[ { "id": 1, "course": { "id": "DEMO_1", "type": "std", "name": "Risk management competence course", "lmsRsc": "", "area": { "id": "101000", "name": "Risk management competence" }, "mainArea": { "id": "100000", "name": "RISK MANAGEMENT" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "101001", "name": "Knowledge of risk tolerance and risk management strategy." }, { "id": "101002", "name": "Knowledge of risk management standards, processes and practices in supply chains." }, { "id": "101003", "name": "Knowledge of client and partner organizations, including their objectives, structure, resources and information needs." }, { "id": "101004", "name": "Knowledge of risk assessment." }, { "id": "101005", "name": "Knowledge of risk management and mitigation strategies." }, { "id": "101006", "name": "Knowledge of risk management methodologies." }, { "id": "101007", "name": "Knowledge of information technology risk management policies, requirements and procedures." }, { "id": "101008", "name": "Knowledge of supply chain security and its risk management policies, requirements and procedures." }, { "id": "101009", "name": "Knowledge of the context of organizations, including their objectives, structure, capabilities and information needs." }, { "id": "101010", "name": "Knowledge of information security concepts, technologies and methods used to guarantee information security." }, { "id": "101011", "name": "Knowledge of protection plans (e.g. risk management policies, supply chain security management policies, integrity maintenance techniques)." }, { "id": "101012", "name": "Knowledge of the principles and methods of structured analysis." }, { "id": "101013", "name": "Knowledge of risk management processes (e.g. risk assessment and mitigation methods)." }, { "id": "101014", "name": "Knowledge of the requirements of the risk management reference framework." }, { "id": "101015", "name": "Knowledge of the means of communication with people and entities, both internal and external, for risk management." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 3, "course": { "id": "DEMO_2", "type": "std", "name": "Incident management skills course", "lmsRsc": "", "area": { "id": "201000", "name": "Incident management skills" }, "mainArea": { "id": "200000", "name": "INCIDENT AND PROBLEM MANAGEMENT" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "200001", "name": "Knowledge of incident categories and their responses." }, { "id": "200002", "name": "Knowledge of collateral damage and impact estimation." }, { "id": "200003", "name": "Knowledge of response and recovery exercises." }, { "id": "200004", "name": "Knowledge of incident response methodologies." }, { "id": "200005", "name": "Knowledge of action planning in crisis situations." }, { "id": "200006", "name": "Knowledge of processes and operations for managing incidents, problems and events." }, { "id": "200007", "name": "Knowledge of crisis management protocols, processes and techniques." }, { "id": "200008", "name": "Knowledge of root cause analysis techniques." }, { "id": "200009", "name": "Knowledge of estimated recovery and repair times." }, { "id": "200010", "name": "Knowledge of the procedures and tools for documenting and consulting incidents, problems and reported events." }, { "id": "200011", "name": "Knowledge of incident response programs, roles and responsibilities." }, { "id": "200012", "name": "Knowledge of the results of action lines and analysis exercises." }, { "id": "200013", "name": "Knowledge of the means of communication with people and entities, both internal and external, for incident management." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 4, "course": { "id": "DEMO_4", "type": "std", "name": "System administration skills course", "lmsRsc": "", "area": { "id": "301000", "name": "System administration skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "301001", "name": "Knowledge of virtual machine technologies." }, { "id": "301002", "name": "Knowledge of operating system administration." }, { "id": "301003", "name": "Knowledge of applications that record errors, exceptions, failures and access to applications." }, { "id": "301004", "name": "Knowledge of computer architectures and networks." }, { "id": "301005", "name": "Knowledge of systemic aspects of resilience, reliability and performance." }, { "id": "301006", "name": "Knowledge of developing and applying a user credential management system." }, { "id": "301007", "name": "Knowledge of tools and techniques for strengthening systems, networks and operating systems." }, { "id": "301008", "name": "Knowledge of server diagnostic and fault identification tools." }, { "id": "301009", "name": "Knowledge of tools and methodologies for active defense and strengthening of the system." }, { "id": "301010", "name": "Knowledge of industry best practices in user support." }, { "id": "301011", "name": "Knowledge of fault tolerance methodologies." }, { "id": "301012", "name": "Knowledge of virtualization solutions and techniques, as well as their administration." }, { "id": "301013", "name": "Knowledge of configuration management techniques." }, { "id": "301014", "name": "Knowledge of systems management concepts." }, { "id": "301015", "name": "Knowledge of auditing and traceability procedures." }, { "id": "301016", "name": "Knowledge of systems operation and maintenance." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 6, "course": { "id": "DEMO_5", "type": "std", "name": "Threat analysis skills course", "lmsRsc": "https://moodle-v2-athena-develop.aida-cluster-6fb15c141b13202f00901f551abdf43d-0000.eu-de.containers.appdomain.cloud/course/view.php?id=14", "area": { "id": "302000", "name": "Threat analysis skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "302001", "name": "Knowledge of the different classes of attack (e.g. passive, active, internal attack, distributed attack)." }, { "id": "302002", "name": "Knowledge of the structure, approach and strategy of vulnerability exploitation tools (e.g. sniffers, keyloggers) and the underlying techniques (e.g. obtaining backdoor access, data collection/exfiltration, systems vulnerability analysis)." }, { "id": "302003", "name": "Knowledge of the target's specialized language (e.g. acronyms, jargon, technical terminology, code words)." }, { "id": "302004", "name": "Knowledge of the target language(s)." }, { "id": "302005", "name": "Knowledge of threats and target systems." }, { "id": "302006", "name": "Knowledge of threat intelligence disciplines." }, { "id": "302007", "name": "Knowledge of the phases of a cyberattack (e.g. reconnaissance, scanning, enumeration, gaining access, escalating access, maintaining access, network exploitation, concealing evidence)" }, { "id": "302008", "name": "Knowledge of target communication tools and techniques." }, { "id": "302009", "name": "Knowledge of industry standards, principles and analysis methods accepted by the organization." }, { "id": "302010", "name": "Knowledge of the relationship between operational objectives, threat intelligence production tasks and requirements." }, { "id": "302011", "name": "Knowledge of internal tactics for anticipating and simulating threats." }, { "id": "302012", "name": "Knowledge of dynamic targets (unstudied, unplanned) and deliberate targets (studied, planned)." }, { "id": "302013", "name": "Knowledge of targets, including related events, communication profiles, threat actors, history (language, culture) and/or context." }, { "id": "302014", "name": "Knowledge of binary code analysis." }, { "id": "302015", "name": "Knowledge of malware analysis and characterization." }, { "id": "302016", "name": "Knowledge of physical and physiological behaviors that may indicate suspicious or abnormal activity." }, { "id": "302017", "name": "Knowledge of malware analysis concepts and methodologies." }, { "id": "302018", "name": "Knowledge of hardware and software reverse engineering concepts and techniques." }, { "id": "302019", "name": "Knowledge of countermeasures for identified security risks." }, { "id": "302020", "name": "Knowledge of the target development process (i.e. concepts, roles, responsibilities, products)." }, { "id": "302021", "name": "Knowledge of target search strategies and tools." }, { "id": "302022", "name": "Knowledge of malware analysis tools." }, { "id": "302023", "name": "Knowledge of analytical tools and techniques for languages, audio and/or graphic material." }, { "id": "302024", "name": "Knowledge of sources and tools for notices and commitment indications." }, { "id": "302025", "name": "Knowledge of frameworks, processes and systems related to threat intelligence." }, { "id": "302026", "name": "Knowledge of specific target identifiers and how they are used." }, { "id": "302027", "name": "Knowledge of internal threat investigations, reporting, investigation tools and regulations/laws." }, { "id": "302028", "name": "Knowledge of task assignment mechanisms." }, { "id": "302029", "name": "Knowledge of mechanisms for collecting information." }, { "id": "302030", "name": "Knowledge of threat information confidence levels." }, { "id": "302031", "name": "Knowledge of the targets' communication profiles and their elements (e.g., associations, activities, communication infrastructure)." }, { "id": "302032", "name": "Knowledge of principles and practices related to target development (e.g. detailed study of components, locations, associations, communication systems, infrastructures)." }, { "id": "302033", "name": "Knowledge of authorized threat information dissemination processes." }, { "id": "302034", "name": "Knowledge of task assignment processes for asset collection." }, { "id": "302035", "name": "Knowledge of translation processes and techniques." }, { "id": "302036", "name": "Knowledge of target threat intelligence gathering processes." }, { "id": "302037", "name": "Knowledge of cultural references, dialects, expressions, languages and abbreviations." }, { "id": "302038", "name": "Knowledge of human resource requirements related to threat information (e.g. logistics, communications, legal restrictions)." }, { "id": "302039", "name": "Knowledge of systems for assigning tasks in relation to threat information." }, { "id": "302040", "name": "Knowledge of covert communication techniques." }, { "id": "302041", "name": "Knowledge of evasion techniques and strategies." }, { "id": "302042", "name": "Knowledge of current and emerging attack vectors." }, { "id": "302043", "name": "Knowledge of the organization's threat environment." }, { "id": "302044", "name": "Knowledge of the targeting cycle." }, { "id": "302045", "name": "Knowledge of the feedback loop in data collection processes." }, { "id": "302046", "name": "Knowledge of the target list development process (i.e. candidates, restricted)." }, { "id": "302047", "name": "Knowledge of the data format established in the organization's threat information collection plan." }, { "id": "302048", "name": "Knowledge of the process of producing threat information." }, { "id": "302049", "name": "Knowledge of the support that threat information provides to planning, execution and evaluation." }, { "id": "302050", "name": "Knowledge of attack targets, cyber threat agents and procedures used in attacks." }, { "id": "302051", "name": "Knowledge of key factors in the operational environment and threats." }, { "id": "302052", "name": "Knowledge of the risk factors that can impact data collection operations." }, { "id": "302053", "name": "Knowledge of the target's methods and procedures." }, { "id": "302054", "name": "Knowledge of attack methods and techniques." }, { "id": "302055", "name": "Knowledge of the confidence levels of threat information." }, { "id": "302056", "name": "Knowledge of the objectives of target models." }, { "id": "302057", "name": "Knowledge of the principles, policies and procedures for collecting threat information, including legal restrictions and legal authorities." }, { "id": "302058", "name": "Knowledge of target verification and validation procedures." }, { "id": "302059", "name": "Knowledge of the processes for preparing environmental threat information and similar processes." }, { "id": "302060", "name": "Knowledge of the products required for operational cybersecurity planning." }, { "id": "302061", "name": "Knowledge of the resources and limitations of threat information." }, { "id": "302062", "name": "Knowledge of the types of cyber attackers (e.g. script kiddies, insider threats, state-sponsored threats)" } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 7, "course": { "id": "DEMO_11", "type": "std", "name": "Information management skills course", "lmsRsc": "", "area": { "id": "308000", "name": "Information management skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "308001", "name": "Knowledge of the existing architecture for collection, processing, exploitation and dissemination." }, { "id": "308002", "name": "Knowledge of how information needs and collection requirements are transposed, tracked and prioritized throughout the organization." }, { "id": "308003", "name": "Knowledge of databases, portals and means of disseminating information." }, { "id": "308004", "name": "Knowledge of the capabilities and limitations of partner organizations (with shared responsibilities for collection, processing, use and dissemination)" }, { "id": "308005", "name": "Knowledge of the characteristics of physical and virtual data storage media." }, { "id": "308006", "name": "Knowledge of the tools and applications associated with data collection and management requirements." }, { "id": "308007", "name": "Knowledge of the sources, characteristics and uses of the organization's information assets." }, { "id": "308008", "name": "Knowledge of the organization's data, information and knowledge needs." }, { "id": "308009", "name": "Knowledge of data management and standardization policies." }, { "id": "308010", "name": "Knowledge of methods for integrating and summarizing information." }, { "id": "308011", "name": "Knowledge of standards and methodologies for classifying information based on sensitivity, criticality and other risk factors." }, { "id": "308012", "name": "Knowledge of information classification policies and procedures." }, { "id": "308013", "name": "Knowledge of threat information reporting principles, as well as policies, procedures and means of communication, including reporting formats, reporting criteria (requirements and priorities), dissemination practices and legal restrictions." }, { "id": "308014", "name": "Knowledge of communication and dissemination procedures." }, { "id": "308015", "name": "Knowledge of processes and tools for collecting data, information and knowledge, including their limitations." }, { "id": "308016", "name": "Knowledge of threat intelligence resources and repositories." }, { "id": "308017", "name": "Knowledge of all reporting sources, as well as disclosure procedures." }, { "id": "308018", "name": "Knowledge of data flows, from the point of origin and collection to repositories and tools." }, { "id": "308019", "name": "Knowledge of the organization's data collection objectives and requirements." }, { "id": "308020", "name": "Knowledge of the main methods, procedures and techniques for collecting, producing, reporting and sharing information." }, { "id": "308021", "name": "Knowledge of the principles and techniques of data mining and warehousing." }, { "id": "308022", "name": "Knowledge of the identification and reporting processes." }, { "id": "308023", "name": "Knowledge of the resources and functionalities associated with technologies for organizing and managing information (e.g. databases, content markers)" }, { "id": "308024", "name": "Knowledge of the organizational requirements for collecting information." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [] } ] } ] }, { "id": 5, "course": { "id": "DEMO_5", "type": "std", "name": "Threat analysis skills course", "lmsRsc": "https://moodle-v2-athena-develop.aida-cluster-6fb15c141b13202f00901f551abdf43d-0000.eu-de.containers.appdomain.cloud/course/view.php?id=14", "area": { "id": "302000", "name": "Threat analysis skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "302001", "name": "Knowledge of the different classes of attack (e.g. passive, active, internal attack, distributed attack)." }, { "id": "302002", "name": "Knowledge of the structure, approach and strategy of vulnerability exploitation tools (e.g. sniffers, keyloggers) and the underlying techniques (e.g. obtaining backdoor access, data collection/exfiltration, systems vulnerability analysis)." }, { "id": "302003", "name": "Knowledge of the target's specialized language (e.g. acronyms, jargon, technical terminology, code words)." }, { "id": "302004", "name": "Knowledge of the target language(s)." }, { "id": "302005", "name": "Knowledge of threats and target systems." }, { "id": "302006", "name": "Knowledge of threat intelligence disciplines." }, { "id": "302007", "name": "Knowledge of the phases of a cyberattack (e.g. reconnaissance, scanning, enumeration, gaining access, escalating access, maintaining access, network exploitation, concealing evidence)" }, { "id": "302008", "name": "Knowledge of target communication tools and techniques." }, { "id": "302009", "name": "Knowledge of industry standards, principles and analysis methods accepted by the organization." }, { "id": "302010", "name": "Knowledge of the relationship between operational objectives, threat intelligence production tasks and requirements." }, { "id": "302011", "name": "Knowledge of internal tactics for anticipating and simulating threats." }, { "id": "302012", "name": "Knowledge of dynamic targets (unstudied, unplanned) and deliberate targets (studied, planned)." }, { "id": "302013", "name": "Knowledge of targets, including related events, communication profiles, threat actors, history (language, culture) and/or context." }, { "id": "302014", "name": "Knowledge of binary code analysis." }, { "id": "302015", "name": "Knowledge of malware analysis and characterization." }, { "id": "302016", "name": "Knowledge of physical and physiological behaviors that may indicate suspicious or abnormal activity." }, { "id": "302017", "name": "Knowledge of malware analysis concepts and methodologies." }, { "id": "302018", "name": "Knowledge of hardware and software reverse engineering concepts and techniques." }, { "id": "302019", "name": "Knowledge of countermeasures for identified security risks." }, { "id": "302020", "name": "Knowledge of the target development process (i.e. concepts, roles, responsibilities, products)." }, { "id": "302021", "name": "Knowledge of target search strategies and tools." }, { "id": "302022", "name": "Knowledge of malware analysis tools." }, { "id": "302023", "name": "Knowledge of analytical tools and techniques for languages, audio and/or graphic material." }, { "id": "302024", "name": "Knowledge of sources and tools for notices and commitment indications." }, { "id": "302025", "name": "Knowledge of frameworks, processes and systems related to threat intelligence." }, { "id": "302026", "name": "Knowledge of specific target identifiers and how they are used." }, { "id": "302027", "name": "Knowledge of internal threat investigations, reporting, investigation tools and regulations/laws." }, { "id": "302028", "name": "Knowledge of task assignment mechanisms." }, { "id": "302029", "name": "Knowledge of mechanisms for collecting information." }, { "id": "302030", "name": "Knowledge of threat information confidence levels." }, { "id": "302031", "name": "Knowledge of the targets' communication profiles and their elements (e.g., associations, activities, communication infrastructure)." }, { "id": "302032", "name": "Knowledge of principles and practices related to target development (e.g. detailed study of components, locations, associations, communication systems, infrastructures)." }, { "id": "302033", "name": "Knowledge of authorized threat information dissemination processes." }, { "id": "302034", "name": "Knowledge of task assignment processes for asset collection." }, { "id": "302035", "name": "Knowledge of translation processes and techniques." }, { "id": "302036", "name": "Knowledge of target threat intelligence gathering processes." }, { "id": "302037", "name": "Knowledge of cultural references, dialects, expressions, languages and abbreviations." }, { "id": "302038", "name": "Knowledge of human resource requirements related to threat information (e.g. logistics, communications, legal restrictions)." }, { "id": "302039", "name": "Knowledge of systems for assigning tasks in relation to threat information." }, { "id": "302040", "name": "Knowledge of covert communication techniques." }, { "id": "302041", "name": "Knowledge of evasion techniques and strategies." }, { "id": "302042", "name": "Knowledge of current and emerging attack vectors." }, { "id": "302043", "name": "Knowledge of the organization's threat environment." }, { "id": "302044", "name": "Knowledge of the targeting cycle." }, { "id": "302045", "name": "Knowledge of the feedback loop in data collection processes." }, { "id": "302046", "name": "Knowledge of the target list development process (i.e. candidates, restricted)." }, { "id": "302047", "name": "Knowledge of the data format established in the organization's threat information collection plan." }, { "id": "302048", "name": "Knowledge of the process of producing threat information." }, { "id": "302049", "name": "Knowledge of the support that threat information provides to planning, execution and evaluation." }, { "id": "302050", "name": "Knowledge of attack targets, cyber threat agents and procedures used in attacks." }, { "id": "302051", "name": "Knowledge of key factors in the operational environment and threats." }, { "id": "302052", "name": "Knowledge of the risk factors that can impact data collection operations." }, { "id": "302053", "name": "Knowledge of the target's methods and procedures." }, { "id": "302054", "name": "Knowledge of attack methods and techniques." }, { "id": "302055", "name": "Knowledge of the confidence levels of threat information." }, { "id": "302056", "name": "Knowledge of the objectives of target models." }, { "id": "302057", "name": "Knowledge of the principles, policies and procedures for collecting threat information, including legal restrictions and legal authorities." }, { "id": "302058", "name": "Knowledge of target verification and validation procedures." }, { "id": "302059", "name": "Knowledge of the processes for preparing environmental threat information and similar processes." }, { "id": "302060", "name": "Knowledge of the products required for operational cybersecurity planning." }, { "id": "302061", "name": "Knowledge of the resources and limitations of threat information." }, { "id": "302062", "name": "Knowledge of the types of cyber attackers (e.g. script kiddies, insider threats, state-sponsored threats)" } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 8, "course": { "id": "DEMO_4", "type": "std", "name": "System administration skills course", "lmsRsc": "", "area": { "id": "301000", "name": "System administration skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "301001", "name": "Knowledge of virtual machine technologies." }, { "id": "301002", "name": "Knowledge of operating system administration." }, { "id": "301003", "name": "Knowledge of applications that record errors, exceptions, failures and access to applications." }, { "id": "301004", "name": "Knowledge of computer architectures and networks." }, { "id": "301005", "name": "Knowledge of systemic aspects of resilience, reliability and performance." }, { "id": "301006", "name": "Knowledge of developing and applying a user credential management system." }, { "id": "301007", "name": "Knowledge of tools and techniques for strengthening systems, networks and operating systems." }, { "id": "301008", "name": "Knowledge of server diagnostic and fault identification tools." }, { "id": "301009", "name": "Knowledge of tools and methodologies for active defense and strengthening of the system." }, { "id": "301010", "name": "Knowledge of industry best practices in user support." }, { "id": "301011", "name": "Knowledge of fault tolerance methodologies." }, { "id": "301012", "name": "Knowledge of virtualization solutions and techniques, as well as their administration." }, { "id": "301013", "name": "Knowledge of configuration management techniques." }, { "id": "301014", "name": "Knowledge of systems management concepts." }, { "id": "301015", "name": "Knowledge of auditing and traceability procedures." }, { "id": "301016", "name": "Knowledge of systems operation and maintenance." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 9, "course": { "id": "DEMO_11", "type": "std", "name": "Information management skills course", "lmsRsc": "", "area": { "id": "308000", "name": "Information management skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "308001", "name": "Knowledge of the existing architecture for collection, processing, exploitation and dissemination." }, { "id": "308002", "name": "Knowledge of how information needs and collection requirements are transposed, tracked and prioritized throughout the organization." }, { "id": "308003", "name": "Knowledge of databases, portals and means of disseminating information." }, { "id": "308004", "name": "Knowledge of the capabilities and limitations of partner organizations (with shared responsibilities for collection, processing, use and dissemination)" }, { "id": "308005", "name": "Knowledge of the characteristics of physical and virtual data storage media." }, { "id": "308006", "name": "Knowledge of the tools and applications associated with data collection and management requirements." }, { "id": "308007", "name": "Knowledge of the sources, characteristics and uses of the organization's information assets." }, { "id": "308008", "name": "Knowledge of the organization's data, information and knowledge needs." }, { "id": "308009", "name": "Knowledge of data management and standardization policies." }, { "id": "308010", "name": "Knowledge of methods for integrating and summarizing information." }, { "id": "308011", "name": "Knowledge of standards and methodologies for classifying information based on sensitivity, criticality and other risk factors." }, { "id": "308012", "name": "Knowledge of information classification policies and procedures." }, { "id": "308013", "name": "Knowledge of threat information reporting principles, as well as policies, procedures and means of communication, including reporting formats, reporting criteria (requirements and priorities), dissemination practices and legal restrictions." }, { "id": "308014", "name": "Knowledge of communication and dissemination procedures." }, { "id": "308015", "name": "Knowledge of processes and tools for collecting data, information and knowledge, including their limitations." }, { "id": "308016", "name": "Knowledge of threat intelligence resources and repositories." }, { "id": "308017", "name": "Knowledge of all reporting sources, as well as disclosure procedures." }, { "id": "308018", "name": "Knowledge of data flows, from the point of origin and collection to repositories and tools." }, { "id": "308019", "name": "Knowledge of the organization's data collection objectives and requirements." }, { "id": "308020", "name": "Knowledge of the main methods, procedures and techniques for collecting, producing, reporting and sharing information." }, { "id": "308021", "name": "Knowledge of the principles and techniques of data mining and warehousing." }, { "id": "308022", "name": "Knowledge of the identification and reporting processes." }, { "id": "308023", "name": "Knowledge of the resources and functionalities associated with technologies for organizing and managing information (e.g. databases, content markers)" }, { "id": "308024", "name": "Knowledge of the organizational requirements for collecting information." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [] } ] } ] } ] } ] }, { "id": 2, "course": { "id": "DEMO_2", "type": "std", "name": "Incident management skills course", "lmsRsc": "", "area": { "id": "201000", "name": "Incident management skills" }, "mainArea": { "id": "200000", "name": "INCIDENT AND PROBLEM MANAGEMENT" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "200001", "name": "Knowledge of incident categories and their responses." }, { "id": "200002", "name": "Knowledge of collateral damage and impact estimation." }, { "id": "200003", "name": "Knowledge of response and recovery exercises." }, { "id": "200004", "name": "Knowledge of incident response methodologies." }, { "id": "200005", "name": "Knowledge of action planning in crisis situations." }, { "id": "200006", "name": "Knowledge of processes and operations for managing incidents, problems and events." }, { "id": "200007", "name": "Knowledge of crisis management protocols, processes and techniques." }, { "id": "200008", "name": "Knowledge of root cause analysis techniques." }, { "id": "200009", "name": "Knowledge of estimated recovery and repair times." }, { "id": "200010", "name": "Knowledge of the procedures and tools for documenting and consulting incidents, problems and reported events." }, { "id": "200011", "name": "Knowledge of incident response programs, roles and responsibilities." }, { "id": "200012", "name": "Knowledge of the results of action lines and analysis exercises." }, { "id": "200013", "name": "Knowledge of the means of communication with people and entities, both internal and external, for incident management." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 10, "course": { "id": "DEMO_1", "type": "std", "name": "Risk management competence course", "lmsRsc": "", "area": { "id": "101000", "name": "Risk management competence" }, "mainArea": { "id": "100000", "name": "RISK MANAGEMENT" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "101001", "name": "Knowledge of risk tolerance and risk management strategy." }, { "id": "101002", "name": "Knowledge of risk management standards, processes and practices in supply chains." }, { "id": "101003", "name": "Knowledge of client and partner organizations, including their objectives, structure, resources and information needs." }, { "id": "101004", "name": "Knowledge of risk assessment." }, { "id": "101005", "name": "Knowledge of risk management and mitigation strategies." }, { "id": "101006", "name": "Knowledge of risk management methodologies." }, { "id": "101007", "name": "Knowledge of information technology risk management policies, requirements and procedures." }, { "id": "101008", "name": "Knowledge of supply chain security and its risk management policies, requirements and procedures." }, { "id": "101009", "name": "Knowledge of the context of organizations, including their objectives, structure, capabilities and information needs." }, { "id": "101010", "name": "Knowledge of information security concepts, technologies and methods used to guarantee information security." }, { "id": "101011", "name": "Knowledge of protection plans (e.g. risk management policies, supply chain security management policies, integrity maintenance techniques)." }, { "id": "101012", "name": "Knowledge of the principles and methods of structured analysis." }, { "id": "101013", "name": "Knowledge of risk management processes (e.g. risk assessment and mitigation methods)." }, { "id": "101014", "name": "Knowledge of the requirements of the risk management reference framework." }, { "id": "101015", "name": "Knowledge of the means of communication with people and entities, both internal and external, for risk management." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 11, "course": { "id": "DEMO_4", "type": "std", "name": "System administration skills course", "lmsRsc": "", "area": { "id": "301000", "name": "System administration skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "301001", "name": "Knowledge of virtual machine technologies." }, { "id": "301002", "name": "Knowledge of operating system administration." }, { "id": "301003", "name": "Knowledge of applications that record errors, exceptions, failures and access to applications." }, { "id": "301004", "name": "Knowledge of computer architectures and networks." }, { "id": "301005", "name": "Knowledge of systemic aspects of resilience, reliability and performance." }, { "id": "301006", "name": "Knowledge of developing and applying a user credential management system." }, { "id": "301007", "name": "Knowledge of tools and techniques for strengthening systems, networks and operating systems." }, { "id": "301008", "name": "Knowledge of server diagnostic and fault identification tools." }, { "id": "301009", "name": "Knowledge of tools and methodologies for active defense and strengthening of the system." }, { "id": "301010", "name": "Knowledge of industry best practices in user support." }, { "id": "301011", "name": "Knowledge of fault tolerance methodologies." }, { "id": "301012", "name": "Knowledge of virtualization solutions and techniques, as well as their administration." }, { "id": "301013", "name": "Knowledge of configuration management techniques." }, { "id": "301014", "name": "Knowledge of systems management concepts." }, { "id": "301015", "name": "Knowledge of auditing and traceability procedures." }, { "id": "301016", "name": "Knowledge of systems operation and maintenance." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 13, "course": { "id": "DEMO_5", "type": "std", "name": "Threat analysis skills course", "lmsRsc": "https://moodle-v2-athena-develop.aida-cluster-6fb15c141b13202f00901f551abdf43d-0000.eu-de.containers.appdomain.cloud/course/view.php?id=14", "area": { "id": "302000", "name": "Threat analysis skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "302001", "name": "Knowledge of the different classes of attack (e.g. passive, active, internal attack, distributed attack)." }, { "id": "302002", "name": "Knowledge of the structure, approach and strategy of vulnerability exploitation tools (e.g. sniffers, keyloggers) and the underlying techniques (e.g. obtaining backdoor access, data collection/exfiltration, systems vulnerability analysis)." }, { "id": "302003", "name": "Knowledge of the target's specialized language (e.g. acronyms, jargon, technical terminology, code words)." }, { "id": "302004", "name": "Knowledge of the target language(s)." }, { "id": "302005", "name": "Knowledge of threats and target systems." }, { "id": "302006", "name": "Knowledge of threat intelligence disciplines." }, { "id": "302007", "name": "Knowledge of the phases of a cyberattack (e.g. reconnaissance, scanning, enumeration, gaining access, escalating access, maintaining access, network exploitation, concealing evidence)" }, { "id": "302008", "name": "Knowledge of target communication tools and techniques." }, { "id": "302009", "name": "Knowledge of industry standards, principles and analysis methods accepted by the organization." }, { "id": "302010", "name": "Knowledge of the relationship between operational objectives, threat intelligence production tasks and requirements." }, { "id": "302011", "name": "Knowledge of internal tactics for anticipating and simulating threats." }, { "id": "302012", "name": "Knowledge of dynamic targets (unstudied, unplanned) and deliberate targets (studied, planned)." }, { "id": "302013", "name": "Knowledge of targets, including related events, communication profiles, threat actors, history (language, culture) and/or context." }, { "id": "302014", "name": "Knowledge of binary code analysis." }, { "id": "302015", "name": "Knowledge of malware analysis and characterization." }, { "id": "302016", "name": "Knowledge of physical and physiological behaviors that may indicate suspicious or abnormal activity." }, { "id": "302017", "name": "Knowledge of malware analysis concepts and methodologies." }, { "id": "302018", "name": "Knowledge of hardware and software reverse engineering concepts and techniques." }, { "id": "302019", "name": "Knowledge of countermeasures for identified security risks." }, { "id": "302020", "name": "Knowledge of the target development process (i.e. concepts, roles, responsibilities, products)." }, { "id": "302021", "name": "Knowledge of target search strategies and tools." }, { "id": "302022", "name": "Knowledge of malware analysis tools." }, { "id": "302023", "name": "Knowledge of analytical tools and techniques for languages, audio and/or graphic material." }, { "id": "302024", "name": "Knowledge of sources and tools for notices and commitment indications." }, { "id": "302025", "name": "Knowledge of frameworks, processes and systems related to threat intelligence." }, { "id": "302026", "name": "Knowledge of specific target identifiers and how they are used." }, { "id": "302027", "name": "Knowledge of internal threat investigations, reporting, investigation tools and regulations/laws." }, { "id": "302028", "name": "Knowledge of task assignment mechanisms." }, { "id": "302029", "name": "Knowledge of mechanisms for collecting information." }, { "id": "302030", "name": "Knowledge of threat information confidence levels." }, { "id": "302031", "name": "Knowledge of the targets' communication profiles and their elements (e.g., associations, activities, communication infrastructure)." }, { "id": "302032", "name": "Knowledge of principles and practices related to target development (e.g. detailed study of components, locations, associations, communication systems, infrastructures)." }, { "id": "302033", "name": "Knowledge of authorized threat information dissemination processes." }, { "id": "302034", "name": "Knowledge of task assignment processes for asset collection." }, { "id": "302035", "name": "Knowledge of translation processes and techniques." }, { "id": "302036", "name": "Knowledge of target threat intelligence gathering processes." }, { "id": "302037", "name": "Knowledge of cultural references, dialects, expressions, languages and abbreviations." }, { "id": "302038", "name": "Knowledge of human resource requirements related to threat information (e.g. logistics, communications, legal restrictions)." }, { "id": "302039", "name": "Knowledge of systems for assigning tasks in relation to threat information." }, { "id": "302040", "name": "Knowledge of covert communication techniques." }, { "id": "302041", "name": "Knowledge of evasion techniques and strategies." }, { "id": "302042", "name": "Knowledge of current and emerging attack vectors." }, { "id": "302043", "name": "Knowledge of the organization's threat environment." }, { "id": "302044", "name": "Knowledge of the targeting cycle." }, { "id": "302045", "name": "Knowledge of the feedback loop in data collection processes." }, { "id": "302046", "name": "Knowledge of the target list development process (i.e. candidates, restricted)." }, { "id": "302047", "name": "Knowledge of the data format established in the organization's threat information collection plan." }, { "id": "302048", "name": "Knowledge of the process of producing threat information." }, { "id": "302049", "name": "Knowledge of the support that threat information provides to planning, execution and evaluation." }, { "id": "302050", "name": "Knowledge of attack targets, cyber threat agents and procedures used in attacks." }, { "id": "302051", "name": "Knowledge of key factors in the operational environment and threats." }, { "id": "302052", "name": "Knowledge of the risk factors that can impact data collection operations." }, { "id": "302053", "name": "Knowledge of the target's methods and procedures." }, { "id": "302054", "name": "Knowledge of attack methods and techniques." }, { "id": "302055", "name": "Knowledge of the confidence levels of threat information." }, { "id": "302056", "name": "Knowledge of the objectives of target models." }, { "id": "302057", "name": "Knowledge of the principles, policies and procedures for collecting threat information, including legal restrictions and legal authorities." }, { "id": "302058", "name": "Knowledge of target verification and validation procedures." }, { "id": "302059", "name": "Knowledge of the processes for preparing environmental threat information and similar processes." }, { "id": "302060", "name": "Knowledge of the products required for operational cybersecurity planning." }, { "id": "302061", "name": "Knowledge of the resources and limitations of threat information." }, { "id": "302062", "name": "Knowledge of the types of cyber attackers (e.g. script kiddies, insider threats, state-sponsored threats)" } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 14, "course": { "id": "DEMO_11", "type": "std", "name": "Information management skills course", "lmsRsc": "", "area": { "id": "308000", "name": "Information management skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "308001", "name": "Knowledge of the existing architecture for collection, processing, exploitation and dissemination." }, { "id": "308002", "name": "Knowledge of how information needs and collection requirements are transposed, tracked and prioritized throughout the organization." }, { "id": "308003", "name": "Knowledge of databases, portals and means of disseminating information." }, { "id": "308004", "name": "Knowledge of the capabilities and limitations of partner organizations (with shared responsibilities for collection, processing, use and dissemination)" }, { "id": "308005", "name": "Knowledge of the characteristics of physical and virtual data storage media." }, { "id": "308006", "name": "Knowledge of the tools and applications associated with data collection and management requirements." }, { "id": "308007", "name": "Knowledge of the sources, characteristics and uses of the organization's information assets." }, { "id": "308008", "name": "Knowledge of the organization's data, information and knowledge needs." }, { "id": "308009", "name": "Knowledge of data management and standardization policies." }, { "id": "308010", "name": "Knowledge of methods for integrating and summarizing information." }, { "id": "308011", "name": "Knowledge of standards and methodologies for classifying information based on sensitivity, criticality and other risk factors." }, { "id": "308012", "name": "Knowledge of information classification policies and procedures." }, { "id": "308013", "name": "Knowledge of threat information reporting principles, as well as policies, procedures and means of communication, including reporting formats, reporting criteria (requirements and priorities), dissemination practices and legal restrictions." }, { "id": "308014", "name": "Knowledge of communication and dissemination procedures." }, { "id": "308015", "name": "Knowledge of processes and tools for collecting data, information and knowledge, including their limitations." }, { "id": "308016", "name": "Knowledge of threat intelligence resources and repositories." }, { "id": "308017", "name": "Knowledge of all reporting sources, as well as disclosure procedures." }, { "id": "308018", "name": "Knowledge of data flows, from the point of origin and collection to repositories and tools." }, { "id": "308019", "name": "Knowledge of the organization's data collection objectives and requirements." }, { "id": "308020", "name": "Knowledge of the main methods, procedures and techniques for collecting, producing, reporting and sharing information." }, { "id": "308021", "name": "Knowledge of the principles and techniques of data mining and warehousing." }, { "id": "308022", "name": "Knowledge of the identification and reporting processes." }, { "id": "308023", "name": "Knowledge of the resources and functionalities associated with technologies for organizing and managing information (e.g. databases, content markers)" }, { "id": "308024", "name": "Knowledge of the organizational requirements for collecting information." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [] } ] } ] }, { "id": 12, "course": { "id": "DEMO_5", "type": "std", "name": "Threat analysis skills course", "lmsRsc": "https://moodle-v2-athena-develop.aida-cluster-6fb15c141b13202f00901f551abdf43d-0000.eu-de.containers.appdomain.cloud/course/view.php?id=14", "area": { "id": "302000", "name": "Threat analysis skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "302001", "name": "Knowledge of the different classes of attack (e.g. passive, active, internal attack, distributed attack)." }, { "id": "302002", "name": "Knowledge of the structure, approach and strategy of vulnerability exploitation tools (e.g. sniffers, keyloggers) and the underlying techniques (e.g. obtaining backdoor access, data collection/exfiltration, systems vulnerability analysis)." }, { "id": "302003", "name": "Knowledge of the target's specialized language (e.g. acronyms, jargon, technical terminology, code words)." }, { "id": "302004", "name": "Knowledge of the target language(s)." }, { "id": "302005", "name": "Knowledge of threats and target systems." }, { "id": "302006", "name": "Knowledge of threat intelligence disciplines." }, { "id": "302007", "name": "Knowledge of the phases of a cyberattack (e.g. reconnaissance, scanning, enumeration, gaining access, escalating access, maintaining access, network exploitation, concealing evidence)" }, { "id": "302008", "name": "Knowledge of target communication tools and techniques." }, { "id": "302009", "name": "Knowledge of industry standards, principles and analysis methods accepted by the organization." }, { "id": "302010", "name": "Knowledge of the relationship between operational objectives, threat intelligence production tasks and requirements." }, { "id": "302011", "name": "Knowledge of internal tactics for anticipating and simulating threats." }, { "id": "302012", "name": "Knowledge of dynamic targets (unstudied, unplanned) and deliberate targets (studied, planned)." }, { "id": "302013", "name": "Knowledge of targets, including related events, communication profiles, threat actors, history (language, culture) and/or context." }, { "id": "302014", "name": "Knowledge of binary code analysis." }, { "id": "302015", "name": "Knowledge of malware analysis and characterization." }, { "id": "302016", "name": "Knowledge of physical and physiological behaviors that may indicate suspicious or abnormal activity." }, { "id": "302017", "name": "Knowledge of malware analysis concepts and methodologies." }, { "id": "302018", "name": "Knowledge of hardware and software reverse engineering concepts and techniques." }, { "id": "302019", "name": "Knowledge of countermeasures for identified security risks." }, { "id": "302020", "name": "Knowledge of the target development process (i.e. concepts, roles, responsibilities, products)." }, { "id": "302021", "name": "Knowledge of target search strategies and tools." }, { "id": "302022", "name": "Knowledge of malware analysis tools." }, { "id": "302023", "name": "Knowledge of analytical tools and techniques for languages, audio and/or graphic material." }, { "id": "302024", "name": "Knowledge of sources and tools for notices and commitment indications." }, { "id": "302025", "name": "Knowledge of frameworks, processes and systems related to threat intelligence." }, { "id": "302026", "name": "Knowledge of specific target identifiers and how they are used." }, { "id": "302027", "name": "Knowledge of internal threat investigations, reporting, investigation tools and regulations/laws." }, { "id": "302028", "name": "Knowledge of task assignment mechanisms." }, { "id": "302029", "name": "Knowledge of mechanisms for collecting information." }, { "id": "302030", "name": "Knowledge of threat information confidence levels." }, { "id": "302031", "name": "Knowledge of the targets' communication profiles and their elements (e.g., associations, activities, communication infrastructure)." }, { "id": "302032", "name": "Knowledge of principles and practices related to target development (e.g. detailed study of components, locations, associations, communication systems, infrastructures)." }, { "id": "302033", "name": "Knowledge of authorized threat information dissemination processes." }, { "id": "302034", "name": "Knowledge of task assignment processes for asset collection." }, { "id": "302035", "name": "Knowledge of translation processes and techniques." }, { "id": "302036", "name": "Knowledge of target threat intelligence gathering processes." }, { "id": "302037", "name": "Knowledge of cultural references, dialects, expressions, languages and abbreviations." }, { "id": "302038", "name": "Knowledge of human resource requirements related to threat information (e.g. logistics, communications, legal restrictions)." }, { "id": "302039", "name": "Knowledge of systems for assigning tasks in relation to threat information." }, { "id": "302040", "name": "Knowledge of covert communication techniques." }, { "id": "302041", "name": "Knowledge of evasion techniques and strategies." }, { "id": "302042", "name": "Knowledge of current and emerging attack vectors." }, { "id": "302043", "name": "Knowledge of the organization's threat environment." }, { "id": "302044", "name": "Knowledge of the targeting cycle." }, { "id": "302045", "name": "Knowledge of the feedback loop in data collection processes." }, { "id": "302046", "name": "Knowledge of the target list development process (i.e. candidates, restricted)." }, { "id": "302047", "name": "Knowledge of the data format established in the organization's threat information collection plan." }, { "id": "302048", "name": "Knowledge of the process of producing threat information." }, { "id": "302049", "name": "Knowledge of the support that threat information provides to planning, execution and evaluation." }, { "id": "302050", "name": "Knowledge of attack targets, cyber threat agents and procedures used in attacks." }, { "id": "302051", "name": "Knowledge of key factors in the operational environment and threats." }, { "id": "302052", "name": "Knowledge of the risk factors that can impact data collection operations." }, { "id": "302053", "name": "Knowledge of the target's methods and procedures." }, { "id": "302054", "name": "Knowledge of attack methods and techniques." }, { "id": "302055", "name": "Knowledge of the confidence levels of threat information." }, { "id": "302056", "name": "Knowledge of the objectives of target models." }, { "id": "302057", "name": "Knowledge of the principles, policies and procedures for collecting threat information, including legal restrictions and legal authorities." }, { "id": "302058", "name": "Knowledge of target verification and validation procedures." }, { "id": "302059", "name": "Knowledge of the processes for preparing environmental threat information and similar processes." }, { "id": "302060", "name": "Knowledge of the products required for operational cybersecurity planning." }, { "id": "302061", "name": "Knowledge of the resources and limitations of threat information." }, { "id": "302062", "name": "Knowledge of the types of cyber attackers (e.g. script kiddies, insider threats, state-sponsored threats)" } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 15, "course": { "id": "DEMO_4", "type": "std", "name": "System administration skills course", "lmsRsc": "", "area": { "id": "301000", "name": "System administration skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "301001", "name": "Knowledge of virtual machine technologies." }, { "id": "301002", "name": "Knowledge of operating system administration." }, { "id": "301003", "name": "Knowledge of applications that record errors, exceptions, failures and access to applications." }, { "id": "301004", "name": "Knowledge of computer architectures and networks." }, { "id": "301005", "name": "Knowledge of systemic aspects of resilience, reliability and performance." }, { "id": "301006", "name": "Knowledge of developing and applying a user credential management system." }, { "id": "301007", "name": "Knowledge of tools and techniques for strengthening systems, networks and operating systems." }, { "id": "301008", "name": "Knowledge of server diagnostic and fault identification tools." }, { "id": "301009", "name": "Knowledge of tools and methodologies for active defense and strengthening of the system." }, { "id": "301010", "name": "Knowledge of industry best practices in user support." }, { "id": "301011", "name": "Knowledge of fault tolerance methodologies." }, { "id": "301012", "name": "Knowledge of virtualization solutions and techniques, as well as their administration." }, { "id": "301013", "name": "Knowledge of configuration management techniques." }, { "id": "301014", "name": "Knowledge of systems management concepts." }, { "id": "301015", "name": "Knowledge of auditing and traceability procedures." }, { "id": "301016", "name": "Knowledge of systems operation and maintenance." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [ { "id": 16, "course": { "id": "DEMO_11", "type": "std", "name": "Information management skills course", "lmsRsc": "", "area": { "id": "308000", "name": "Information management skills" }, "mainArea": { "id": "300000", "name": "TECHNIQUES" }, "category": { "id": "0", "name": "DEMO" }, "competencies": [ { "id": "308001", "name": "Knowledge of the existing architecture for collection, processing, exploitation and dissemination." }, { "id": "308002", "name": "Knowledge of how information needs and collection requirements are transposed, tracked and prioritized throughout the organization." }, { "id": "308003", "name": "Knowledge of databases, portals and means of disseminating information." }, { "id": "308004", "name": "Knowledge of the capabilities and limitations of partner organizations (with shared responsibilities for collection, processing, use and dissemination)" }, { "id": "308005", "name": "Knowledge of the characteristics of physical and virtual data storage media." }, { "id": "308006", "name": "Knowledge of the tools and applications associated with data collection and management requirements." }, { "id": "308007", "name": "Knowledge of the sources, characteristics and uses of the organization's information assets." }, { "id": "308008", "name": "Knowledge of the organization's data, information and knowledge needs." }, { "id": "308009", "name": "Knowledge of data management and standardization policies." }, { "id": "308010", "name": "Knowledge of methods for integrating and summarizing information." }, { "id": "308011", "name": "Knowledge of standards and methodologies for classifying information based on sensitivity, criticality and other risk factors." }, { "id": "308012", "name": "Knowledge of information classification policies and procedures." }, { "id": "308013", "name": "Knowledge of threat information reporting principles, as well as policies, procedures and means of communication, including reporting formats, reporting criteria (requirements and priorities), dissemination practices and legal restrictions." }, { "id": "308014", "name": "Knowledge of communication and dissemination procedures." }, { "id": "308015", "name": "Knowledge of processes and tools for collecting data, information and knowledge, including their limitations." }, { "id": "308016", "name": "Knowledge of threat intelligence resources and repositories." }, { "id": "308017", "name": "Knowledge of all reporting sources, as well as disclosure procedures." }, { "id": "308018", "name": "Knowledge of data flows, from the point of origin and collection to repositories and tools." }, { "id": "308019", "name": "Knowledge of the organization's data collection objectives and requirements." }, { "id": "308020", "name": "Knowledge of the main methods, procedures and techniques for collecting, producing, reporting and sharing information." }, { "id": "308021", "name": "Knowledge of the principles and techniques of data mining and warehousing." }, { "id": "308022", "name": "Knowledge of the identification and reporting processes." }, { "id": "308023", "name": "Knowledge of the resources and functionalities associated with technologies for organizing and managing information (e.g. databases, content markers)" }, { "id": "308024", "name": "Knowledge of the organizational requirements for collecting information." } ], "prerequisites": { "courses": [], "competencies": [] } }, "children": [] } ] } ] } ] } ] } ]