Fundamentals of Penetration TestingCLO↔PLO matrix

Programme learning outcomes

1. 1

   PLO 1

   Ptn 1 - must know the emergence, formation and development of the traditions of modern statehood of azerbaijan, political and ideological, economic and technological in the formation of modern statehood of azerbaijan. should be able to analyze and study the role of scientific and cultural factors. azerbaijan should be able to systematically analyze the place and role of the state in the modern world he should be knowledgeable about the history of development in the fields of cybernetics, applied mathematics, information and communication technologies of azerbaijan, the traditions and potential of scientific education and industry in these fields, and the professional activities of world-class specialists. must acquire presentation, public speaking, academic and business writing skills in azerbaijani language. must have presentation, public speaking, academic and business writing, oral and written communication skills in one of the foreign languages. he should know the purpose and tasks of the "information security" specialty, its interaction with other specialty areas, the importance of demand in the public and private sectors, and future prospects. the importance of engineering ethics is to know the importance of applying the knowledge learned in this specialty only within the framework of legislation and ethical norms, in accordance with professional competences.

   No contribution from this subject

2. 2

   PLO 2

   Ptn 2 - must have knowledge of numerical and cumulative sequences, limit and continuity of a function, derivative of a function, extrema of a univariate function, indefinite integral, definite integral, numerical and power series, limit, special derivatives and differential of a multivariable function. the concept of matrix, operations on matrices and matrix transposition, calculation of two- and three-order determinants, determinant of product of two matrices, inverse matrix and its existence, n-dimensional vector space, linear dependence of vectors, matrix rank, system of linear algebraic equations, polynomials and operations on them, root of polynomial, horner scheme, quadratic forms should be known. elementary functions of logic algebra, their properties, operations on them, binary function. should have knowledge about duality principle, concept of graph, geometric expression of graph, connected, sub, complete, isomorphic and homomorphic graphs, directed, undirected and mixed graph, smooth and homogeneous graph, coding, decoding, reciprocal one-valued decoding, alphabetic and regular coding, code selection, source of obstacles, one-valued decoding criterion. subject of probability theory, classical probability. elements of combinatorics, kolmogorov axioms. properties of probability. geometric probability. entropy and information quantity. must have knowledge of bernoulli scheme, probability distribution, discrete distribution, numerical characteristics of random quantity, mathematical expectation, variance, markov and chebyshev inequality, asymmetry coefficient, covariance and correlation coefficient, law of large numbers.

   No contribution from this subject

3. 3

   PLO 3

   Ptn 3 - knowledge and skills should be acquired for preventive protection of information systems, minimization of information security risks, detection of threats and vulnerabilities, prevention of complications. he should be able to determine the scope of information security, keep records of information assets and assets used in information processes, their related functionality, and define information security management policies and sub-policies for managing risks, incidents, ict-services and ict-projects. information security requirements for assets that are protected, including protection tools, and information security measurement indicators (metrics) should be mastered. he should be able to determine incidents (to information security) and consequences (to business continuity) that may arise from threats, and their degree of seriousness. cyber intelligence ("cyber-intelligence"), including the ability to identify threats, related efforts and preparations, and related preventive countermeasures should be mastered. should be able to prepare drafts, guidelines, practical implementation manuals ("playbooks") of local (corporate) normative legal acts in accordance with the provision of cryptography services (recommendatory), audit and evaluation of information security management, information security management policy

   No contribution from this subject

4. 4

   PLO 4

   Ptn 4 - knowledge and skills for the organization of incident management, including continuous monitoring, regular audits, expertise and other control mechanisms for the detection of information security incidents. must be able to ensure the implementation of processes related to the information security structural unit - the security monitoring operations center ("soc, security operation center"). he should know how to identify and evaluate information security events in protected assets, how to detect information security incidents, how to determine the severity levels of incidents, and the types and degrees of complications. cyber-forensics & "collection of evidence/findings". should be aware of their security requirements.

   No contribution from this subject

5. 5

   PLO 5

   Ptn 5 - must acquire knowledge and skills in managing configurations and changes to protected assets to address vulnerabilities in response to information security incidents. must know how to choose the appropriate option (blocking, recovery, change, update, upgrade, fallback, rollback) for counter-response to information security incidents and how to formulate, implement and apply appropriate "playbooks" or call for external support in crisis situations. must be knowledgeable about administration of software and technical services ("controls") with information protection tools.

   No contribution from this subject

6. 6

   PLO 6

   Ptn 6 - knowledge and skills related to the planning and implementation of information security solutions, the design, development, development and implementation of these solutions in accordance with the levels of excellence and reliability determined from the foundation of ICT tools, and project management in this field should be acquired. must be able to determine and document the request for proposal, rfp, for an ICT product (including software tools, electronics, electrical engineering, telecommunications and other technical support tools) that is protected within the scope of information security, including a protection tool. it should be able to conduct an analysis of the compliance of the ICT product with the standards related to the set of technical requirements of the destination (for example, by the "gap analysis" method). should be aware of cascade approach / "agile" iterative IT product creation methods ("waterfall" approach, etc.), should acquire the necessary knowledge to choose the appropriate methodology ("scrum", "lean", "xp") for the corresponding approach. the ICT product technical requirements ("statement of requirements. sor") and technical task conditions ("terms of reference, tor") must be determined and documented, ICT product verification tests must be provided, including the mechanisms for checking and documenting the implementation of technical requirements and technical tasks/conditions.

   No contribution from this subject