Assessor Resource

ICTSAS409
Manage risks involving ICT systems and technology

Assessment tool

Version 1.0
Issue Date: May 2024


This unit describes the skills and knowledge required to implement procedures that identify, analyse, evaluate and monitor risks involving information and communications technology (ICT) systems and technology. This includes the development and management of contingency plans.

It applies to individuals who provide high level technical skills and knowledge, and systematic approaches to manage risk in ICT systems.

No licensing, legislative or certification requirements apply to this unit at the time of publication.

You may want to include more information here about the target group and the purpose of the assessments (eg formative, summative, recognition)


Evidence Required

List the assessment methods to be used and the context and resources required for assessment. Copy and paste the relevant sections from the evidence guide below and then re-write these in plain English.

ELEMENT

PERFORMANCE CRITERIA

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Establish risk context

1.1 Review and document organisational and technical environment

1.2 Establish and document risk boundaries according to business operating and strategic environment

2. Identify risk factors

2.1 Develop or acquire a measurement scale for project risk, which includes importance, complexity, time and resources required

2.2 Identify project risks based on the measurement scale developed and document according to business requirements

2.3 Identify business impact of changes and document according to current and future business directions

3. Implement contingency plans

3.1 Classify each risk and create contingency plans that address how the risk will be monitored and overcome, if possible

3.2 Identify measurable benchmarks to track the treatment of risks to the new system

3.3 Identify risk management intervention points according to benchmarked performance tolerances

3.4 Demonstrate use of phased implementation and piloting to reduce risk factors

4. Monitor, update and report risk profile

4.1 Conduct regular risk updates to add new risks and remove old ones

4.2 Update contingency plans when appropriate to incorporate new information

4.3 Conduct risk reviews at major project milestones and document outcomes

4.4 Establish feedback processes to provide warning of potential new risks according to business requirements

Evidence of the ability to:

identify and document where risk occurs

develop and implement measures to mitigate or obviate risk

set up procedures for regular risk management

monitor, review and report risk profile

Note: Evidence must be provided for at least TWO information and communications technology (ICT) environments.

To complete the unit requirements safely and effectively, the individual must:

analyse and discuss risk management strategies and issues

outline key features of regulation, standards and codes of practice relevant to risk management including:

ethics

copyright and intellectual property

privacy legislation

identify and describe guidelines required for updating technology

describe the business supply chain for the ICT industry

summarise user analysis and the client relationship management (CRM) systems

describe business process design principles in relation to risk management.

Gather evidence to demonstrate consistent performance in conditions that are safe and replicate the workplace. Noise levels, production flow, interruptions and time variances must be typical of those experienced in the systems administration and support field of work and include access to:

special purpose tools, equipment and materials

industry software packages

analysis software

business website

networks

requirements documentation

risk management plan

site server

site server software

software applications

updated or new technology

user analysis

web servers.

Assessors must satisfy NVR/AQTF assessor requirements.

Submission Requirements

List each assessment task's title, type (eg project, observation/demonstration, essay, assingnment, checklist) and due date here

Assessment task 1: [title]      Due date:

(add new lines for each of the assessment tasks)

Assessment Tasks

Copy and paste from the following data to produce each assessment task. Write these in plain English and spell out how, when and where the task is to be carried out, under what conditions, and what resources are needed. Include guidelines about how well the candidate has to perform a task for it to be judged satisfactory.

ELEMENT

PERFORMANCE CRITERIA

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1. Establish risk context

1.1 Review and document organisational and technical environment

1.2 Establish and document risk boundaries according to business operating and strategic environment

2. Identify risk factors

2.1 Develop or acquire a measurement scale for project risk, which includes importance, complexity, time and resources required

2.2 Identify project risks based on the measurement scale developed and document according to business requirements

2.3 Identify business impact of changes and document according to current and future business directions

3. Implement contingency plans

3.1 Classify each risk and create contingency plans that address how the risk will be monitored and overcome, if possible

3.2 Identify measurable benchmarks to track the treatment of risks to the new system

3.3 Identify risk management intervention points according to benchmarked performance tolerances

3.4 Demonstrate use of phased implementation and piloting to reduce risk factors

4. Monitor, update and report risk profile

4.1 Conduct regular risk updates to add new risks and remove old ones

4.2 Update contingency plans when appropriate to incorporate new information

4.3 Conduct risk reviews at major project milestones and document outcomes

4.4 Establish feedback processes to provide warning of potential new risks according to business requirements

Evidence of the ability to:

identify and document where risk occurs

develop and implement measures to mitigate or obviate risk

set up procedures for regular risk management

monitor, review and report risk profile

Note: Evidence must be provided for at least TWO information and communications technology (ICT) environments.

To complete the unit requirements safely and effectively, the individual must:

analyse and discuss risk management strategies and issues

outline key features of regulation, standards and codes of practice relevant to risk management including:

ethics

copyright and intellectual property

privacy legislation

identify and describe guidelines required for updating technology

describe the business supply chain for the ICT industry

summarise user analysis and the client relationship management (CRM) systems

describe business process design principles in relation to risk management.

Gather evidence to demonstrate consistent performance in conditions that are safe and replicate the workplace. Noise levels, production flow, interruptions and time variances must be typical of those experienced in the systems administration and support field of work and include access to:

special purpose tools, equipment and materials

industry software packages

analysis software

business website

networks

requirements documentation

risk management plan

site server

site server software

software applications

updated or new technology

user analysis

web servers.

Assessors must satisfy NVR/AQTF assessor requirements.
Copy and paste from the following performance criteria to create an observation checklist for each task. When you have finished writing your assessment tool every one of these must have been addressed, preferably several times in a variety of contexts. To ensure this occurs download the assessment matrix for the unit; enter each assessment task as a column header and place check marks against each performance criteria that task addresses.

Observation Checklist

Tasks to be observed according to workplace/college/TAFE policy and procedures, relevant legislation and Codes of Practice Yes No Comments/feedback
Review and document organisational and technical environment 
Establish and document risk boundaries according to business operating and strategic environment 
Develop or acquire a measurement scale for project risk, which includes importance, complexity, time and resources required 
Identify project risks based on the measurement scale developed and document according to business requirements 
Identify business impact of changes and document according to current and future business directions 
Classify each risk and create contingency plans that address how the risk will be monitored and overcome, if possible 
Identify measurable benchmarks to track the treatment of risks to the new system 
Identify risk management intervention points according to benchmarked performance tolerances 
Demonstrate use of phased implementation and piloting to reduce risk factors 
Conduct regular risk updates to add new risks and remove old ones 
Update contingency plans when appropriate to incorporate new information 
Conduct risk reviews at major project milestones and document outcomes 
Establish feedback processes to provide warning of potential new risks according to business requirements 

Forms

Assessment Cover Sheet

ICTSAS409 - Manage risks involving ICT systems and technology
Assessment task 1: [title]

Student name:

Student ID:

I declare that the assessment tasks submitted for this unit are my own work.

Student signature:

Result: Competent Not yet competent

Feedback to student

 

 

 

 

 

 

 

 

Assessor name:

Signature:

Date:

Assessment Record Sheet

ICTSAS409 - Manage risks involving ICT systems and technology

Student name:

Student ID:

Assessment task 1: [title] Result: Competent Not yet competent

(add lines for each task)

Feedback to student:

 

 

 

 

 

 

 

 

Overall assessment result: Competent Not yet competent

Assessor name:

Signature:

Date:

Student signature:

Date: