BSBXCS303 - Securely manage personally identifiable information and workplace information

Assessment tasks will be designed to reinforce and extend knowledge and skill competence within set and controlled parameters in accordance with each unit's learning outcomes and performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines. Students will be expected to demonstrate the following required skills: *use data protection techniques to manage workplace information for one work area over the life of a small project or work cycle. Students will also be expected to demonstrate the following knowledge: *data protection *implications of Notifiable Data Breach legislation on an organisation and other associated Australian privacy laws *established international legislation *organisational policies and procedures relating to: *identifying sensitive data *securely storing, sharing and managing customer information *encryption, and protocols for its uses *data classification *media and document labelling *monitoring and reporting faults and malfunctions in IT infrastructure *industry best practice and Australian government sources of information relating to access control, including: *password protection *storage locations *securely sharing *data deletion *risks and benefits of cloud storage *risks of communicating sensitive information via non-secure means e.g. email and SMS *framework for distributed storage *technologies, techniques and protocols for storing and retrieving data *data protection protocols and industry-standard compliance standards relating to: *back-up *data sharing *data storage *disposal of sensitive information *privacy impact assessments