI510 Security and Dependability\n\nCI536 Integrated Group Project",null,"FULLY MET","MO CI506 LO2 Analyse and design secure information systems using appropriate techniques and methodologies and document the development process.\nMO CI506 LO3 Analyse security threats to systems, identify, and evaluate countermeasures\nMO CI506 LO4 Demonstrate understanding of the concepts and principles of information security management and carry out risk management.\n\nMO CI510 LO1 Identify and analyse threats posed to current system security by malware\nMO CI510 LO2 Appraise the strengths and weaknesses of various operating systems and security technologies and their suitability for protecting an organization.\nMO CI510 LO3 Implement security countermeasures against cyber attacks.\nMO CI510 LO4 Evaluate the best available techniques for mitigating important privacy threats.\n\nMO CI536 LO2 Research and analyse problem situations; model the requirements of possible solutions before implementation","B10 in CI506 is assessed  via group report.\n\nB10 in CI510 is assessed via a security analysis report and an exam.\n\nB10 in CI536 is assessed via a group project or presentation..","Students in all three modules are expected to apply problem solving techniques to successfully complete the assignments. "]

{"sheet":"Source filters ","index":6,"n_rows":49,"n_cols":9,"rows_kept":49,"cut":false,"hidden":true,"merged":[]}
[]
[]
[]
["Additional content","YES","Standard 1","FULLY MET","N/A","PARTIAL"]
["ST0116","NO","Standard 2","PARTIALLY MET","MITIGATED","FULL"]
["ST0117",null,"Standard 3","NOT MET ","PARTIALLY MITIGATED "]
["ST0118",null,"Standard 4"]
["ST1021",null,"Standard 5"]
["ST0127",null,"Standard 6"]
["ST0129",null,"NO COVERAGE "]
["ST0345"]
["ST0825"]
["ST0863",null,"Provider setting (e.g. classroom)"]
[null,null,"Online"]
[null,null,"Distance"]
[null,null,"Placement"]
[null,null,"Mixed"]
[]
[]
[]
[]
[]
[]
[]
[]
["Year 1"]
["Year 2"]
["Year 3"]
["Year 4"]
["Across years"]
["Core "]
["Option"]
[]
["Yes"]
["No"]
[]
[4]
[5]
[]
[]
[null,null,null,null,null,null,null,null,"Business analyst (level 4) (ST0117)"]
[null,null,null,null,null,null,null,null,"Cyber-security technologist (level 4) (ST0124)"]
[null,null,null,null,null,null,null,null,"Data analyst (level 4) (ST0118)"]
[null,null,null,null,null,null,null,null,"DevOps engineer (level 4) (ST0825)"]
[null,null,null,null,null,null,null,null,"Digital accessibility specialist (level 4) (ST0863)"]
[null,null,null,null,null,null,null,null,"Digital community manager (level 4) (ST0345)"]
[null,null,null,null,null,null,null,null,"Network engineer (level 4) (ST0127)"]
[null,null,null,null,null,null,null,null,"Software developer (level 4) (ST0116)"]
[null,null,null,null,null,null,null,null,"Software tester (level 4) (ST0129)"]