Assessment Requirements for ICTWEB439 Confirm basic website security

Release: 1

Assessment Requirements for ICTWEB439 Confirm basic website security

Modification History

Release	Comments
Release 1	This version first released with ICT Information and Communications Technology Training Package Version 6.0.

Performance Evidence

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to:

confirm a basic level of security for a website according to business requirements.

In the course of the above, the candidate must:

implement password protection solutions, for the website and server

install and maintain, an intrusion detection system

implement protocol security

confirm security of website with required personnel.

Knowledge Evidence

The candidate must be able to demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including knowledge of:

the client business domain, including client organisation structure and business functionality and requirements

desktop applications and operating systems, as required

firewall functionality

hypertext transfer protocol (HTTP) and disk and executing monitor tools (daemons)

the range of security protocols, including:

secure socket layer (SSL)

point-to-point network tunnelling protocol (PPTP)

layer 2 tunnelling protocol (L2TP)

required security patches used to confirm basic website security

disabling control protocol and internet protocol (TCP/IP) bindings, including file and printer sharing

industry standard protection solutions

specific purpose security devices acting as bastion hosts

web-server operating systems.

Assessment Conditions

Skills in this unit must be demonstrated in a workplace or simulated environment where the conditions are typical of those in a working environment in this industry.

This includes access to:

required tools, equipment, materials

a website and web servers

the internet

industry-standard hardware and software packages and products

digital devices

organisational requirements documentation

website manuals and instructions.

Assessors of this unit must satisfy the requirements for assessors in applicable vocational education and training legislation, frameworks and/or standards.

Links

Companion Volume Implementation Guide is found on VETNet - https://vetnet.gov.au/Pages/TrainingDocs.aspx?q=a53af4e4-b400-484e-b778-71c9e9d6aff2