Assessment Requirements for ICTNWK510 Develop, implement and evaluate system and application security

Release: 1

Assessment Requirements for ICTNWK510 Develop, implement and evaluate system and application security

Modification History

Release	Comments
Release 1	This version first released with ICT Information and Communications Technology Training Package Version 1.0.

Performance Evidence

Evidence of the ability to:

create an information and communications technology (ICT) system or application security plan

implement system and application security

apply and verify compliance with the identified standards

practise secure coding practices

assess and evaluate system compliance.

Note: If a specific volume or frequency is not stated, then evidence must be provided at least once.

Knowledge Evidence

To complete the unit requirements safely and effectively, the individual must:

summarise a range of programming languages, including those used by the organisation

summarise best practice in application of language syntax rules

explain data structures

outline graphical user interfaces (GUIs)

summarise small-size application development

identify and summarise the legislation, regulations and codes of practice that impact on network security

describe the risk assessment process required in evaluating system vulnerabilities, including:

risk mitigation

security control selection

implementation and evaluation process

software security standards compliance.

Assessment Conditions

Gather evidence to demonstrate consistent performance in conditions that are safe and replicate the workplace. Noise levels, production flow, interruptions and time variances must be typical of those experienced in the network industry, and include access to:

ICT business specifications

information on the security environment, including laws and legislation, existing organisational security policies, organisational expertise and knowledge

possible security environment, which also includes the threats to security that are, or are held to be, present in the environment

risk analysis tools and methodologies

ICT security assurance specifications

application and system scenarios.

Assessors must satisfy NVR/AQTF assessor requirements.

Links

Companion Volume implementation guides are found in VETNet - https://vetnet.education.gov.au/Pages/TrainingDocs.aspx?q=a53af4e4-b400-484e-b778-71c9e9d6aff2