ACCS SECURITY OFFICER COURSE SYLLABUS Version 1.1 AirC2 Training Group Education and Training Service Line
Authority Page Course Name: ACCS Security Officer Course Course ID: ASO Document Type: SYLLABUS Operating System: Solaris, Windows Software Version: LOC1 Version: 1.1 Date: 26 Jan 2016 OPR: Mr Philip Littlewood CIV Instructor Date: 26 Jan 2016 Approved for Release by: Maj Athanasios Mazarakis GRC Chief Individual Training Date: 26 Jan 2016
Document Update History Version : 1.1 Version Reason Pages Affected 1.0 1.1 Initial Release Fixed prerequisites All 8
Table of Contents 1 Introduction... 1 1.1 Aim of the Course... 1 1.2 Summary of Training Requirements... 1 1.3 Eligibility... 1 1.4 Duration... 1 1.5 Security Classification... 1 1.6 Sponsor... 1 1.7 Training Executive... 1 1.8 Class Size... 1 1.9 Review Date... 1 1.10 Additional Information... 2 1.10.1. Location... 2 1.10.2. How to Apply... 2 1.10.3. Certification... 2 2 Time Allocation... 3 3 Course Content Summary... 5 4 Publications, Equipment and Resources... 7 5 Assessment... 8 5.1 Prerequisites... 8 5.2 Learning Assessment... 8 6 Administration... 8 6.1 Dress Code... 8 6.2 Security Clearance... 8 6.3 Accommodation... 8 6.4 Transportation... 8 6.5 Food and Drink... 8 6.6 TAX Free Shopping... 8 Annex A Acronyms... 9 i
List of Tables Table 1 - Time Allocation... 3 Table 2 - Course Content Summary... 5 Table 3 - Publications, Equipment and Resources... 7 ii
1 Introduction 1.1 Aim of the Course The aim of the course is to enable personnel with limited pre-requisite training to be able to fulfil the duties of the ACCS Security Officer. 1.2 Summary of Training Requirements The ACCS Security Officer Course for the baseline LOC1 is a single standalone course, not necessarily linked to other NCI Agency Courses. 1.3 Eligibility Applicants for this course are required to have a basic understanding of UNIX, Solaris and Oracle. If the course is oversubscribed SHAPE will set priorities. 1.4 Duration The course duration is 5 days. a. Training : 0900 1600 b. Breaks: Coffee 1000-1020 and 1500-1520 Lunch: 1230-1330 1.5 Security Classification The course is delivered within a NATO Secret environment; therefore, the students must provide a copy of their Security Clearance before entering the NPC premises. Without a Security Clearance the students will not be able to attend the course. Course contents are the following classification: Slides: NATO RESTRICTED Network: NATO RESTRICTED Classroom: NATO RESTRICTED Media: NATO RESTRICTED Discussion Topics: NATO RESTRICTED 1.6 Sponsor The overall sponsor of the ACCS Security Officer Course is the head of the AirC2 Training Group. 1.7 Training Executive The person with overall responsibility for the training at the NPC is the Chief Individual Training. This responsibility can be delegated when required. 1.8 Class Size The maximum numbers of students is set to 12 due to workstation and instructor availability. Seats for observers, with no workstation, are available. NCI Agency reserves the right to cancel any course if the number of students is less than 6. 1.9 Review Date To ensure that the course is effective and current the AirC2 Training Group aim to do a full review of course material annually. Parts of the course can be updated before this time if needed. 1
1.10 Additional Information 1.10.1 Location This course is run at NPC NCI Agency, Glons in classroom B50. On site delivery can be negotiated. 1.10.2 How to Apply Students apply by using the Course Application Form available on the NPC NCI Agency webpage. 1.10.3 Certification Students who successfully complete this course will receive a certificate indicating that they have participated in the ACCS Security Officer Course. 2
2 Time Allocation Table 1 - Time Allocation Topic Detail 1 2 3 4 5 Total General Introduction ACCS Introduction Briefing about NCI Agency, security, safety and facilities. Overview of the purpose and functional capabilities. Program and system overview. Workstation types and configuration. Fundamental Knowledge Logon Procedures. Operating system environment. Media Box IETM IETM usage, including searching and navigating System Overview Software Architecture Hardware Architecture. Create, delete and modify user accounts. CA Identity Manager, LDAP and Active Directory. Operator Accounts Roles- Assign, remove, modify. Reset Passwords Bulk user creation Force logout Security Officer Tasks Security Access Control Security parameters, checking and modifying. Password, logon and session parameters. General Policies and policy modification 3
Topic Detail 1 2 3 4 5 Total Access Control. E-Trust. Allow and block terminal access General Overview Audit and Audit Reporting e-trust Manager Configuration, irecorder Manager, Post Collection Utility, Policy Manager, Visualizer, Reporter, Viewer, Health Monitor. Crystal Reports Backup monitoring. Net Backup Activity Monitor. AuditDB Backup Management. File recovery. Oracle Audit DB Recovery. Overview and Security Officer Responsibilities. Voice Communication System VCS Functions, Subsystems and Architecture. SMA, PGS and NCU User Management. L16ES and VRR User Management. Maintenance Support Tools End of Course Discussions and Troubleshooting Course wrap up Lecture by Service Desk What NCI Agency can do for you? Certification Students receive course certificates 4
3 Course Content Summary Table 2 - Course Content Summary Training Objective Obj Nos Enabling Objectives Time Breakdown Theory Practical Total General Introduction 0.1 Brief the students about the NCI Agency facilities, Security and Safety Regulations, POCs, Cafeteria and RIS. 30 30 ACCS Introduction 1.1 Provide students with an overview of the purpose and functional capabilities of ACCS. 1.2 Provide a Program and system overview. 2.1 Brief students on the Workstation types and configuration. Fundamental Knowledge 2.2 Instruct on ACCS Logon Procedures. 2.3 Provide information on the ACCS operating system environment. 2.4 Cover the purpose and content of the Media Box IETM 3.1 Provide students with the knowledge and skills to view, search and make full utilisation of the ACCS IETM. System Overview 4.1 4.2 Provide students information on the ACCS LOC1 Software Architecture. Provide students information on the ACCS LOC1 Hardware Architecture. 5.1 Provide training to Create, delete and modify user accounts. Operator Accounts 5.2 Give brief overview of the Security use of CA Identity Manager, LDAP and Active Directory. 5.3 Provide skills to assign, remove and modify roles. 5.4 Instruct how to Reset Passwords 5.5 Cover Bulk user creation 5
Training Objective Obj Nos Enabling Objectives Time Breakdown Theory Practical Total 5.6 Cover the force logout procedure. 6.1 Define the Security Officer s Tasks Security Access Control 6.2 6.3 6.4 Teach students security parameters, checking and modifying. Teach students password, logon and session parameters. Provide information on general policies and policy modification. 6.5 Teach Access Control E-Trust. 6.6 Provide skills to allow and block terminal access. Audit and Audit Reporting 7.1 7.2 7.3 7.4 7.5 8.1 Provide a general overview of audit and audit reporting. Provide training in e-trust Manager Configuration, irecorder Manager, Post Collection Utility, Policy Manager, Visualizer, Reporter, Viewer, Health Monitor. Provide limited training in Crystal Reports with regards to Security Officer. Provide training in Backup monitoring, Net Backup Activity Monitor and AuditDB Backup Management. Provide training in file recovery and Oracle Audit DB Recovery. Provide an overview of VCS and Security Officer Responsibilities. Voice Communicati on System 8.2 Cover the VCS Functions, Subsystems and Architecture. 8.3 Cover the SMA, PGS and NCU User Management. 8.4 Cover L16ES and VRR User Management. 8.5 Maintenance Support Tools End of Course Discussions and Troubleshooting 9.1 Provide students with discussion time to cover any final questions. Also cover troubleshooting of common issues. 6
Training Objective Obj Nos Enabling Objectives Time Breakdown Theory Practical Total Lecture by Service Desk 10.1 Know the tasks, hours of operation and statistics of the customer service desk and which procedures are necessary to request assistance. Certification Students receive their certificates. 20 4 Publications, Equipment and Resources Table 3 - Publications, Equipment and Resources Serial Nos Type Equipment Qty 2 Hardware Projector 1 2 Hardware Windows Computer for Instructor 1 3 Hardware ACCS String (covering all servers, drives, hubs etc) 1 4 Hardware Workstations (Thin Clients) 13 5 Hardware Monitors 26 6 Hardware Maintenance PC 1 7 Software Media Box 1 Course Slides 8 Course Media Course Handouts Course Handbook 15 7
5 Assessment 5.1 Prerequisites The students should have am basic understanding of UNIX Solaris and Oracle. 5.2 Learning Assessment This is based on learning by doing. Assessment of whether the student has reached the training objectives is performed in an active dialog between student and instructor, mainly during the practical exercises and labs, and by the student performing a multiple choice test. 6 Administration 6.1 Dress Code Dress code is duty uniform in accordance with national rules for military personnel. For civilians casual office style is to be worn. 6.2 Security Clearance All students must provide valid Security Clearance. 6.3 Accommodation Students must arrange their own accommodation. 6.4 Transportation Students must arrange their own transportation. There are no resources available at the NPC to perform airport pickups etc. 6.5 Food and Drink The cafeteria at NPC will be open for all students during their stay at NPC. They serve coffee, cakes or a hot meal during the lunch break. No breakfast or dinner is served at the NPC. 6.6 TAX Free Shopping Students can use the NPC Ration Item Store during their visit providing that they provide a valid NATO Travel Order and they are at NPC for a minimum of 8 working days. 8
Annex A Acronyms Acronyms used in this course include: ACCS ACC ADP ARS ASAP ATC AWCIES BMDOC CAD CAOC CARS COTS CSCI CSD CSE DARS DCAOC DCS DIPLAS DSS GIS GUI HMI Air Command and Control System Air Control Centre Automated Data Processing ACC RPC SFP ACCS Special Application Programmes Air Traffic Control ACCS-wide Common Information Exchange Standards Ballistic Missile Defence Operations Centre Common Alert Display Combined Air Operations Centre CAOC ARS RPC SFP Commercial Off The Shelf Computer Software Configuration Item Common State Display Communication Security Equipment Deployable ARS Deployable Combined Air Operations Centre Data Communication Equipment Mission Preparation Data Storage and Services Server Geographic Information System Graphical User Interface Human Machine Interface 9
HWCI HVE IETM ILOM JFACC LAN LDAP Hardware Configuration Item High Visibility Events Interactive Electronic Technical Manual Integrated Lights Out Manager Joint Force Air Component Command Local Area Network Lightweight Directory Access Protocol LOC1 Level of Operational Capability 1 MASE MISEXC MISSUP MXP NADGE NRT GEADGE NATO OPUS QRP RAP RPC RT SAN SCM SFP SM SQOC Multi AEGIS Site Emulator Mission Execution CSCI Mission Execution Support Applications Mission Execution and Planning Server (Old Terms: MXS, MPS) NATO Air Defence Ground Environment Non Real Time German Air Defence Ground Environment North Atlantic Treaty Organisation Mission Planning Support Applications CSCI Quick Reaction Package Recognized Air Picture RAP Production Centre Real Time Storage Area Network System Control and Management Sensor Fusion Post System Manager Squadron Operations Centre 10
SRV SSI TDL TPR VCE VCF VM WAN WOC Server Software Significant Item Tactical Date Link Two Person Rule Voice Communication Equipment Voice Communication Facilities Virtual Machine Wide Area Network Wing Operations Centre 11