ITOP 1105: Security Fundamentals
Effective date
September 2026
School
Continuing Studies
Description
Students will learn core principles of protecting information, systems, and networks in modern computing environments. In this course, students will apply foundational security concepts, implement baseline controls, and analyze common threat vectors using practical, scenario‑based activities. Students will also practice basic incident response and access control techniques, that will help them build a security mindset.
Year of study
1st Year Post-secondary
Course Learning Outcomes
Upon successful completion of this course, students will be able to:
- Apply security principles (CIA triad, zero-trust, least privilege access, and defense-in-depth) to small cloud and hybrid environments, identifying appropriate control layers for each asset.
- Implement baseline security controls, such as password policies, patching, host firewalls, and micro-segmentation, demonstrating effectiveness through controlled test scenarios.
- Identify threat vectors in provided scenarios, recommending appropriate first-line mitigations with documented rationale.
- Execute an incident response procedure on simulated security events by following established playbooks.
- Classify organizational data to apply appropriate security controls, mapping encryption, access controls, and retention policies to data sensitivity levels in business environments.
- Configure access control systems using identity and access management services, ensuring intended allow/deny enforcement across multiple resources.
- Perform configuration review of endpoints or network devices to produce a prioritized remediation plan based on risk and effort analysis.
- Enable encryption mechanisms (at rest and in transit) using test artifacts such as cipher suites and key status reports.
Prior Learning Assessment & Recognition (PLAR)
PLAR is assessed through one or more of the following methods: challenge exam, student portfolio/products, interview, project-based asessment, or through another assessment method that is aligned with the course learning outcomes.
Hours
Lecture, Online, Seminar, Tutorial: 24
Clinical, Lab, Rehearsal, Shop, Kitchen, Simulation, Studio: 12
Total Hours: 36
Instructional Strategies
Instructional strategies may include:
Knowledge checks
Lectures
Hands-on lab activities
Scenario-based activities
Demonstrations
Problem-based exercises
Discussion
Reflection
Grading System
Letter Grade (A-F)
Evaluation Plan
|
Type
|
Percentage
|
Assessment activity
|
|
Project
|
35-50
|
Project involving multiple components.
|
|
Assignments
|
30-45
|
Multiple assignments.
|
|
Quizzes/Tests
|
20
|
|
Course topics
- General Security Concepts, including foundational principles of CIA triad, defense in depth, security frameworks, and risk management terminology.
Threats, Vulnerabilities, and Mitigations, such as identifying attack vectors, exploiting weaknesses, and implementing countermeasures and controls.
Security Architecture, such as designing secure systems, network segmentation, identity management, and resilient infrastructure.
Security Operations, such as SOC processes, threat detection, incident response, monitoring, and real-time threat management.
Security Management, such as governance, compliance, policies, audit, and organizational security oversight and leadership
Notes:
- Course contents and descriptions, offerings and schedules are subject to change without notice.
- Students are required to follow all College policies including ones that govern their educational experience at VCC. Policies are available on the VCC website at:
https://www.vcc.ca/about/governance--policies/policies/.
- To find out if there are existing transfer agreements for this course, visit the BC Transfer Guide at https://www.bctransferguide.ca.