VU23223 - Apply cyber security legislation, privacy and ethical practices
Nominal hours
Location
Online
St Albans
Sunshine
Prerequisites
Co-requisites
(Corequisite units must be studied concurrently with this unit)
Overview
This unit describes the performance outcomes, skills and knowledge required to identify the current Australian cyber security legislation and to be cognisance of the interdependence between the key regulators. It requires the ability to apply the current cyber security privacy policies and procedures for an organisation The unit also includes the ethical practices required for employees to conduct themselves professionally both privately and when working for an organisation. The unit is applies to individuals working as cyber security technicians and supports their ability to work ethically and apply professional standards in their place of work.
Assessment
For Melbourne campuses
Assessment tasks will be designed to reinforce & extend knowledge and skill competence within set & controlled parameters in accordance with each units learning outcomes & performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines.
Students will be expected to demonstrate the following required skills:
Identify relevant cyber security
• identify relevant cyber security legislation and regulations to meet two (2) organisations requirements. The two organisations must each be in a different industry sector
• assess and prepare a written report on each organisations level of compliance or non-compliance with relevant privacy policies and procedures
• identify a minimum of four (4) examples of unethical behaviour by ICT/cyber security technicians within an organisation or privately and explain the potential impact of each example.
Students will also be expected to demonstrate the following knowledge:
• Commonwealth Legislation. Examples are:
o Telecommunications (Interception & Access) Act 1979
o Criminal Code 1995
o Corporations Act 2001 (Cth) on their IT management systems (Australian Securities and Investments Commission (ASIC) Regulatory Guide 104: Licensing: Meeting the general obligations)
o Privacy Act 1988
• Australian Regulators. Examples are:
o Australian Prudential Regulation Authority (APRA) - CPS 234 (Prudential regulator)
o Australian Securities and Investments Commission (ASIC) (Corporate Regulator)
o Australian Competition and Consumer Commission (ACCC) (Consumer & consumer data rights)
o Australian Energy Sector Cyber Security Framework (AESCSF) (Energy regulator)
o Protective Service Manual (Australian Government rules for cybersecurity)
• International Law and conventions. Examples are:
o Budapest convention (Convention on Cyber Crime)
o Australian Criminal Code Act 1995)
o Payment Card Industry Data Security Standard (PCI DSS) (payment cards)
• Global Standards. Examples are:
o ISO/IEC 27001 information security management systems
o AS 27701: 2022 Security techniques – Extension to ISO/IEC 27001
• Organisation privacy policy
• Ethics of red and blue team skills – (consequences of using these skills in a live network)
• Unauthorised access to devices. Examples are:
o Jail Breaking devices and the consequences
o Hacking firmware and the consequences
• File sharing services used to download. Examples are:
o Torrents
o UseNet - Non Zero Binary (NZB)
o violating copyright of movies, games, PDF’s, e-books, audio books
• Cyber security ethical codes of practise
Required reading
The qualified trainer and assessor will provide teaching and learning materials as required in the form of workbooks produced by Victoria University and/or via the Victoria University e-learning system.
As part of a course
This unit is studied as part of the following course(s):