Cyber Security Fundamentals (2023)

Other South Carolina CTE sets

SAFETY: Proficient professionals know the academic subject matter, including safety. They will use this knowledge as needed in their role. The following accountability criteria are considered essential for students in any program of study.A

  • 1

    Review school safety policies and procedures.A.1

  • 2

    Review classroom safety rules and procedures.A.2

  • 3

    Review safety procedures for using equipment in the classroom.A.3

  • 4

    Identify major causes of work-related accidents in office environments.A.4

  • 5

    Demonstrate safety skills in an office/work environment.A.5

STUDENT ORGANIZATIONS: Proficient professionals know the academic subject matter, including professional development. They will use this knowledge as needed in their role. The following accountability criteria are considered essential for students in any program of study.B

  • 1

    Identify the purpose and goals of a Career and Technology Student Organization (CTSO).B.1

  • 2

    Explain how CTSOs are integral parts of specific clusters, majors, and/or courses.B.2

  • 3

    Explain the benefits and responsibilities of being a member of a CTSO.B.3

  • 4

    List leadership opportunities that are available to students through participation in CTSO conferences, competitions, community service, philanthropy, and other activities.B.4

  • 5

    Explain how participation in CTSOs can promote lifelong benefits in other professional and civic organizations.B.5

TECHNOLOGY KNOWLEDGE: Proficient professionals know the academic subject matter, including the ethical use of technology. The following accountability criteria are considered essential for students in any program of study.C

  • 1

    Demonstrate proficiency and skills associated with the use of technologies that are common to a specific occupation.C.1

  • 2

    Identify proper netiquette when using e-mail, social media, and other technologies for communication purposes.C.2

  • 3

    Identify potential abuse and unethical uses of laptops, tablets, computers, and/or networks.C.3

  • 4

    Explain the consequences of social, illegal, and unethical uses of technology (e.g., piracy; cyberbullying, illegal downloading; licensing infringement; inappropriate uses of software, hardware, and mobile devices in the work environment).C.4

  • 5

    Discuss legal issues and the terms of use related to copyright laws, fair use laws, Creative Commons, and ethics pertaining to downloading of images, photographs, documents, video, sounds, music, trademarks, and other elements for personal use.C.5

  • 6

    Describe ethical and legal practices of safeguarding the confidentiality of business-related information.C.6

  • 7

    Describe possible threats to a laptop, tablet, computer, and/or network and methods of avoiding attacks.C.7

PERSONAL QUALITIES AND EMPLOYABILITY SKILLS: Proficient professionals know the academic subject matter, including positive work practices and interpersonal skills. The following accountability criteria are considered essential for students in any program of study.D

  • 1

    Demonstrate creativity and innovation.D.1

  • 2

    Demonstrate critical thinking and problem-solving skills.D.2

  • 3

    Demonstrate initiative and self-direction.D.3

  • 4

    Demonstrate integrity.D.4

  • 5

    Demonstrate work ethic.D.5

  • 6

    Demonstrate conflict resolution skills.D.6

  • 7

    Demonstrate listening and speaking skills.D.7

  • 8

    Demonstrate respect for diversity.D.8

  • 9

    Demonstrate customer service orientation.D.9

  • 10

    Demonstrate teamwork.D.10

PROFESSIONAL KNOWLEDGE: Proficient professionals know the academic subject matter, including positive work practices and interpersonal skills. The following accountability criteria are considered essential for students in any program of study.E

  • 1

    Demonstrate global or “big picture” thinking.E.1

  • 2

    Demonstrate career and life management skills and goal-making.E.2

  • 3

    Demonstrate continuous learning and adaptability skills to changing job requirements.E.3

  • 4

    Demonstrate time and resource management skills.E.4

  • 5

    Demonstrates information literacy skills.E.5

  • 6

    Demonstrates information security skills.E.6

  • 7

    Demonstrates information technology skills.E.7

  • 8

    Demonstrates knowledge and use of job-specific tools and technologies.E.8

  • 9

    Demonstrate job-specific mathematics skills.E.9

  • 10

    Demonstrates professionalism in the workplace.E.10

  • 11

    Demonstrate reading and writing skills.E.11

  • 12

    Demonstrates workplace safety.E.12

INTRODUCTION TO CYBER SECURITY: Proficient IT professionals demonstrate knowledge in cyber security. The following accountability criteria are considered essential for students in Computer and attacks Information Systems Security/Information Assurance program of study.F

  • 1

    Define terms related to cyber security (e.g., cyber security, information assurance, risk, risk management, cyber security services).F.1

  • 2

    Explain the importance of information and internet security (e.g., browser, cloud, network).F.2

  • 3

    Explain the concepts of confidentiality, integrity, and availability (CIA).F.3

  • 4

    Identify the concepts of cyber security risk management. (e.g., vulnerability identification, management, and mitigation; active and passive reconnaissance; testing port scanning, automation).F.4

  • 5

    Explain vulnerability management (e.g., identification, management, mitigation, testing).F.5

  • 6

    Describe cyber security threats to an organization and why organizations need to manage risk.F.6

  • 7

    Research potential consequences of various forms of security incidents.F.7

  • 8

    Compare and contrast the various types of security (e.g., physical security, technological, administrative).F.8

  • 9

    Research national or industry standards/regulations that relate to cyber security and their impact on people, processes, and technology (e.g., news, reports, policies, subscriptions, incidents).F.9

  • 10

    Investigate the origins and history of cyber security and its impact on society.F.10

  • 11

    Describe the role that cyber security plays in the private or public sector.F.11

  • 12

    Discuss and develop a code of ethics as related to the field of cyber security.F.12

CYBER THREATS AND VULNERABILITIES: Proficient IT professionals demonstrate knowledge of cyber threats and vulnerabilities. The following accountability criteria are considered essential for students in the Computer and Information Systems Security/Information Assurance program of study.G

  • 1

    Describe the characteristics of cyber threats, attacks, and vulnerabilities.G.1

  • 2

    Analyze types of current cyber threats (e.g., DDoS, Phishing, cracking, social engineering).G.2

  • 3

    Categorize sources/originators of different types of malicious attacks (e.g., nation states, cyber criminals, hacktivists, insiders).G.3

  • 4

    Compare and contrast cyber-attack surfaces of differing organizations.G.4

  • 5

    Explain types of malware (e.g., viruses, polymorphic viruses; worms, Trojan horses, spyware, ransomware, adware).G.5

  • 6

    Demonstrate familiarity with malware removal (e.g. scanning systems, reviewing scan logs, malware remediation).G.6

  • 7

    Explain types of attacks (e.g., wireless, application, social engineering, buffer overflow attacks, backdoor).G.7

  • 8

    Define strategies necessary to prevent attacks.G.8

COMPUTER AND NETWORK ARCHITECTURE H

  • 1

    Define terms related to computer networking (e.g., LAN, WAN, wireless, protocols, topology, firewalls).H.1

  • 2

    Compare and contrast OSI and TCP/IP models and encapsulation concepts.H.2

  • 3

    Compare and contrast wired versus wireless networks.H.3

  • 4

    Examine the concept of the internet as a network of connected systems.H.4

  • 5

    Design a basic network topology.H.5

NETWORK SECURITY: Proficient IT professionals demonstrate knowledge in network security. The following accountability criteria are considered essential for students in the Computer and Information Systems Security/Information Assurance program of study.I

  • 1

    Define terms related to network security (e.g., routing, perimeter networks, security layering, Virtual Private Network (VPN), isolation).I.1

  • 2

    Explain the concepts of protocol security (e.g., protocol spoofing, tunneling, network sniffing, denial of service).I.2

  • 3

    Analyze and implement security layering.I.3

  • 4

    Identify vulnerabilities and common attack methods.I.4

  • 5

    Use strategies necessary to prevent network attacks.I.5

  • 6

    Identify tools and techniques used for security layering.I.6

  • 7

    Determine characteristics of firewalls (hardware and software) and when to use them.I.7

  • 8

    Set up Port/Network Address Translation (NAT/PAT).I.8

  • 9

    Explain how network addresses impact network security (e.g., IPv4 and IPv6 addressing, CIDR notation, public vs private networks.I.9

  • 10

    Use a basic command line interface (Windows and Linux) to configure communications (e.g., ipconfig, ifconfig, and net config, ping).I.10

OPERATING SYSTEMS: Proficient IT professionals demonstrate knowledge in operating systems. The following accountability criteria are considered essential for students in the Computer and Information Systems Security/Information Assurance program of study.J

  • 1

    Compare and contrast common operating systems (e.g., Windows, Linux, iOS, Android).J.1

  • 2

    Identify best practices for protecting operating systems (e.g., access control, separation of duties, least privilege).J.2

  • 3

    Compare and contrast common file systems (e.g., FAT, NTFS, HFS).J.3

  • 4

    Describe the various types of file permissions (e.g., registry, Active Directory, basic and advanced).J.4

  • 5

    Implement group and audit policies.J.5

  • 6

    Explain the purpose and location of security and auditing logs.J.6

  • 7

    Define virtualization and identify its advantages and disadvantages.J.7

  • 8

    Define strategies necessary to prevent operating system attacks.J.8

OPERATIONAL SECURITY: Proficient IT professionals demonstrate knowledge in operational security. The following accountability criteria are considered essential for students in the Computer and Information Systems Security/Information Assurance program of study.K

  • 1

    Define terms related to identity, authorization, and authentication (e.g., passwords, biometrics, multi-factor, certificates).K.1

  • 2

    Describe the various types of permissions (e.g., basic, administrative, elevated).K.2

  • 3

    Identify types of access control (e.g., role-based access control (RBAC), mandatory access control, discretionary-based control).K.3

  • 4

    Describe the importance of Multifactor authentication.K.4

  • 5

    Analyze best practices for end-user password development and usage.K.5

  • 6

    Identify the system administrator’s role in setting system policies and procedures.K.6

  • 7

    Compare and contrast backup and restore methods.K.7

  • 8

    Explain the importance of disaster recovery and business continuity planning (e.g., disaster recovery plans and controls, business continuity plans, backups).K.8

  • 9

    Secure servers (e.g., DNS/BIND, web, email, messaging, FTP, directory services, DHCP, file and print servers).K.9

CRYPTOGRAPHY: Proficient IT professionals demonstrate knowledge in cryptography. The following accountability criteria are considered essential for students in the Computer and Information Systems Security/Information Assurance program of study.L

  • 1

    Define cryptography and its related terms (e.g., encryption, decryption, public key, and private key).L.1

  • 2

    Identify encryption methods (e.g., symmetric and asymmetric).L.2

  • 3

    Determine appropriate uses for encrypting data and connections (e.g., email, files, network, VPN).L.3

  • 4

    Explain how the design and functionality of various encryption methods support the security of data.L.4

  • 5

    Demonstrate various encryption techniques (e.g., encryption algorithms, Encrypting File System (EFS), hashing, public and private keys, Public Key Infrastructure (PKI), token devices, Trusted Platform Module (TPM), Transport Layer Security (TLS).L.5

SYSTEM SECURITY: Proficient IT professionals demonstrate knowledge in system security. The following accountability criteria are considered essential for students in the Computer and Information Systems Security/Information Assurance program of study.M

  • 1

    Analyze and differentiate between types of system attacks (e.g., operating systems, files, and applications).M.1

  • 2

    Implement security patches and updates (e.g., Active X, Java).M.2

  • 3

    Implement strategies necessary to prevent attacks (e.g., buffer overflow, application, input validation, scripting).M.3

INCIDENT HANDLING: Proficient IT professionals demonstrate knowledge in incident handling. The following accountability criteria are considered essential for students in the Computer and Information Systems Security/Information Assurance program of study.N

  • 1

    Monitor security events and know when escalation is required (e.g., role of SIEM and SOAR, packet captures, log file entries, identifying suspicious events).N.1

  • 2

    Explain digital forensics and attack attribution processes (cyber kill chain, sources of evidence, evidence handling).N.2

  • 3

    Explain the impact of compliance frameworks on incident handling (e.g., compliance frameworks (GDPR, HIPAA, PCI-DSS, FERPA, FISMA), reporting and notification requirements).N.3

  • 4

    Describe the elements of cybersecurity incident response (e.g., policy plan procedure elements, incident response lifecycle stages).N.4

Frequently asked questions

What grade levels do these standards cover?
Grade 10, Grade 11, and Grade 12
Where can I read the official document?
SC Cyber Security Fundamentals

Find this useful?

If so, you'll love the standards search built into Common Planner.

Keep exploring

Sibling grade bands, other subjects in this jurisdiction, and the same subject across other states.

More South Carolina CTE sets

CTE