Google Links

Follow the links below to find material targeted to the unit's elements, performance criteria, required skills and knowledge

Elements and Performance Criteria

1. Plan security design process
   • Define planning phase for network security design according to organisational requirements
   • Define building phase for network security design according to organisational requirements
   • Define managing phase for network security design according to organisational requirements
2. Identify threats to network security
   • Determine major threat themes to network security
   • Determine the potential origin of major threats according to network security design specifications
   • Identify industry standard common network vulnerability types
   • Design and document threat model according to network security design specifications
3. Analyse security risks
   • Identify organisational assets requiring protection
   • Categorise and document assets and determine their value according to organisational requirements
   • Determine and document risk management plan according to organisational requirements
4. Create a security design
   • Determine attacker scenarios and threats according to network security design specifications
   • Design and document network components security measures
   • Develop and document security policies
   • Submit document to required personnel and seek and respond to feedback
5. Design security incidents response
   • Design and document auditing and incidents response procedure
   • Submit to required personnel, seek and respond to feedback

Performance Evidence

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to:

evaluate security information and use it to plan control methods and countermeasures to manage prescribed network security requirements on at least one occasion.

In the course of the above, the candidate must:

document plans, policies and processes.

---

Knowledge Evidence

The candidate must be able to demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including knowledge of:

industry standard ICT networks and their configuration

network attacks, vulnerabilities and related weaknesses of installed infrastructure, including:

security technologies

emerging security issues

network security measures, including:

auditing and penetration testing techniques

logging analysis techniques

organisational network infrastructure

capabilities of software and hardware solutions

general features of emerging security policies, with depth in security procedures

network management and security process controls

network security implementation risk management plans and procedures, including:

network security planning

implementation

cost analysis and budgeting.

---