VU21995 - Manage the security infrastructure for the organisation

Unit code: VU21995 | Study level: TAFE

Credit points

N/A

Location

Footscray Nicholson

St Albans

Sunshine

Prerequisites

N/A

Overview

The unit provides the basic knowledge and skills required to manage the implementation of the security infrastructure for an organisation. It includes assessing risk, implementing appropriate controls, monitoring their effectiveness, following organisation policy to store relevant data and compiled reports for future audit purposes. The practitioner will monitor and evaluate the physical security infrastructure of the organisation, and implement a regular security infrastructure maintenance program.

It is likely that the practitioner will need to obtain relevant security clearance to handle this data.

Assessment

For Melbourne campuses

Assessment tasks will be designed to reinforce and extend knowledge and skill competence within set and controlled parameters in accordance with each unit’s learning outcomes and performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines.

Students will be expected to demonstrate the following required skills:

communicate and contribute as a member of a team;
problem solve an organisation security system;
interpret and follow documented material and procedures;
use a laptop or a workstation;
install and demonstrate the application of software packages;
contribute to the evaluation of the organisation's security plan;
contribute to the planning and development of an organisation’s security policy;
perform risk assessment for cyber security for an organisation;
interpret risk assessment data from appropriate standards bodies (ISO 27001 or NIST);
implement cyber hygiene processes for an organisation;
document incident processes, and;
communicate incident report succinctly and effectively.

Students will also be expected to demonstrate the following knowledge:

methods of cyber security attacks;
methods and tools used to protect an organisation's data;
cyber security risk management plans and policies;
requirements of cyber hygiene processes;
best practices in cyber hygiene processes;
maintenance procedures;
malware scanners;
virus scanners, and;
diagnostic tools.

Required reading

The qualified trainer and assessor will provide teaching and learning materials as required in the form of workbooks produced by the Polytechnic and/or via the Polytechnic e-learning system.