Skip to content

Intel (Cyber) · Work role code 311

All-Source Collection Manager

Identifies collection authorities and environment; incorporates priority information requirements into collection management; develops concepts to meet leadership's intent. Determines capabilities of available collection assets, identifies new collection capabilities; and constructs and disseminates collection plans. Monitors execution of tasked collection to ensure effective execution of the collection plan.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 2005Adjust collection operations or collection plan to address identified issues/challenges and to synchronize collections with overall operational requirements.Core
  • 2015Analyze feedback to determine extent to which collection products and services are meeting requirements.Core
  • 2021Analyze plans, directives, guidance and policy for factors that would influence collection management's operational structure and requirement s (e.g., duration, scope, communication requirements, interagency/international agreements).Core
  • 2035Assess and apply operational environment factors and risks to collection management process.Core
  • 2051Assess performance of collection assets against prescribed specifications.Additional
  • 2096ACompare allocated and available assets to collection demand as expressed through requirements.Core
  • 2098Compile lessons learned from collection management activities execution of organization collection objectives.Additional
  • 2147Consider efficiency and effectiveness of collection assets and resources if/when applied against priority information requirements.Additional
  • 2153Construct collection plans and matrixes using established guidance and procedures.Additional
  • 2165Coordinate resource allocation of collection assets against prioritized collection requirements with collection discipline leads.Core
  • 2167Coordinate inclusion of collection plan in appropriate documentation.Additional
  • 2172Re-task or re-direct collection assets and resources.Additional
  • 2232Determine course of action for addressing changes to objectives, guidance, and operational environment.Additional
  • 2233Determine existing collection management webpage databases, libraries and storehouses.Additional
  • 2235Determine how identified factors affect the tasking, collection, processing, exploitation and dissemination architecture form and function.Core
  • 2239Determine organizations and/or echelons with collection authority over all accessible collection assets.Additional
  • 2245Develop a method for comparing collection reports to outstanding requirements to identify information gaps.Core
  • 2271Develop coordinating instructions by collection discipline for each phase of an operation.Additional
  • 2290Allocate collection assets based on leadership's guidance, priorities, and/or operational emphasis.Core
  • 2342Disseminate tasking messages and collection plans.Additional
  • 2373Establish alternative processing, exploitation and dissemination pathways to address identified issues or problems.Additional
  • 2376Establish processing, exploitation and dissemination management activity using approved guidance and/or procedures.Core
  • 2414Facilitate continuously updated intelligence, surveillance, and visualization input to common operational picture managers.Additional
  • 2421Formulate collection strategies based on knowledge of available intelligence discipline capabilities and gathering methods that align multi-discipline collection capabilities and accesses with targets and their observables.Core
  • 2451Identify collaboration forums that can serve as mechanisms for coordinating processes, functions, and outputs with specified organizations and functional groups.Core
  • 2456Identify coordination requirements and procedures with designated collection authorities.Additional
  • 2464Identify issues or problems that can disrupt and/or degrade processing, exploitation and dissemination architecture effectiveness.Additional
  • 2475Identify potential collection disciplines for application against priority information requirements.Additional
  • 2479Identify and mitigate risks to collection management ability to support the plan, operations and target cycle.Additional
  • 2529Issue requests for information.Additional
  • 2538Link priority collection requirements to optimal assets and resources.Additional
  • 2597Monitor completion of reallocated collection efforts.Additional
  • 2604Monitor operational status and effectiveness of the processing, exploitation and dissemination architecture.Additional
  • 2609Monitor the operational environment for potential factors and risks to the collection operation management process.Additional
  • 2613Optimize mix of collection assets and resources to increase effectiveness and efficiency against essential information associated with priority intelligence requirements.Core
  • 2705Prioritize collection requirements for collection platforms based on platform capabilities.Core
  • 2726Provide advice/assistance to operations and intelligence decision makers with reassignment of collection assets and resources in response to dynamic operational situations.Additional
  • 2793Request discipline-specific processing, exploitation, and disseminate information collected using discipline's collection assets and resources in accordance with approved guidance and/or procedures.Additional
  • 2807Review capabilities of allocated collection assets.Additional
  • 2809Review intelligence collection guidance for accuracy/applicability.Additional
  • 2810Review list of prioritized collection requirements and essential information.Additional
  • 2812Review and update overarching collection plan, as required.Additional
  • 2817Revise collection matrix based on availability of optimal assets and resources.Additional
  • 2828Specify changes to collection plan and/or operational environment that necessitate re-tasking or re-directing of collection assets and resources.Additional
  • 2829Specify discipline-specific collections and/or taskings that must be executed in the near term.Additional
  • 2845Synchronize the integrated employment of all available organic and partner intelligence collection assets using available collaboration capabilities and techniques.Additional

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 52Knowledge of human-computer interaction principles.Additional
  • 87Knowledge of network traffic analysis methods.Additional
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 3092Knowledge of database administration and maintenance.Additional
  • 3095Knowledge of internet network addressing (IP addresses, classless inter-domain routing, TCP/UDP port numbering).Additional
  • 3098Knowledge of virtualization products (VMware, Virtual PC).Additional
  • 3102Knowledge of operational planning processes.Core
  • 3116Knowledge of all possible circumstances that would result in changing collection management authorities.Additional
  • 3127Knowledge of asset availability, capabilities and limitations.Core
  • 3128Knowledge of tasking mechanisms.Core
  • 3131Knowledge of available databases and tools necessary to assess appropriate collection tasking.Additional
  • 3135Knowledge of basic computer components and architectures, including the functions of various peripherals.Additional
  • 3137Knowledge of basic malicious activity concepts (e.g., footprinting, scanning and enumeration).Additional
  • 3148Knowledge of collection capabilities and limitations.Core
  • 3156Knowledge of collection management tools.Additional
  • 3160Knowledge of collaborative tools and environments.Core
  • 3162Knowledge of collection capabilities, accesses, performance specifications, and constraints utilized to satisfy collection plan.Additional
  • 3165Knowledge of collection planning process and collection plan.Additional
  • 3175Knowledge of leadership's Intent and objectives.Additional
  • 3177Knowledge of common computer/network infections (virus, Trojan, etc.) and methods of infection (ports, attachments, etc.).Additional
  • 3188Knowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.).Additional
  • 3195Knowledge of criteria for evaluating collection products.Core
  • 3204Knowledge of current collection requirements.Core
  • 3205Knowledge of current computer-based intrusion sets.Additional
  • 3217Knowledge of cyber lexicon/terminologyAdditional
  • 3225Knowledge of data communications terminology (e.g., networking protocols, Ethernet, IP, encryption, optical devices, removable media).Additional
  • 3253Knowledge of encryption algorithms and cyber capabilities/tools (e.g., SSL, PGP).Additional
  • 3262Knowledge of evolving/emerging communications technologies.Additional
  • 3275Knowledge of fundamental cyber concepts, principles, limitations, and effects.Additional
  • 3286Knowledge of host-based security products and how they affect exploitation and vulnerability.Additional
  • 3291Knowledge of how internet applications work (SMTP email, web-based email, chat clients, VOIP).Additional
  • 3292Knowledge of how modern digital and telephony networks impact cyber operations.Additional
  • 3293Knowledge of how modern wireless communications systems impact cyber operations.Additional
  • 3297Knowledge of how to establish priorities for resources.Core
  • 3298Knowledge of how to extract, analyze, and use metadata.Additional
  • 3322Knowledge of indications and warning.Additional
  • 3325Knowledge of information needs.Additional
  • 3332Knowledge of tasking processes for organic and subordinate collection assets.Additional
  • 3361Knowledge of key cyber threat actors and their equities.Additional
  • 3362AKnowledge of key factors of the operational environment and related threats and vulnerabilities.Additional
  • 3374Knowledge of malware.Additional
  • 3380Knowledge of methods for ascertaining collection asset posture and availability.Core
  • 3389Knowledge of organization objectives and associated demand on collection management.Additional
  • 3417Knowledge of non-traditional collection methodologies.Additional
  • 3420Knowledge of ongoing and future operations.Additional
  • 3424Knowledge of operational asset constraints.Additional
  • 3428Knowledge of organization formats of resource and asset readiness reporting, its operational relevance and intelligence collection impact.Additional
  • 3430Knowledge of organizational priorities, legal authorities and requirements submission processes.Additional
  • 3436Knowledge of production exploitation and dissemination needs and architectures.Core
  • 3441Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.Additional
  • 3464Knowledge of research strategies and knowledge management.Core
  • 3470Knowledge of risk management and mitigation strategies.Additional
  • 3541Knowledge of the available tools and applications associated with collection requirements and collection management.Additional
  • 3543Knowledge of the basic structure, architecture, and design of modern communication networks.Additional
  • 3545Knowledge of the basics of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).Additional
  • 3549Knowledge of the capabilities and limitations of new and emerging collection capabilities, accesses and/or processes.Additional
  • 3552Knowledge of the capabilities, limitations and tasking methodologies of internal and external collections as they apply to planned cyber activities.Additional
  • 3557Knowledge of collection strategies.Additional
  • 3558Knowledge of the priority information requirements from subordinate, lateral and higher levels of the organization.Additional
  • 3561Knowledge of the common networking and routing protocols(e.g., TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications.Additional
  • 3574Knowledge of the existing tasking, collection, processing, exploitation and dissemination architecture.Additional
  • 3575Knowledge of the factors of threat that could impact collection operations.Core
  • 3595Knowledge of the organization, roles and responsibilities of higher, lower and adjacent sub-elements.Additional
  • 3598Knowledge of the organizational plans/directives/guidance that describe objectives.Additional
  • 3599Knowledge of the organizational policies/procedures for temporary transfer of collection authority.Additional
  • 3602Knowledge of the POC’s, databases, tools and applications necessary to establish environment preparation and surveillance products.Additional
  • 3619Knowledge of the systems/architecture/communications used for coordination.Core
  • 3624Knowledge of different organization objectives at all levels, including subordinate, lateral and higher.Additional
  • 3625Knowledge of the organization’s established format for collection plan.Additional
  • 3626Knowledge of the organization’s planning, operations and targeting cycles.Additional
  • 3631Knowledge of internal and external partner organization capabilities and limitations (those with tasking, collection, processing, exploitation and dissemination responsibilities).Additional
  • 3633Knowledge of tipping, cueing, mixing, and redundancy.Additional
  • 3650Knowledge of priority information, how it is derived, where it is published, how to access, etc.Additional
  • 3651Knowledge of what constitutes a “threat” to a network.Additional
  • 3654Knowledge of who the organization’s operational planners are, how and where they can be contacted, and what are their expectations.Additional
  • 3663Knowledge of tasking, collection, processing, exploitation and dissemination.Core
  • 4113Knowledge of the request for information process.Additional
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 3957Skill to access information on current assets available, usage.Additional
  • 3960Skill to access the databases where plans/directives/guidance are maintained.Additional
  • 3974Skill to apply the capabilities, limitations and tasking methodologies of available platforms, sensors, architectures and apparatus as they apply to organization objectives.Core
  • 3977Skill to articulate a needs statement/requirement and integrate new and emerging collection capabilities, accesses and/or processes into collection operations.Additional
  • 3985Skill to associate Intelligence gaps to priority information requirements and observables.Additional
  • 3986Skill to compare and contrast indicators/observables with requirements.Additional
  • 4002Skill to determine feasibility of collection.Core
  • 4004Skill to develop a collection plan that clearly shows the discipline that can be used to collect the information needed.Core
  • 4012Skill to ensure that the collection strategy leverages all available resources.Core
  • 4014Skill to evaluate factors of the operational environment to objectives, and information requirements.Core
  • 4016Skill to evaluate the capabilities, limitations and tasking methodologies of organic, theater, national, coalition and other collection capabilities.Additional
  • 4019Skill to extract information from available tools and applications associated with collection requirements and collection operations management.Core
  • 4024Skill to identify and apply tasking, collection, processing, exploitation and dissemination to associated collection disciplines.Core
  • 4025Skill to identify Intelligence gaps.Additional
  • 4026Skill in information prioritization as it relates to operations.Core
  • 4027Skill to identify when priority information requirements are satisfied.Additional
  • 4029Skill to translate the capabilities, limitations and tasking methodologies of organic, theater, national, coalition and other collection capabilities.Additional
  • 4033Skill to interpret readiness reporting, its operational relevance and intelligence collection impact.Core
  • 4044Skill to optimize collection system performance through repeated adjustment, testing, and readjustment.Additional
  • 4049Skill to prepare and deliver reports, presentations and briefings, to include using visual aids or presentation technology.Core
  • 4056Skill to review performance specifications and historical information about collection assets.Core
  • 4066Skill to use collaborative tools and environments.Core

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 3010Ability to apply collaborative skills and strategies.Core
  • 3011Ability to apply critical reading/thinking skills.Core
  • 3991Ability to coordinate and collaborate with analysts regarding surveillance requirements and essential information development.Core
  • 3994Ability to coordinate, collaborate and disseminate information to subordinate, lateral and higher-level organizations.Core
  • 3995Ability to correctly employ each organization or element into the collection plan and matrix.Additional

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

No O*NET jobs reach this role.

    Equivalents

    NICE work roles

    From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

    Free · DoD DCWF Tool v5.3 (2026-09-25)

    No published NICE equivalent.

    O*NET jobs it reaches

    Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

    Free · O*NET 30.3

    No O*NET job reaches this role.