Google Links

Follow the links below to find material targeted to the unit's elements, performance criteria, required skills and knowledge

Elements and Performance Criteria

1. Implement compliance systems
   • Monitor and assess the information security compliance practices of personnel according to enterprise policy and procedures
   • Maintain ongoing and effective communications with key compliance stakeholders
   • Conduct internal audits to determine if information security control objectives, controls, processes, and procedures are effectively applied and maintained, and perform as expected
2. Evaluate compliance systems
   • Assess the effectiveness of enterprise compliance program controls against appropriate benchmarks
   • Assess the effectiveness of information security compliance process and procedures for process improvement and implement changes where appropriate
   • Compile, analyse and report performance measures

Performance Evidence

Evidence of the ability to:

monitor and assess information security compliance

conduct internal audits

assess the effectiveness of enterprise compliance

compile, analyse and report performance measures.

Note: Evidence must be provided on at least TWO occasions.

---

Knowledge Evidence

To complete the unit requirements safely and effectively, the individual must:

describe the client business domain

compare and contrast the key security features and capabilities of current industry accepted hardware and software products

research and report on the key features of legislation relating to information and communications technology (ICT) security

evaluate the operating system, including strengths and weaknesses over lifetime of product

discuss privacy issues and legislation relating to integrating legal requirements with ICT security.

---