^
 
 

Unit of competency details

ICTCYS601 - Create cyber security standards for organisations (Release 2)

Summary

Usage recommendation:
Current
Release Status:
Current
Releases:
ReleaseRelease date
2 (this release) 02/Oct/2020
(View details for release 1) 21/Jul/2020

Companion volumes:
Unit of competency Assessment requirements

Delivery:
Find RTOs approved to deliver this unit of competency.

Training packages that include this unit

Qualifications that include this unit

Skill sets that include this unit

Classifications

SchemeCodeClassification value
ASCED Module/Unit of Competency Field of Education Identifier 029901 Security Science  

Classification history

SchemeCodeClassification valueStart dateEnd date
ASCED Module/Unit of Competency Field of Education Identifier 029901 Security Science  18/Sep/2020 
The content being displayed has been produced by a third party, while all attempts have been made to make this content as accessible as possible it cannot be guaranteed. If you are encountering issues following the content on this page please consider downloading the content in its original form

Content

Compare:
Compare content of this unit of competency with other releases or training components
Download:

Unit of competency

Modification History

Release 

Comments 

Release 1

This version first released with ICT Information and Communications Technology Training Package Version 6.0.

Release 2

Correcting an error in the Assessment Conditions.

Application

This unit describes the skills and knowledge required to research, plan and implement cyber security standards for an organisation.

It applies to those who work in information technology security in roles including cyber security analysts and specialists, business development managers, cyber risk and assurance managers responsible for creating cyber security standards for an organisation.

No licensing, legislative or certification requirements apply to this unit at the time of publication.

Unit Sector

Cyber security

Elements and Performance Criteria

ELEMENT 

PERFORMANCE CRITERIA 

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Determine cyber security needs

1.1 Identify and document organisational cyber security needs

1.2 Identify existing organisational cyber security standards framework

1.3 Identify external cyber security standards according to organisational requirements

1.4 Identify core components and implementation tiers of framework according to organisational requirements

1.5 Identify and document cyber security framework profile according to organisational policies and procedures

2. Create standards framework

2.1 Determine and document objectives of standards framework

2.2 Document standards framework according to organisational and cyber security standards requirements

2.3 Submit documentation to required personnel and respond to required changes

3. Implement cyber security standards

3.1 Distribute cyber security framework to required personnel

3.2 Lodge documentation according to organisational policies and procedures

4. Finalise and monitor cyber security standards

4.1 Analyse organisation’s adherence to cyber security standards

4.2 Detect areas of non-compliance and resolve according to organisational requirements

4.3 Analyse recovery strategies according to cyber standards requirements

4.4 Confirm completion of requirements from required personnel

Foundation Skills

This section describes those language, literacy, numeracy and employment skills that are essential to performance but not explicit in the performance criteria.

S KILL 

D ESCRIPTION 

Reading
  • Interprets information from technical, manufacturer and organisational documentation to determine and confirm job requirements

Writing
  • Prepares complex workplace documentation detailing processes and outcomes using required structure, layout and applicable language

Planning and organising
  • Operates from a broad conceptual plan, developing the operational detail in stages, regularly reviewing priorities and performance during implementation, and identifying and addressing issues

Problem solving
  • Uses provided context to identify recognise anomalies and subtle deviations to normal expectations, focusing attention and remedying problems as they arise

Self-management
  • Uses systematic processes, setting goals, gathering required information and identifying and evaluating options against agreed criteria

Unit Mapping Information

No equivalent unit. New unit.

Links

Companion Volume Implementation Guide is found on VETNet - https://vetnet.gov.au/Pages/TrainingDocs.aspx?q=a53af4e4-b400-484e-b778-71c9e9d6aff2

 

Assessment requirements

Modification History

Release 

Comments 

Release 1

This version first released with ICT Information and Communications Technology Training Package Version 6.0.

Release 2

Correcting an error in the Assessment Conditions.

Performance Evidence

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to:

  • create, implement and monitor cyber security standards for an organisation on at least one occasion.

In the course of the above, the candidate must:

  • document plans and outcomes.

Knowledge Evidence

The candidate must be able to demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including knowledge of:

  • advanced features of network security
  • organisational business processes applicable to creating cyber security standards including:
  • documenting established standards and requirements
  • establishing requirements and features of network security infrastructure
  • establishing maintenance and alert processes
  • conducting routine reviews of network security infrastructure
  • testing methods and procedures
  • security risks, and tolerance of risk in an organisation
  • industry standard network security providers
  • industry standards and regulations applicable to implementing network security infrastructure in an organisation
  • key organisation, infrastructure and network requirements required to create cyber security standards for organisations.

Assessment Conditions

Skills in this unit must be demonstrated in a workplace or simulated environment where the conditions are typical of those in a working environment in this industry.

This includes access to:

  • software and its components related to creating cyber security standards
  • standards for Cyber security ISO/IEC 27000 series, Information security management systems standards
  • network security providers and solutions required for creating cyber security standards
  • application and user security technologies.

Assessors of this unit must satisfy the requirements for assessors in applicable vocational education and training legislation, frameworks and/or standards.

Links

Companion Volume Implementation Guide is found on VETNet - https://vetnet.gov.au/Pages/TrainingDocs.aspx?q=a53af4e4-b400-484e-b778-71c9e9d6aff2

Back to top