Information Systems Security Manager

ID & Description

ID & Description

• S0018 - Skill in creating policies that reflect system security objectives.
• S0027 - Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
• S0086 - Skill in evaluating the trustworthiness of the supplier and/or product.

ID & Description

• A0128 - Ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
• A0161 - Ability to integrate information security requirements into the acquisition process; using applicable baseline security controls as one of the sources for security requirements; ensuring a robust software quality control process; and establishing multiple sources (e.g., delivery routes, for critical system elements).
• A0170 - Ability to identify critical infrastructure systems with information communication technology that were designed without system security considerations.

ID & Description

• T0001 - Acquire and manage the necessary resources, including leadership support, financial resources, and key security personnel, to support information technology (IT) security goals and objectives and reduce overall organizational risk.
• T0002 - Acquire necessary resources, including financial resources, to conduct an effective enterprise continuity of operations program.
• T0003 - Advise senior management (e.g., Chief Information Officer [CIO]) on risk levels and security posture.
• T0004 - Advise senior management (e.g., CIO) on cost/benefit analysis of information security programs, policies, processes, systems, and elements.
• T0005 - Advise appropriate senior leadership or Authorizing Official of changes affecting the organization’s cybersecurity posture.
• T0024 - Collect and maintain data needed to meet system cybersecurity reporting.
• T0025 - Communicate the value of information technology (IT) security throughout all levels of the organization stakeholders.
• T0044 - Collaborate with stakeholders to establish the enterprise continuity of operations program, strategy, and mission assurance.
• T0089 - Ensure that security improvement actions are evaluated, validated, and implemented as required.
• T0091 - Ensure that cybersecurity inspections, tests, and reviews are coordinated for the network environment.
• T0092 - Ensure that cybersecurity requirements are integrated into the continuity planning for that system and/or organization(s).
• T0093 - Ensure that protection and detection capabilities are acquired or developed using the IS security engineering approach and are consistent with organization-level cybersecurity architecture.
• T0095 - Establish overall enterprise information security architecture (EISA) with the organization’s overall security strategy.
• T0097 - Evaluate and approve development efforts to ensure that baseline security safeguards are appropriately installed.
• T0099 - Evaluate cost/benefit, economic, and risk analysis in decision-making process.
• T0106 - Identify alternative information security strategies to address organizational security objective.
• T0115 - Identify information technology (IT) security program implications of new technologies or technology upgrades.
• T0130 - Interface with external organizations (e.g., public affairs, law enforcement, Command or Component Inspector General) to ensure appropriate and accurate dissemination of incident and other Computer Network Defense information.
• T0132 - Interpret and/or approve security requirements relative to the capabilities of new information technologies.
• T0133 - Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise’s cybersecurity program.
• T0134 - Lead and align information technology (IT) security priorities with the security strategy.
• T0135 - Lead and oversee information security budget, staffing, and contracting.
• T0147 - Manage the monitoring of information security data sources to maintain organizational situational awareness.
• T0148 - Manage the publishing of Computer Network Defense guidance (e.g., TCNOs, Concept of Operations, Net Analyst Reports, NTSM, MTOs) for the enterprise constituency.
• T0149 - Manage threat or target analysis of cyber defense information and production of threat information within the enterprise.
• T0151 - Monitor and evaluate the effectiveness of the enterprise’s cybersecurity safeguards to ensure that they provide the intended level of protection.
• T0157 - Oversee the information security training and awareness program.
• T0158 - Participate in an information security risk assessment during the Security Assessment and Authorization process.
• T0159 - Participate in the development or modification of the computer environment cybersecurity program plans and requirements.
• T0192 - Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network system(s) operations.
• T0199 - Provide enterprise cybersecurity and supply chain risk management guidance for development of the Continuity of Operations Plans.
• T0206 - Provide leadership and direction to information technology (IT) personnel by ensuring that cybersecurity awareness, basics, literacy, and training are provided to operations personnel commensurate with their responsibilities.
• T0211 - Provide system-related input on cybersecurity requirements to be included in statements of work and other appropriate procurement documents.
• T0213 - Provide technical documents, incident reports, findings from computer examinations, summaries, and other situational awareness information to higher headquarters.
• T0215 - Recognize a possible security violation and take appropriate action to report the incident, as required.
• T0219 - Recommend resource allocations required to securely operate and maintain an organization’s cybersecurity requirements.
• T0227 - Recommend policy and coordinate review and approval.
• T0229 - Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered.
• T0234 - Track audit findings and recommendations to ensure that appropriate mitigation actions are taken.
• T0239 - Use federal and organization-specific published documents to manage operations of their computing environment system(s).
• T0248 - Promote awareness of security issues among management and ensure sound security principles are reflected in the organization’s vision and goals.
• T0254 - Oversee policy standards and implementation strategies to ensure procedures and guidelines comply with cybersecurity policies.
• T0255 - Participate in Risk Governance process to provide security risks, mitigations, and input on other technical risk.
• T0256 - Evaluate the effectiveness of procurement function in addressing information security requirements and supply chain risks through procurement activities and recommend improvements.
• T0263 - Identify security requirements specific to an information technology (IT) system in all phases of the system life cycle.
• T0264 - Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
• T0265 - Assure successful implementation and functionality of security requirements and appropriate information technology (IT) policies and procedures that are consistent with the organization’s mission and goals.
• T0275 - Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
• T0276 - Participate in the acquisition process as necessary, following appropriate supply chain risk management practices.
• T0277 - Ensure that all acquisitions, procurements, and outsourcing efforts address information security requirements consistent with organization goals.
• T0280 - Continuously validate the organization against policies/guidelines/procedures/regulations/laws to ensure compliance.
• T0281 - Forecast ongoing service demands and ensure that security assumptions are reviewed as necessary.
• T0282 - Define and/or implement policies and procedures to ensure protection of critical infrastructure as appropriate.