Assessment Requirements for ICTCYS405 Develop cyber security incident response plans

Release: 1

Assessment Requirements for ICTCYS405 Develop cyber security incident response plans

Modification History

Release	Comments
Release 1	This version first released with ICT Information and Communications Technology Training Package Version 6.0.

Performance Evidence

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to:

develop a plan in response to cyber security incidents for each of the following areas:

organisation’s network

organisation’s system

Wi-Fi network

an application

a human error.

In the course of the above, the candidate must:

establish at least two test scenarios in each plan

develop at least two test metrics and at least two baselines in each plan

adhere to organisational procedures.

Knowledge Evidence

The candidate must be able to demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including knowledge of:

features and principals of networking, Wi-Fi networks and applications

procedures in testing cyber security incident test plans

metrics and baselines used in cyber security incident test plans

roles and responsibilities of test committees

organisational procedures and requirements applicable to developing cyber security incident response plans, including:

documenting established requirements and incident response plans

establishing response committees

testing methodologies

establishing baselines and metrics

cyber incidents and scenarios.

Assessment Conditions

Skills in this unit must be demonstrated in a workplace or simulated environment where the conditions are typical of those in a working environment in this industry.

This includes access to:

software required in testing cyber security incident response plans

required hardware and its components

Wi-Fi network

an application

text-editing software

information applicable to organisational environment, processes and previous cyber security incidents.

Assessors of this unit must satisfy the requirements for assessors in applicable vocational education and training legislation, frameworks and/or standards.

Links

Companion Volume Implementation Guide is found on VETNet - https://vetnet.gov.au/Pages/TrainingDocs.aspx?q=a53af4e4-b400-484e-b778-71c9e9d6aff2