SAQA All qualifications and part qualifications registered on the National Qualifications Framework are public property. Thus the only payment that can be made for them is for service and reproduction. It is illegal to sell this material for profit. If the material is reproduced or quoted, the South African Qualifications Authority (SAQA) should be acknowledged as the source.
SOUTH AFRICAN QUALIFICATIONS AUTHORITY 
REGISTERED UNIT STANDARD THAT HAS PASSED THE END DATE: 

Identify and explain ICT risks and recommend security solutions 
SAQA US ID UNIT STANDARD TITLE
117926  Identify and explain ICT risks and recommend security solutions 
ORIGINATOR
SGB Computer Sciences and Information Systems 
PRIMARY OR DELEGATED QUALITY ASSURANCE FUNCTIONARY
-  
FIELD SUBFIELD
Field 10 - Physical, Mathematical, Computer and Life Sciences Information Technology and Computer Sciences 
ABET BAND UNIT STANDARD TYPE PRE-2009 NQF LEVEL NQF LEVEL CREDITS
Undefined  Regular  Level 5  Level TBA: Pre-2009 was L5  5 
REGISTRATION STATUS REGISTRATION START DATE REGISTRATION END DATE SAQA DECISION NUMBER
Passed the End Date -
Status was "Reregistered" 		 2018-07-01  2023-06-30  SAQA 06120/18 
LAST DATE FOR ENROLMENT LAST DATE FOR ACHIEVEMENT
2026-06-30   2029-06-30  

In all of the tables in this document, both the pre-2009 NQF Level and the NQF Level is shown. In the text (purpose statements, qualification rules, etc), any references to NQF Levels are to the pre-2009 levels unless specifically stated otherwise.  

This unit standard does not replace any other unit standard and is not replaced by any other unit standard. 

PURPOSE OF THE UNIT STANDARD 
People credited with this unit standard are able to:
  • Explain and differentiate between Information Technology and Communication Technology.
  • Explain what is risk.
  • Describe information security problems and recommend simple solutions.
  • Describe computer viruses and virus attacks.
  • Describe the management of computer viruses using anti-virus software.

    The performance of all elements is to a standard that allows for further learning in this area. 
    		•

    LEARNING ASSUMED TO BE IN PLACE AND RECOGNITION OF PRIOR LEARNING 
    The credit value of this unit standard is calculated assuming a person is competent in:
  • Mathematical literacy and communication skills at least at NQF Level 3.
  • Describe the application and effect of Information and Communication Technologies (ICT) on society (ID 117928 - NQF Level 4). 
    		•

    UNIT STANDARD RANGE 
    N/A 

    Specific Outcomes and Assessment Criteria: 

    SPECIFIC OUTCOME 1 
    Explain and differentiate between Information Technology and Communication Technology. 

    ASSESSMENT CRITERIA     

    ASSESSMENT CRITERION 1 
    Information Technology and Communication Technologies (ICT) is explained. 
    ASSESSMENT CRITERION RANGE 
    Differentiate between Information Technology and Communications Technology.
     

    ASSESSMENT CRITERION 2 
    Explain how information and communication technologies have converged. 
    ASSESSMENT CRITERION RANGE 
    Any three of: Cable Internet, Web TV, Gaming consoles, WAP, GPRS.
     

    ASSESSMENT CRITERION 3 
    Explain the benefits of converging technology. 

    SPECIFIC OUTCOME 2 
    Explain what is Risk. 

    ASSESSMENT CRITERIA     

    ASSESSMENT CRITERION 1 
    Explain what are risks/threats (general definition). 

    ASSESSMENT CRITERION 2 
    Identify and explain what risks are associated with ICT. 
    ASSESSMENT CRITERION RANGE 
    Data loss/theft, hardware and software loss/theft, unauthorized access, espionage, piracy, breach of copyright, viruses.
     

    ASSESSMENT CRITERION 3 
    Explain what effects these threats have on organizations. 
    ASSESSMENT CRITERION RANGE 
    Loss of revenue, business slows down, competitors gain advantage, face legal action, high cost of replacement, poor public image.
     

    SPECIFIC OUTCOME 3 
    Describe information security problems and recommend simple solutions. 

    ASSESSMENT CRITERIA     

    ASSESSMENT CRITERION 1 
    Explain what is information security. 

    ASSESSMENT CRITERION 2 
    Describe the main information security control areas. 
    ASSESSMENT CRITERION RANGE 
    The system, the environment, policies/procedures.
     

    ASSESSMENT CRITERION 3 
    Describe and recommend system controls. 
    ASSESSMENT CRITERION RANGE 
    Any three of: Passwords, access rights, UPS, drive locks, warning alarms (hardware and software anti virus software.
     

    ASSESSMENT CRITERION 4 
    Describe and recommend environment controls. 
    ASSESSMENT CRITERION RANGE 
    Any three of: Access control, guards, locks fencing, air conditioners, cleanliness, anti static.
     

    ASSESSMENT CRITERION 5 
    Explain what are policies and procedures. 

    ASSESSMENT CRITERION 6 
    Explain what is acceptable and unacceptable usage of ICT's. 

    ASSESSMENT CRITERION 7 
    Explain the implications for unacceptable use of ICT's. 

    SPECIFIC OUTCOME 4 
    Describe Computer Viruses and Virus Attacks. 

    ASSESSMENT CRITERIA     

    ASSESSMENT CRITERION 1 
    Types of computer viruses are described. 
    ASSESSMENT CRITERION RANGE 
    Any two of: Trojans, worms, time bombs, logic bombs, macro viruses.
     

    ASSESSMENT CRITERION 2 
    Methods of spreading viruses are described. 
    ASSESSMENT CRITERION RANGE 
    Any three of: copying disks, hacking, e-mail attachments.
     

    ASSESSMENT CRITERION 3 
    Methods of protecting against viruses are described. 
    ASSESSMENT CRITERION RANGE 
    Any two of: Userid, passwords, emails, email attachments, internet downloads, anti-virus software, piracy.
     

    ASSESSMENT CRITERION 4 
    Computer viruses are explained in term of the threats it poses to computer environments. 

    SPECIFIC OUTCOME 5 
    Describe the management of computer viruses using anti-virus software. 

    ASSESSMENT CRITERIA     

    ASSESSMENT CRITERION 1 
    Computer viruses are defined in terms of their construct and effect. 

    ASSESSMENT CRITERION 2 
    Classes of computer viruses are defined in terms of their impact. 
    ASSESSMENT CRITERION RANGE 
    File-infectors, Systems or boot-record infectors, Macro viruses.
     

    ASSESSMENT CRITERION 3 
    Methods of disinfecting files are described. 
    ASSESSMENT CRITERION RANGE 
    Automatic scanning, file scan.
     

    ASSESSMENT CRITERION 4 
    The reasons for keeping anti-virus software updated and explained. 

    ASSESSMENT CRITERION 5 
    Examples of current anti-virus software are given. 
    ASSESSMENT CRITERION RANGE 
    Minimum of 3 examples.
     


    UNIT STANDARD ACCREDITATION AND MODERATION OPTIONS 
    The relevant Education and Training Quality Authority (ETQA) must accredit providers before they can offer programmes of education and training assessed against unit standards.

    Moderation Process:
  • Moderation of assessment will be overseen by the relevant ETQA according to the moderation guidelines in the relevant qualification and the agreed ETQA procedures. 
    		•

    UNIT STANDARD ESSENTIAL EMBEDDED KNOWLEDGE 
  • Performance of all elements is to be carried out in accordance with organization standards and procedures, unless otherwise stated. Organisation standards and procedures may cover: quality assurance, documentation, security, communication, health and safety, and personal behavior.
  • Performance of all elements complies with the laws of South Africa, especially with regard to copyright, privacy, health and safety, and consumer rights.
  • All activities must comply with any policies, procedures and requirements of the organizations involved, the ethical codes of relevant professional bodies and any relevant legislative and/or regulatory requirements.
  • Performance of all elements is to be completed within the normal range of time and cost that would be expected in a professional environment (e.g. in a commercial or government organization). 
    		•

    UNIT STANDARD DEVELOPMENTAL OUTCOME 
    N/A 

    UNIT STANDARD LINKAGES 
    N/A 


    Critical Cross-field Outcomes (CCFO): 

    UNIT STANDARD CCFO IDENTIFYING 
    Identify and solve problems in which responses display that decisions using critical and creative thinking have been made by understanding security aspects of using computers in modern society. 

    UNIT STANDARD CCFO ORGANISING 
    Organise and manage oneself and one's activities responsibly and effectively by effectively using a variety of safeguards to maintain security of a computer environment. 

    UNIT STANDARD CCFO COLLECTING 
    Collect, analyse, organize, and critically evaluate information by remaining alert to new viruses that could effect the computer. 

    UNIT STANDARD CCFO COMMUNICATING 
    Communicate effectively using visual, mathematical and/or language skills in the modes of oral and/or written persuasion when engaging with the subject. 

    UNIT STANDARD CCFO SCIENCE 
    Use science and technology effectively and critically, showing responsibility towards the environment and health of others by acting responsibly when using a computer. 

    UNIT STANDARD ASSESSOR CRITERIA 
    N/A 

    REREGISTRATION HISTORY 
    As per the SAQA Board decision/s at that time, this unit standard was Reregistered in 2012; 2015. 

    UNIT STANDARD NOTES 
    Assessor Notes:
  • Possible laws applicable to this standard could include acts like Access to Information Acts; Copyright Acts, Constitution of the Country being assessed in.

    Abbreviations:
  • PC - Personal computer.
  • CD - Compact disk.
  • GUI - Graphical User Interface. 
    		•

    QUALIFICATIONS UTILISING THIS UNIT STANDARD: 
      ID QUALIFICATION TITLE PRE-2009 NQF LEVEL NQF LEVEL STATUS END DATE PRIMARY OR DELEGATED QA FUNCTIONARY
    Elective  61591   National Certificate: Information Technology: End User Computing  Level 3  NQF Level 03  Passed the End Date -
    Status was "Reregistered"     		 2023-06-30  As per Learning Programmes recorded against this Qual 
    Elective  83026   National Certificate: Information and Communications Technology (ICT) Software Testing  Level 5  NQF Level 05  Passed the End Date -
    Status was "Reregistered"     		 2023-06-30  MICTS 


    PROVIDERS CURRENTLY ACCREDITED TO OFFER THIS UNIT STANDARD: 
    This information shows the current accreditations (i.e. those not past their accreditation end dates), and is the most complete record available to SAQA as of today. Some Primary or Delegated Quality Assurance Functionaries have a lag in their recording systems for provider accreditation, in turn leading to a lag in notifying SAQA of all the providers that they have accredited to offer qualifications and unit standards, as well as any extensions to accreditation end dates. The relevant Primary or Delegated Quality Assurance Functionary should be notified if a record appears to be missing from here.
     
    1. Academy at Vaal Triangle (AVT 
    2. Action for Blind and Disabled 
    3. Aspirations Communication Training CC 
    4. Atvance Institute (Pty) Ltd 
    5. Balefile Trading and Services 
    6. Bokamoso Skills and Economic Development Centre 
    7. College Africa Group (Pty) Ltd 
    8. Eagle Computer Training 
    9. Ekasi IT Solutions Centre 
    10. Ekurhuleni Artisans and Skills Training Centre Pty Ltd 
    11. Elangeni Training Institute 
    12. Elchees Software Solutions 
    13. Eshybrand Pty Ltd 
    14. EYETHU NATIONAL COMPUTER COLLEGE PTY LTD 
    15. Finweb Business Consultancy 
    16. Foster-Melliar (Pty) Ltd 
    17. Fourways Private College 
    18. Global Institute for Capacity 
    19. HAVOHEJ CONSULTANCY 
    20. Hazyview Computer College 
    21. HILLCROSS BUSINESS SCHOOL (PTY 
    22. Hlanganani ICT (Pty) Ltd 
    23. Ikusasalethu Youth Development Project NPC 
    24. Inqubeko Institute (Pty) Ltd 
    25. IT Academy 
    26. Jeppe College of Commerce and 
    27. K Boneng Consulting Services P 
    28. K Centre Business Enterprise (PTY) LTD 
    29. Loomee Group 
    30. Masakhane Training and Consult 
    31. Mogapi Education Group (Pty) Ltd 
    32. Moving Ahead Development Agenc 
    33. Musengavhadzimu Media 
    34. Natfin Holdings Pty Ltd 
    35. Ndulita Solutions 
    36. Polokwane Technology Institute (Pty) Ltd 
    37. PRX SCHOOL TEST 
    38. QUARPHIX (PTY) LTD 
    39. Redefine Human Capital (PTY) L 
    40. Richfield Graduate Institute of Technology Pty Ltd 
    41. Rostec Technical FET College (Pty) Ltd 
    42. Sabile Human Resources Consult 
    43. SANDM IT TRAINING (PTY) LTD 
    44. Silulo Ulutho Technologies 
    45. Synergistic Covenant Network NPO 
    46. Techtisa (pty) Ltd 
    47. The Finishing College (Pty) Lt 
    48. Titan Trade Technologies 
    49. TORQUE TECHNICAL COMPUTER TRAINING PTY LTD 
    50. Varsity Institute of Science & Technology (Pty)Ltd 
    51. Wellinkwise Pty Ltd 
    52. Whitestone College 
    53. ZA WIT (PTY) LTD 
    54. Zealot Business College 


    All qualifications and part qualifications registered on the National Qualifications Framework are public property. Thus the only payment that can be made for them is for service and reproduction. It is illegal to sell this material for profit. If the material is reproduced or quoted, the South African Qualifications Authority (SAQA) should be acknowledged as the source.