1. Manage enterprise cloud security controls
   • . Identify cloud security issues faced by different delivery and deployment models relevant to enterprise
   • . Determine specific enterprise areas of security responsibility
   • . Implement most relevant security controls and measures to protect identified areas of responsibility
2. Manage enterprise cloud privacy and compliance
   • . Identify relevant compliance regulations relating to data storage
   • . Determine most relevant business continuity and data recovery plans
   • . Identify, secure and maintain relevant logs and audit trails
   • . Investigate and review legal, privacy and contractual issues to ensure they meet enterprise policy
3. Review, implement and document cloud security, privacy and compliance enhancements
   • . Implement appropriate changes and integrate into current enterprise’s continuity of operation program (COOP)
   • . Establish a performance measurement program to evaluate security effectiveness of implemented security controls
   • . Provide relevant documentation as part of COOP for audit tracking purposes

The evidence guide provides advice on assessment and must be read in conjunction with the performance criteria required skills and knowledge range statement and the Assessment Guidelines for the Training Package

The range statement relates to the unit of competency as a whole. It allows for different work environments and situations that may affect performance. Bold italicised wording, if used in the performance criteria, is detailed below. Essential operating conditions that may be present with training and assessment (depending on the work situation, needs of the candidate, accessibility of the item, and local industry and regional contexts) may also be included.