Security for IT Administrators     101

This would be a course for any IT administrator and would teach them the basic components of information security.  Course would be comprised of ten one hour modules that could then be spread out over time, such a once a week for ten weeks, of twice a week for five weeks.  At the end of the course each person should have the basic skills needed to protect their systems as well as teach their user some of the basic steps of information security. 

1.       Security Principles

1.1.    Standards

1.2.    C. I. A.

1.3.    Basic Fundamentals

2.       IT Ethics, Laws, and Regulations

2.1.    Ethics

2.2.    Current Laws

2.3.    Regulations

2.3.1. HIPAA

2.3.2. SOX

2.3.3. PCI

2.3.4. SBA

2.3.5. FERPA

3.       What you should be doing

3.1.    Patches

3.2.    Anti-virus

3.3.    Logging

3.4.    User Maintenance

3.5.    Monitoring

3.6.    IDS/Firewall

3.7.    Encryption

4.       Tools

4.1.    Patching

4.2.    Logging

4.3.    User Maintenance

5.       Tools

5.1.    Anti-Virus

5.2.    IDS/Firewall

5.3.    Monitoring

5.4.    Encryption

6.       Incident Response

6.1.    What you should do

6.2.    What you should not do

6.3.    When to report

6.4.    What you need

7.       Staying Secure

7.1.    Vulnerability scanning

7.2.    Port Scanning

8.       End Users

8.1.    What you can do to help protect them

8.2.    What you should have them do

8.3.    What you should look for

8.4.    How to share your knowledge with them

9.       Physical Security

9.1.    Who is around you

9.2.    Lock you system

9.3.    What is on your desk

9.4.    Watch that unlocked drawer

10.   Refresher and QA