

|
Mapping of CNSS 4011 to IAS Courses |

|
|
CIS 100 |
CIS 105 |
CIS 121 |
CIS 123 |
CIS 321 |
CIS 471 |
CIS 472 |
CIS 473 |
CIS 474 |
CIS 476 |
CIS 575 |
CIS 529 |
CIS 519 |
CIS 521 |
|
(A) Communications basics (Awareness) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(a) Historical vs Current Methodology |
x |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(b) Capabilities and limitations |
x |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(B) AIS Basics (Awareness) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(a) Historical vs Current Technology |
x |
|
x |
|
|
|
|
|
|
|
|
|
|
|
|
(b) Hardware |
x |
|
|
|
|
|
x |
|
|
|
|
|
|
|
|
(c) Software |
x |
|
|
|
|
|
|
x |
|
|
|
|
|
|
|
(d) Memory |
x |
|
|
|
|
|
|
x |
|
|
|
|
|
|
|
(e) Media |
x |
|
|
|
|
|
|
x |
|
|
|
|
|
|
|
(f) Networks |
x |
|
|
|
|
|
|
x |
|
|
|
x |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(C) Security Basics (Awareness) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(a) INFOSEC Overview |
|
|
|
|
|
|
|
|
|
|
|
x |
|
x |
|
(b) Operations Security (OPSEC) |
|
|
|
|
|
|
|
|
|
|
|
|
x |
x |
|
(c) Information Security |
|
|
|
|
|
|
|
|
|
|
|
|
|
x |
|
(d) INFOSEC |
|
|
|
|
|
|
|
|
|
|
|
|
|
x |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(D) NSTISS Basics (Awareness) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(a) National Policy and Guidance |
|
|
|
|
|
|
|
|
|
|
|
|
x |
|
|
(b) Threats to and Vulnerabilities of Systems (c) Legal Elements |
|
|
|
|
|
|
|
|
|
|
|
x x |
x |
|
|
(d) Countermeasures |
|
|
|
|
|
|
|
|
|
|
|
|
x |
x |
|
(e) Concepts of Risk Management |
|
|
|
|
|
|
|
|
|
|
|
|
|
x |
|
(f) Concepts of System Life Cycle Management |
|
|
|
|
|
x |
|
|
|
|
|
x |
|
|
|
(g) Concepts of Trust |
|
|
|
|
|
|
|
|
|
|
|
|
|
x |
|
(h) Modes of Operation |
|
|
|
|
|
|
|
x |
|
|
|
|
x |
x |
|
(i) Roles of Various Organizational Personnel |
|
|
|
|
|
|
x |
|
|
|
|
|
x |
|
|
(j) Facets of NSTISS |
|
|
|
|
|
|
|
|
|
|
x |
|
x |
x |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(E) System Operating Environment (Awareness) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(a) AIS |
|
|
x |
|
|
|
|
x |
|
|
x |
|
|
|
|
(b) Telecommunications Systems |
|
|
|
|
|
|
|
|
|
|
x |
|
|
|
|
(c) Agency Specific Security Policies |
|
|
|
|
|
|
|
|
|
|
x |
|
|
|
|
(d) Agency Specific AIS and Telecommunications Policies |
|
|
|
|
|
|
|
|
|
|
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(F) NSTISS Planning and Mgmt (Performance) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(a) Security Planning |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(b) Risk Management |
|
|
|
|
|
|
|
|
|
|
|
|
|
x |
|
(c) Systems Life Cycle Management |
|
|
|
|
|
|
x |
|
|
|
|
|
|
x |
|
(d) Contingency Planning/Disaster Recovery |
|
|
|
|
|
|
|
|
|
|
|
|
x |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
(G) NSTISS Policies and Procedures (Performance) |
|
|
|
|
|
|
|
|
|
|
|
|
||
|
(a) Physical Security Measures |
|
|
|
|
|
|
x |
|
|
|
x |
|
|
|
|
(b) Personnel Security Procedures |
|
|
|
|
|
|
x |
x |
|
|
|
|
|
|
|
(c) Software Security |
|
x |
|
x |
x |
x |
x |
x |
|
x |
|
|
|
x |
|
(d) Network Security |
|
|
|
|
|
|
|
|
|
|
x |
|
x |
|
|
(e) Administrative Security Procedural Controls |
|
|
|
|
|
x |
|
|
|
|
x |
|
x |
|
|
(f) Auditing and Monitoring |
|
|
|
|
|
|
x |
|
|
|
|
|
x |
x |
|
(g) Cryptosecurity |
|
|
|
|
x |
|
|
x |
x |
|
|
|
|
x |
|
(h) Key Management |
|
|
|
|
|
|
|
|
x |
|
|
|
|
x |
|
(i) Transmission Security |
|
|
|
|
|
|
|
|
|
|
x |
|
|
|
|
(j) TEMPEST Security |
|
|
|
|
|
|
|
|
|
|
x |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|