Frameworks includes Control Objectives for Information and Related Technologies (COBIT) but not limited to: Information Technology Infrastructure Library (ITIL) Prince 2 Voluntary codes and North American Electric Reliability Corporation (NERC) Critical best practices for the Infrastructure Protection (CIP) Reliability standard version 7 industry sector includes National Institute of Standards and Technology (NIST) Cyber but not limited to: security Framework for Critical Infrastructure ISO/IEC Information Technology Security techniques code – of practice ISO/IEC TR 27019:2013 Information Technology - Security techniques information security management NIST SP 800-82 to Industrial control Systems (ICS) Security Protective Security Policy Framework (PSPF) Information Security Manual (ISM) Produced by the Australian Signals Directorate (ASD) Prudential Practice Guide CPG 235 Managing Data Risk – Prudential Practice PPG 234 Management of security risk in – information and information technology Australian Securities and Investment Corporation (ASIC) Report 429 The Communication Alliance (iCodes). iCode C650:2014 voluntary code adopted by all Internet Service Providers (ISPs) in Australia) EVIDENCE GUIDE The evidence provides advice on assessment and must be read in conjunction with the Performance Criteria, Required Skills and Knowledge, the Range Statement and the Assessment section in Section B of the accreditation submission. Critical aspects for To be considered competent in this unit assessors must be satisfied the assessment and candidate can demonstrate the achievement of all of the elements of the evidence required to competency to the level defined by the associated performance criteria. assess competency in Specifically they must be able to: this unit Clarify the structure of the Australian legal system; Demonstrate organisational compliance through the use of standards, frameworks, codes and best practice; Identify mandatory and discretionary cyber laws and practices; Evaluate, select and implement relevant Australian regulation and practices pertaining to security of the organisation; Monitor the effectiveness of the organisation’s implementation regulation and practices; Context of and specific Evidence should show competency working in a realistic environment and a resources for variety of conditions. The candidate will have access to all tools, equipment, assessment materials and documentation required. The candidate will be permitted to refer to any relevant workplace procedures, product and manufacturing
Frameworks includes but not limited to: Control Objectives for Information and Related Technologies (COBIT) Information Technology Infrastructure Library (ITIL) Prince 2 Voluntary codes and best practices for the industry sector includes but not limited to: North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Reliability standard version 7 National Institute of Standards and Technology (NIST) Cyber security Framework for Critical Infrastructure ISO/IEC Information Technology – Security techniques code of practice ISO/IEC TR 27019:2013 Information Technology - Security techniques information security management NIST SP 800-82 to Industrial control Systems (ICS) Security Protective Security Policy Framework (PSPF) Information Security Manual (ISM) Produced by the Australian Signals Directorate (ASD) Prudential Practice Guide CPG 235 – Managing Data Risk Prudential Practice PPG 234 – Management of security risk in information and information technology Australian Securities and Investment Corporation (ASIC) Report 429 The Communication Alliance (iCodes). iCode C650:2014 voluntary code adopted by all Internet Service Providers (ISPs) in Australia) EVIDENCE GUIDE The evidence provides advice on assessment and must be read in conjunction with the Performance Criteria, Required Skills and Knowledge, the Range Statement and the Assessment section in Section B of the accreditation submission. Critical aspects for assessment and evidence required to assess competency in this unit To be considered competent in this unit assessors must be satisfied the candidate can demonstrate the achievement of all of the elements of the competency to the level defined by the associated performance criteria. Specifically they must be able to: Clarify the structure of the Australian legal system; Demonstrate organisational compliance through the use of standards, frameworks, codes and best practice; Identify mandatory and discretionary cyber laws and practices; Evaluate, select and implement relevant Australian regulation and practices pertaining to security of the organisation; Monitor the effectiveness of the organisation’s implementation regulation and practices; Context of and specific resources for assessment Evidence should show competency working in a realistic environment and a variety of conditions. The candidate will have access to all tools, equipment, materials and documentation required. The candidate will be permitted to refer to any relevant workplace procedures, product and manufacturing
currCyber%20Security%20Advanced%20Diploma22445VIC.docx