ICTCLD509 — Manage cloud identity and access

1 Prepare to manage cloud identity and access

• 1.1Confirm work brief and tasks according to organisational policies and procedures
• 1.2Identify required protocols, platforms and networks in cloud-based infrastructure and confirm interoperability with organisational systems
• 1.3Review password and multi-factor authentication requirements
• 1.4Discuss limitations of existing cloud-based IAM configuration with required personnel
• 1.5Confirm new IAM entities that will be required to complete work brief
• 1.6Identify required protocols, platforms and networks in cloud-based infrastructure and confirm interoperability with organisational systems

2 Create and secure new IAM users

• 2.1Authenticate cloud-based IAM service used by organisation according to work brief
• 2.2Modify password policy and enforce password complexity and expiry according to work brief
• 2.2Define updated security policies and roles according to work brief
• 2.3Create user accounts and associate with required permissions following organisational naming conventions
• 2.4Securely share user access credentials with organisational staff
• 2.5Enforce multi-factor authentication according to work brief
• 2.6Confirm that required staff can access specified account and reset credentials according to organisational processes and procedures

3 Configure machine resource permissions

• 3.1Identify cloud-based machine resources requiring IAM permissions according to work brief
• 3.2Define and confirm required security policies meet organisational needs
• 3.3Check that machine resources have required permissions
• 3.4Apply permissions to identified machine resources according to work brief
• 3.5Confirm that machine can be accessed by other resources and services as per work brief
• 3.6Document changes according to organisational policies and procedures

4 Periodically review IAM configuration

• 4.1Track members, activities and permissions in centralised location
• 4.2Review activity and recommend permission changes
• 4.3Delete permissions and entities that are no longer required
• 4.4Document changes according to organisational policies and procedures

What does an assessment tool for ICTCLD509 need to cover?

To satisfy the Principles of Assessment and Rules of Evidence, an assessment for ICTCLD509 needs to address all 44 unit components: 4 elements with 23 performance criteria, 6 performance evidence requirements, 11 knowledge evidence requirements, and the foundation skills. A coverage matrix mapping each question and task to these components is what an auditor looks for.

How does Auditori generate an assessment tool for ICTCLD509?

Auditori pulls the current release of ICTCLD509 from training.gov.au and generates a complete package: candidate assessment, assessor guide with model answers and observation criteria, and a coverage matrix mapping every component. A suitably qualified person then reviews and approves the draft in a built-in workflow — consistent with ASQA's guidance on AI use in VET — before export as branded PDF and editable Word.

Is the first assessment tool really free?

Yes. Every new account includes one free credit — enough to generate the complete assessment tool for ICTCLD509 — with no card and no subscription required. After that it's pay-as-you-go per unit.

Can I check my existing ICTCLD509 assessment instead of generating a new one?

Yes — upload your existing assessment or learner guide and Auditori maps it against every element, performance criterion, PE and KE of ICTCLD509, showing exactly what's covered and what's missing. Mapping costs a quarter of a credit.