CPPSEC5003 Assess security risk management options

Release: 1

CPPSEC5003 Assess security risk management options

Modification History

Release 1	This version first released with CPP Property Services Training Package Release 9.0. Supersedes and is equivalent to CPPSEC5003A Assess security risk management options. Updated to meet the Standards for Training Packages.

Application

This unit specifies the skills and knowledge required to assess security risks associated with client operations and formulate suitable treatment options as part of a risk management strategy. It includes analysing the client’s security objectives and operating environment and establishing criteria to select and prioritise risk treatment options consistent with recognised industry practice and guidelines provided by ISO 31000:2018 Risk management – Guidelines (ISO 31000). The unit requires preparing formal reports detailing risk management options and possible consequences of not implementing recommended treatments.

This unit is suitable for those using a broad range of cognitive, technical and communication skills to select and apply methods and technologies to analyse information and provide solutions to sometimes complex problems.

Legislative, regulatory or certification requirements apply in some states and territories to the provision of advice on security solutions, strategies, protocols and procedures. For further information, check with the relevant regulatory authority.

Pre-requisite Unit

None.

Unit Sector

Security/Risk management

Elements and Performance Criteria

Elements describe the essential outcomes.	Performance criteria describe what needs to be done to demonstrate achievement of the element.
1	Assess client’s security requirements and risk environment.	1.1	Access and interpret key requirements of legislation, regulations and Australian standard ISO 31000 to understand and comply with requirements for assessing security risk management options.
1.2	Clarify client security objectives and risk assessment terms of reference in consultation with relevant persons.
1.3	Source and review information to identify and assess risks associated with operating environment of client.
1.4	Analyse type, nature and cause of identified security risks and prioritise based on severity and likelihood of occurrence.
1.5	Document risk assessment outcomes and check to ensure data currency and reliability.
2	Formulate security risk management options.	2.1	Identify security risk treatment options commensurate with risk assessment and client requirements.
2.2	Research the application of identified treatment options in similar contexts to assess their effectiveness in mitigating risks to client’s operating environment.
2.3	Establish criteria to assess effectiveness of treatment options consistent with recognised industry practice and guidelines provided by ISO 31000.
2.4	Apply criteria to select and prioritise recommended treatment options.
3	Finalise and present security risk management options.	3.1	Finalise and document security risk assessment detailing recommended risk management options and possible consequences of not implementing recommended treatments.
3.2	Check report to ensure analysis and recommendations are clear, coherent and consistent with terms of reference, and supported by verifiable information.
3.3	Present report to relevant persons within agreed timeframes and explain identified security risks and treatment options to enhance understanding and acceptance of recommendations.
3.4	Complete and secure risk assessment documentation in a manner that facilitates future retrieval and maintains client confidentiality according to workplace and regulatory requirements.

Foundation Skills

As well as the foundation skills explicit in the performance criteria of this unit, candidates require:

oral communication skills to negotiate client agreement

writing skills to prepare succinct and logically structured assessment reports

numeracy skills to apply basic probability statistics when assessing security risks.

Unit Mapping Information

Supersedes and equivalent to CPPSEC5003A Assess security risk management options.

Links

Companion volumes to this training package are available at the VETNet website - https://vetnet.gov.au/Pages/TrainingDocs.aspx?q=6f3f9672-30e8-4835-b348-205dfcf13d9b