AL Alignment: Cybersecurity 1a/1b

Course Title: Cybersecurity 1a/1b State: AL State Course Title: Cybersecurity I State Standards: Information Technology Date of Standards: 2022 Percentage of Course Aligned: 63%

Standards

Course Title. (a or b), if applicable, e.g.

Game Design 1a

Unit Name(s)

Lesson(s) Numbers

How Standard is Taught

Open-Assessment Assesses Standard (Critical Thinking question, Discussion question, Activity)

How Standard is Assessed

Standard Rating (Fully Met, Partially Met, Not Met)

Foundational Standards

1.Incorporate safety procedures in handling, operating, and maintaining tools and machinery; handling materials; utilizing personal protective equipment; maintaining a safe work area; and handling hazardous materials and forces.

Cybersecurity 1a: Foundations

Unit 2: Computers and Operating Systems

Describe and illustrate the components of a computer and how Lessons 1, 2 they operate as well as the types of hardware used with desktop computers, laptops, tablets, CPU, motherboard and cabling.

Critical Thinking 5, Lab, Activity

Students will explore the components of a computer through using online Fully Met research and answering questions related to the provided link.

Students will research local career opportunities in cybersecurity as well as Fully Met create a personal resume and portfolio for an interview.

Students will investigate local opportunities in field of cybersecurity.

Students will create a resume, cover Fully Met letter and portfolio for use in obtaining a cybersecurity job.

2.Demonstrate effective workplace and employability skills, including communication, awareness of diversity, positive Cybersecurity 1b: Defense Unit 8: Cybersecurity work ethic, problem-solving, time management, and Against Threats Careers teamwork.

Lesson 1

Identify the employability skills in various types of cybersecurity careers such as working well with a team and being able to collaborate effectively with others, detail oriented, good organization and communication skills, being able to assess the Critical Thinking 1, 2, 3, 5; Lab, security needs of a company, knowledge about technological tools Activity, Discussion 1 and concepts, confidentiality and be knowledgeable in mind sports (games and challenges for the mind - virtual battles and understanding the virtual landscape.)

3.Explore the range of careers available in the field and investigate their educational requirements, and Cybersecurity 1b: Defense Unit 8: Cybersecurity demonstrate job-seeking skills including resume-writing and Against Threats Careers interviewing.

Lesson 1

List and describe the jobs and educational requirements of various careers in the field of cybersecurity such as CISO (Chief Info Critical Thinking 2, Lab, Activity Security Officer), Security Architect, Security Director, Security Manager, Security Engineer, and Security Analyst.

Define and discuss the terms "ethics' as moral principles that 4.Advocate and practice safe, legal, responsible, and ethical Cybersecurity 1b: Defense Unit 2: Laws, Ethics, and guide behavior and "netiquette" as online acceptable behavior and Critical Thinking 1-5, Lab, Activity, use of information and technology tools specific to the Lessons 1-3 Against Threats Digital Boundaries etiquette in communicating and how both affect actions and Discussion 1, 2 industry pathway. behaviors online.

Students will evaluate the "Ten Commandments of Cyber Ethics" and give personal opinions on at least three of these.

Fully Met

5.Participate in a Career and Technical Student Organization (CTSO) to increase knowledge and skills and to enhance leadership and teamwork.

Not Met

6.Use technology to collaborate with peers and/or experts to create digital artifacts that can be published online for a target audience.

Not Met

7.Formulate new ideas, solve problems, or create products through the design and engineering process by utilizing testing, prototypes, and user feedback.

Not Met

Technology Laws, Ethics, and Digital Safety 1.Identify and discuss ethical considerations and consequences resulting from technological advances.

Examples: deepfake, facial recognition, big data, privacy concerns 2.Research and discuss federal laws, regulations, and agencies that govern online activities and individual and corporate network use. Examples: Computer Security Act, Sarbanes-Oxley Act, Gramm-Leach-Bliley Act, Computer Fraud and Abuse Act, Payment Card Industry Data Security Standard (PCI DSS); COPPA, HIPAA, FERPA, and CMMC regulations

Not Met

Explain various laws that apply to online security such as privacy Cybersecurity 1b: Defense Unit 2: Laws, Ethics, and Lessons 1-3 and cyberbullying including Aaron's Law, Digital Millennium Against Threats Digital Boundaries Copyright Act, Computer Fraud and Abuse Act (CFAA)

Critical Thinking 2, 4, 5, Lab

Define and discuss the terms "ethics' as moral principles that 3.Gather and share information regarding ethical standards Cybersecurity 1b: Defense Unit 2: Laws, Ethics, and guide behavior and "netiquette" as online acceptable behavior and Critical Thinking 1-5, Lab, Activity, Lessons 1-3 which apply to cybersecurity professionals.

Against Threats Digital Boundaries etiquette in communicating and how both affect actions and Discussion 1, 2 behaviors online.

Students will research websites dealing with cyberbullying and anti-bullying Fully Met laws.

Students will research websites dealing with cyberbullying and anti-bullying Fully Met laws.

4.Describe national and international standards and frameworks related to security operations. Examples: Center for Internet Security (CIS), National Institute of Standards and Technology (NIST) RMF/CSF, International Organization for Standardization (ISO)

Not Met

5.Identify security policies related to the employees of organizations or businesses and discuss the importance of establishing such policies. Examples: personnel policies, acceptable use, non-disclosure agreements, credential policies

Not Met

Access Controls

6.Explain and differentiate among identification, Cybersecurity 1a: authentication, authorization, and accounting for controlling Foundations access.

Unit 5: Access Control

Lesson 3

Describe and explain the concept of access control as the ability to regulate who or what can utilize the resources of a computer and Students will create cybersecurity the framework of Authentication; confirms the identity of a user policies that include the use of access Critical Thinking 4, 5, Lab, Discussion 2 Fully Met asking for valid info such as a password; Authorization; gives controls of authentication, authorization permission to do certain things; and Accounting; process that and accounting measures the overall access of users. (AAA)

Cybersecurity 1a: Foundations

Unit 5: Access Control

Lesson 3

Explain authentication as the confirming of the identity of a user by asking for validation such as a username and password or thumbprint.

Lesson 2

Describe and discuss the security controls for administrative access to computers which safeguards against possible threats such as MAC (Mandatory Access Control) which gives the administrator only usage and management of policies concerning security access, and DAC (Discretionary Access Control) which is Critical Thinking 2, 3, 5, Lab, defined as "a means of restricting access to objects based on the Discussion 1, 2 identity of subjects and/or groups to which they belong" which allows passing authorization to another unless forbidden by a MAC and RBAC (Role Based Access Control which regulates access to a network or resources based on the role of a user and their authorization to perform certain tasks.

Unit 5: Access Control

Lesson 3

Explain authorization gives permission to administrators to decisions about movement and privilege of users, they create folders and files on the root level establishing safety parameters and settings.

Unit 5: Access Control

Discuss the uses of passwords in accessing an operating system Lesson 1, 3,4 including configuring a router and creating a password as well as using a password for authentication purposes

a. Identify and describe authentication types and attributes.

b. Compare and contrast authorization access control models. Examples: mandatory access control (MAC), Cybersecurity 1a: discretionary access control (DAC), role-based access control Foundations (RBAC), lattice

Unit 5: Access Control

Critical Thinking 4, Lab, Discussion 2

Students create a security manual which addresses the access control of Fully Met authentication

Students create an internet security manual for IT professionals

7. Explain the principle of least privilege as it relates to account policy.

8. Perform the specific duties associated with using an administrator/root account in a given computer system.

Not Met

Cybersecurity 1a: Foundations

Students will prepare a document which can be used by an IT professional Critical Thinking 4, 5, Lab, Discussion 2 Fully Met relating to specific elements that need to be addressed in a small business.

9. Select and implement user account management controls for a given scenario.

10. Implement secure password and account policies in an operating system.

Fully Met

Not Met Cybersecurity 1a: Foundations

Critical Thinking 4, Discussion 2

Students are asked to analyze and consider various methods of authentication including passwords.

Fully Met

11. Perform basic system audits and analyze log files in a given scenario.

Not Met

12. Use the command/terminal line to configure security settings.

Not Met

13. Perform basic system administration tasks in more than one operating system.

Not Met

Network Foundations

14. Differentiate among types of networking cable mediums Cybersecurity 1a: and standards to determine which type to use in a given Foundations situation. Examples: copper cabling, fiber optic

Unit 4: Network Security

Lesson 1

Describe and explain the various types of cabling used in a network such as ordinary copper wire/twisted pair, STP (shielded) which is the twisting of four cables, unshielded (UTP) 4 copper Critical Thinking 1, Activity, Discussion Students are asked to assess appropriate Fully Met wires enclosed in plastic with varying degrees of strength CAT3, 1 internal cabling for a new house.

CAT4, CAT5, CAT6, CAT7, coaxial uses a single copper conductor, and fiber optic which uses strands of glass fibers plus copper ones

15. Compare and contrast notational systems, including binary, hexadecimal, decimal, and ASCII.

Not Met

16. Identify and describe common TCP and UDP ports and services. Examples: DNS, HTTP, SSH, TELNET, TLS, FTP, SMTP, IMAP, POP, DHCP, LDAP, NTP, SNMP, RDP, SCP, RTP

Cybersecurity 1a: Foundations

Unit 3: Networking Fundamentals

Lesson 3

Describe and explain internet protocol suite which is a collection of rules designed for the internet specifically and other public networks including DHCP which uses a server to assign IP addresses, HTTP is a command that tells the web server to get and supply requested info, TLS uses encryption for security, ICMP lets user know when an error has occurred, ARP maps network addresses to physical hardware, and IMAP, POP3, SMTP which manages transmission and delivers internet mail.

17. Classify IP addresses according to IPv4 and IPv6, private and public IP ranges, and special IPs.

Cybersecurity 1a: Foundations

Unit 3: Networking Fundamentals

Lesson 3

Describe the ARP (Address Resolution Protocol) versions such as IPv4, IPv6, which is used to access the internet using a unique IP address.

Describe and explain TCP (Transmission Control Protocol) as how network conversations should be established and maintained and creates the basic rules of the internet and it is used in the Lessons 1, 3 Transport Layer of the OSI Model; the OSI Model (Open System Lab, Activity Interconnection) divides network communication into 7 distinct layers each layer is created by a combination of applications, OSs, networking hardware, and card device drivers.

Critical Thinking 1, 2, Activity

Students will trace how various types of data moves through the seven layers of Fully Met the OSI

Lab

Students determine if a public and private IP address is either IPv4 or IPv6

18. Use subnetting to determine the number of hosts and/or subnets on a given network.

Fully Met

Not Met

19. Differentiate between the OSI and TCP/IP models, layers, encapsulation, and decapsulation.

Cybersecurity 1a: Foundations

Unit 3: Networking Fundamentals

Students will track data through an OSI model

20. Use various network tools in computer operating systems environments. Examples: ipconfig, ifconfig Ping, nslookup, tracert, netstat, iptables; Windows, Linux, Apple

Cybersecurity 1a: Foundations

Unit 2: Computers and Lesson 3 Operating Systems

Discuss and explain various types of operating systems such as Critical Thinking 2, Activity, Discussion Students will set up and run a virtual Microsoft Windows on PCs, Mac OS created by Apples and open 2 computer source operating systems such as Linux which is free to download.

Fully Met

21. Perform an install of an operating system in a virtual environment.

Cybersecurity 1a: Foundations

Unit 2: Computers and Lesson 3 Operating Systems

Discuss and explain various types of operating systems such as Critical Thinking 2, Activity, Discussion Students will set up and run a virtual Microsoft Windows on PCs, Mac OS created by Apples and open 1 computer source operating systems such as Linux which is free to download.

Fully Met

Fully Met

Security Foundations

22. Apply the parts of the CIA triad (confidentiality, integrity, Cybersecurity 1a: and availability) to a given security scenario.

Foundations

Unit 1: Basics of Cybersecurity

Lesson 3

Explain the AIC triad designed to guide cybersecurity policies and including confidentiality which is the limiting of access to certain information, integrity ensures that online info is trustworthy and accurate and the info cannot be altered or deleted by unauthorized Activity people, and availability instantly repairs operating systems to keep them running properly and provides for disaster recovery and system upgrades.

23. Describe various types of physical security controls and explain their importance.

Unit 5: Access Control

Lesson 2

Explain that not all security is in the form of technical options but there are physical security options as well such as physical No Assessments Associated obstacle protection like fences, locks, motion detectors, and video surveillance tools.

Lesson 4

Describe and discuss the types of threats and attacks on computer systems such as Trojan viruses, backdoor, spyware, botnet, rootkit, Critical Thinking 1, 5, Lab, Activity, and spoofing, all designed to steal information from your Discussion 1, 2 computer or limiting the use of the computer.

Students will critically analyze a series of questions concerning hacking after viewing a TED Talk video.

Lesson 2

Explain various types of social engineering which are geared toward stealing information such as "shoulder surfing", "dumpster Critical Thinking 1, 2, 4, Activity diving", "credential reuse", baiting, pretexting, and smishing.

Students will create a pamphlet with information regarding how to recognize Fully Met social engineering attempts, and where to report such incidences.

26. Describe various types of application attacks and threats. Cybersecurity 1b: Defense Unit 3: Black Hats Examples: cross-site scripting, SQL injection, buffer overflow Against Threats

Lesson 4

Explain application attacks as hackers gaining access to unauthorized areas such as with botnet which compromises an entire network of computers and is under the control of a malicious actor, and rootkit which is a program designed to Critical Thinking 1-3, 5, Lab, Activity, provide privileged access to a computer and has complete and Discussion 1, 2 remote control to execute files; spoofing where a malicious party impersonates another drive or user; and spyware is software designed to quietly monitor what you do online without your knowledge

Students will learn how to navigate and Fully Met recognize a "spoof" to a MAC address

27. Analyze types of network attacks. Examples: man in the middle, layer 2 attacks, denial of service, DNS poisoning

Lesson 3

Define and explain such threats to wireless networks as 'denial of Service which is an attack that overwhelms a network resource, with fake visitors and crowds thus denying service to user, man-in- Critical Thinking 1, 4, 5 the-middle is an attack that involves eavesdropping and/or manipulation where the hacker listens.

Students will engage in critical thinking skills answering multiple questions concerning the protection of operating systems and mobile devices.

Cybersecurity 1a: Foundations

24. Analyze attributes of various types of malware and other attacks to determine the key characteristics of each type.

Cybersecurity 1b: Defense Unit 3: Black Hats Examples: virus, worm, brute force, backdoor, spyware, Against Threats remote access tool (RAT)

25. Describe various types of social engineering.

Cybersecurity 1b: Defense Unit 4: Cyber Safety Against Threats

Cybersecurity 1a: Foundations

Unit 6: Mobile Devices and Cloud Computing

a. Identify and analyze wireless network threats. Examples: evil twin, bluesnarfing, jamming, disassociation

Partially Met

Fully Met

Fully Met

Cybersecurity 1a: Foundations

Lesson 2

Unit 7: Protecting Data Lesson 2

Identify types of threats such as APT (Advanced Persistent Threat) which is considered the most problematic since it is organized by a group in order to target a specific organization; white hats are Critical Thinking 1-4, Lab, Activity, those that help security companies; black hats are those looking to Discussion 2 gain illegal access to a system and steal information, gray hats are hackers who gain access without malicious intent but will use the info gathered with permission.

Students will analyze various types of Fully Met threats by preparing a slide presentation

Discuss the techniques used for hardening which are the approaches used as security layer for a computer such as keeping Lab, Discussion 2 software updated, installing a firewall, use encryption, install virus and malware protection and uninstall unused applications.

Students will analyze a file and propose ways to use the tools learned to improve Fully Met cybersecurity including managing security patches.

30. Describe the techniques used in security assessments.

Examples: threat hunting, vulnerability scans, security information and event management (SIEM)

Not Met

31. Explain basic cryptographic concepts. Examples: historic Cybersecurity 1a: ciphers, symmetric, asymmetric, hashing, quantum Foundations computing uses

32. Describe the purpose and scope of a cybersecurity disaster recovery plan for a given simulated or actual work environment.

Fully Met

Not Met

8. Describe different types of threat actors and threat Cybersecurity 1b: Defense Unit 1: Cybersecurity vectors. Examples: APT’s; black hat, white hat, and gray hat Against Threats Threats hackers; supply chain; social media

29. Predict security concerns and possible vulnerabilities associated with system hardening. Examples: weak configurations, open ports and services, third-party risks

Students will design cybersecurity policies for a bank using the CIA Triad elements

Unit 7: Protecting Data Lesson 3

Cybersecurity 1b: Defense Unit 7: Protecting Data Against Threats

Lesson 1

Define and explain encryption as the process of encoding messages or data in a way that only authorized people can access Lab, Activity including Cryptography which uses math principles and formulas to create a cipher of algorithm for performing encryption

Students will be able to research how drive encryption is performed for Linux, Winddowns and Mac OS X and answer a Fully Met series of critical thinking questions associated with the resources supplies

Explain the importance in having a IRP (incident response plan) including clear, concise and detail instructions in the event of a security breach or attack.

Students discuss incident response plans both on a personal level and computer Fully Met evaluating 5 indications that the computer is infected with malware.

Critical Thinking 2, Discussion 1, 2