Diploma of Security and Risk Management: Performance & Knowledge

This document presents a comprehensive solution for a security and risk management assignment, specifically addressing the requirements of a Diploma of Security and Risk Management course. The solution is structured around the core units CPPSEC5001A, CPPSEC5002A, and CPPSEC5003A. CPPSEC5001A focuses on establishing and maintaining an occupational health and safety (OHS) system, covering elements such as developing OHS systems, defining roles and responsibilities, managing resources, implementing training programs, maintaining records, communicating procedures, and evaluating system effectiveness. CPPSEC5002A addresses coordinating security operations, including confirming operational requirements, implementing operations, monitoring performance, and reviewing and reporting outcomes. CPPSEC5003A delves into assessing security risk management options, encompassing determining security risks, identifying and assessing treatment options, and evaluating system effectiveness. The assignment includes student experiences and evidence references for each element, demonstrating practical application of the concepts. The solution also references relevant legislative requirements and standards to ensure compliance. The document also analyzes the security risk assessment options, including the determination of security risks based on the client's environment and business operations, ranking risks, and identifying treatment options. The student provides examples and evidence for each element, demonstrating an understanding of the core concepts.

Recognition of Prior Learning – Performance& Knowledge Evidence Documentation
Course: Diploma of Security and Risk Management
Core Unit 1: CPPSEC5001A Establish and maintain an occupational health and safety system
Element Performance Criteria Student Experience Evidence Reference
Establish an OHS system 1.1 OHS system is developed which clearly states
commitment to OHS and compliance with legislative
requirements .
1.2 OHS roles and responsibilities for all employees are
defined.
1.3 Financial and human resources for the effective
operation of the OHS system are established and
implemented.
1.4 OHS induction and training program is developed and
made available to all employees.
1.5 System for OHS record keeping is established and
maintained to allow identification of hazard , risk and
injury patterns.
Management systems that can
help organisations and
continually improve their
work health and safety
performance and compliance
in regard health and safety
legislation and standards.
Responsibility to take cares
of own health and safety
along with one who are
getting effected by acts.
The human resource
department have well-
established all the resources
to provide the maximum
optimistic of the heath series.
Yes the induction and
training have been given to
employees in order to have
increase the level of stability
Hazard Identification
Assessment and
Control Procedure
Employee Standing
Instructions – 2017

1.6 OHS information and procedures are communicated
and explained to all employees in an accessible format in
accordance with legislative requirements.
in company.
Yes the pattern are
maintained to establish the
clear understanding in
realistic to element which are
hazardous to company.
The company have
establishment the accurate
level of procedure to have
explanation to employee in
easy way to increase the
accessibility of development
in company.
Hazard Identification
Assessment and Control
Procedure
Employee Standing
Instructions – 2017
Yes a the time of inductance I
have experienced the
development OHS activities
in company.
We were secretary states
about obligation and rights
which are parts of the code of
conduct.
Proper level of training in
given aging the hazardous
activities taken place in
workplace.
Yes I have experienced the

maintained of accoutres
records which can have
recording of pattern which is
tasking place.
The code of conducts is
brief being explained to all
employee in which have
experiences the reference of
OHS information and
procedure.
Establish participative
arrangements for OHS 2.1 Consultative processes are established and maintained
to ensure maximum OHS vigilance and compliance of all
employees.
2.2 OHS issues raised through participation and
consultation are acknowledged and resolved promptly.
2.3 Feedback from OHS consultation and any changes to
procedures are recorded and communicated promptly to
all employees
Yes it has been established
for sharing information about
health and safety.
Yes more level of issues
have raised due t
appreciativeness which have
been resolved promptly by
looking towards proper level
of guidelines.
Participation in consultation p
rovides with opportunity to
constructively in health and
safety issues & contribute
ideas for improvement along
work team in implementing
good workplace safety
practices
Yes the have
experienced it
development as
consultation process.
I have raised the
issues revealing
health and safety
benefited which
promptly being
solved to proper ode
of conduct
No I have not
experiences in more
personal way but I
have analysed that
proper performances
on feedbacks are
taken.
Establish procedures for
managing hazards and
risks
3.1 Procedures for identifying hazards and managing
risks are developed in accordance with legislative
Yes, there is proper level of
development as per
legislature to have actually
I have analysed that
there is degree
identifying hazard by

requirements.
3.2 Hazard identification is addressed at the planning,
design and evaluation stages of any change in workplace to
ensure new hazards are not created.
3.3 Procedures for selection and implementation of risk
control measures in accordance with the hierarchy of
control are developed and maintained.
3.4 Inadequacies in procedures for hazard identification
and risk control are identified and new measures promptly
established.
well-developed to have the
proper way of understanding
the elements which are
necessary (Fertat and
Cherkaoui, 2018).
No, there is no existence of
en surety that new hazard will
not take place but it reduced
the risk of happening.
No, the company have the
proper and equals
maintenance of risk control
measure, the employees are
treated equally by employer.
There is level of promptness
which have been satisfied in
level of infrequency along
with responsibility in
procedures for hazard
identification and risk
control.
HR ones along with
development of
legislative
requirement which
helps the company to
make adequate level
of producer
development.
There is proper
evaluation of pre and
post hazards along
with proper level of
hazard identification
and addressing by
planning, design and
evaluation stages
At time of training
and developments
the control measure.
Evaluate system
effectiveness 4.1 Evaluation of the OHS system is undertaken
using verifiable evidence .
4.2 Improvements to the OHS system are developed and
implemented to achieve organisational OHS objectives.
4.3 Compliance with the OHS legislative framework is
continually assessed to ensure that legal obligations are
met.
Survey your employees at the
end of training Can be Test
the knowledge of your
workers before and after the
safety training. Along with
measure performance
improvement through
analysis of your accident
records.
Yes there is remembered of
improvisation which helps in
I have evidence over
the verifiable
divergence that is the
code of conduct
which is making over
all development as
per employees have
the development of
code of conduct in
effective way.
I have experienced

4.4 All OHS documentation is maintained in accordance
with legislative requirements
the getting to aim and
objective of health care along
with implementation of plans
an achievement of goal and
objective.
There is proper level of
measurement d the OHS
documentation I regard to
have formulation of
legislative requirements to
have bungies the effective
level of procedure in
development of market at
effective level (Almost and
et.al., 2018).
the changes in OHS
guideline in order to
have achieved of aim
and objectiveness.
As a employee I
have analysed that
there comparative
level of OHS is
developed to have
greater level of
adjustment in
meeting up
obligation as per the
legislative
requirement.
References
Fertat, L. and Cherkaoui, A., 2018. Occupational health maturity by combined AHP and fuzzy comprehensive evaluation methods. In 30th IBIMA conference.
Almost, J.M. and et.al., 2018. A study of leading indicators for occupational health and safety management systems in healthcare. BMC health services
research.18(1).p.296.
Core Unit 2: CPPSEC5002A Coordinate security operations
Element Performance Criteria Student Experience Evidence
Reference
Confirm operational
requirements 1.1 Operational objectives are reviewed and confirmed as
complying with client, organizational and legislative
requirements.
Work health and Safety act
2011 provides employees to
work in safe and secure
condition.
Internet Security
Glossary

1.2 Performance targets, security resource availability and
operational constraints are assessed against operational
plan.
1.3 Security resources are acquired and allocated in
accordance with operational plan.
1.4 Communication skills are used to conduct team
briefing to ensure information exchange and confirm roles,
responsibilities and operational objectives.
Security resource tool such as
Wireshark, meta sploit can be
used in the work place in
order to protect employee’s
data
It is important for proper
allocation of security resource
so that no personal
information can be leaked.
Written and verbal
communication were used to
do team briefing in order to
make roles and
responsibilities clear of
employees
I have analysed that health
insurance was provided to
workers.
I have analysed that various
information management
practices were used in
workplace.
I have analysed that adequate
allocation of resources
increases operational

efficiency.
I have communicated using
email, fax and draft.
Implement security
operations 2.1 Security operation is implemented in accordance with
operational plan within designated timeframes and budget.
2.2 Operation is monitored to ensure quality and
compliance with Occupational Health and Safety (OHS)
and legislative requirements.
2.3 Deviations from operational plan are identified and
remedial action implemented consistent with organisational
procedures and budgetary constraints.
2.4 Communication systems and equipment are used to
ensure an accurate and ongoing exchange of information.
Operations needs to be
implemented by keeping in
mind budgetary aspects of
company so that financial
cost can be reduced.
Keen monitoring and
complying is necessary in
order to ensure quality of
security operations.
Gaps are needed to be
analysed so that organization
can work upon it and
overcome them. Action plan
can also be made.
Various communication
equipment’s such as
Bluetooth, smart phone was
being used.
I have analysed
that security
operations were
fulfilled in given
time frame.
Workers are
provided with safe
and secure
working
conditions.
I have analysed
that if resources
are not properly
allocated
budgetary aspects
can get delayed.
I have analysed
that technology
has made
communication
better.
Review and report
security operations . 3.1 Security operations are reviewed and outcomes
documented to inform future operations.
3.2 Reports addresses extent to which operational
Security options needs to be
reviewed for future
organizational success
(Rantanen and et.al., 2017).
I Have analysed
that it has made
work efficient and
better.
I have experiences

objectives were achieved and provides recommendations
on changes to future operations.
3.3 Report is finalized in an appropriate format in
accordance with organizational procedures and legislative
requirements.
3.4 All records are maintained in accordance with
legislative requirements with due regard to client
confidentiality.
Action plan was made to
analyse the extent to which
objectives were being
achieved.
Report format must be precis
so that it is easy for the
workers to understand it. It
must contain various policies
which needs to be addressed
by individuals.
No information related to
clients personal detail must
be out.
that through action
plan gaps were
being fulfilled.
I have analysed
that no proper
format of report
can make it
ineffective.
I realised that
information is
being hacked can
reduce clients trust
(Evangelinos and
et.al., 2018).
References
Rantanen, J. and et.al., 2017. A global survey on occupational health services in selected international commission on occupational health (ICOH) member
countries. BMC Public Health. 17(1).p.787.
Evangelinos, K. and et.al., 2018. Occupational health and safety disclosures in sustainability reports: An overview of trends among corporate
leaders. Corporate Social Responsibility and Environmental Management, 25(5), pp.961-970.

Core Unit 3: CPPSEC5003A Assess security risk management options
Element Performance Criteria Student Experience Evidence
Reference
Determine security risk
1.1 Applicable provisions
of legislative and organisational requirements ,
and relevant standards for assessment activities are
identified and complied with.
1.2 Type and nature of security risks are determined based
on an accurate and current assessment of the
client's operating environment and core business
operations.
1.3 Security risks are ranked in terms of degree of risk and
linked to potentially suitable treatment options .
1.4 Degree of risk is determined by an assessment of
current and valid data.
The General Statement of
Intent, the Organisation
section, and the
Arrangements section. The
General Statement of Intent
outlines the importance that
the organisation places on
health and safety and the
commitment that can be
expected.
Security risk that can be
arrived in organization
includes hacking of personal
data.
Security risk such as hacking
of personal data is really
high, also risk of theft is
nominal.
Current and valid data are
being observed and revised
from time to time.
I have analysed that
organization who are engaged
in following health and safety
Management
system glossary

standards creates employee
loyalty.
I have applied various
technological knowledge in
order to secure clients data.
Various tools has been used
to secure data.
This has helped in increasing
reliability of data collected.
Identify and assess
treatment options . 2.1 Treatment options are identified and confirmed to be
commensurate with the identified type, nature and
cause of security risk.
2.2 Treatment options applied in a similar context are
researched and assessed for effectiveness against
documented and verifiable evidence .
2.3 Criteria for assessment of risks against treatment
options are consistent with recognised industry practice and
relevant standards.
2.4 Treatment options appropriate to the full range of
potential security risks are selected and prioritized
according to established criteria.
Management systems that can
help organisations and
continually improve their
work health and safety
performance and compliance
in regard health and safety
legislation and standards.
Backup of important data can
be taken by organization.
They are kept consistent with
recognised risk and industry
practice.
Treatment options that are
available for security risk
I have analysed
that human errors
and natural threats
can be a cause of
security risk.
I have analysed
that verifiable
evidence was
collected to make
data look reliable.
Criteria are being
met by
organization
I have experienced
that treatment
options available
for solving
problem related to
security risk have

includes by implementing
technological solutions for
the risk
solved the issues.
Review and present
findings 3.1 A report outlining assessment findings and
recommended treatment options is prepared
and presented to relevant persons.
3.2 Analysis and recommendations are clear, coherent and
consistent with terms of reference and supported by
verifiable evidence.
3.3 Advice outlining possible consequences of not
implementing recommended treatment options is included
in the analysis.
3.4 Effective interpersonal techniques and presentation
procedures are used to enhance understanding and
acceptance of recommended treatment options.
Report must outline the main
points which needs to be kept
in the mind of client. This
will assist them in effectively
implementing security
solutions.
Terms of reference define the
purpose and structures of a
project, committee, meeting,
negotiation, or any similar
collection of people who have
agreed to work together to
accomplish a shared goal
(Trouw, Rangel and Cable,
2018).
If treatment option is not
being availed, then
organization efficiency can be
reduced.
The various inter personal
techniques include effective
communication.
I experience that
report having
appropriate
guideline can help
organization in
increasing security
aspects.
It helps in
achieving goals
and objectives.
I have analysed
that it can increase
threat for firm.
I have
communicated
effectively in order
to solve problem
(Mobjörk and
et.al., 2016).
References
Trouw, A., Rangel, A. and Cable, J., 2018. XYO Network: Security Risks and Mitigations.
Mobjörk, M. and et.al., 2016. Climate-related security risks: Towards an integrated approach. SIPRI.

Core Unit 4: BSBCUS501A Manage quality customer service
Element Performance Criteria Student Experience Evidence
Reference
Plan to meet internal and
external customer
requirements
1.1. Investigate, identify, assess, and include the needs
of customers in planning processes
1.2. Ensure plans achieve the quality , time and cost
specifications agreed with customers
Company needs to ensure that
they are engaged in doing
marketing research so needs
and demands of individuals
can be evaluate. They must
also be engaged in doing
consumer feedback. By
getting feedback company
can also improve their
existing services which will
help them in gaining
competitive advantage.
I have analysed that doing
market research can assist
organization in knowing
about the issues which are
being faced by customers
during planning process.
Employee
instruction report
Ensure delivery of quality
products and/or services 2.1. Deliver products and/or services to customer
specifications within organisation's business plan
2.2. Manage team performance to consistently meet the
organisation's quality and delivery standards
2.3. Assist colleagues to overcome difficulty in meeting
customer service standards using leadership, supervision,
coaching and mentoring
Delivering products and
service according to needs
and demands of consumers
will assist them in increasing
consumer loyalty. This will
also assist firm in gaining
competitive advantage. It will
help them in reaching out
large range of consumers.
Enhancing performance of
team is really essential so that
I have experienced
that meeting out
the needs and
demands of
consumers has
increased liking of
the products and
services which are
being sold by
organization. It has
also help them in