BSBXCS302 - Identify and report online security threats

For Melbourne campuses

Assessment tasks will be designed to reinforce & extend knowledge and skill competence within set & controlled parameters in accordance with each units learning outcomes & performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines.

Students will be expected to demonstrate the following required skills:

• identify and report three different online security threats in a work area.

Students will also be expected to demonstrate the following knowledge:

• legislative requirements relating to identifying and reporting online security threats, including:

• data protection
• implications of Notifiable Data Breach legislation on an organisation and other associated Australian privacy laws
• established international legislation

• organisational policies and procedures relating to online information security breaches, including:

• blocking and reporting potential security breaches
• escalation routes for cyber security issues

• common types of online scams and security risks, including phishing scams
• common techniques of phishing and spear phishing used by attackers, including:

• spam email and SMS text
• social engineering, including telephone calls, social media and website requests for information

• basic principles of cyber security
• indicators of insecure connection to websites, in particular where data is being collected
• Australian government sources of information on current online security threats
• common online security threats to which individuals might be exposed to, including physical threats
• common procedures for:

• mitigating online security threats
• following organisational cyber security incident response plan
• responding to cyber security breaches.