Release 

Comments 

Release 1

This version first released with ICT Information and Communications Technology Training Package Version 6.0.

ELEMENT 

PERFORMANCE CRITERIA 

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Develop system and application security

1.1 Identify organisational ICT system and application security requirements

1.2 Determine and document ICT system and application security plan according to organisational requirements

1.3 Identify risk-based audit performance criteria against the ICT system or application

1.4 Develop and document required mitigation of vulnerabilities processes and procedures

1.5 Integrate information security requirements, controls, processes and procedures into ICT system and application design specifications

2. Implement system and application security

2.1 Execute and verify operational compliance according to technical and organisational requirements

2.2 Perform required configuration management practices and mitigate introduction of vulnerabilities

2.3 Validate and re-engineer ICT system and application security controls and operations phase vulnerabilities

2.4 Document ICT system and application security controls according to organisational policies and procedures

3. Evaluate system and application security

3.1 Assess effectiveness of information system controls against required risk management practices and procedures

3.2 Assess and evaluate system compliance against organisational requirements

3.3 Assess system maturation and readiness for promotion to production stage according to organisational requirements

3.4 Document assessment findings and submit to required personnel

S KILL 

D ESCRIPTION 

Reading

• Gathers, interprets and analyses technical and regulatory information to determine requirements according to client needs

Writing

• Uses factual information and industry related terminology to produce workplace documents

Planning and organising

• Uses a combination of formal, logical planning processes to plan, prioritise and monitor own work and coordinate processes in liaison with others and within different contexts

Problem solving

• Identifies sophisticated principles, concepts, nuance, language and practices associated with the digital world and uses these to troubleshoot and reduce risks
• Uses digital tools to access and organise complex data and analyse multiple sources of information for strategic purpose
• Makes a range of critical decisions in relatively complex situations, taking a range of constraints into account

Self-management

• Identifies and considers required policies and legislative requirements in the development of system security processes

Technology

• Monitors and controls access to digitally stored and transmitted information

Release 

Comments 

Release 1

This version first released with ICT Information and Communications Technology Training Package Version 6.0.