Cyber Policy and Strategy Planner

• 410AAnalyze organizational cyber policy.Core
• 424BAssess policy needs and collaborate with stakeholders to develop policies to govern cyber activities.Core
• 485ADefine and integrate current and future mission environments.Additional
• 492ADesign/integrate a cyber strategy that outlines the vision, mission, and goals that align with the organization's strategic plan.Core
• 539Develop policy, programs, and guidelines for implementation.Additional
• 565ADraft, staff, and publish cyber policy.Core
• 594Establish and maintain communication channels with stakeholders.Additional
• 720AMonitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services.Core
• 724ASeek consensus on proposed policy changes from stakeholders.Additional
• 812AProvide policy guidance to cyber management, staff, and users.Core
• 838Review existing and proposed policies with stakeholders.Additional
• 840AReview, conduct, or participate in audits of cyber programs and projects.Core
• 847Serve on agency and interagency policy boards.Additional
• 854ASupport the CIO in the formulation of cyber-related policies.Core
• 1027AInterpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.Core
• 5020Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials.Core
• 5560Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization's mission, vision, and goals.Core
• 5620Review/Assess cyber workforce effectiveness to adjust skill and/or qualification standards.Additional

• 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
• 88AKnowledge of current and emerging cyber technologies.Core
• 105Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).Additional
• 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
• 282AKnowledge of emerging technologies that have potential for exploitation by adversaries.Core
• 297AKnowledge of industry indicators useful for identifying technology trends.Additional
• 320AKnowledge of external organizations and academic institutions with cyber focus (e.g., cyber curriculum/training and Research & Development).Core
• 336Knowledge of the nature and function of the relevant information structure (e.g., National Information Infrastructure).Additional
• 942Knowledge of the organization's core business/mission processes.Additional
• 1036Knowledge of applicable laws (e.g., Electronic Communications Privacy Act, Foreign Intelligence Surveillance Act, Protect America Act, search and seizure laws, civil liberties and privacy laws), statutes (e.g., in Titles 10, 18, 32, 50 in U.S. Code), Presidential Directives, executive branch guidelines, and/or administrative/criminal legal guidelines and procedures relevant to work performed.Core
• 1125Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration.Additional
• 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
• 1158* Knowledge of cybersecurity principles.Core
• 1159* Knowledge of cyber threats and vulnerabilities.Core
• 6210Knowledge of cloud service models and possible limitations for an incident response.Additional
• 6270Knowledge of full spectrum cyber capabilities.Core
• 6410Knowledge of strategic theory and practice.Additional
• 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
• 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
• 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
• 7111* Knowledge of Zero Trust Security Model Principles.Core

The DCWF Tool lists no skills for this work role.

• 244Ability to determine the validity of technology trend data.Additional
• 6100Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.Core
• 6140Ability to leverage best practices and lessons learned of external organizations and academic institutions dealing with cyber issues.Core