Application

This unit describes the skills and knowledge required to identify and use organisational cyber hygiene best practices to ensure that users of computers and other devices maintain system health and online security.
The unit applies to individuals working in a broad range of industries and job roles who engage with and use computers and other devices.
No licensing, legislative or certification requirements apply to this unit at the time of publication.

What You'll Learn

Assessment Requirements

Performance Evidence

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to:
• identify and use the following cyber hygiene best practices:
• implement at least three different low impact security measures
• identify and report at least two phishing emails.

Knowledge Evidence

The candidate must be able to demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including knowledge of:
• common cyber hygiene practices surrounding hardware, software, applications, and processes used in own role
• organisational policies and procedures relevant to identifying and using cyber hygiene best practices, including:
• reporting procedures regarding phishing emails
• password updates
• permissions and restricted access to servers
• common indicators of phishing emails, including:
• grammar and spelling errors
• inconsistencies in email addresses, links, and domain names
• suspicious attachments and uniform resource locators (URLs)
• requests for credentials, payments and personal details
• common cyber hygiene issues, including:
• loss of data
• misplaced data
• security breaches
• outdated software
• lack of risk management procedures
• organisational cyber hygiene best practices, including:
• complex and strong passwords and multifactor authentication
• updating system software
• backing up data
• limiting user permissions and access to applications, systems, and data
• installation and maintenance of malware detection software and signatures
• software evaluation and management processes
• firewalls and demilitarised zone (DMZ) networks
• vulnerability scans
• daily full backups
• weekly incremental backups
• techniques to evaluate and determine cyber hygiene practices.

Assessment Conditions

Skills in this unit must be demonstrated in a workplace or simulated environment where the conditions are typical of those in a working environment in this industry.
This includes access to:
• required hardware, software and their components
• system, network and application infrastructure
• internet connection that supports the requirements set out in the performance evidence
• organisational security policies and procedures.
Assessors of this unit must satisfy the requirements for assessors in applicable vocational education and training legislation, frameworks and/or standards.

Foundation Skills

• {'skill': 'Learning', 'description': 'Modifies behaviour following exposure to new information regarding cyber hygiene best practice; Develops basic understanding of trends in cyber security protection'}
• {'skill': 'Reading', 'description': 'Identifies and interprets information from relevant sources to determine practices for optimal cyber health'}
• {'skill': 'Writing', 'description': 'Uses clear and industry-specific terminology relating to cyber hygiene'}
• {'skill': 'Initiative and enterprise', 'description': 'Proactively incorporates cyber hygiene best practice into daily routine'}
• {'skill': 'Planning and organising', 'description': 'Manages own cyber hygiene plan that emphasises the importance of carrying out regular, low impact security measures, such as password change or multifactor authentication'}
• {'skill': 'Technology', 'description': 'Uses appropriate technology platforms to assist with cyber hygiene best practice'}

Related Units

• BSBPEF302 — Develop self-awareness
  Same training package
• BSBWHS513 — Lead WHS risk management
  Same training package
• BSBLDR411 — Demonstrate leadership in the workplace
  Same training package
• BSBMKG605 — Evaluate international marketing opportunities
  Same training package
• BSBMKG437 — Create and optimise digital media
  Same training package
• BSBESB405 — Manage compliance for small businesses
  Same training package