Florida Department of Education
Curriculum Framework

Program Title:	Cybersecurity Analyst
Career Cluster:	Information Technology

CCC	
CIP Number	0511100314	
Program Type	College Credit Certificate (CCC)	
Program Length	24 credit hours	
CTSO	PBL, BPA 	
SOC Codes (all applicable) 	Assignment pending.	
CTE Program Resources 	http://www.fldoe.org/academics/career-adult-edu/career-tech-edu/program-resources.stml	

Purpose

This certificate program is part of the Cybersecurity AS degree program (1511100308).  

A College Credit Certificate consists of a program of instruction of less than sixty (60) credits of college-level courses, which is part of an AS or AAS degree program and prepares students for entry into employment (Rule 6A-14.030, F.A.C.).

This program offers a sequence of courses that provides coherent and rigorous content aligned with challenging academic standards and relevant technical knowledge and skills needed to prepare for further education and careers such as, cybersecurity analyst, security engineer, cybersecurity technician, data communication analyst, intrusion and detection analyst, security architect, or secure software developer in the Information Technology career cluster; provides technical skill proficiency, and includes competency-based applied learning that contributes to the academic knowledge, higher-order reasoning and problem-solving skills, work attitudes, general employability skills, technical skills, and occupation-specific skills, and knowledge of all aspects of the Information Technology career cluster. 

The content includes but is not limited to Cybersecurity Foundational Knowledge Units (KU), Technical and non-Technical Knowledge Units.  

Additional Information relevant to this Career and Technical Education (CTE) program is provided at the end of this document.

Program Structure

This program is a planned sequence of instruction consisting 24 credit hours.

Standards

After successfully completing this program, the student will be able to perform the following:

01.0	Demonstrate a fundamental understanding of computer networking.
02.0	Demonstrate understanding of networked environments, hardware, and software.
03.0	Demonstrate fundamental proficiency in network security essentials.
04.0	Demonstrate an understanding of access control systems and methodology.
05.0	Perform secure web design/development activities.
06.0	Perform secure programming and scripting activities.

Florida Department of Education
Student Performance Standards

Program Title:	Cybersecurity Analyst
CIP Number:		0511100314
Program Length:	24 credit hours
SOC Code(s):		

This certificate program is part of the Cybersecurity AS degree program (1511100308).  At the completion of this program, the student will be able to:	
01.0	Demonstrate a fundamental understanding of computer networking.  The student will be able to:	
01.01	Explain the use of binary numbers and perform binary arithmetic. 	
01.02	Describe current network environments. 	
01.03	Describe network communications and architecture. 	
01.04	Identify network components, media, connectors, applications and protocols.	
01.05	Compare and contrast the OSI and TCP/IP reference models and their layers. 	
01.06	Identify and describe current relevant IEEE network standards	
01.07	Create an IP addressing scheme using Variable Length Subnet Masks (VLSM) and Classless Inter-Domain Routing (CIDR).	
01.08	Identify and discuss issues related to networked environments, such as security, access control, fair use, privacy and redundancy. 	
01.09	Identify and discuss issues related to naming conventions for user IDs, e-mail, passwords, and network hosts and devices.	
01.10	Identify standard network topologies and describe the advantages and disadvantages of each topology.	
01.11	Describe the major functions of LAN protocols. 	
01.12	Explain the functions of wireless components, standards, hardware, software, and infrastructure design.	
01.13	Configure and manage the TCP/IP protocol stack. 	
01.14	Describe how TCP and UDP Port addresses, IP addresses, and MAC addresses function, and how they are used to deliver data across the network. 	
01.15	Identify emerging technologies and discuss related technical issues.	
01.16	Design a local area network (LAN), including the specification of architecture, hardware and software. 	
01.17	Identify the advantages and use of virtual local area networks (VLANs).	
01.18	Identify and explain wide area network (WAN) concepts.	
01.19	Plan, configure and test a small network and establish baselines. 	
01.20	Describe the major functions of network server software components.	
01.21	Install applications on a server and configure clients for network access.	
01.22	Describe routing concepts. 	
02.0	Demonstrate understanding of networked environments, hardware, and software.  The student will be able to: 	
02.01	Give several advantages and disadvantages of networked and non-networked environments.	
02.02	Describe current network environments and network topologies. 	
02.03	Identify and discuss issues such as security, privacy and redundancy related to networked environments. 	
02.04	Identify and discuss standardization issues related to-naming conventions. 	
02.05	Discuss the nature of IP and MAC addressing.	
02.06	Describe the major functions and requirements of web-based server and client hardware and software components. 	
02.07	Identify various specialized servers.	
02.08	Recognize and describe current cable technologies. 	
02.09	Describe current wireless technologies.	
02.10	Describe the major functions of network connectivity hardware, such as hubs, repeaters, bridges, routers, switches, and gateways.	
02.11	Describe the hardware needed to connect a LAN to the Internet. 	
02.12	Describe the function of network storage devices and other peripherals.	
02.13	Compare and contrast major functions and features of current network operating systems (including directory services). 	
02.14	Differentiate between telecommunications and data communications. 	
02.15	Compare and contrast digital communications lines and cable characteristics (e.g., ISDN, DSL, T-1, T-3). 	
03.0	Demonstrate fundamental proficiency in network security essentials.  The student will be able to: 	
03.01	Describe common security threats to, and vulnerabilities of, computer systems and the corresponding best practices for mitigation. 	
03.02	Define and describe malicious software and techniques to protect systems from its effects	
03.03	Describe Denial of Service (DoS) attacks and means to defend against them.	
03.04	Identify the risks and techniques of data loss and its prevention. 	
03.05	Describe the principles and techniques of securing data storage and transmission.	
03.06	Identify current encryption and authentication standards.	
03.07	Implement security policies, including compliance and operational security.	
03.08	Enable access control, identity management and security logging. 	
03.09	Manage client and network system security software and related updates. 	
03.10	Describe the functions and characteristics of firewalls. 	
03.11	Perform a ping sweep to identify network hosts. 	
03.12	Perform a port scan to probe network hosts for open TCP and UDP ports. 	
03.13	Describe the purpose and operation of network protocol analyzers. 	
03.14	Utilize a network protocol analyzer to capture and analyze network traffic for security issues. 	
03.15	Describe the functions and characteristics of IDS (Intrusion Detection Systems) & IPS (Intrusion Prevention Systems). 	
04.0	Demonstrate an understanding of access control systems and methodology.  The student will be able to:	
04.01	Specify by access control mechanisms what users can do, which resources they can access, and what operations they can perform on a system. 	
04.02	Compare and contrast access control techniques. 	
04.03	Administer computer, group, and user accounts. 	
04.04	Discuss policies, rights, permissions, and passwords for users and/or groups of users. 	
04.05	Demonstrate an understanding of various access control models. 	
04.06	Discuss password, PIN selection, maintenance, and control. 	
04.07	Demonstrate an understanding of current and emerging methods of identification and authentication. 	
04.08	Discuss centralized/remote authentication access controls.  	
04.09	Analyze methods of server attacks. 	
04.10	Demonstrate an understanding of the different types of intrusions and the different methods of intrusion detection. 	
04.11	Monitor a network using various forms of intrusion detection resources to detect attacks. 	
04.12	Investigate audit trails for signs of network Indicators of Compromise (IoC). (i.e., log files, alert reports, error reports, network performance reports, and output from tools to support analysis). 	
04.13	Perform penetration testing to find weaknesses in the access control systems. 	
05.0	Perform secure web design/development activities.  The student will be able to: 	
05.01	Demonstrate proficiency with Internet structure, organization, and navigation and describe the relation to the Internet and WWW. 	
05.02	Describe and use the process of storyboarding a website. 	
05.03	Describe format, structure and design principles for websites. 	
05.04	Evaluate web graphic utilities and creation tools, including those for animated graphics. 	
05.05	Identify existing resources and constraints. 	
05.06	Evaluate design based on current industry and Open Web Application Security Project (OWASP) standards. 	
05.07	Create site navigation plan including directory structure. 	
05.08	Procure/create and incorporate standard and animated graphics into a webpage. 	
05.09	Design page templates to implement on final site. 	
05.10	Create a webpage using authoring tools. 	
05.11	Code page(s) using current web programming languages. 	
05.12	Check page for cross-browser capability and other access issues. 	
05.13	Upload pages and run site analysis. 	
05.14	Incorporate multimedia files into a webpage. 	
05.15	Incorporate an e-mail link on a webpage. 	
05.16	Incorporate internal and external links on a webpage. 	
05.17	Incorporate tables and file transfer capabilities on a webpage. 	
05.18	Incorporate handicapped-accessibility options into the website. 	
05.19	Configure a webpage for Search Engine Optimization. 	
05.20	Create a web form and produce e-mail results. 	
05.21	Create a web database interface. 	
05.22	Discuss the issue of ODBC compliance. 	
05.23	Describe SQL Injections Concepts. 	
05.24	Describe how JavaScript is used to manipulate the DOM (Document Object Model). 	
05.25	Understand Cross-Site Scripting (XSS) and Cross-site request forgery (CSRF). 	
06.0	Perform secure programming and scripting activities.  The student will be able to: 	
06.01	Identify several of the most prominent current programming languages. 	
06.02	Characterize the stages of the system development life cycle. 	
06.03	Differentiate between two common strategies for problem solving. 	
06.04	Describe the program design and development process. 	
06.05	Differentiate between structured programming and object-oriented programming. 	
06.06	Use programming, scripting, and/or macro languages to create and test programs. 	
06.07	Apply principles of good design and documentation when developing programs. 	
06.08	Write scripting code to handle error checking. 	
06.09	Write code to allow for interactions between the client and server. 	
06.10	Use scripting languages to create dynamic webpages. 	
06.11	Identify development tools. 	
06.12	Design, review, and test specifications and algorithms. 	
06.13	Write program according to specifications and revise based on testing and debugging. 	
06.14	Demonstrate proficient use of current scripting development languages. 	
06.15	Use scripting languages to automate administration tasks. 	
06.16	Describe regular expressions. 	

Additional Information

Laboratory Activities

Laboratory investigations that include scientific inquiry, research, measurement, problem solving, emerging technologies, tools and equipment, as well as, experimental, quality, and safety procedures are an integral part of this career and technical program/course. Laboratory investigations benefit all students by developing an understanding of the complexity and ambiguity of empirical work, as well as the skills required to manage, operate, calibrate and troubleshoot equipment/tools used to make observations. Students understand measurement error; and have the skills to aggregate, interpret, and present the resulting data. Equipment and supplies should be provided to enhance hands-on experiences for students.

Career and Technical Student Organization (CTSO)

Phi Beta Lambda (PBL) and Business Professionals of America (BPA) are the intercurricular career and technical student organization(s) providing leadership training and reinforcing specific career and technical skills. Career and Technical Student Organizations provide activities for students as an integral part of the instruction offered. 

Accommodations

Federal and state legislation requires the provision of accommodations for students with disabilities to meet individual needs and ensure equal access. Postsecondary students with disabilities must self-identify, present documentation, request accommodations if needed, and develop a plan with their counselor and/or instructors. Accommodations received in postsecondary education may differ from those received in secondary education. Accommodations change the way the student is instructed. Students with disabilities may need accommodations in such areas as instructional methods and materials, assignments and assessments, time demands and schedules, learning environment, assistive technology and special communication systems. Documentation of the accommodations requested and provided should be maintained in a confidential file.

Additional Resources

For additional information regarding articulation agreements, Bright Futures Scholarships, Fine Arts/Practical Arts Credit and Equivalent Mathematics and Equally Rigorous Science Courses please refer to:
http://www.fldoe.org/academics/career-adult-edu/career-tech-edu/program-resources.stml