Release 

Comments 

Release 1

This version first released with BSB Business Services Training Package Version 1.0.

ELEMENT 

PERFORMANCE CRITERIA 

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Analyse access risks, rules and responsibilities

1.1 Establish, analyse and describe the impact of the legal and regulatory framework on access to records for the unit or the entire organisation

1.2 Analyse organisational documentation and information, copies of appraisal reports and access conditions for records of comparable organisations

1.3 Review risk analyses and existing access rules for currency, and determine and document any necessary modifications

1.4 Analyse usage patterns of records taking into account identified risks and existing access rules

1.5 Determine specific restrictions and other responses to regulatory obligations for records and activities

1.6 Determine responsibility for reviewing access decisions from collected organisational documentation and information

2. Develop access strategy, classifications and rules

2.1 Consider factors impacting on access rights in developing an access strategy from collected information, based on established responsibilities for access to records, and in response to identified difficulties and risks

2.2 Determine broad access classifications and reasons for access restrictions from regulatory requirements, identified risks and usage patterns of records within the jurisdiction

2.3 Compile criteria for applying access classifications to records, based on collected information and performed analyses

2.4 Develop rules for applying classifications

2.5 Circulate access classifications and draft rules to users of the business or records system for comment, identifying and analysing exceptions, and modifying classifications where appropriate

2.6 Determine compliance regime and jurisdictional access regime

2.7 Seek authorisation from appropriate body for access classifications and procedures

3. Develop procedures to integrate into business or records system

3.1 Determine access permissions and restrictions for records by applying access rules

3.2 Establish and document categories of users using analyses of access rules and records usage

3.3 Document access permissions and restrictions in relation to categories of users

3.4 Establish mechanisms to control user access applying to records and to users

3.5 Develop and document specifications for recording authorised use of records

3.6 Integrate authorised access procedures into business or records system rules and procedures, and document changes

4. Review and amend access classifications and rules

4.1 Develop procedures for reviewing access decisions and for responding to exceptions

4.2 Identify a hierarchy of responsibility for reviewing access decisions to comply with jurisdictional access regime

4.3 Communicate changes to access rules and procedures to all users

Skill 

Performance 

Criteria 

Description 

Reading

1.1-1.6, 2.1-2.3, 2.6, 3.2, 3.6, 4.2

• Critically analyses documentation from a variety of sources to identify specific criteria and consolidates information to determine requirements

Writing

1.3,2.3-2.5, 2.7, 3.1-3.3, 3.5, 3.6, 4.1, 4.3

• Produces accurate and logically structured documents using grammatical structures, language, terminology and concepts appropriate for audience

Oral Communication

2.5, 2.7, 4.3

• Participates effectively in verbal exchanges using active listening and questioning to obtain feedback and to clarify information

Numeracy

1.4

• Performs mathematical calculations to analyse usage data and to interpret trends

Navigate the world of work

1.1, 1.2, 1.5, 1.6, 2.2, 2.4, 2.6, 3.1, 3.2, 3.6, 4.1, 4.2

• Determines and monitors adherence to organisational policies and procedures
• Monitors adherence to legal and regulatory rights and responsibilities

Interact with others

2.5, 2.7, 4.3

• Actively identifies the requirements of important communication exchanges, selecting appropriate channels, format and content to suit purpose and audience

Get the work done

1.1-1.6, 2.1-2.3, 2.6, 3.1, 3.2, 3.4, 4.1, 4.2

• Develops plans to manage relatively complex, non-routine tasks with an awareness of how they contribute to longer term operational and strategic goals
• Makes a range of critical and non-critical decisions in relatively complex situations, taking a range of factors and constraints into account
• Recognises and addresses some unfamiliar problems of increasing complexity within own scope

Code and title  

current version 

Code and title 

previous version 

Comments 

Equivalence status 

BSBRKG604 Determine security and access rules and procedures

BSBRKG604B Determine security and access rules and procedures

Updated to meet Standards for Training Packages

Equivalent unit

Release 

Comments 

Release 1

This version first released with BSB Business Services Training Package Version 1.0.