CyOFTS_II,_Section_L,_Attachment_3_Pt_I.docx

CLASSIFICATION (leave blank if unclassified) (Times New Roman 16 Pt Bold) (Times New Roman 14 Pt Bold) I-12345 (Times New Roman 10 Pt) 39 IOS, 6 Dec 01

UNCLASSIFIED

C-1507L 39 IOS, 16 Jun 2016

CYBER DEFENSE AND CONTROL OPERATIONS

HURLBURT FIELD, FL 32544-5321

PART I - LESSON PLAN

VULNERABILITY MANAGEMENT

TTL REF: CSCS E02, CSCS E02A, CSCS E02A.2, ACD A02E, ACD A02E1

MEASUREMENT: W - Written

TIME: 1 hr

INSTRUCTIONAL METHOD: Lecture

MULTIPLE INSTRUCTOR REQUIREMENT: None

INTRODUCTION: This lesson introduces students to the concepts of achieving cybersecurity through the practice of vulnerability management. Upon completion of this lesson students will understand why conducting vulnerability assessments are a necessary function within the realm of information protection.

CLASSIFICATION: UNCLASSIFIED

LESSON OBJECTIVES:

LO 1 Comprehend the process of conducting Vulnerability Management (VM) (B) MSB 1.1 Identify the purpose of vulnerability assessments (A) MSB 1.2 Explain procedures used to complete a vulnerability assessment (B)

LO 2 Comprehend the vulnerability assessment process conducted by AF assets (B) MSB 2.1 Identify the organizations who resolve vulnerability scans (B) MSB 2.2 Explain the AF tools used to perform vulnerability scanning (B)

SUPPORT MATERIAL AND GUIDANCE

STUDENT INSTRUCTIONAL MATERIAL: Student will receive a Module IV Student Guide

STUDENT PREPARATION/READING ASSIGNMENTS: Students should read all pages in this student guide. Additional reading from the reference material will enhance understanding of the material contained in this student guide.

ADDITIONAL REQUIREMENTS (OUTSIDE NORMAL CLASSROOM SET-UP): None

REFERENCES:

\\FTEV-FS-IOS1V\courseware\CDCO\References (NIPR)

1. NIST 800-53 rev 4 Security and Privacy Controls for Federal Information Systems and Organizations

2. DoD 8500.01 Cybersecurity

3. MPTO 00-33D-2001 Enterprise Service Unit Functions

4. 33 NWS Familiarization Course Handbook

5. Cybersecurity Vulnerability Scanning and Reporting DISA

6. MPTO 00-33A-1109-WA-1 AFIN Vulnerability Management

7. 690th COG Vulnerability Management Concept of Operations Page 1 of 2 (Times New Roman 10 Pt)

CLASSIFICATION

(Times New Roman 16 Pt Bold)

UNCLASSIFIED