Unit of competency Outline

Date retreived
22/07/2026 8:20 AM AWST

Whilst all efforts are made to provide accurate and timely information from the relevant source/documentation, please be aware that the information supplied may not be the most current version. The accuracy of the detail has not been confirmed by the Department and therefore should not be relied upon without first confirming the contents.

Confirm basic website security

Confirm basic website security

Unit of competency
National Code
ICTWEB439
State Code
OBS29
TGA Status
Current
DTWD Status
Approved
Current Release Number
1.00
Current Release Date
21/07/2020
View on TGA
State Implementation and Classification
Approved Date
15/01/2021
Field of Education
029901 - Security Science
Original Release Date
15/01/2021
Nominal Hours
20
Description
This unit describes the skills and knowledge required to provide basic website server and protocol security to level required by an organisation.The unit applies to individuals employed as web maintenance staff who are required to check that a website meets basic security requirements.No licensing, legislative or certification requirements apply to this unit at the time of publication.
Notes
Elements and Performance Criteria
1. Determine business security requirements
  • 1.1 Identify level of security required according to business and commercial intent of website
  • 1.2 Identify whether password protection is required for site, or part of site
  • 1.3 Decide on minimum and maximum password protection solutions according to business requirements
2. Confirm web server security
  • 2.1 Confirm web server password is obscure and non-traceable
  • 2.2 Install and maintain intrusion detection system, according to business requirements
  • 2.3 Check and confirm user accounts only have required permissions on server
  • 2.4 Confirm interpreters’ programs running common gateway interfaces (CGIs) are not stored in CGI-bin directory
  • 2.5 Check web form data before passing it to server
3. Confirm protocol security
  • 3.1 Protect fixed internet connection and internet protocol (IP) address
  • 3.2 Protect shared network resources from intrusion, according to business requirements
  • 3.3 Conform protocols and preferences on digital devices follow security protocols
  • 3.4 Disable control protocol and internet protocol (TCP/IP) bindings according to task requirements
  • 3.5 Check and confirm network basic input/output system (NetBIOS) over TCP/IP is disabled
  • 3.6 Confirm basic security level of website is met with required personnel
No information
No information
Replaces
State Code National Code Title Type
AUP88 ICTWEB408 Ensure basic website security Unit of competency