Google Links

Follow the links below to find material targeted to the unit's elements, performance criteria, required skills and knowledge

Elements and Performance Criteria

1. Analyse threats to system
   • Evaluate the organisation’s system and verify that it meets enterprise guidelines and policies
   • Conduct risk analysis on system and document outcomes
   • Evaluate threats to the system and document findings
   • Compile and document human interactions with system
2. Determine risk category
   • Conduct a risk assessment on the system and categorise risks
   • Conduct a risk assessment on human operations and interactions with the system and categorise risks
   • Match risk plans to risk categories
   • Determine and plan resources by risk categories
3. Identify appropriate controls
   • Devise and put in place effective controls to manage risk
   • Design policies and procedures to cover user access of the system
   • Conduct training in the use of system-related policies and procedures
   • Monitor high-risk categories at specified periods
   • Categorise and record system breakdowns
4. Include controls in the system
   • Develop security plan and procedures to include in management system
   • Develop security recovery plan
   • Implement system controls to reduce risks in human interaction with the system
5. Monitor system tools and procedures
   • Review and monitor risks and controls, using a management review process
   • Review risk analysis process based on security benchmarks from vendors, security specialists and organisational reviews
   • Plan to re-evaluate system and identify new threats and risks

Performance Evidence

Evidence of the ability to:

implement and manage security functions on a system

conduct risk assessment

set up effective controls to manage risk

develop security plan and security recovery plan

monitor risks and controls

review risk analysis process.

Note: If a specific volume or frequency is not stated, then evidence must be provided at least once.

---

Knowledge Evidence

To complete the unit requirements safely and effectively, the individual must:

summarise the general features of specific security technologies

describe risk analysis techniques, with a focus on their general features, and depth in security procedures

describe the common security requirements of a client’s organisation, including:

threats

security techniques and technologies

outline systems management and process control in relation to security

explain systems technologies, including a broad summary of their general features and capabilities.

---