BSBXCS303 - Securely manage personally identifiable information and workplace information

Unit code:BSBXCS303Study level:TAFE

Nominal hours

40

Location

Footscray Nicholson
Sunshine

Prerequisites

(Or equivalent to be determined by unit coordinator)
Co-requisites
(Corequisite units must be studied concurrently with this unit)

Overview

This unit describes the skills and knowledge required to securely manage personally identifiable information (PII) and workplace information.


It applies to those working in a broad range of industries and job roles under some supervision and guidance who manage large amounts of PII and workplace information.

Assessment

For Melbourne campuses

Assessment tasks will be designed to reinforce and extend knowledge and skill competence within set and controlled parameters in accordance with each unit’s learning outcomes and performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines.

Students will be expected to demonstrate the following required skills:
*use data protection techniques to manage workplace information for one work area over the life of a small project or work cycle.

Students will also be expected to demonstrate the following knowledge:
*data protection
*implications of Notifiable Data Breach legislation on an organisation and other associated Australian privacy laws
*established international legislation
*organisational policies and procedures relating to:
*identifying sensitive data
*securely storing, sharing and managing customer information
*encryption, and protocols for its uses
*data classification
*media and document labelling
*monitoring and reporting faults and malfunctions in IT infrastructure
*industry best practice and Australian government sources of information relating to access control, including:
*password protection
*storage locations
*securely sharing
*data deletion
*risks and benefits of cloud storage
*risks of communicating sensitive information via non-secure means e.g. email and SMS
*framework for distributed storage
*technologies, techniques and protocols for storing and retrieving data
*data protection protocols and industry-standard compliance standards relating to:
*back-up
*data sharing
*data storage
*disposal of sensitive information
*privacy impact assessments

Required reading

The qualified trainer and assessor will provide teaching and learning materials as required in the form of workbooks produced by Victoria University and/or via the Victoria University e-learning system.

As part of a course

This unit is studied as part of the following course(s):

Search for units, majors & minors