Skip to Main Content
Catalogue Link
<a href="/ords/r/curriculum/catalogue/home" class="t-Header-logo-link"><span class="apex-logo-text">Handbook</span></a>
Hidden Page Items
New
8
New
HE Unit Template
New
Incident Management & Digital Forensics
New
ITECH3505 - Incident Management & Digital Forensics
New
20270200
New
New
New
New
Course
New
Unit
New
New
3.0
New
New
2026-09-10
New
2026-09-10
New
Information Technology
New
New
New
New
Institute of Innovation, Science & Sustainability
New
Information Technology
New
Undergraduate
New
15
New
New
.125
New
029901
New
Security Science
New
029901 - Security Science
New
<a href="http://www.federation.edu.au/locate/unit/itech3505">View unit fees</a>
New
Graded (e.g. HD, D, C, etc)
New
7
New
Bachelor Degree
New
Advanced
New
New
New
New
1
New
New
New
New
New
false
New
New
New
<p>This advanced unit explores the critical fields of incident management and digital forensics. It examines best practices for incident response, including preparation, detection, containment, eradication, recovery, and post-incident review within enterprise security environments. The unit also covers digital forensics techniques for collecting, preserving, analysing, and presenting digital evidence. Through hands-on virtual labs, students gain practical experience with industry-standard tools and methodologies, preparing them to effectively manage and investigate security incidents. Emphasis is placed on incident handling procedures and forensic analysis, which are essential components of a comprehensive cybersecurity skill set.</p>
New
New
<p>Topics may include:<br>
1. Introduction to Incident Management, Incident Response Frameworks & Methodologies<br>
2. Detection & Analysis of Security Incidents (Logs, Network Traffic, Endpoint Data)<br>
3. Containment & Eradication Strategies for Security Incidents<br>
4. Incident Recovery & Post-Incident Review<br>
5. Introduction to Digital Forensics Principles & Methodologies<br>
6. Digital Evidence Acquisition & Preservation Techniques<br>
7. Dgital Forensics Analysis Techniques (File Systems, Disk Forensics, Memory Forensics)<br>
8. Network Forensics & Analysis Techniques<br>
9. Digital Forensics Reporting & Presentation of Evidence<br>
10. Legal & Ethical Considerations in Digital Forensics Investigations<br>
11. Emerging Trends in Incident Management & Digital Forensics</p>
New
true
New
<p>Where supplementary assessment is available a student must have failed overall in the Unit but gained a final mark of 45 per cent or above, has completed all major assessment tasks (including all sub-components where a task has multiple parts) as specified in the Unit Description and is not eligible for any other form of supplementary assessment.</p>
New
true
Hidden Page Items
Semester
Semester
0200
Year
Year
2027
Current Year
2026
Breadcrumb Positioning
Handbook
ITECH3505 - Incident Management & Digital Forensics
Pseudo Breadcrumb
ITECH3505 - Incident Management & Digital Forensics
Breadcrumb Type
Unit
Catalogue Term and Year
Version Text
You are viewing a version for
Semester
Semester 1
Semester 2
Summer Semester
Year
2027
2026
Download PDF
RDS Holder
Overview
Key information
Requisites
Learning outcomes
Assessment
FedTASK
Parent Region
Overview
Unit description
<p>This advanced unit explores the critical fields of incident management and digital forensics. It examines best practices for incident response, including preparation, detection, containment, eradication, recovery, and post-incident review within enterprise security environments. The unit also covers digital forensics techniques for collecting, preserving, analysing, and presenting digital evidence. Through hands-on virtual labs, students gain practical experience with industry-standard tools and methodologies, preparing them to effectively manage and investigate security incidents. Emphasis is placed on incident handling procedures and forensic analysis, which are essential components of a comprehensive cybersecurity skill set.</p>
Unit content
<p>Topics may include:<br> 1. Introduction to Incident Management, Incident Response Frameworks & Methodologies<br> 2. Detection & Analysis of Security Incidents (Logs, Network Traffic, Endpoint Data)<br> 3. Containment & Eradication Strategies for Security Incidents<br> 4. Incident Recovery & Post-Incident Review<br> 5. Introduction to Digital Forensics Principles & Methodologies<br> 6. Digital Evidence Acquisition & Preservation Techniques<br> 7. Dgital Forensics Analysis Techniques (File Systems, Disk Forensics, Memory Forensics)<br> 8. Network Forensics & Analysis Techniques<br> 9. Digital Forensics Reporting & Presentation of Evidence<br> 10. Legal & Ethical Considerations in Digital Forensics Investigations<br> 11. Emerging Trends in Incident Management & Digital Forensics</p>
Key information
Institute / school:
Institute of Innovation, Science & Sustainability
Discipline:
Information Technology
Study level:
Undergraduate
Credit points:
15
EFTSL:
0.125
Field of education:
029901 - Security Science
Offering:
<p><strong>Semester 1</strong><p>Melbourne City Campus (On Campus)</p></p> <p><strong>Semester 2</strong><p>Ballarat - Mt Helen (On Campus)</p><p>Berwick (On Campus)</p><p>On-line Learning</p></p>
Grade scheme:
Graded (e.g. HD, D, C, etc)
Placement component:
No
Fee information:
<a href="http://www.federation.edu.au/locate/unit/itech3505">View unit fees</a>
Requisites
Prerequisite
<p>must have completed "<a href="/ords/r/curriculum/catalogue/course?p6_code=ITECH2507" target="_blank">ITECH2507</a>"</p>
Corequisite
None
Exclusion
None
Learning outcomes
Learning outcomes
<p>On successful completion of this unit, students are expected to gain the following [K]nowledge, [S]kills and [A]pplication of knowledge & skills</p>
Learning Outcomes
Ref
Outcome
1
<p>Analyse and evaluate incident response frameworks and methodologies for application to diverse security incident contexts.</p>
2
<p>Critically evaluate digital forensics principles and methodologies, including chain of custody, evidence collection, analysis, and presentation.</p>
3
<p>Evaluate legal, ethical, and professional requirements governing digital forensics investigations, justifying decisions regarding evidentiary admissibility.</p>
4
<p>Design a comprehensive incident response plan, justifying key decisions in roles, responsibilities, and procedures.</p>
5
<p>Apply and justify incident response and digital forensics techniques in simulated investigations to identify, recover, and analyse digital evidence. </p>
Assessment
Learning Tasks and Assessment
Ref
Learning task
Assessment type
Weighting
Learning outcomes assessed
1
<p>Students complete a series of practical investigations involving evidence collection, forensic analysis, incident response activities and documentation, demonstrating their ability to apply forensic principles and investigative techniques in realistic scenarios.</p>
<p>Incident Response and Digital Forensics Investigation Portfolio</p>
<p>25%–35%</p>
2, 3, 5
2
<p>Students design an organisational incident response and digital investigation capability, including procedures, governance requirements, evidence handling processes and response strategies, supported by professional justification and recommendations.</p>
<p>Incident Response and Digital Forensics Design Project</p>
<p>25%–35%</p>
1, 3, 4
3
<p>Students demonstrate integrated incident response and digital forensic capability through an authentic investigation scenario, applying professional methodologies, analysing evidence, justifying decisions and communicating findings through a demonstration, presentation or oral defence.</p>
<p>Incident Management and Digital Forensics Capstone Demonstration</p>
<p>35%–50%</p>
1, 2, 3, 5
Supplementary assessment available:
Yes
Supplementary assessment information:
<p>Where supplementary assessment is available a student must have failed overall in the Unit but gained a final mark of 45 per cent or above, has completed all major assessment tasks (including all sub-components where a task has multiple parts) as specified in the Unit Description and is not eligible for any other form of supplementary assessment.</p>
FedTASK
FedTASK
Description of FedTASK outcome
Level
FedTASK 1: Interpersonal
The ability to effectively communicate, interact and work with others both individually and in groups.
<p> </p>
FedTASK 2: Leadership
The ability to apply professional skills and behaviours in leading others.
FedTASK 3: Critical Thinking and Creativity
The ability to work in complexity and ambiguity using imagination to create new ideas.
<p>Level 2 - Student demonstrates some independence within provided guidelines</p>
FedTASK 4: Digital Literacy
The ability to work fluently across a range of tools and applications to achieve a range of skills.
<p>Level 3 - Student works independently with limited guidance or works within self-determined guidelines appropriate to context</p>
FedTASK 5: Sustainable and Ethical Mindset
The ability to consider and assess the consequences and impact of ideas and actions in enacting ethical and sustainable decisions.
<p>Level 2 - Student demonstrates some independence within provided guidelines</p>
FedTASK
<p>Federation University recognises that students require key transferable employability skills to prepare them for their future workplace and society. FedTASKs (<strong>T</strong>ransferable <strong>A</strong>ttributes <strong>S</strong>kills and <strong>K</strong>nowledge) provide a targeted focus on five key, transferable Attributes, Skills, and Knowledge that are embedded within curriculum, developed gradually towards successful measures and interlinked with cross-discipline and co-operative learning opportunities.</p>
Key information
Institute / school:
Institute of Innovation, Science & Sustainability
Discipline:
Information Technology
Study level:
Undergraduate
Credit points:
15
EFTSL:
0.125
Field of education:
029901 - Security Science
Offering:
<p><strong>Semester 1</strong><p>Melbourne City Campus (On Campus)</p></p> <p><strong>Semester 2</strong><p>Ballarat - Mt Helen (On Campus)</p><p>Berwick (On Campus)</p><p>On-line Learning</p></p>
Grade scheme:
Graded (e.g. HD, D, C, etc)
Placement component:
No
Fee information:
<a href="http://www.federation.edu.au/locate/unit/itech3505">View unit fees</a>
Additional information
Add Info Static Text
Internal reference: ITECH3505 - U3.0