Application

This unit describes the skills and knowledge required to contribute to business operations and risk mitigation by developing employee cyber security risk profiles. This includes identifying the organisational risk landscape, assessing compliant employee characteristics, and documenting employee risk characteristics.
The unit applies to individuals with specialist skills who contribute to employee cyber security risk mitigation in an organisation.
No licensing, legislative or certification requirements apply to this unit at the time of publication.

What You'll Learn

Assessment Requirements

Performance Evidence

The candidate must demonstrate the ability to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including evidence of the ability to:
• develop a cyber security risk profile for at least three different employees
• update the cyber security risk profiles of at least three different employees based on newly identified organisational risks.

Knowledge Evidence

The candidate must be able to demonstrate knowledge to complete the tasks outlined in the elements, performance criteria and foundation skills of this unit, including knowledge of:
• human resource operations and recruitment strategies relevant to insider cyber security threats
• cost of employee risk profiling, including potentially breaching employee privacy
• benefits of employee risk profiling, including employee risk mitigation
• privileged access management systems
• organisational impacts of poor employee risk management and profiling
• legislative requirements relevant to employee risk mitigation
• organisational strategies that minimise employee risk, including:
• organisation-wide participation in insider threat awareness programs
• privileged access management systems
• surveillance systems
• organisational factors relevant to employee risk mitigation, including:
• policies and procedures
• codes of conduct
• organisational reputation and culture
• required communication methods, including:
• producing documents in organisational databases
• reports
• oral communication
• procedures for developing employee risk profiles
• key employee privacy legislation

Assessment Conditions

Skills in this unit must be demonstrated in a workplace or simulated environment where the conditions are typical of those in a working environment in this industry.
This includes access to:
• required hardware, software and their components
• system, network and application infrastructure
• internet connection that supports the requirements set out in the performance evidence
• organisational risk management procedures
• legislative requirements regarding organisational security.
Assessors of this unit must satisfy the requirements for assessors in applicable vocational education and training legislation, frameworks and/or standards.

Foundation Skills

• {'skill': 'Learning', 'description': 'Gathers and analyses information applicable to employees, risk, business and systems'}
• {'skill': 'Oral communication', 'description': 'Uses a range of questioning techniques and active listening to communicate effectively and clarify where necessary'}
• {'skill': 'Reading', 'description': 'Identifies and interprets information from relevant sources'}
• {'skill': 'Writing', 'description': 'Uses clear and industry-specific terminology relating to cyber security and employee risk profiles'}
• {'skill': 'Teamwork', 'description': 'Works collaboratively with colleagues and stakeholders to develop employee cyber security risk profiles'}
• {'skill': 'Technology', 'description': 'Uses appropriate technology platforms to assist with developing employee cyber security risk profiles'}

Related Units

• BSBINS501 — Implement information and knowledge management systems
  Same training package
• BSBWHS431 — Develop processes and procedures for controlling hazardous chemicals in the workplace
  Same training package
• BSBWHS310 — Contribute to WHS issue-resolution processes
  Same training package
• BSBWHS307 — Apply knowledge of WHS laws in the workplace
  Same training package
• BSBWHS418 — Assist with managing WHS compliance of contractors
  Same training package
• BSBINS307 — Retrieve information from records
  Same training package