Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| cstp_degree_competency_checklist [2021/02/03 18:12] – bob | cstp_degree_competency_checklist [2021/02/03 18:18] (current) – bob | ||
|---|---|---|---|
| Line 15: | Line 15: | ||
| |8: Construct software to interact with the real world and analyse for security exploits| | |8: Construct software to interact with the real world and analyse for security exploits| | ||
| |9: Analyse malware & identify its mechanisms| | |9: Analyse malware & identify its mechanisms| | ||
| + | |10: Apply secure programming principles and design patterns to address security issues| | ||
| + | |11: Apply system engineering and software development methodologies and models| | ||
| + | |12: Discover, identify and analyse threats, attack techniques, vulnerabilities and mitigations| | ||
| + | |13: Assess culture & individual responsibilities| | ||
| + | |14: Undertake ethical system reconnaissance and intelligence analysis| | ||
| + | |15: Undertake risk modelling, analysis and trades| | ||
| + | |16: Undertake risk assessment to an external standard | ||
| + | |17: Apply a management system and develop an information security management plan| | ||
| + | |18: Configure and use security technology components and key management| | ||
| + | |19: Design & evaluate a system to a security case| | ||
| + | |20: Architect, analyse & justify a secure system| | ||
| + | |21: Develop an assurance strategy| | ||
| + | |22: Security monitoring, analysis and intrusion detection. Recognise anomalies & behaviours| | ||
| + | |23: Manage intrusion response, including with 3rd parties| | ||
| + | |24: N/A| | ||
| + | |25: Organise testing & investigation work in accordance with legal & ethical requirements| | ||
| + | |26: Develop & apply information security policy to implement legal or regulatory requirements| | ||
| + | | | | ||
| + | |Note: N/A indicates there is not a corresponding competency for a taught knowledge component| | ||