ELEMENT PERFORMANCE CRITERIA Elements describe the essential Performance criteria describe the required performance needed to demonstrate outcomes of a unit of competency. achievement of the element they identify the standard for the element. – bold/italicised text is used, further information or explanation is detailed in the required skills and knowledge and/or the range statement. Assessment of performance is to be consistent with the evidence guide. 1. Collate security 1.1 Relationship between critical infrastructure and Industrial frameworks, cyber Control Systems (ICS) is defined security risk mitigation 1.2 Key standards bodies and organisations that provide useful strategies and other resources that address security issues in critical infrastructure or supportive documents ICS are identified for the organisation 1.3 Current working frameworks or practices that can support the improvement of critical infrastructure from cyber security attack are identified 2. Evaluate current critical 2.1 Current critical infrastructure is identified and classified infrastructure and 2.2 Current vulnerabilities for critical infrastructure are identified associated vulnerabilities 2.3 Current ICS deployment architectures are reviewed and evaluated 2.4 Risk assessment for critical infrastructure for the organisation is performed 2.5 Case study of the STUXnet virus is performed 3. Classify current cyber 3.1 Classification of current cyber security vulnerabilities for ICS’s are security vulnerabilities identified for critical infrastructure 3.2 Risk assessment of current ICS vulnerabilities is conducted Select relevant cyber 4.1 Resources that provide strategies to protect critical infrastructure security frameworks and are sourced security critical 4.2 Current organisational security policies to protect critical infrastructure mitigation infrastructure are identified strategies 4.3 In consultation with key personnel current critical infrastructure protection policies are evaluated 4.4 Appropriate strategies to enhance the protection of the critical infrastructure are adopt 4.5 Training for staff to alter current working practices or adopt new practices to improve the security culture is planned and implemented Monitor the 5.1 In consultation with key personnel, implemented changes to effectiveness of the processes and procedures are measured for effectiveness implementation of the against selected criteria
ELEMENT Elements describe the essential outcomes of a unit of competency. PERFORMANCE CRITERIA Performance criteria describe the required performance needed to demonstrate achievement of the element – they identify the standard for the element. bold/italicised text is used, further information or explanation is detailed in the required skills and knowledge and/or the range statement. Assessment of performance is to be consistent with the evidence guide. 1. Collate security frameworks, cyber security risk mitigation strategies and other supportive documents for the organisation 1.1 Relationship between critical infrastructure and Industrial Control Systems (ICS) is defined 1.2 Key standards bodies and organisations that provide useful resources that address security issues in critical infrastructure or ICS are identified 1.3 Current working frameworks or practices that can support the improvement of critical infrastructure from cyber security attack are identified 2. Evaluate current critical infrastructure and associated vulnerabilities 2.1 Current critical infrastructure is identified and classified 2.2 Current vulnerabilities for critical infrastructure are identified 2.3 Current ICS deployment architectures are reviewed and evaluated 2.4 Risk assessment for critical infrastructure for the organisation is performed 2.5 Case study of the STUXnet virus is performed 3. Classify current cyber security vulnerabilities for critical infrastructure 3.1 Classification of current cyber security vulnerabilities for ICS’s are identified 3.2 Risk assessment of current ICS vulnerabilities is conducted Select relevant cyber security frameworks and security critical infrastructure mitigation strategies 4.1 Resources that provide strategies to protect critical infrastructure are sourced 4.2 Current organisational security policies to protect critical infrastructure are identified 4.3 In consultation with key personnel current critical infrastructure protection policies are evaluated 4.4 Appropriate strategies to enhance the protection of the critical infrastructure are adopt 4.5 Training for staff to alter current working practices or adopt new practices to improve the security culture is planned and implemented Monitor the effectiveness of the implementation of the 5.1 In consultation with key personnel, implemented changes to processes and procedures are measured for effectiveness against selected criteria
currCyber%20Security%20Advanced%20Diploma22445VIC.docx