ELEMENT

PERFORMANCE CRITERIA

1. Activate browser security features

1.1. Identify and access built in securityfeatures from the toolbar or pull-down menu of a browser

1.2. Activate security features on own browser that identify a secure site by automatically opening a warning box

1.3. Activate other securityfeatures as necessary, including alerts when you are leaving a secure site by automatically opening a warning box

2. Identify security of website

2.1. Ascertain whether the website has a statement about the how it manages site security

2.2. Confirm that code passwords are not seen when viewing source

2.3. Check if the website has a privacy statement relating to the use of personal information and sensitiveinformation

2.4. Ascertain whether the website states the security process related to sensitive information

3. Determine integrity of website

3.1. Check if the website has statements relating to the disclosure of information particularly sensitive information

3.2. Find the details of products, services and support provided

3.3. Check that the policy and procedure details on cancelling, returning and refunding on services, products and support are stated

3.4. Ensure copyright statements and acknowledgements are evident

4. Identify website credentials

4.1. Determine if the website is operated by a bona-fideorregistered business

4.2. Check that disclaimers made by the business are reasonable and lawful

4.3. Ensure that services, products and advertising information regarding services and products are lawful

Required skills

Basic web security

Basic computer operation

Basic browser configuration

Required knowledge

Browser use

Identifying secure links via browser

Consumer protection issues

Copyright and intellectual property

The evidence guide provides advice on assessment and must be read in conjunction with the performance criteria, required skills and knowledge, range statement and the Assessment Guidelines for the Training Package.

Overview of assessment

Critical aspects for assessment and evidence required to demonstrate competency in this unit

Evidence of the following is essential:

Assessment must confirm the ability to use basic security features on a browser and access website information to identify sites being visited as secure or insecure.

To demonstrate competency in this unit the person will require access to:

Personal computer

Internet access

Remote websites

Browser

Context of and specific resources for assessment

The breadth, depth and complexity of knowledge and skills in this competency would prepare a person to perform a defined range of activities many of which may be routine and predictable.

Assessment must ensure:

Demonstration of this competency provides for basic security questions and checks to be implemented when accessing websites.

Applications may include a variety of employment related skills including preparatory access and participation skills, broad-based induction skills and/or specific workplace skills. They may also include participation in a team or work group.

Method of assessment

The purpose of this unit is to define the standard of performance to be achieved in the workplace. In undertaking training and assessment activities related to this unit, consideration should be given to the implementation of appropriate diversity and accessibility practices in order to accommodate people who may have special needs. Additional guidance on these and related matters is provided in ICA05 Section 1.

Competency in this unit should be assessed using summative assessment to ensure consistency of performance in a range of contexts. This unit can be assessed either in the workplace or in a simulated environment. However, simulated activities must closely reflect the workplace to enable full demonstration of competency.

Assessment will usually include observation of real or simulated work processes and procedures and/or performance in a project context as well as questioning on underpinning knowledge and skills. The questioning of team members, supervisors, subordinates, peers and clients where appropriate may provide valuable input to the assessment process. The interdependence of units for assessment purposes may vary with the particular project or scenario.

Guidance information for assessment

Holistic assessment with other units relevant to the industry sector, workplace and job role is recommended, for example:

ICAS1193B Connect a workstation to the internet

ICAU1128B Operate a personal computer

ICAU1133B Send and retrieve information using web browsers and email

ICAU1204B Locate and use relevant on-line information

ICAU1213B Conduct online transactions

An individual demonstrating this competency would be able to:

Demonstrate knowledge by recall in a narrow range of areas

Demonstrate basic practical skills, such as the use of relevant tools

Perform a sequence of routine tasks given clear direction

Receive and pass on messages and information

Maintain knowledge of industry products and services

The range statement relates to the unit of competency as a whole. It allows for different work environments and situations that may affect performance. Bold italicised wording, if used in the performance criteria, is detailed below. Essential operating conditions that may be present with training and assessment (depending on the work situation, needs of the candidate, accessibility of the item, and local industry and regional contexts) may also be included.

Securityfeatures may include but are not limited to:

security levels

trusted sites

privacy

secure sockets layer (SSL)

encryption

Toolbar may contain:

buttons

menus

a combination of both

Bona-fide or registered business

Includes businesses providing goods or services in 'good faith' businesses with operations and organisational structures and governance arrangements that are authentic and genuine; Australian businesses that have Australian Company Numbers (ACN), Australian Business Numbers (ABN), or some other form of registered body and physical address details that can be verified.

Disclosure may include:

payment policies

warranties

additional charges

Securesite may include:

secure technologies such as SSL and secure version of HTTP (HTTPS)

Browser may include but is not limited to:

Netscape Navigator

Internet Explorer

Mozilla

Opera

Galleon

Phoenix

Konqueror

Lynx

Sensitive information may include but is not limited to:

credit card details

user names and passwords

email addresses

any other information that should not be made publicly available

Security process may include but is not limited to:

SSL

HTTPS

Unit sector

Test

This unit contains employability skills.