Florida Department of Education
Curriculum Framework 

Program Title:	Cybersecurity
Career Cluster:	Information Technology

AS	
CIP Number	1511100308	
Program Type	College Credit	
Program Length	60 credit hours	
CTSO	PBL, BPA	
SOC Codes (all applicable) 	Please see the CIP to SOC Crosswalk located at the link below.	
CTE Program Resources 	http://www.fldoe.org/academics/career-adult-edu/career-tech-edu/program-resources.stml	

Purpose

The program offers a sequence of courses that provides coherent and rigorous content aligned with challenging academic standards and the relevant technical knowledge and skills needed to prepare for further education and careers related to most NICE framework specialty areas, such as: Security Provision (SP), Operate and Maintain (OM), Protect and Defend (PR), Analyze (AN), Collect and Operate (CO), and Investigate (IN). This program provides technical and non-technical skill proficiency and competency-based applied learning.  These competencies contribute to the academic knowledge, higher-order reasoning and problem-solving skills, work attitudes, general employability skills, technical skills, occupation-specific skills, and knowledge of all aspects of the Information Technology career cluster.

The content includes Cybersecurity Foundational Knowledge Units (KU), Technical and non-Technical Knowledge Units.  

Additional Information relevant to this Career and Technical Education (CTE) program is provided at the end of this document.

Program Structure

This program is a planned sequence of instruction consisting of 60 credit hours.

Standards

After successfully completing this program, the student will be able to perform the following:

01.0	Demonstrate a fundamental understanding of computer networking.    
02.0	Demonstrate understanding of networked environments, hardware, and software.    
03.0	Demonstrate fundamental proficiency in network security essentials.    
04.0	Demonstrate an understanding of access control systems and methodology.    
05.0	Perform secure web design/development activities.    
06.0	Perform secure programming and scripting activities.    
07.0	Demonstrate an understanding of Cybersecurity Foundations and Principles.    
08.0	Demonstrate an understanding of legal, regulatory, and ethical issues related to cybersecurity.    
09.0	Demonstrate effective communication and soft skills.    
10.0	Explain and apply cryptographic concepts.   
11.0	Demonstrate an understanding of secure database concepts.   

Florida Department of Education
Student Performance Standards

Program Title:	Cybersecurity
CIP Number:		1511100308
Program Length:	60 credit hours
	
At the completion of this program, the student will be able to:	
01.0	Demonstrate a fundamental understanding of computer networking.  The student will be able to:	
01.01	Explain the use of binary numbers and perform binary arithmetic.	
01.02	Describe current network environments.	
01.03	Describe network communications and architecture.	
01.04	Identify network components, media, connectors, applications and protocols.	
01.05	Compare and contrast the OSI and TCP/IP reference models and their layers.	
01.06	Identify and describe current relevant IEEE network standards.	
01.07	Create an IP addressing scheme using Variable Length Subnet Masks (VLSM) and Classless Inter-Domain Routing (CIDR).	
01.08	Identify and discuss issues related to networked environments, such as security, access control, fair use, privacy and redundancy.	
01.09	Identify and discuss issues related to naming conventions for user IDs, e-mail, passwords, and network hosts and devices.	
01.10	Identify standard network topologies and describe the advantages and disadvantages of each topology.	
01.11	Describe the major functions of LAN protocols.	
01.12	Explain the functions of wireless components, standards, hardware, software, and infrastructure design.	
01.13	Configure and manage the TCP/IP protocol stack.	
01.14	Describe how TCP and UDP Port addresses, IP addresses, and MAC addresses function, and how they are used to deliver data across the network.	
01.15	Identify emerging technologies and discuss related technical issues.	
01.16	Design a local area network (LAN), including the specification of architecture, hardware and software.	
01.17	Identify the advantages and use of virtual local area networks (VLANs).	
01.18	Identify and explain wide area network (WAN) concepts.	
01.19	Plan, configure and test a small network and establish baselines.	
01.20	Describe the major functions of network server software components.	
01.21	Install applications on a server and configure clients for network access.	
01.22	Describe routing concepts. 	
02.0	Demonstrate understanding of networked environments, hardware, and software.  The student will be able to:	
02.01	Give several advantages and disadvantages of networked and non-networked environments.	
02.02	Describe current network environments and network topologies.	
02.03	Identify and discuss issues such as security, privacy and redundancy related to networked environments.	
02.04	Identify and discuss standardization issues related to-naming conventions.	
02.05	Discuss the nature of IP and MAC addressing.	
02.06	Describe the major functions and requirements of web-based server and client hardware and software components.	
02.07	Identify various specialized servers.	
02.08	Recognize and describe current cable technologies.	
02.09	Describe current wireless technologies.	
02.10	Describe the major functions of network connectivity hardware, such as hubs, repeaters, bridges, routers, switches, and gateways.	
02.11	Describe the hardware needed to connect a LAN to the Internet.	
02.12	Describe the function of network storage devices and other peripherals.	
02.13	 Compare and contrast major functions and features of current network operating systems and associated security controls. 	
02.14	Differentiate between telecommunications and data communications.	
02.15	Compare and contrast digital communications lines and cable characteristics. 	
03.0	Demonstrate fundamental proficiency in network security essentials.  The student will be able to:	
03.01	Describe common security threats to, and vulnerabilities of, computer systems and the corresponding best practices for mitigation.	
03.02	Define and describe malicious software and techniques to protect systems from its effects.	
03.03	Describe Denial of Service (DoS) attacks and means to defend against them.	
03.04	Identify the risks and techniques of data loss and its prevention.	
03.05	Describe the principles and techniques of securing data storage and transmission.	
03.06	Identify current encryption and authentication standards.	
03.07	Implement security policies, including compliance and operational security.	
03.08	Enable access control, identity management and security logging.	
03.09	Manage client and network system security software and related updates.	
03.10	Describe the functions and characteristics of firewalls.	
03.11	Perform a ping sweep to identify network hosts.	
03.12	Perform a port scan to probe network hosts for open TCP and UDP ports.	
03.13	Describe the purpose and operation of network protocol analyzers.	
03.14	Utilize a network protocol analyzer to capture and analyze network traffic for security issues.	
03.15	Describe the functions and characteristics of IDS (Intrusion Detection Systems) and IPS (Intrusion Prevention Systems).	
04.0	Demonstrate an understanding of access control systems and methodology.  The student will be able to:	
04.01	Specify by access control mechanisms what users can do, which resources they can access, and what operations they can perform on a system.	
04.02	Compare and contrast access control techniques.	
04.03	Administer computer, group, and user accounts.	
04.04	Discuss policies, rights, permissions, and passwords for users and/or groups of users.	
04.05	Demonstrate an understanding of various access control models.	
04.06	Discuss password, PIN selection, maintenance, and control.	
04.07	Demonstrate an understanding of current and emerging methods of identification and authentication.	
04.08	Discuss centralized/remote authentication access controls.	
04.09	Analyze methods of server attacks.	
04.10	Demonstrate an understanding of the different types of intrusions and the different methods of intrusion detection.	
04.11	Monitor the network using various forms of intrusion detection resources to detect attacks.	
04.12	Investigate audit trails for signs of network Indicators of Compromise (IoC). (i.e., log files, alert reports, error reports, network performance reports, and output from tools to support analysis). 	
04.13	Perform penetration testing to find weaknesses in the access control systems.	
05.0	Perform secure web design/development activities.  The student will be able to:	
05.01	Demonstrate proficiency with Internet structure, organization, and navigation and describe the relation to the Internet and WWW.	
05.02	Describe and use the process of storyboarding a website.	
05.03	Describe format, structure and design principles for websites.	
05.04	Evaluate web graphic utilities and creation tools, including those for animated graphics.	
05.05	Identify existing resources and constraints.	
05.06	Evaluate design based on current industry and Open Web Application Security Project (OWASP) standards.	
05.07	Create site navigation plan including directory structure.	
05.08	Procure/create and incorporate standard and animated graphics into a webpage.	
05.09	Design page templates to implement on final site.	
05.10	Create a webpage using authoring tools.	
05.11	Code page(s) using current web programming languages.	
05.12	Check page for cross-browser capability and other access issues.	
05.13	Upload pages and run site analysis.	
05.14	Incorporate multimedia files into a webpage.	
05.15	Incorporate an e-mail link on a webpage.	
05.16	Incorporate internal and external links on a webpage.	
05.17	Incorporate tables and file transfer capabilities on a webpage.	
05.18	Incorporate handicapped-accessibility options into the website.	
05.19	Configure a webpage for Search Engine Optimization.	
05.20	Create a web form and produce e-mail results.	
05.21	Create a web database interface.	
05.22	Discuss the issue of ODBC compliance.	
05.23	Describe SQL Injections Concepts.	
05.24	Describe how JavaScript is used to manipulate the DOM (Document Object Model).	
05.25	Explain Cross-Site Scripting (XSS) and Cross-site request forgery (CSRF).	
06.0	Perform secure programming and scripting activities.  The student will be able to:	
06.01	Identify several of the most prominent current programming languages.	
06.02	Characterize the stages of the system development life cycle.	
06.03	Differentiate between various strategies for problem solving.	
06.04	Describe the program design and development process.	
06.05	Differentiate between structured programming and object-oriented programming.	
06.06	Use programming, scripting, and/or macro languages to create and test programs.	
06.07	Apply principles of good design and documentation when developing programs.	
06.08	Write scripting code to handle error checking.	
06.09	Write code to allow for interactions between the client and server.	
06.10	Use scripting languages to create dynamic webpages.	
06.11	Identify development tools. 	
06.12	Design, review, and test specifications and algorithms.	
06.13	Write a program according to specifications and revise based on testing and debugging.	
06.14	Demonstrate proficient use of current scripting development languages.	
06.15	Use scripting languages to automate administration tasks.	
06.16	Describe regular expressions.	
07.0	Demonstrate an understanding of Cybersecurity Foundations and Principles.  The student will be able to:	
07.01	Complete a security needs evaluation.	
07.02	Design security architecture.	
07.03	Select security protocols.	
07.04	Select and set encryption methodologies.	
07.05	Incorporate password protection on a webpage.	
07.06	Incorporate session handling into a webpage.	
07.07	Configure firewall.	
08.0	Demonstrate an understanding of legal, regulatory, and ethical issues related to cybersecurity.  The student will be able to:	
08.01	Discuss the types of works that are protected by intellectual property laws.	
08.02	Discuss the basic elements of a contract.	
08.03	Discuss e-mail litigation, including anti-spam laws.	
08.04	Discuss e-mail use and ownership.	
08.05	Describe customer and employee privacy issues and safeguards.	
08.06	Develop examples of acceptable use policies.	
08.07	Understand organizational codes of ethics.	
08.08	Research industry standards and codes of conduct for information technology professionals.	
08.09	Write a personal code of ethics.	
08.10	Discuss regulatory cybersecurity compliance	
09.0	Demonstrate effective communication and soft skills.  The student will be able to:	
09.01	Write logical and clear statements, or phrases, to complete forms/invoices commonly used in business and industry.	
09.02	Read and explain graphs, charts, diagrams, and tables commonly used in this industry/occupation area.	
09.03	Deliver and follow oral and written instructions.	
09.04	Answer and ask questions coherently and concisely.	
09.05	Read critically by recognizing assumptions and implications and by evaluating ideas.	
09.06	Demonstrate appropriate communication skills.	
09.07	Prepare and deliver a technical presentation.	
09.08	Discuss verbal and nonverbal behaviors.	
09.09	Compose and critique professional documents.	
09.10	Demonstrate effective use of electronic communication.	
09.11	Summarize the skills involved in being an effective listener.	
09.12	Demonstrate ability to work and communicate effectively in multicultural and diverse environments.	
10.0	Explain and apply cryptographic concepts.  The student will be able to:	
10.01	Compare and contrast symmetric and asymmetric cryptography.	
10.02	Explain the purpose of hash functions.	
10.03	Explain the use of cryptography for authentication purposes.	
10.04	Describe the goals of digital certificates.	
10.05	Explain the use of digital signatures.	
10.06	Classify common cryptographic standards.	
10.07	Explain the purpose, security requirements, and properties of hash functions and the use of common hash function algorithms.	
11.0	Demonstrate an understanding of secure database concepts. The student will be able to:	
11.01	Understand secure database concepts.	
11.02	Explain conceptual design principles.	
11.03	Demonstrate the ability to create a database design.	
11.04	Demonstrate the ability to create, maintain, and delete tables, sequences, and indexes.	
11.05	Demonstrate the ability to query the database and optimize information retrieval.	
11.06	Discuss best practices to secure databases.	
Additional Information

Laboratory Activities

Laboratory investigations that include scientific inquiry, research, measurement, problem solving, emerging technologies, tools and equipment, as well as, experimental, quality, and safety procedures are an integral part of this career and technical program/course. Laboratory investigations benefit all students by developing an understanding of the complexity and ambiguity of empirical work, as well as the skills required to manage, operate, calibrate and troubleshoot equipment/tools used to make observations. Students understand measurement error; and have the skills to aggregate, interpret, and present the resulting data. Equipment and supplies should be provided to enhance hands-on experiences for students.

General Education Course Requirements for AS and AAS Degrees

State Board of Education Rule 6A-14.030 (4) F.A.C. identifies 15 credit hours as the minimum amount of general education coursework required in the Associate of Science degree and the Associate of Applied Science degree. In addition, Rule 6A-14.0303 FAC implements section 1007.25 Florida Statutes and requires students entering a technical education degree program in the 2022-2023 academic year, and thereafter, to complete at least one identified core course in each subject area as part of the general education course requirements (15 credit hours total) before a degree awarded) The core subject areas include: 
•	Communication. 
•	Humanities.
•	Mathematics. 
•	Natural Sciences.
•	Social Sciences.

Career and Technical Student Organization (CTSO)

Phi Beta Lambda (PBL) and Business Professionals of America (BPA) is the co-curricular career and technical student organization(s) providing leadership training and reinforcing specific career and technical skills. Career and Technical Student Organizations provide activities for students as an integral part of the instruction offered.

Accommodations

Federal and state legislation requires the provision of accommodations for students with disabilities to meet individual needs and ensure equal access. Postsecondary students with disabilities must self-identify, present documentation, request accommodations if needed, and develop a plan with their counselor and/or instructors. Accommodations received in postsecondary education may differ from those received in secondary education. Accommodations change the way the student is instructed. Students with disabilities may need accommodations in such areas as instructional methods and materials, assignments and assessments, time demands and schedules, learning environment, assistive technology and special communication systems. Documentation of the accommodations requested and provided should be maintained in a confidential file.

Certificate Programs

A College Credit Certificate consists of a program of instruction of less than sixty (60) credits of college-level courses, which is part of an AS or AAS degree program and prepares students for entry into employment (Rule 6A-14.030, F.A.C.). This AS degree program includes the following College Credit Certificates:

Cybersecurity Analyst (0511100314) -- 24 credit hours

Standards for the above certificate programs are contained in separate curriculum frameworks.