Welcome to Lunarline School of Cybersecurity (SCS) - Providing Excellence in Cybersecurity Training and Certifications Since 2008
Contact SCS
School of Cybersecurity
To get started, contact us today at 571-481-9307
LinkedIn
YouTube
shopping_cart
Product was added to your cart

Cart

Strategic Planning and Policy (SPP)

Home NICE Framework Oversee and Govern (OV) Strategic Planning and Policy (SPP)

Strategic Planning and Policy (SPP) NICE Specialty Area

Develops policies and plans and/or advocates for changes in policy that support organizational cyberspace initiatives or required changes/enhancements.
NICE Work Role Name:
Cyber Workforce Developer and Manager
NICE Work Role ID:
OV-SPP-001
NICE Category:
Oversee & Govern (OV)
NICE Work Role Description:

Develops cyberspace workforce plans, strategies, and guidance to support cyberspace workforce manpower, personnel, training and education requirements and to address changes to cyberspace policy, doctrine, materiel, force structure, and education and training requirements.

School of Cybersecurity Training
School of Cybersecurity Training
  1. Cyber Workforce Developer and Manager (OV203-RBT)
CCE Program
  1. Certified Expert Cyber Trainer (CECT)®
  2. Certified Expert Cyber Recruiter (CECR)®
Knowledge, Skills, Abilities and Tasks
Knowledge
Knowledge
  1. K0001 - Knowledge of computer networking concepts and protocols, and network security methodologies.
  2. K0002 - Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
  3. K0003 - Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
  4. K0004 - Knowledge of cybersecurity and privacy principles.
  5. K0005 - Knowledge of cyber threats and vulnerabilities.
  6. K0006 - Knowledge of specific operational impacts of cybersecurity lapses.
  7. K0072 - Knowledge of resource management principles and techniques.
  8. K0101 - Knowledge of the organization’s enterprise information technology (IT) goals and objectives.
  9. K0127 - Knowledge of the nature and function of the relevant information structure (e.g., National Information Infrastructure).
  10. K0146 - Knowledge of the organization’s core business/mission processes.
  11. K0147 - Knowledge of emerging security issues, risks, and vulnerabilities.
  12. K0168 - Knowledge of applicable laws, statutes (e.g., in Titles 10, 18, 32, 50 in U.S. Code), Presidential Directives, executive branch guidelines, and/or administrative/criminal legal guidelines and procedures.
  13. K0169 - Knowledge of information technology (IT) supply chain security and supply chain risk management policies, requirements, and procedures.
  14. K0204 - Knowledge of learning assessment techniques (rubrics, evaluation plans, tests, quizzes).
  15. K0215 - Knowledge of organizational training policies.
  16. K0233 - Knowledge of the National Cybersecurity Workforce Framework, work roles, and associated tasks, knowledge, skills, and abilities.
  17. K0234 - Knowledge of full spectrum cyber capabilities (e.g., defense, attack, exploitation).
  18. K0241 - Knowledge of organizational human resource policies, processes, and procedures.
  19. K0243 - Knowledge of organizational training and education policies, processes, and procedures.
  20. K0309 - Knowledge of emerging technologies that have potential for exploitation.
  21. K0311 - Knowledge of industry indicators useful for identifying technology trends.
  22. K0313 - Knowledge of external organizations and academic institutions with cyber focus (e.g., cyber curriculum/training and Research & Development).
  23. K0335 - Knowledge of current and emerging cyber technologies.
Skills
Skills
  1. S0108 - Skill in developing workforce and position qualification standards.
  2. S0128 - Skill in using manpower and personnel IT systems.
Abilities
Abilities
  1. A0023 - Ability to design valid and reliable assessments.
  2. A0028 - Ability to assess and forecast manpower requirements to meet organizational objectives.
  3. A0033 - Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.
  4. A0033 - Ability to leverage best practices and lessons learned of external organizations and academic institutions dealing with cyber issues.
  5. A0042 - Ability to develop career path opportunities.
  6. A0053 - Ability to determine the validity of workforce trend data.
Tasks
Tasks
  1. T0001 - Acquire and manage the necessary resources, including leadership support, financial resources, and key security personnel, to support information technology (IT) security goals and objectives and reduce overall organizational risk.
  2. T0004 - Advise senior management (e.g., CIO) on cost/benefit analysis of information security programs, policies, processes, systems, and elements.
  3. T0025 - Communicate the value of information technology (IT) security throughout all levels of the organization stakeholders.
  4. T0044 - Collaborate with stakeholders to establish the enterprise continuity of operations program, strategy, and mission assurance.
  5. T0074 - Develop policy, programs, and guidelines for implementation.
  6. T0094 - Establish and maintain communication channels with stakeholders.
  7. T0099 - Evaluate cost/benefit, economic, and risk analysis in decision-making process.
  8. T0116 - Identify organizational policy stakeholders.
  9. T0222 - Review existing and proposed policies with stakeholders.
  10. T0226 - Serve on agency and interagency policy boards.
  11. T0341 - Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials.
  12. T0352 - Conduct learning needs assessments and identify requirements.
  13. T0355 - Coordinate with internal and external subject matter experts to ensure existing qualification standards reflect organizational functional requirements and meet industry standards.
  14. T0356 - Coordinate with organizational manpower stakeholders to ensure appropriate allocation and distribution of human capital assets.
  15. T0362 - Develop and implement standardized position descriptions based on established cyber work roles.
  16. T0363 - Develop and review recruiting, hiring, and retention procedures in accordance with current HR policies.
  17. T0364 - Develop cyber career field classification structure to include establishing career field entry requirements and other nomenclature such as codes and identifiers.
  18. T0365 - Develop or assist in the development of training policies and protocols for cyber training.
  19. T0368 - Ensure that cyber career fields are managed in accordance with organizational HR policies and directives.
  20. T0369 - Ensure that cyber workforce management policies and processes comply with legal and organizational requirements regarding equal opportunity, diversity, and fair hiring/employment practices.
  21. T0372 - Establish and collect metrics to monitor and validate cyber workforce readiness including analysis of cyber workforce data to assess the status of positions identified, filled, and filled with qualified personnel.
  22. T0373 - Establish and oversee waiver processes for cyber career field entry and training qualification requirements.
  23. T0374 - Establish cyber career paths to allow career progression, deliberate development, and growth within and between cyber career fields.
  24. T0375 - Establish manpower, personnel, and qualification data element standards to support cyber workforce management and reporting requirements.
  25. T0376 - Establish, resource, implement, and assess cyber workforce management programs in accordance with organizational requirements.
  26. T0384 - Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization’s mission, vision, and goals.
  27. T0387 - Review and apply cyber career field qualification standards.
  28. T0388 - Review and apply organizational policies related to or influencing the cyber workforce.
  29. T0390 - Review/Assess cyber workforce effectiveness to adjust skill and/or qualification standards.
  30. T0391 - Support integration of qualified cyber workforce personnel into information systems life cycle development processes.
  31. T0408 - Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.
  32. T0425 - Analyze organizational cyber policy.
  33. T0429 - Assess policy needs and collaborate with stakeholders to develop policies to govern cyber activities.
  34. T0437 - Correlate training and learning to business or mission requirements.
  35. T0441 - Define and integrate current and future mission environments.
  36. T0445 - Design/integrate a cyber strategy that outlines the vision, mission, and goals that align with the organization’s strategic plan.
  37. T0472 - Draft, staff, and publish cyber policy.
  38. T0485 - Identify and address cyber workforce planning and management issues (e.g. recruitment, retention, and training).
  39. T0505 - Monitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services.
  40. T0506 - Seek consensus on proposed policy changes from stakeholders.
  41. T0529 - Provide policy guidance to cyber management, staff, and users.
  42. T0533 - Review, conduct, or participate in audits of cyber programs and projects.
  43. T0536 - Serve as an internal consultant and advisor in own area of expertise (e.g., technical, copyright, print media, electronic media).
  44. T0537 - Support the CIO in the formulation of cyber-related policies.
  45. T0552 - Review and approve a supply chain security/risk management policy.
NICE Work Role Name:
Cyber Policy and Strategy Planner
NICE Work Role ID:
OV-SPP-002
NICE Category:
Oversee & Govern (OV)
NICE Work Role Description:

Develops and maintains cybersecurity plans, strategy, and policy to support and align with organizational cybersecurity initiatives and regulatory compliance.

School of Cybersecurity Training
School of Cybersecurity Training
  1. Common Controls Provider (SP062-WBT)
  2. Counterintelligence for IT and Cybersecurity Professionals (AN209)
  3. Counterintelligence for IT and Cybersecurity Professionals - SP (AN209-SP)
  4. Cyber Policy and Strategy Planner (OV204-RBT)
  5. Cybersecurity Fundamentals for Managers - WBT (OV053-WBT)
  6. Cybersecurity Operations and Planning (AN165)
  7. Cybersecurity Operations and Planning - SP (AN165-SP)
  8. Cybersecurity Strategy (OV301)
  9. FISMA Overview (SP106)
  10. FISMA Overview - SP (SP106-SP)
  11. Healthcare Security & Privacy for IT Professionals (OV105)
  12. HIPAA / HITECH Compliance (OV110)
  13. HIPAA / HITECH Compliance - WBT (OV010-WBT)
  14. NIST 800-171 (SP105b)
  15. NIST 800-171 - Remote (SP105a)
  16. NIST 800-171 - SP (SP105-SP)
  17. Privacy for IT/ISS Professionals (OV231)
  18. Privacy for IT/ISS Professionals - SP (OV231-SP)
  19. Risk Management Framework (RMF) Common Controls (SP111)
  20. Risk Management Framework (RMF) Common Controls - SP (SP111-SP)
  21. Social Media and Privacy - WBT (CYB080-WBT)
  22. USCG War Game Exercise (CYB302)
CCE Program
  1. Certified Expert Risk Executive (CERE)®
Knowledge, Skills, Abilities and Tasks
Knowledge
Knowledge
  1. K0001 - Knowledge of computer networking concepts and protocols, and network security methodologies.
  2. K0002 - Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
  3. K0003 - Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
  4. K0004 - Knowledge of cybersecurity and privacy principles.
  5. K0005 - Knowledge of cyber threats and vulnerabilities.
  6. K0006 - Knowledge of specific operational impacts of cybersecurity lapses.
  7. K0070 - Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
  8. K0127 - Knowledge of the nature and function of the relevant information structure (e.g., National Information Infrastructure).
  9. K0146 - Knowledge of the organization’s core business/mission processes.
  10. K0168 - Knowledge of applicable laws, statutes (e.g., in Titles 10, 18, 32, 50 in U.S. Code), Presidential Directives, executive branch guidelines, and/or administrative/criminal legal guidelines and procedures.
  11. K0234 - Knowledge of full spectrum cyber capabilities (e.g., defense, attack, exploitation).
  12. K0248 - Knowledge of strategic theory and practice.
  13. K0309 - Knowledge of emerging technologies that have potential for exploitation.
  14. K0311 - Knowledge of industry indicators useful for identifying technology trends.
  15. K0313 - Knowledge of external organizations and academic institutions with cyber focus (e.g., cyber curriculum/training and Research & Development).
  16. K0335 - Knowledge of current and emerging cyber technologies.
  17. K0624 - Knowledge of Application Security Risks (e.g. Open Web Application Security Project Top 10 list)
Skills
Skills
  1. S0176 - Skill in administrative planning activities, to include preparation of functional and specific support plans, preparing and managing correspondence, and staffing procedures.
  2. S0250 - Skill in preparing plans and related correspondence.
Abilities
Abilities
  1. A0003 - Ability to determine the validity of technology trend data.
  2. A0033 - Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.
  3. A0037 - Ability to leverage best practices and lessons learned of external organizations and academic institutions dealing with cyber issues.
Tasks
Tasks
  1. T0074 - Develop policy, programs, and guidelines for implementation.
  2. T0094 - Establish and maintain communication channels with stakeholders.
  3. T0222 - Review existing and proposed policies with stakeholders.
  4. T0226 - Serve on agency and interagency policy boards.
  5. T0341 - Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials.
  6. T0369 - Ensure that cyber workforce management policies and processes comply with legal and organizational requirements regarding equal opportunity, diversity, and fair hiring/employment practices.
  7. T0384 - Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization’s mission, vision, and goals.
  8. T0390 - Review/Assess cyber workforce effectiveness to adjust skill and/or qualification standards.
  9. T0408 - Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.
  10. T0425 - Analyze organizational cyber policy.
  11. T0429 - Assess policy needs and collaborate with stakeholders to develop policies to govern cyber activities.
  12. T0441 - Define and integrate current and future mission environments.
  13. T0445 - Design/integrate a cyber strategy that outlines the vision, mission, and goals that align with the organization’s strategic plan.
  14. T0472 - Draft, staff, and publish cyber policy.
  15. T0505 - Monitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services.
  16. T0506 - Seek consensus on proposed policy changes from stakeholders.
  17. T0529 - Provide policy guidance to cyber management, staff, and users.
  18. T0533 - Review, conduct, or participate in audits of cyber programs and projects.
  19. T0537 - Support the CIO in the formulation of cyber-related policies.
Cybersecurity Management (MGT)
Executive Cyber Leadership (EXL)

Learn About Our Certifications

Menu