2021 – 2022
Florida Department of Education
Curriculum Framework 

Program Title:	IT Security
Career Cluster:	Information Technology

AS	
CIP Number	1511100307	
Program Type	College Credit	
Standard Length	60 credit hours	
CTSO	Phi Beta Lambda, BPA 	
SOC Codes (all applicable) 	15-1122 – Information Security Analysts	
CTE Program Resources 	http://www.fldoe.org/academics/career-adult-edu/career-tech-edu/program-resources.stml	

Purpose

This program offers a sequence of courses that provides coherent and rigorous content aligned with challenging academic standards and relevant technical knowledge and skills needed to prepare for further education and careers in the Information Technology career cluster; provides technical skill proficiency, and includes competency-based applied learning that contributes to the academic knowledge, higher-order reasoning and problem-solving skills, work attitudes, general employability skills, technical skills, and occupation-specific skills, and knowledge of all aspects of the Information Technology career cluster. 

The content includes but is not limited to work in Internet, intranet, extranet, and enterprise environments; installing, configuring, designing, and managing secure database and E-commerce resources

Additional Information relevant to this Career and Technical Education (CTE) program is provided at the end of this document.

Program Structure

This program is a planned sequence of instruction consisting of 60 credit hours.

Standards

After successfully completing this program, the student will be able to perform the following:

01.0	Demonstrate an understanding of computer hardware.
02.0	Demonstrate an understanding of networked environments, hardware, and software.
03.0	Install and configure secure network systems software and utilities.
04.0	Demonstrate proficiency with Internet structure, organization, and navigation.
05.0	Demonstrate an understanding of network access control systems and methodology.
06.0	Describe cryptography concepts, standards, and applications.
07.0	Perform telecommunications and network security activities.
08.0	Demonstrate an understanding of Database Management Systems (DBMS). 
09.0	Perform administrative tasks related to database security.
10.0	Demonstrate an understanding of E-commerce.
11.0	Perform tasks related to E-commerce security.
12.0	Perform webserver and site management activities.
13.0	Design and implement physical security measures.
14.0	Perform operation and security management practices.
15.0	Employ applications and systems development security techniques.
16.0	Develop business continuity and disaster recovery plans.
17.0	Describe ethical issues, pertinent laws, and how to conduct investigations.
18.0	Perform general organizational computing workplace competencies.
19.0	Perform project planning and management activities.
20.0	Perform documentation and technical reference activities.
21.0	Demonstrate employability skills.
22.0	Demonstrate professional development skills.

2021 – 2022
Florida Department of Education
Student Performance Standards

Program Title:	IT Security
CIP Number:		1511100307
Program Length:	60 credit hours
SOC Code(s):		15-1122

Refer to Rule 6A-14.030 (4) F.A.C., for the minimum amount of general education coursework required in the Associate of Science (AS) degree.  At the completion of this program, the student will be able to:	
01.0	Demonstrate an understanding of computer hardware.  The student will be able to:	
01.01	Describe multiple numbering systems used to represent instructions and data.	
01.02	Identify the architecture of major hardware platforms.	
01.03	Describe the functions of major hardware components of a computer system.	
01.04	Discuss the potential impact of emerging hardware technologies.	
01.05	Demonstrate the ability to perform preventive maintenance tasks on microcomputer systems.	
01.06	Set up and configure computer systems and peripherals.	
01.07	Configure the Basic Input/Output System (BIOS) of a computer system.	
01.08	Install and configure storage devices, controllers, and network interfaces.	
02.0	Demonstrate an understanding of networked environments, hardware, and software.  The student will be able to:	
02.01	Discuss fundamental network concepts such as topology, protocols, architecture, and internetworking.	
02.02	Define all layers in the Open Systems Interconnect (OSI) and Transmission Control Protocol/Internetworking Protocol (TCP/IP) network protocol models.	
02.03	Discuss the nature of Internetworking Protocol (IP) addresses and Media Access Control (MAC) addresses, and mapping between protocol addressing schemes.	
02.04	Describe the functions and hardware requirements for current popular network servers and services.	
02.05	Describe the major functions and hardware requirements of network client hardware components.	
02.06	Describe current link technologies such as twisted-pair, coaxial, fiber optic, and wireless.	
02.07	Describe the major functions of network connectivity hardware.	
02.08	Describe the function of network storage devices, storage area networks (SAN), and other peripherals.   	
03.0	Install and configure secure network systems software and utilities.  The student will be able to:	
03.01	Install and configure current leading system software, drivers, and service packs.	
03.02	Install, configure and set up a proxy server and a gateway.	
03.03	Discuss the functions of authentication protocols and Virtual Private Networks (VPNs).	
03.04	Install and configure web servers and related services.	
03.05	Use system software to perform routine maintenance tasks such as backup and hard drive defragmentation.	
03.06	Install and configure a secure desktop client operating system (OS).	
03.07	Describe modifications necessary to an OS such as modifying parameters and how to handle conflicting interrupts when installing, configuring, and upgrading application software.	
03.08	Install and configure client software for network-based applications.	
03.09	Install and configure current popular network services for servers.	
04.0	Demonstrate proficiency with Internet structure, organization, and navigation.  The student will be able to:	
04.01	Describe Internet structure and administration.	
04.02	Describe common Internet services and port numbers.	
04.03	Demonstrate the use of internetworking protocols.	
04.04	Differentiate between push and pull technologies.	
04.05	Demonstrate the use of typical remote access mechanisms.	
04.06	Describe the data format and proprietary nature of commonly used Internet file types.	
04.07	Demonstrate use of Internet clients and services.	
05.0	Demonstrate an understanding of network access control systems and methodology.  The student will be able to:	
05.01	Describe access control mechanisms and their impact on users, resources, and operations.	
05.02	Compare and contrast access control techniques.	
05.03	Administer computer, group, and user accounts.	
05.04	Manage policies, rights, permissions, and passwords for users and/or groups of users.	
05.05	Demonstrate an understanding of various access control models.	
05.06	Manage password, PIN selection, maintenance, and control.	
05.07	Demonstrate an understanding of methods of identification and authentication.	
05.08	Implement centralized/remote authentication access controls. 	
05.09	Implement and manage decentralized access controls such as domain and trust relationships.	
05.10	Analyze and explain methods of server attacks.	
05.11	Demonstrate an understanding of the different types of network intrusions and the different methods of detection.	
05.12	Monitor the network using various forms of intrusion detection resources to detect attacks.	
05.13	Investigate audit logs for signs of network intrusions.	
05.14	Find and report weaknesses in the access control system using penetration testing.	
06.0	Describe cryptography concepts, standards, and applications.  The student will be able to:	
06.01	Demonstrate an understanding of the encryption/decryption process.	
06.02	Demonstrate an understanding of the basic functions involved in key management.	
06.03	Describe methods to achieve confidentiality, integrity, and availability through authentication in a network environment.	
06.04	Identify the strengths and weaknesses of cryptographic algorithms and the effects of key length.	
06.05	Employ cryptographic algorithms.	
06.06	Implement current popular key distribution methods.	
06.07	Utilize application and network-based protocols.	
06.08	Describe the use of security hardware components.	
07.0	Perform telecommunications and network security activities.  The student will be able to:	
07.01	Utilize protocol layering models.	
07.02	Evaluate the security implications associated with the various physical media types.	
07.03	Describe security concerns with using various network topologies.	
07.04	Configure authentication protocol service(s) that provide dial-in authentication and security.	
07.05	Employ network monitors and packet sniffers to identify security threats.	
07.06	Implement security measures using network hardware and software.	
07.07	Discuss the security vulnerabilities of the TCP/IP protocol stack.	
07.08	Configure Network Layer security protocols.	
07.09	Configure Transport Layer security protocols.	
07.10	Configure Application Layer security protocols. 	
07.11	Perform connection verification using current authentication protocols.	
07.12	Demonstrate an understanding of how wide area network serial line protocols work.	
07.13	Implement secure data communication techniques.	
07.14	Develop secure email, facsimile, and voice communication procedures to protect against network attacks.	
07.15	Employ alarms and signals to alert network security administrators of intrusions.	
08.0	Demonstrate an understanding of Database Management Systems (DBMS).  The student will be able to:	
08.01	Compare the major types of databases.	
08.02	Describe relational database concepts.	
08.03	Analyze the various components of a DBMS.	
08.04	Install and configure database server software.	
08.05	Perform database administration tasks using the Structured Query Language (SQL).	
08.06	Demonstrate an understanding of transaction processing and concurrency control.	
08.07	Perform database backup and recovery operations.	
09.0	Perform administrative tasks related to database security.  The student will be able to:	
09.01	Develop database security guidelines.	
09.02	Monitor database security systems.	
09.03	Manage web database security.	
09.04	Verify security compliance.	
09.05	Secure backup processes.	
09.06	Verify backup processes.	
09.07	Describe techniques to ensure database integrity and security.	
10.0	Demonstrate an understanding of E-commerce.  The student will be able to:	
10.01	Describe E-commerce and its impact on business and society.	
10.02	Differentiate between the various E-commerce business models.	
10.03	Discuss the steps necessary to maintain transaction integrity.	
10.04	Identify components and procedures necessary to process credit card transactions.	
10.05	Describe applicability of and compliance with Payment Card Industry Data Security Standards (PCI-DSS).	
11.0	Perform tasks related to E-commerce security.  The student will be able to:	
11.01	Manage digital certificates.	
11.02	Maintain integrity in transaction storage and reporting systems.	
11.03	Protect Personal Identifiable Information (PII) in transaction processes.	
11.04	Describe inventory control measures.	
11.05	Maintain security related to electronic communication.	
11.06	Describe methods used to review third-party transaction processing.	
11.07	Evaluate E-commerce platform vulnerabilities.	
12.0	Perform webserver and site management activities.  The student will be able to:	
12.01	Describe the process of obtaining an Internet domain name and mapping it to an Internet Protocol (IP) address.	
12.02	Compare features of current website management tools.	
12.03	Configure current web server software.	
12.04	Use current web server software to maintain secure websites.	
12.05	Use website access tracking and analysis tools to evaluate the security of a web server.	
13.0	Design and implement physical security measures.  The student will be able to:	
13.01	Identify physical threats and vulnerabilities to an enterprise’s resources.	
13.02	Specify possible countermeasures to physically protect an enterprise’s resources.	
13.03	Develop a list of physical facility requirements to secure the premises.	
13.04	Evaluate the feasibility of various technical controls to secure physical resources.	
14.0	Perform operation and security management practices.  The student will be able to:	
14.01	Perform personnel administrative security operations.	
14.02	Implement client and network system security software on an enterprise-wide basis.	
14.03	Perform and verify backups of critical information.	
14.04	Identify methods to protect the privacy of personal data.	
14.05	Demonstrate proper handling of sensitive information and media.	
14.06	Demonstrate an understanding of different control types.	
14.07	Determine what enterprise resources require protection.	
14.08	Compare the advantages and disadvantages of internal versus external audits.	
14.09	Perform compliance checks on user adherence to security policies.	
14.10	Identify different types of enterprise-wide monitoring tools and techniques.	
14.11	Utilize enterprise-wide monitoring tools and techniques.	
14.12	Implement countermeasures to defend against threats.	
14.13	Perform penetration testing activities.	
14.14	Describe principles of risk management and asset valuation.	
14.15	Monitor enterprise-wide information for potential liabilities.	
14.16	Manage software licenses and enforce compliance within the organization.	
15.0	Employ applications and systems development security techniques.  The student will be able to:	
15.01	Describe the stages of the system development life cycle.	
15.02	Describe security implications of structured programming techniques.	
15.03	Analyze the controls that are included within systems and applications software and those used in the development of agents, applets, software, databases, data warehouses and knowledge-based systems.	
15.04	Implement features to ensure data and application integrity, security and availability.	
15.05	Analyze distributed environment application issues.	
15.06	Analyze local environment application issues.	
15.07	Analyze key database and data warehousing issues.	
15.08	Develop multilevel security schemes for databases and data warehouses.	
15.09	Compare different forms of data/information storage.	
15.10	Describe different aspects of application and database security control architectures.	
15.11	Compare and contrast elevated privileges and user modes of operation.	
15.12	Identify various levels of application integrity.	
15.13	Describe the impact that malicious code plays in software development.	
15.14	Formulate countermeasures to defend against or detect malicious code.	
15.15	Establish a secure development environment.	
16.0	Develop business continuity and disaster recovery plans.  The student will be able to:	
16.01	Perform a business impact assessment.	
16.02	Specify the necessary capabilities of alternative business sites.	
16.03	Develop business continuity, disaster containment, and recovery plans.	
16.04	Identify the impact of scheduled facility maintenance on enterprise systems.	
16.05	Develop a testing program for business continuity/disaster recovery plans.	
16.06	Develop a training program for personnel regarding business continuity/disaster recovery plans.	
17.0	Describe ethical issues, pertinent laws, and how to conduct investigations.  The student will be able to: 	
17.01	Explain the major categories and types of laws as they relate to information security.	
17.02	Describe institutional policies and practices regarding data privacy and intellectual property rights.	
17.03	Describe abnormal and suspicious activity as it relates to information security.	
17.04	Identify potential data security threats.	
17.05	Describe legal institutional policies and practices to protect against purposeful violations of data integrity.	
17.06	Identify the major categories of computer crimes and attacks.	
17.07	Describe institutional policies and practices to conduct an investigation of security violations.	
17.08	Explain major ethical and legal issues related to Internet and system use.	
18.0	Perform general organizational computing workplace competencies.  The student will be able to:	
18.01	Deliver and follow oral and written technical instructions.	
18.02	Prepare and deliver a technical presentation.  	
18.03	Participate in group discussions as a member and as a leader.	
18.04	Explain the importance of self-motivation and responsibility in completing assigned tasks.  	
18.05	List the steps in problem solving.	
18.06	Identify and discuss issues contained within professional codes of conduct.	
18.07	Explain ethical aspects of intellectual property rights and licensing issues.	
18.08	Identify potential sources of employee/employer or employee/employer conflict and discuss possible approaches to resolve such disagreements.	
18.09	Identify appropriate workplace behavior.	
18.10	Identify principles and techniques for being a productive, contributing member of a team.	
18.11	Identify acceptable strategies for resolving conflict in the workplace.	
18.12	Describe principles and techniques for working productively with people of diverse cultures and backgrounds.	
18.13	Identify techniques for stress management and prevention of job burnout.	
18.14	Identify appropriate communication skills and etiquette.	
19.0	Perform project planning and management activities.  The student will be able to:	
19.01	List effective time management skills.	
19.02	Describe appropriate measures for planning and managing a large project.	
19.03	Create an implementation schedule for a large project.	
19.04	Describe appropriate measures for planning and implementing upgrades of hardware and software.	
19.05	Identify examples of effective end-user training strategies and techniques.	
20.0	Perform documentation and technical reference activities.  The student will be able to: 	
20.01	Demonstrate technical writing skills.	
20.02	Identify information in printed and online technical references.	
20.03	Prepare documentation to track assets, security-related activities, and incidents.	
21.0	Demonstrate employability skills.  The student will be able to:	
21.01	Identify sources of employment opportunities.	
21.02	Identify employer expectations regarding attendance, punctuality, initiative and teamwork.	
21.03	Describe employee rights regarding privacy, discrimination, due process and safety.	
21.04	Identify the key requirements of a written job description.	
21.05	Identify methods for securing employment references.	
21.06	Compose a cover letter and a resume.	
21.07	Complete an employment application.	
21.08	Classify behaviors considered appropriate or inappropriate in a job interview situation.	
21.09	Demonstrate job interview skills.	
21.10	Compose a follow-up letter.	
21.11	Compose a letter of resignation.	
22.0	Demonstrate professional development skills.  The student will be able to:	
22.01	Identify corporate strategies and policies for professional development.	
22.02	Describe the importance of participating in professional organizations and maintaining professional contacts.  	
22.03	Explain the importance of mentor relationships.	
22.04	Identify industry trends.	
22.05	Describe options for continuing education.	
22.06	Identify industry journals, magazines and digital media.	
22.07	Describe the importance of attending seminars, workshops, and tradeshows.	

Additional Information

Laboratory Activities

Laboratory investigations that include scientific inquiry, research, measurement, problem solving, emerging technologies, tools and equipment, as well as, experimental, quality, and safety procedures are an integral part of this career and technical program/course. Laboratory investigations benefit all students by developing an understanding of the complexity and ambiguity of empirical work, as well as the skills required to manage, operate, calibrate and troubleshoot equipment/tools used to make observations. Students understand measurement error; and have the skills to aggregate, interpret, and present the resulting data. Equipment and supplies should be provided to enhance hands-on experiences for students.

Career and Technical Student Organization (CTSO)

Phi Beta Lambda and Business Professionals of America (BPA) are the intercurricular career and technical student organizations providing leadership training and reinforcing specific career and technical skills.  Career and Technical Student Organizations provide activities for students as an integral part of the instruction offered.  

Accommodations

Federal and state legislation requires the provision of accommodations for students with disabilities to meet individual needs and ensure equal access. Postsecondary students with disabilities must self-identify, present documentation, request accommodations if needed, and develop a plan with their counselor and/or instructors. Accommodations received in postsecondary education may differ from those received in secondary education. Accommodations change the way the student is instructed. Students with disabilities may need accommodations in such areas as instructional methods and materials, assignments and assessments, time demands and schedules, learning environment, assistive technology and special communication systems. Documentation of the accommodations requested and provided should be maintained in a confidential file.

Certificate Programs

A College Credit Certificate consists of a program of instruction of less than sixty (60) credits of college-level courses, which is part of an AS or AAS degree program and prepares students for entry into employment (Rule 6A-14.030, F.A.C.).  This AS degree program includes the following College Credit Certificates:

Database & E-commerce Security CCC (0511100311) – 18 credit hours.

Standards for the above certificate programs are contained in separate curriculum frameworks.

Additional Resources

For additional information regarding articulation agreements, Bright Futures Scholarships, Fine Arts/Practical Arts Credit and Equivalent Mathematics and Equally Rigorous Science Courses please refer to:
http://www.fldoe.org/academics/career-adult-edu/career-tech-edu/program-resources.stml