Florida Department of Education
Curriculum Framework

Program Title:	Cybersecurity Operations Analyst
Career Cluster:	Information Technology

CCC	
CIP Number	0511100313	
Program Type	College Credit Certificate (CCC)	
Program Length	24 credit hours	
CTSO	PBL, BPA 	
SOC Codes (all applicable) 	Assignment pending.	
CTE Program Resources 	http://www.fldoe.org/academics/career-adult-edu/career-tech-edu/program-resources.stml	

Purpose
This certificate program is part of the Cybersecurity Operations AS degree program (1511100300).  

A College Credit Certificate consists of a program of instruction of less than sixty (60) credits of college-level courses, which is part of an AS or AAS degree program and prepares students for entry into employment (Rule 6A-14.030, F.A.C.).

This program offers a sequence of courses that provides coherent and rigorous content aligned with challenging academic standards and relevant technical knowledge and skills needed to prepare for further education and careers in the Information Technology career cluster; provides technical skill proficiency, and includes competency-based applied learning that contributes to the academic knowledge, higher-order reasoning and problem-solving skills, work attitudes, general employability skills, technical skills, and occupation-specific skills, and knowledge of all aspects of the Information Technology career cluster. 

The content includes but is not limited to the fundamentals of network security, installing, configuring, monitoring, and detecting network violations in the LAN/WAN environment. 

Additional Information relevant to this Career and Technical Education (CTE) program is provided at the end of this document.

Program Structure

This program is a planned sequence of instruction consisting 24 credit hours.

Standards

After successfully completing this program, the student will be able to perform the following:

01.0	Demonstrate a fundamental understanding of computer networking. 
02.0	Demonstrate fundamental proficiency in network security essentials.
03.0	Demonstrate an understanding of network access control systems and methodology.
04.0	Demonstrate proficiency with Internet structure, organization, and navigation.
05.0	Demonstrate proficiency in analyzing network intrusions.
06.0	Demonstrate proficiency in incident handling and response.

Florida Department of Education
Student Performance Standards

Program Title:	Cybersecurity Operations Analyst
CIP Number:		0511100313
Program Length:	24 credit hours
SOC Code(s):		

This certificate program is part of the Cybersecurity Operations AS degree program (1511100300).  At the completion of this program, the student will be able to:	
01.0	Demonstrate a fundamental understanding of computer networking. – The student will be able to	
01.01	Describe current network environments. 	
01.02	Describe network communications and architecture. 	
01.03	Identify network components, media, connectors, applications and protocols. 	
01.04	Compare and contrast the OSI and TCP/IP reference models and their layers. 	
01.05	Identify and describe current relevant IEEE network standards. 	
01.06	Create an IP addressing scheme using Variable Length Subnet Masks (VLSM) and Classless Inter-Domain Routing (CIDR). 	
01.07	Identify and discuss issues related to networked environments, such as security, access control, fair use, privacy and redundancy. 	
01.08	Identify and discuss issues related to naming conventions for user IDs, email, passwords, and network hosts and devices. 	
01.09	Identify standard network topologies and describe the advantages and disadvantages of each topology. 	
01.10	Describe current network environments. 	
01.11	Describe the major functions of LAN protocols. 	
01.12	Explain the functions of wireless components, standards, hardware, software, and infrastructure design. 	
01.13	Configure and manage the TCP/IP protocol stack. 	
01.14	Describe how TCP and UDP Port addresses, IP addresses, and MAC addresses function, and how they are used to deliver data across the network. 	
01.15	Describe the major functions of LAN protocols. 	
01.16	Explain the functions of wireless components, standards, hardware, software, and infrastructure design. 	
01.17	Configure and manage the TCP/IP protocol stack. 	
01.18	Describe how TCP and UDP Port addresses, IP addresses, and MAC addresses function, and how they are used to deliver data across the network. 	
01.19	Identify emerging technologies and discuss related technical issues. 	
01.20	Design a local area network (LAN), including the specification of architecture, hardware and software. 	
01.21	Identify the advantages and use of virtual local area networks (VLANs). 	
02.0	Demonstrate fundamental proficiency in network security essentials. – The student will be able to: 	
02.01	Describe common security threats to, and vulnerabilities of, computer systems and the corresponding best practices for mitigation. 	
02.02	Define and describe malicious malware and techniques to protect systems from its effects. 	
02.03	Describe Denial of Service attacks and means to defend against them. 	
02.04	Identify the risks and techniques of data loss and its prevention. 	
02.05	Describe the principles and techniques of securing data storage and transmission. 	
02.06	Identify current encryption and authentication standards. 	
02.07	Implement security policies, including compliance and operational security. 	
02.08	Enable access control, identity management and security logging. 	
02.09	Manage client and network system security software and related updates. 	
02.10	Describe the functions and characteristics of firewalls. 	
02.11	Perform a ping sweep to identify network hosts. 	
02.12	Perform a port scan to probe network hosts for open TCP and UDP ports. 	
02.13	Describe the purpose and operation of network protocol analyzers. 	
02.14	Utilize a network protocol analyzer to capture and analyze network traffic for security issues. 	
03.0	Demonstrate an understanding of network access control systems and methodology. – The student will be able to:	
03.01	Specify by access control mechanisms what users can do, which resources they can access, and what operations they can perform on a system. Specify by access control mechanisms what users can do, which resources they can access, and what operations they can perform on a system.	
03.02	Compare and contrast access control techniques.	
03.03	Administer computer, group, and user accounts. 	
03.04	Manage policies, rights, permissions, and passwords for users and/or groups of users. 	
03.05	Demonstrate an understanding of various access control models. 	
03.06	Manage password, PIN selection, maintenance, and control. 	
03.07	Demonstrate an understanding of methods of identification and authentication. 	
03.08	Implement centralized/remote authentication access controls. 	
03.09	Implement and manage decentralized access controls such as domain and trust relationships. 	
03.10	Analyze methods of server attacks. 	
03.11	Demonstrate an understanding of the different types of intrusions and the different methods of intrusion detection. 	
03.12	Monitor the network using various forms of intrusion detection resources to detect attacks. 	
03.13	Investigate audit trails for signs of network intrusions. 	
03.14	Perform penetration testing to find weaknesses in the access control systems. 	
04.0	Demonstrate proficiency with Internet structure, organization, and navigation. The student will be able to:	
04.01	Describe the origin of the Internet.	
04.02	Outline the history of the Internet. 	
04.03	Describe Internet organization, such as the lnterNIC, domains and requests for comments (RFCs). 	
04.04	Describe the structure of the Internet. 	
04.05	Differentiate between the Internet and the WWW. 	
04.06	Differentiate among an Intranet site, an extranet site, and an Internet site. 	
04.07	Describe and identify several major ethical and legal issues related to Internet use and how they affect intellectual property rights. 	
04.08	Describe the World Wide Web (WWW) and identify how it affects personal security and privacy and our society. 	
04.09	Describe and differentiate between file types and protocols. 	
04.10	Demonstrate the use of typical remote access mechanisms. 	
04.11	Describe various sections of a URL. 	
05.0	Demonstrate proficiency in analyzing network intrusions. – The student will be able to: 	
05.01	Describe the role of a Cybersecurity Operations Analyst in the enterprise.	
05.02	Describe various software applications needed to support cybersecurity analyses. 	
05.03	Describe the operation of the network infrastructure. 	
05.04	Demonstrate how to analyze network intrusion data to identify compromised hosts and vulnerabilities. 	
05.05	Identify various network security alerts. 	
05.06	Correctly analyze intrusion data to determine potential exploits 	
05.07	Describe the types of log files used in security monitoring. 	
05.08	Demonstrate the use of various websites that generate malware analysis. 	
06.0	Demonstrate proficiency in incident handling and response.  ̶ The student will be able to:	
06.01	Classify the various types of network attacks. 	
06.02	Manage evidentiary data in an electronic environment. 	
06.03	Describe the essential elements of forensic analysis. 	
06.04	Describe incident response models used to manage network security incidents. 	

Additional Information

Laboratory Activities

Laboratory investigations that include scientific inquiry, research, measurement, problem solving, emerging technologies, tools and equipment, as well as, experimental, quality, and safety procedures are an integral part of this career and technical program/course. Laboratory investigations benefit all students by developing an understanding of the complexity and ambiguity of empirical work, as well as the skills required to manage, operate, calibrate and troubleshoot equipment/tools used to make observations. Students understand measurement error; and have the skills to aggregate, interpret, and present the resulting data. Equipment and supplies should be provided to enhance hands-on experiences for students.

Career and Technical Student Organization (CTSO)

Phi Beta Lambda (PBL) and Business Professionals of America (BPA) are the intercurricular career and technical student organization(s) providing leadership training and reinforcing specific career and technical skills. Career and Technical Student Organizations provide activities for students as an integral part of the instruction offered. 

Accommodations

Federal and state legislation requires the provision of accommodations for students with disabilities to meet individual needs and ensure equal access. Postsecondary students with disabilities must self-identify, present documentation, request accommodations if needed, and develop a plan with their counselor and/or instructors. Accommodations received in postsecondary education may differ from those received in secondary education. Accommodations change the way the student is instructed. Students with disabilities may need accommodations in such areas as instructional methods and materials, assignments and assessments, time demands and schedules, learning environment, assistive technology and special communication systems. Documentation of the accommodations requested and provided should be maintained in a confidential file.

Additional Resources

For additional information regarding articulation agreements, Bright Futures Scholarships, Fine Arts/Practical Arts Credit and Equivalent Mathematics and Equally Rigorous Science Courses please refer to:
http://www.fldoe.org/academics/career-adult-edu/career-tech-edu/program-resources.stml