Unit of competency Outline

Date retreived
22/07/2026 5:00 PM AWST

Whilst all efforts are made to provide accurate and timely information from the relevant source/documentation, please be aware that the information supplied may not be the most current version. The accuracy of the detail has not been confirmed by the Department and therefore should not be relied upon without first confirming the contents.

Design and implement a security system

Design and implement a security system

Unit of competency
National Code
ICTNWK618
State Code
OBT42
TGA Status
Current
DTWD Status
Approved
Current Release Number
1.00
Current Release Date
21/07/2020
View on TGA
State Implementation and Classification
Approved Date
15/01/2021
Field of Education
029901 - Security Science
Original Release Date
15/01/2021
Nominal Hours
90
Description
This unit describes the skills and knowledge required to use software tools, equipment and protocols to implement a security system.It applies to individuals who work in ICT roles that involve the planning and implementing of networks, including budgeting, and determining and resolving network security threats.No licensing, legislative or certification requirements apply to this unit at the time of publication.
Notes
Elements and Performance Criteria
1. Assess network infrastructure threats
  • 1.1 Identify major industry standard network attacks and malware
  • 1.2 Evaluate mitigation methods for required network attacks and malware according to organisational network architecture
  • 1.3 Determine and document options for defending network architecture
2. Secure edge devices (routers)
  • 2.1 Secure required network routers according to technical requirements
  • 2.2 Secure required administration access to routers using the router operating system (OS)
  • 2.3 Secure required router OS and its configuration file(s)
3. Implement authentication, authorisation and accounting (AAA) and secure access control system (ACS)
  • 3.1 Determine and implement required authentication and authorisation
  • 3.2 Configure router and use AAA according to technical requirements
  • 3.3 Analyse and compare Terminal Access Controller Access-Control System Plus (TACACS+) and Remote Authentication Dial In User Service (RADIUS) AAA protocols for securing the network
4. Mitigate threats to routers and networks using access control lists (ACLs)
  • 4.1 Assess and document access control list functionality and requirements
  • 4.2 Configure and verify IP ACLs to mitigate threats and prevent internet protocol (IP) address spoofing
  • 4.3 Test IP ACLs functionality against organisational and technical requirements
5. Implement secure network management and reporting
  • 5.1 Configure secure shell (SSH) on routers and enable secure management
  • 5.2 Configure routers to send log messages to a log server with tools
  • 5.3 Document layer two attack prevention methods and confirm basic switch security features
  • 5.4 Configure layer two attack prevention switch
6. Implement intrusion detection and prevention system (IDPS) feature set in the router OS using secure device manager (SDM)
  • 6.1 Evaluate and compare network based and host based IDPS and identify malicious activity, log information, attempt to stop activity and document reported activity
  • 6.2 Determine IDPS technologies, attack responses and monitoring options
  • 6.3 Configure router OS IDPS operations according to organisational and technical requirements
  • 6.4 Finalise reports and documentation and submit to required personnel
No information
No information
Replaces
State Code National Code Title Type
AUV14 ICTNWK601 Design and implement a security system Unit of competency