Module Outline
Date retreived
22/07/2026 2:21 PM AWST
22/07/2026 2:21 PM AWST
Whilst all efforts are made to provide accurate and timely information from the relevant source/documentation, please be aware that the information supplied may not be the most current version. The accuracy of the detail has not been confirmed by the Department and therefore should not be relied upon without first confirming the contents.
Assess and secure cloud services
Assess and secure cloud services
Module
National Code
VU23290
VU23290
State Code
AZ597
AZ597
DTWD Status
Approved
Approved
State Implementation and Classification
Approved Date
08/06/2023
Field of Education
029901 - Security Science
Nominal Hours
80
Description
This unit describes the performance outcomes, skills and knowledge required to apply the principles of operation for the cloud model and cloud services.
It requires the ability to categorise and select cloud services for an organisation as well as the ability to examine the security issues relating to cloud data and services.
The unit also includes current industry practices that support an organisation to secure its’ cloud based data and application services.
The unit applies to persons working as a cyber security practitioners and are responsible for the security of cloud based services in an organisation.
No licensing or certification requirements apply to this unit at the time of accreditation.
It requires the ability to categorise and select cloud services for an organisation as well as the ability to examine the security issues relating to cloud data and services.
The unit also includes current industry practices that support an organisation to secure its’ cloud based data and application services.
The unit applies to persons working as a cyber security practitioners and are responsible for the security of cloud based services in an organisation.
No licensing or certification requirements apply to this unit at the time of accreditation.
No information
No information
Elements and Performance Criteria
Categorise cloud service, security services and deployment models
- Cloud service models are identified
- Cloud deployment models are classified
- Cloud infrastructure is explained
- Risk assessment for cloud based data services is performed
- Cloud security services are reviewed
Develop a risk management plan for cloud based data storage and services
- Security risks and consequences in accordance with the Australian legislative requirements and relevant standards for cloud based data and services are identified
- Acceptable and unacceptable risks for cloud based data storage and services are identified
- For high priority risks of cloud based data storage and services appropriate controls are developed
- Existing controls to determine the impact on risk occurrence are monitored and modified if required
- Risk management plan for cloud based data storage and services for the organisation are documented
Implement legal and compliance issues of cloud data and services
- Australian legislative requirements and relevant standards relating to cloud based services for the organisation are identified and evaluated
- Insurance of cloud data and services are recommended to the appropriate organisational bodies
Evaluate, select and implement cloud based services for the organisation
- Cloud service providers for the organisation are evaluated and selected
- Cloud services to access the organisation’s data are selected and deployed
- Deployment of cloud micro-services and containers utilised by an organisation are explained
- Cloud security services are selected and deployed
- Cloud Identity and Access Management (IAM) services are evaluated
Cloud Identity and Access Management (IAM) services are evaluated
- Key personnel tasked to deal with user account management are identified
- Strategies to secure cloud services are developed for the organisation
- Back up strategies are developed for the organisation
- Disaster recovery (DR) strategies are developed for the organisation
- Strategies for cryptographic key management of cloud services are developed
- Shared security responsibility models for cloud services are identified
Monitor the effectiveness of strategies developed to protect cloud based data and services for the organisation
- Tools used to audit and monitor cloud based services and data are evaluated, selected and deployed
- Changes to the strategies and tools used to monitor the cloud services and data are presented to appropriate organisational bodies
Replaces
| State Code | National Code | Title | Type |
|---|---|---|---|
| AX648 | VU22242 | Assess and secure cloud services | Unit of competency |
Associated Qual/Courses
| State Code | National Code | Title | Type |
|---|---|---|---|
| BGT52 | 22610VIC | Advanced Diploma of Cyber Security | Accredited course |