Unit of competency Outline

Date retreived
22/07/2026 8:48 AM AWST

Whilst all efforts are made to provide accurate and timely information from the relevant source/documentation, please be aware that the information supplied may not be the most current version. The accuracy of the detail has not been confirmed by the Department and therefore should not be relied upon without first confirming the contents.

Ensure basic website security

Ensure basic website security

Unit of competency
National Code
ICTWEB408
State Code
AUP88
TGA Status
Replaced
DTWD Status
Replaced
Current Release Number
1.00
Current Release Date
25/03/2015
View on TGA
State Implementation and Classification
Approved Date
16/09/2015
Field of Education
029901 - Security Science
Original Release Date
16/09/2015
Nominal Hours
20
Description
This unit describes the skills and knowledge required to provide basic website server, and protocol security appropriate to the level required by an organisation.It applies to individuals employed as web maintenance staff who are required to ensure that a website meets basic security requirements.No licensing, legislative or certification requirements apply to this unit at the time of publication.
Notes
Elements and Performance Criteria
1. Determine business security requirements
  • 1.1 Identify the level of security required based on the business, and the commercial intent of the website
  • 1.2 Identify whether password protection is needed for the site, or part of the site
  • 1.3 Decide on minimum or maximum password protection solutions, based on the business requirements
2. Ensure web server security
  • 2.1 Ensure that the web server password is obscure and non-traceable
  • 2.2 Install and maintain an effective intrusion detection system, according to business requirements
  • 2.3 Ensure that user accounts have only the required permissions on the server
  • 2.4 Ensure that interpreters’ programs, that run common gateway interfaces (CGIs), are not stored in the CGI-bin directory
  • 2.5 Ensure that web forms check data before passing it to the server
3. Ensure protocol security
  • 3.1 Protect the fixed internet connection, and the internet protocol (IP) address
  • 3.2 Protect shared network resources from intrusion, according to business requirements
  • 3.3 Ensure that personal computer (PC) protocols and preferences follow security protocols
  • 3.4 Disable control protocol, or internet protocol (TCP/IP), bindings for file and printer sharing
  • 3.5 Ensure that network basic input/output system (NetBIOS) over TCP/IP is disabled
No information
No information
Replaces
State Code National Code Title Type
D8131 ICAWEB408A Ensure basic website security Unit of competency
Replaced By
State Code National Code Title Type
OBS29 ICTWEB439 Confirm basic website security Unit of competency