Google Links

Follow the links below to find material targeted to the unit's elements, performance criteria, required skills and knowledge

Elements and Performance Criteria

1. Prepare to run vulnerability assessment
   • Obtain work details and scope from required personnel and arrange for site access in compliance with required security arrangements, legislation, codes, regulations and standards
   • Discuss and evaluate scanning tools and select according to vulnerability assessment requirements
   • Establish testing regime and schedule, and documentation requirements according to organisational needs
2. Run vulnerability assessment and penetration test
   • Perform vulnerability assessment according to organisational procedures
   • Identify and document vulnerabilities arising from vulnerability assessment according to organisational procedures
   • Run a simple penetration test according to organisational procedures
   • Identify and document potential threats arising from penetration test according to organisational procedures
   • Contribute and develop ideas in addressing vulnerabilities
3. Finalise vulnerability assessment process
   • Discuss vulnerabilities identified in vulnerability assessment and penetration testing with required personnel
   • Contribute ideas with required personnel and remediate vulnerabilities identified according to organisational procedures
   • Escalate unresolved vulnerabilities to required personnel
   • Document identified vulnerabilities and work performed according to organisational procedures
   • Report to management and confirm vulnerability assessment with required personnel

Performance Evidence

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to:

perform at least one vulnerability test assessment

define and run at least one basic penetration test.

In the course of the above, the candidate must:

assess web based, network based and hardware-based vulnerabilities

adhere to organisational procedures

document and report activities.

---

Knowledge Evidence

The candidate must be able to demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including knowledge of:

security risks and vulnerabilities in software systems

tools used in testing a network for vulnerabilities including scanning tools

basic level penetration testing of a system

methods and tools used to protect data in an organisation

risk mitigation strategies that may be used running vulnerability assessments for an organisation

organisational procedures applicable to running vulnerability assessments, including:

establishing goals and objectives of vulnerability assessments

defining scope of testing and establishment of testing regime

documenting established requirements

establishing penetration testing procedures

documenting findings, threats and work performed

key organisational environments, systems and networks required to run vulnerability assessments.

---