Assessment Requirements for BSBXCS405 Contribute to cyber security incident responses

Release: 1

Assessment Requirements for BSBXCS405 Contribute to cyber security incident responses

Modification History

Release	Comments
Release 1	This version first released with BSB Business Services Training Package 6.0.

Performance Evidence

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to assist in:

responding to two different cyber security incidents in a work area

conducting one post-breach review.

Knowledge Evidence

The candidate must be able to demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including knowledge of:

legislative requirements relating to contributing to cyber security incident responses, including:

data protection

implications of notifiable data breach legislation on an organisation and other associated Australian privacy laws

established international legislation

procedures for developing communications plans

organisational policies and procedures relating to cyber security incident response, including procedures for:

confirming nature and location of incidents

determining risk, likelihood, and consequence of incidents

containing incidents

notifying internal and external stakeholders of incident

internal and external communications

conducting post-breach reviews

reporting methods for cyber security incidents, including official government channels

key features of cyber security incident response plan

risk mitigation strategies and procedures relating to cyber security

internal and external stakeholders involved in responding to cyber security incidents.

Assessment Conditions

Skills must be assessed in a workplace or simulated environment where conditions are typical of a work environment requiring cyber secure practices, processes and procedures.

Access is required to:

information and data sources relating to cyber security

device with active internet connection

internet browser

industry standards, organisational procedures, and legislative requirements required to demonstrate the performance evidence.

Assessors of this unit must satisfy the requirements for assessors in applicable vocational education and training legislation, frameworks and/or standards.

Links

Companion Volume Implementation Guide is found on VETNet: - https://vetnet.gov.au/Pages/TrainingDocs.aspx?q=a53af4e4-b400-484e-b778-71c9e9d6aff2