List the assessment methods to be used and the context and resources required for assessment. Copy and paste the relevant sections from the evidence guide below and then re-write these in plain English.

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to:

perform at least one vulnerability test assessment

define and run at least one basic penetration test.

In the course of the above, the candidate must:

assess web based, network based and hardware-based vulnerabilities

adhere to organisational procedures

document and report activities.

The candidate must be able to demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including knowledge of:

security risks and vulnerabilities in software systems

tools used in testing a network for vulnerabilities including scanning tools

basic level penetration testing of a system

methods and tools used to protect data in an organisation

risk mitigation strategies that may be used running vulnerability assessments for an organisation

organisational procedures applicable to running vulnerability assessments, including:

establishing goals and objectives of vulnerability assessments

defining scope of testing and establishment of testing regime

documenting established requirements

establishing penetration testing procedures

documenting findings, threats and work performed

key organisational environments, systems and networks required to run vulnerability assessments.

List each assessment task's title, type (eg project, observation/demonstration, essay, assignment, checklist) and due date here

Assessment task 1: [title]      Due date:

(add new lines for each of the assessment tasks)

Copy and paste from the following data to produce each assessment task. Write these in plain English and spell out how, when and where the task is to be carried out, under what conditions, and what resources are needed. Include guidelines about how well the candidate has to perform a task for it to be judged satisfactory.

Copy and paste from the following performance criteria to create an observation checklist for each task. When you have finished writing your assessment tool every one of these must have been addressed, preferably several times in a variety of contexts. To ensure this occurs download the assessment matrix for the unit; enter each assessment task as a column header and place check marks against each performance criteria that task addresses.

Observation Checklist

Tasks to be observed according to workplace/college/TAFE policy and procedures, relevant legislation and Codes of Practice	Yes	No	Comments/feedback
Obtain work details and scope from required personnel and arrange for site access in compliance with required security arrangements, legislation, codes, regulations and standards
Discuss and evaluate scanning tools and select according to vulnerability assessment requirements
Establish testing regime and schedule, and documentation requirements according to organisational needs
Perform vulnerability assessment according to organisational procedures
Identify and document vulnerabilities arising from vulnerability assessment according to organisational procedures
Run a simple penetration test according to organisational procedures
Identify and document potential threats arising from penetration test according to organisational procedures
Contribute and develop ideas in addressing vulnerabilities
Discuss vulnerabilities identified in vulnerability assessment and penetration testing with required personnel
Contribute ideas with required personnel and remediate vulnerabilities identified according to organisational procedures
Escalate unresolved vulnerabilities to required personnel
Document identified vulnerabilities and work performed according to organisational procedures
Report to management and confirm vulnerability assessment with required personnel

Assessment Cover Sheet

ICTCYS404 - Run vulnerability assessments for an organisation

Assessment task 1: [title]

Student name:

Student ID:

I declare that the assessment tasks submitted for this unit are my own work.

Student signature:

Result: Competent Not yet competent

Feedback to student

 

 

 

 

 

 

 

 

Assessor name:

Signature:

Date:

Assessment Record Sheet

ICTCYS404 - Run vulnerability assessments for an organisation

Student name:

Student ID:

Assessment task 1: [title] Result: Competent Not yet competent

(add lines for each task)

Feedback to student:

 

 

 

 

 

 

 

 

Overall assessment result: Competent Not yet competent

Assessor name:

Signature:

Date:

Student signature:

Date: