Release 

Comments 

Release 1

This version first released with ICT Information and Communications Technology Training Package Version 1.0.

ELEMENT 

PERFORMANCE CRITERIA 

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Implement policy-based code-access security in an application

1.1 Identify the purpose of application security in software development

1.2 Configure the platform security configuration files using security configuration tools

1.3 Define a custom code access permission, to restrict access to protected resources or to run protected operations

2. Implement security access control in an application

2.1 Plan an authentication and authorisation strategy

2.2 Develop an appropriate authentication and authorisation strategy for an application

3. Write code to encrypt and decrypt data for secure communication

3.1 Analyse the standard cryptographic algorithms

3.2 Encrypt, and decrypt, data using standard cryptographic algorithms

4. Protect an application against injections

4.1 Plan secure input and output handling, to prevent vulnerabilities related to code injections

4.2 Use secure input and output handling

Skill 

Performance Criteria 

Description 

Reading

1.1, 3.1

• Evaluates complex and varied information, and concepts, in software security

Writing

1.2, 3.2, 4.2

• Writes and edits computer code, and technical data, ensuring the correct syntax and accuracy

Get the work done

1.2, 1.3, 2.1, 2.2, 3.2, 3.1, 4.1, 4.2

• Takes responsibility for planning, sequencing and prioritising processes and tasks to achieve the required outcomes
• Applies systematic and analytical problem-solving processes, in order to develop appropriate security access control strategies
• Uses a range of digital tools and sophisticated techniques to meet desired outcomes
• Is acutely aware of the importance of data security and of monitoring, and controlling, access to digitally stored and transmitted information

Code and title 

current version 

Code and title 

previous version 

Comments 

Equivalence status 

ICTPRG507 Implement security for applications

ICAPRG507A Implement security for applications

Updated to meet Standards for Training Packages

Equivalent unit

Release 

Comments 

Release 1

This version first released with ICT Information and Communications Technology Training Package Version 1.0.