frameworks and suitability and implementation methodologies Existing network security logical diagram is reviewed and 2. Collate network 2.1 updated as required security design documentation Existing network security physical diagram is reviewed and 2.2 updated as required Network and perimeter security assessment is conducted 3. Conduct a security 3.1 assessment on the Existing security infrastructure diagram for the organisation is security devices and 3.2 sourced components Network security to determine system vulnerabilities are 3.3 evaluated and selected Template for security assessments including business impact is 3.4 developed or sourced Risk and threat modelling for the organisation is developed 3.5 Security metrics covering control objectives, warning thresholds 3.6 and control thresholds is developed Current security policy documents for the organisation are Collate and review 4.1 collated security policies for the organisation In consultation with appropriate personnel, security policies are 4.2 reviewed and updated where appropriate Change management process strategies to improve cyber 4.3 security working practices within the organisation are developed In consultation with appropriate personnel a layered model of Evaluate 5.1 security architecture is evaluated and selected methodologies for security architecture Issues around implementing a layered model of security 5.2 architecture are prioritised Different of security technical designs are defined 5.3 Key development principles of a sound security architecture 5.4 are investigated Process to address special security architecture challenges 5.5 are investigated Tools and methodologies to enable security architecture Determine existing 6.1 vulnerabilities are collated, evaluated and selected security architecture vulnerabilities An audit to detect vulnerabilities for the security architecture is 6.2 performed In consultation with appropriate personnel, strategies to mitigate 6.3 detected security architecture vulnerabilities are developed and deployed Engaging strategies for different stakeholder groups are Communicate 7.1 developed design options for security architecture Communication strategies for different stakeholder groups are 7.2 to the organisation developed
frameworks and methodologies suitability and implementation 2. Collate network security design documentation 2.1 Existing network security logical diagram is reviewed and updated as required 2.2 Existing network security physical diagram is reviewed and updated as required 3. Conduct a security assessment on the security devices and components 3.1 Network and perimeter security assessment is conducted 3.2 Existing security infrastructure diagram for the organisation is sourced 3.3 Network security to determine system vulnerabilities are evaluated and selected 3.4 Template for security assessments including business impact is developed or sourced 3.5 Risk and threat modelling for the organisation is developed 3.6 Security metrics covering control objectives, warning thresholds and control thresholds is developed Collate and review security policies for the organisation 4.1 Current security policy documents for the organisation are collated 4.2 In consultation with appropriate personnel, security policies are reviewed and updated where appropriate 4.3 Change management process strategies to improve cyber security working practices within the organisation are developed Evaluate methodologies for security architecture 5.1 In consultation with appropriate personnel a layered model of security architecture is evaluated and selected 5.2 Issues around implementing a layered model of security architecture are prioritised 5.3 Different of security technical designs are defined 5.4 Key development principles of a sound security architecture are investigated 5.5 Process to address special security architecture challenges are investigated Determine existing security architecture vulnerabilities 6.1 Tools and methodologies to enable security architecture vulnerabilities are collated, evaluated and selected 6.2 An audit to detect vulnerabilities for the security architecture is performed 6.3 In consultation with appropriate personnel, strategies to mitigate detected security architecture vulnerabilities are developed and deployed Communicate design options for security architecture to the organisation 7.1 Engaging strategies for different stakeholder groups are developed 7.2 Communication strategies for different stakeholder groups are developed
currCyber%20Security%20Advanced%20Diploma22445VIC.docx