COMSEC Manager

• 395Advise senior management (e.g., CIO) on risk levels and security posture.Core
• 396Advise senior management (e.g., CIO) on cost/benefit analysis of information security programs, policies, processes, systems, and elements.Additional
• 445Communicate the value of information technology (IT) security throughout all levels of the organization stakeholders.Additional
• 475Collaborate with stakeholders to establish the enterprise continuity of operations program, strategy, and mission assurance.Additional
• 578Ensure security improvement actions are evaluated, validated, and implemented as required.Core
• 596Establish overall enterprise information security architecture (EISA) with the organization’s overall security strategy.Additional
• 600Evaluate cost benefit, economic, and risk analysis in decision making process.Additional
• 824Recognize a possible security violation and take appropriate action to report the incident, as required.Core
• 852Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered.Core

• 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
• 25Knowledge of encryption algorithms (e.g., Internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE], Internet Key Exchange [IKE], Message Digest Algorithm [MD5], Secure Hash Algorithm [SHA], Triple Data Encryption Standard [3DES]).Core
• 37Knowledge of disaster recovery continuity of operations plans.Core
• 55Knowledge of cybersecurity principles used to manage risks related to the use, processing, storage, and transmission of information or data.Core
• 61Knowledge of incident response and handling methodologies.Core
• 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
• 129Knowledge of system life cycle management principles, including software security and usability.Additional
• 143Knowledge of the organization’s enterprise information technology (IT) goals and objectives.Additional
• 299Knowledge of information security program management and project management principles and techniques.Additional
• 325Knowledge of secure acquisitions (e.g., relevant Contracting Officer's Technical Representative [COTR] duties, secure procurement, supply chain risk management).Additional
• 1004Knowledge of critical information technology (IT) procurement requirements.Additional
• 1040AKnowledge of relevant laws, policies, procedures, or governance related to critical infrastructure.Additional
• 1141AKnowledge of an organization's information classification program and procedures for information compromise.Core
• 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
• 1158* Knowledge of cybersecurity principles.Core
• 1159* Knowledge of cyber threats and vulnerabilities.Core
• 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
• 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
• 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
• 7111* Knowledge of Zero Trust Security Model Principles.Core

• 183Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.Additional

The DCWF Tool lists no abilities for this work role.