This page displays the selected Module Descriptor.
Printer friendly version
Session: 2022/23
Last modified: 21/07/2022 08:15:20
|
Title of Module: Incident Response |
|---|
|
Code: COMP11082 |
SCQF Level: 11
(Scottish Credit and Qualifications Framework) |
Credit Points: 10 |
ECTS: 5
(European Credit Transfer Scheme) |
|---|
| School: | School of Computing, Engineering and Physical Sciences |
|---|
| Module Co-ordinator: | Sean
Sturley |
|---|
| Summary of Module |
|---|
The module provides students with detailed understanding of the methodologies, practices and techniques required to responsed to an network intrusion or security breach and will ensure students understand all factors involved in the required for situational preparedness, management and resilience principles.
By using reflection techniques and case study reviews, students will develop a deeper understanding of the processes required to deal with a security breach.
This module will work to develop a number of the key 'I am UWS' Graduate Attributes to make those who complete this module:
Universal
- Critical Thinker
- Ethically-minded
- Research-minded
Work Ready
- Problem-Solver
- Effective Communicator
- Ambitious
Successful
- Autonomous
- Resilient
- Driven
|
| Module Delivery Method |
|---|
| Face-To-Face | Blended | Fully Online | HybridC | HybridO | Work-based Learning |
|  | | | | |
Face-To-Face
Term used to describe the traditional classroom environment where the students and the lecturer meet synchronously in the same room for the whole provision.
Blended
A mode of delivery of a module or a programme that involves online and face-to-face delivery of learning, teaching and assessment activities, student support and feedback. A programme may be considered “blended” if it includes a combination of face-to-face, online and blended modules. If an online programme has any compulsory face-to-face and campus elements it must be described as blended with clearly articulated delivery information to manage student expectations
Fully Online
Instruction that is solely delivered by web-based or internet-based technologies. This term is used to describe the previously used terms distance learning and e learning.
HybridC
Online with mandatory face-to-face learning on Campus
HybridO
Online with optional face-to-face learning on Campus
Work-based Learning
Learning activities where the main location for the learning experience is in the workplace.
|
| Term(s) for Module Delivery |
|---|
|
(Provided viable student numbers permit).
|
| Term 1 | | Term 2 | | Term 3 | |
[Top of Page]
| Learning Outcomes: (maximum of 5 statements) |
|---|
On successful completion of this module the student will be able to:
L1.
Demonstrate a critical understanding of the theories and concepts associated with the management of security breaches by the Computer Incident Response Team (CIRT).
L2.
Apply knowledge, skills and understanding to design sytems that fully utilise tools such as the SANS 6 Step Incident Management Model
L3.
Critically analyse the effectiveness of practical implementations of incident management and response. |
| Employability Skills and Personal Development Planning (PDP) Skills |
|---|
| SCQF Headings |
During completion of this module, there will be an opportunity to achieve
core skills in:
|
|---|
| Knowledge and Understanding (K and U) |
SCQF Level 11.
Students will learn systematic and comprehensive knowledge of Incident Response. Students are expected to be familiar with the key technologies and techniques and their application in practice. |
| Practice: Applied Knowledge and Understanding |
SCQF Level 11.
Students will gain in-depth, comprehensive understanding and critical awareness of knowledge of Incident Response, and apply this in planning, developing and implementing, capture a response to a network security event. They will also develop capability to apply a range of standard and specialised research skills, tools/software, development kit and related techniques in response to application requirements for their written assignment and lab tasks. |
| Generic Cognitive skills |
SCQF Level 11.
To complete their written reports and laboratory tasks, students will first build skills to integrate information and apply knowledge from various sources including technology advances informed by research and industry. |
| Communication, ICT and Numeracy Skills |
SCQF Level 11.
Working in interacting groups, students will develop communication skills as well as the ability to write technical reports and documentation. |
| Autonomy, Accountability and Working with others |
SCQF Level 11.
Each student will generate a comprehensive report summarizing his/her finding for a given scenario. |
| Pre-requisites: |
Before undertaking this module the student should have
undertaken the following:
|
|---|
Module Code:
| Module Title:
|
| Other: | |
| Co-requisites | Module Code:
| Module Title:
|
|---|
* Indicates that module descriptor is not published.
[Top of Page]
| Learning and Teaching |
|---|
| The module will be delivered by means of lectures and supervised hands-on lab work. Lectures will cover the theoretical background and practical applicability in real life problems. Concepts will be introduced by posing a practical problem and working out the needed theoretical knowledge to solve them. The delivery will encourage student participation to ensure an active learning experience. Group discussions will be held to promote critical thinking and boost informed decisions on the suitability of different state-of-the-art methods. Lab exercises will help student develop their knowledge in incremental fashion using a learning-by-doing approach. This will support the development of knowledge and understanding of the topics. |
Learning Activities
During completion of this module, the learning activities undertaken to
achieve the module learning outcomes are stated below:
| Student Learning Hours
(Normally totalling 200 hours):
(Note: Learning hours include both contact hours and hours spent on other learning activities) |
| Lecture/Core Content Delivery | 6 |
| Tutorial/Synchronous Support Activity | 6 |
| Laboratory/Practical Demonstration/Workshop | 12 |
| Independent Study | 76 |
| 100
Hours Total
|
|
**Indicative Resources: (eg. Core text, journals, internet
access)
|
|---|
The following materials form essential underpinning for the module content
and ultimately for the learning outcomes:
Luttgens, J. (2014) 3rd Ed. Incident Response & Computer Forensics. McGraw-Hill Education
Murdoch, D. (2014) 2nd Ed. Blue Team Handbook: Incident Response Edition: A condensed field guide for the Cyber Security Incident Responder. CreateSpace Independent Publishing Platform
Roberts, S and Brown, R. (2016) Intelligence-Driven Incident Response. O'Reillly
|
|
(**N.B. Although reading lists should include current publications,
students are advised (particularly for material marked with an asterisk*) to
wait until the start of session for confirmation of the most up-to-date
material)
|
| Engagement Requirements |
|---|
In line with the Academic Engagement Procedure, Students are defined as academically engaged if they are regularly engaged with timetabled teaching sessions, course-related learning resources including those in the Library and on the relevant learning platform, and complete assessments and submit these on time. Please refer to the Academic Engagement Procedure at the following link: Academic engagement procedure |
[Top of Page]
Supplemental Information
| Programme Board | Computing |
|---|
| Assessment Results (Pass/Fail) |
No
|
|---|
| Subject Panel | Business & Applied Computing |
|---|
| Moderator | Tom Caira |
|---|
| External Examiner | N Coull |
|---|
| Accreditation Details | |
|---|
| Version Number | 1.04 |
|---|
[Top of Page]
| Assessment: (also refer to Assessment Outcomes Grids below) |
|---|
| Coursework One (50%) |
| Coursework Two(50%) |
(N.B. (i) Assessment Outcomes Grids for the module
(one for each component) can be found below which clearly demonstrate how the learning outcomes of the module
will be assessed.
(ii) An indicative schedule listing approximate times
within the academic calendar when assessment is likely to feature will be
provided within the Student Handbook.)
|
Assessment Outcome Grids (Footnote A.)
Footnotes
A. Referred to within Assessment Section above
B. Identified in the Learning Outcome Section above
[Top of Page]
Note(s):
- More than one assessment method can be used to assess individual learning outcomes.
-
Schools are responsible for determining student contact hours. Please refer to University Policy on contact hours (extract contained within section 10 of the Module Descriptor guidance note).
This will normally be variable across Schools, dependent on Programmes &/or Professional requirements.
|
| Equality and Diversity |
|---|
This module is suitable for any student. The assessment regime will be applied flexibly so that a student who can attain the practical outcomes of the module will not be disadvantaged. When a student discloses a disability, or if a tutor is concerned about a student, the tutor in consultation with the School Enabling Support co-ordinator will agree the appropriate adjustments to be made.
UWS Equality and Diversity Policy |
|
(N.B. Every effort
will be made by the University to accommodate any equality and diversity issues
brought to the attention of the School)
|