ITE512 Incident Response (8)

In this subject, students will investigate the current threats to computing systems and networks along with effective countermeasures. Students will also learn the principles and stages of an appropriate security incident response. In addition, this subject will prepare students for the Global Information Assurance Certification (GIAC) and Certified Incident Handler (GCIH) industry certification exam.


Session 1 (30)
Wagga Wagga Campus

Continuing students should consult the SAL for current offering details: ITE512. Where differences exist between the Handbook and the SAL, the SAL should be taken as containing the correct subject offering details.

Subject Information

Grading System



One session


School of Computing and Mathematics

Enrolment Restrictions

Only available to students enrolled in IT Masters relevant courses.

Learning Outcomes

Upon successful completion of this subject, students should:
  • be able to describe how a system or network is analysed for security vulnerabilities;
  • be able to explain hacking techniques and propose relevant countermeasures;
  • be able to explain, analyse, and justify current industry best practice in preparing for a security incident;
  • be able to analyse security events to determine if there has been a security incident;
  • be able to analyse an incident and reflect on the causes and future implications;
  • be able to plan and manage the incident recovery process for an organisation; and
  • be able to justify an appropriate response to a security attack.


This subject will cover the following topics:
  • Computer attack methods and vectors
  • Security incident handling processes
  • Legal and forensic issues of incident handling
  • Computer and network attack countermeasures
  • Platform and device-specific attacks and defences
  • Application-level attacks and defences
  • Recovery and restoration issues

Indicative Assessment

The following table summarises the assessment tasks for the online offering of ITE512 in Session 1 2020. Please note this is a guide only. Assessment tasks are regularly updated and can also differ to suit the mode of study (online or on campus).

Item Number
Value %
Incident response plan
Incident report
Final exam

The information contained in the CSU Handbook was accurate at the date of publication: May 2021. The University reserves the right to vary the information at any time without notice.