Attachment #1 - ISSO Course Requirements.pdf

ISSO Course Requirements

The final course will need to incorporate NIST Guidance from NIST SP 800.53, FAA Order 1370.121, ATO Requirements (FAA orders and Requirements will be provided)

The AJW organization seeking this course is part of the Federal Aviation Administration. The information systems that we interact with are Air Traffic Control systems National Airspace Systems (NAS) and other related mission support systems for Air Traffic control. Our team of Information System Security Officers (ISSOs) are looking for a specialized course to ensure our team has the basic understanding of the information security principals. AJW- B420 is seeking a hybrid course in Security that focuses on system networking, telecommunications and system architecture. In order to relate to security principals, the course will need to connect to the NIST SP 800.53 requirements and implementation of security principals to the 3 specialty areas. This one to two-week course will be onsite and students will become proficient in the following:

• The essential knowledge of information security and secure system networking and design. Foundational principles, architectures, and techniques employed in computer networks.

Protocols and mechanisms used in the Internet TCP/IP. Differences between, routers, switches, and other secure designs for IP connections. Effective networking designs for securing information and prevent hacking. Understanding vulnerabilities with IP connections.

• Basic telecommunications and networking terms and designs. Principles of network security and management. Review of network vulnerabilities, security at the link, network and transport layers;

• Employing the knowledge of Networking and Telecommunications together by being able to read and understand a System Architecture diagram, system architectural designs (e.g. block diagram, network diagram, information flow, internal and external connections, boundaries, etc.). Ability to identify components in the various diagrams. The goal is to read the diagrams, and identify security vulnerabilities.

2/15/2019