PSPSEC011 — Assess security risks

1 Establish security risk context

• 1.1Identify the scope and strategic and organisational contexts of the risk assessment.
• 1.2Identify and comply with legislation, policies, procedures and guidelines related to security risk management.
• 1.3Identify stakeholders and their expectations and obtain their input.
• 1.4Identify security risk criteria.
• 1.5Develop and obtain endorsement for a risk assessment plan according to organisational priorities.

2 Gather and analyse information

• 2.1Identify sources and gather information.
• 2.2Review relevant internal and historical information.
• 2.3Aggregate and contextualise new information from internal and external sources.
• 2.4Identify and address information gaps.

3 Identify security risks

• 3.1Determine sources of threat to the organisation’s resources and functions.
• 3.2Conduct threat assessment against organisational policies, procedures and guidelines and determine risk exposure.
• 3.3Use risk assessment techniques which suit the type and level of risk.
• 3.4Determine and document risk potential.

4 Analyse security risks

• 4.1Analyse potential consequences of risks or threats in light of potential damage to agency, including critical lead time for recovery.
• 4.2Assess intent, capability and opportunity for each risk or threat to occur, using all available information.
• 4.3Analyse current security countermeasures and treatment options to determine areas of vulnerability.
• 4.4Determine and document risk ratings in agreed format.

5 Assess and prioritise security risks

• 5.1Consult stakeholders regarding acceptable and unacceptable risk levels.
• 5.2Document acceptable and unacceptable levels of risk.
• 5.3Compare identified risks with security risk criteria to determine whether they are acceptable or unacceptable.
• 5.4Prioritise and document identified risks in accordance with security criteria.
• 5.5Document determined residual risks.

What does an assessment tool for PSPSEC011 need to cover?

To satisfy the Principles of Assessment and Rules of Evidence, an assessment for PSPSEC011 needs to address all 51 unit components: 5 elements with 22 performance criteria, 10 performance evidence requirements, 19 knowledge evidence requirements, and the foundation skills. A coverage matrix mapping each question and task to these components is what an auditor looks for.

How does Auditori generate an assessment tool for PSPSEC011?

Auditori pulls the current release of PSPSEC011 from training.gov.au and generates a complete package: candidate assessment, assessor guide with model answers and observation criteria, and a coverage matrix mapping every component. A suitably qualified person then reviews and approves the draft in a built-in workflow — consistent with ASQA's guidance on AI use in VET — before export as branded PDF and editable Word.

Is the first assessment tool really free?

Yes. Every new account includes one free credit — enough to generate the complete assessment tool for PSPSEC011 — with no card and no subscription required. After that it's pay-as-you-go per unit.

Can I check my existing PSPSEC011 assessment instead of generating a new one?

Yes — upload your existing assessment or learner guide and Auditori maps it against every element, performance criterion, PE and KE of PSPSEC011, showing exactly what's covered and what's missing. Mapping costs a quarter of a credit.