Use technology to collaborate with peers and/or experts to create digital artifacts that can be published online for a target audience.
Formulate new ideas, solve problems, or create products through the design and engineering process by utilizing testing, prototypes, and user feedback.
Secure Networking
Identify and integrate secure protocols and services in a given scenario.
Examples: SSH, tunnel and transport, IMAP, S/MIME, SFTP, FTPS
Differentiate among firewall technologies.
Examples: stateful vs. stateless, web application firewall
Illustrate secure network designs, creating diagrams by hand or with networking software.
Examples: load balancing, network segmentation, virtual private network, network based intrusion systems
Configure wireless security settings.
Examples: WPA3, SAE, PEAP, RADIUS, site surveys, WAP, WPS, IEEE 802.1x
Apply secure mobile solutions in a given environment.
Examples: NFC, mobile application management (MAM), BYOD, rooting, jailbreaking, sideloading
Describe the value of implementing security concepts in an enterprise environment.
Examples: configuration and baseline management, IP schema, data loss prevention, honeypots
Identify and explain equalization and cloud computing concepts.
Examples: platform as a service (PaaS), software-defined networking visibility (SDN), virtual machine (VM)
Compare and contrast cloud security controls.
Examples: cloud native controls vs. third-party solutions, virtual networks
Security Principles
Compare and contrast secure application development, deployment, and automation concepts.
Examples: server-side vs. client-side execution and validation, automation/scripting
Summarize types of authentication protocols and authorization design concepts used in network security.
Examples: Kerberos, attribute-based access control (ABAC)
Explain the security vulnerabilities and constraints of embedded and specialized systems.
Examples: system control and data acquisition (SCADA), industrial control system (ICS), Internet of Things (IoT), inability to patch
Explain penetration testing techniques and exercise types.
Examples: white box, black box, red team, blue team
Explain the importance of having policies, processes, and procedures for carrying out incident response plans.
Examples: attack frameworks, cyber kill chain, incident response process
Compare and contrast symmetric and asymmetric algorithms and their security uses.
Describe the primary components of public key infrastructure and explain why these structures are critical to organizations.
Examples: Pretty Good Privacy (PGP), establishing confidentiality in email
Digital Forensics
Use the appropriate tool to assess organizational security in a given scenario.
Examples: netstat, nmap, FTK imager, Nessus
Identify and utilize appropriate data sources to support an investigation of a given security incident.
Examples: metadata, protocol analyzer output, syslog, rsyslog, syslog-ng
Explain the fundamental concepts of digital forensics.
Examples: documentation and evidence, acquisition, on-premises versus cloud
Analyze risk management policies and procedures in a given organizational environment.
Examples: risk management strategies, business impact analysis
Explain the procedures involved in creating a digital forensics investigation report and provide examples of report formats.
Examples: Use word processing software to write reports which include the purpose of the investigation, the process of securing documents obtained as evidence, and conclusions.
Cybersecurity III
Foundational Standards
Incorporate safety procedures in handling, operating, and maintaining tools and machinery; handling materials; utilizing personal protective equipment; maintaining a safe work area; and handling hazardous materials and forces.
Demonstrate effective workplace and employability skills, including communication, awareness of diversity, positive work ethic, problem-solving, time management, and teamwork.
Explore the range of careers available in the field and investigate their educational requirements, and demonstrate job-seeking skills including resume-writing and interviewing.
Advocate and practice safe, legal, responsible, and ethical use of information and technology tools specific to the industry pathway.
Participate in a Career and Technical Student Organization (CTSO) to increase knowledge and skills and to enhance leadership and teamwork.
Use technology to collaborate with peers and/or experts to create digital artifacts that can be published online for a target audience.
Formulate new ideas, solve problems, or create products through the design and engineering process by utilizing testing, prototypes, and user feedback.
Threats, Attacks, and Vulnerabilities
