Design and Development · DD-WRL-009
Operational Technology (OT) Cybersecurity Engineering
From NICE Framework Components v2.2.0
Description
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0Responsible for working within the engineering department to design and create systems, processes, and procedures that maintain the safety, reliability, controllability and security of industrial systems in the face of intentional and incidental cyber events. Interfaces with Chief Information Security Officer, plant managers and industrial cybersecurity technicians.
Tasks
From NICE Framework Components v2.2.0, open one for the AI skills Workforce Automation maps to it
Free · NICE Framework Components v2.2.0T0067 Develop architectures or system components consistent with technical specifications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1069 Evaluate organizational cybersecurity policy regulatory compliance
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1070 Evaluate organizational cybersecurity policy alignment with organizational directives
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1124 Restore essential system capabilities and business functions after catastrophic failure events
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1163 Develop cybersecurity countermeasures for systems and applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1164 Develop risk mitigation strategies for systems and applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1185 Maintain stakeholder communication channels
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1187 Establish internal and external cross-team relationships
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1243 Oversee configuration management
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1244 Develop configuration management recommendations
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1338 Develop cybersecurity capability strategies for custom hardware and software development
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1345 Recommend improvements to procurement activities to address cybersecurity requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1527 Define baseline system security requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1619 Perform risk and vulnerability assessments
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2028 Develop OT inventory model for cybersecurity
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2029 Serve as OT engineering subject matter expert during development of change management policies and procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2030 Determine if implementation of security measures and controls meets regulatory standards and is in compliance with legal or policy requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2031 Identify gaps in OT network architecture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2032 Assign security level targets to network zones for control systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2033 Create a change management plan
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2034 Design cybersecurity tools for OT systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2035 Perform a process hazard analysis (PHA)
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2036 Review policies, standards, and regulations for conflicts that may create control system vulnerabilities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2037 Create cybersecurity inspection and test policies and procedures for OT systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2038 Develop system procurement specifications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2039 Determine the impact of cybersecurity requirements on costs and budgeting
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2040 Conduct cybersecurity reviews of OT system engineering plans and documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2041 Participate in safety system design processes to counteract potential cybersecurity sabotage
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2042 Generate cyberattack scenarios of serious physical consequence
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2043 Oversee implementation of system controls
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2044 Develop system upgrade specifications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2045 Assign networked engineering assets to security zones
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2046 Communicate implication of new and upgraded technologies to cybersecurity program stakeholders
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2047 Inventory OT assets
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2048 Recommend cybersecurity requirements for integration in continuity planning
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2049 Serve as OT engineering subject matter expert for cybersecurity standards, policies, and procedures development
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2050 Serve as OT engineering subject matter expert for development of organizational cybersecurity risk management plan
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT2051 Train cybersecurity defense technicians on OT system processes and procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yet
Knowledge
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- K0676Knowledge of cybersecurity laws and regulations
- K0677Knowledge of cybersecurity policies and procedures
- K0678Knowledge of privacy laws and regulations
- K0679Knowledge of privacy policies and procedures
- K0680Knowledge of cybersecurity principles and practices
- K0681Knowledge of privacy principles and practices
- K0721Knowledge of risk management principles and practices
- K0728Knowledge of Confidentiality, Integrity and Availability (CIA) principles and practices
- K0729Knowledge of non-repudiation principles and practices
- K0730Knowledge of cyber safety principles and practices
- K0734Knowledge of Risk Management Framework (RMF) requirements
- K0735Knowledge of risk management models and frameworks
- K0822Knowledge of risk tolerance principles and practices
- K0835Knowledge of risk assessment principles and practices
- K1076Knowledge of risk scoring principles and practices
- K1122Knowledge of configuration management principles and practices
- K1180Knowledge of organizational cybersecurity goals and objectives
- K1182Knowledge of organizational cybersecurity policies and configurations
- K1285Knowledge of assessment remediation requirements
- K1286Knowledge of Business Impact Analysis (BIA)
- K1287Knowledge of change management processes
- K1288Knowledge of OT cybersecurity compliance requirements and best practices
- K1289Knowledge of control system environment risks, threats, and vulnerabilities
- K1290Knowledge of the Active Cyber Defense Cycle (ACDC)
- K1291Knowledge of active defense principles and practices
- K1292Knowledge of OT cybersecurity risk tolerance levels
- K1293Knowledge of Purdue Model levels
- K1294Knowledge of change management policies and procedures
- K1295Knowledge of OT cybersecurity inspection and testing policies and procedures
- K1296Knowledge of control system policies and procedures
- K1297Knowledge of OT safety systems
- K1298Knowledge of anomaly detection tools and techniques
- K1300Knowledge of control system network architectures
- K1301Knowledge of cyber incidents impacting OT
- K1302Knowledge of industry hazards
- K1303Knowledge of life cycle management principles and practices
- K1304Knowledge of operational priorities
- K1305Knowledge of OT asset management tools and techniques
- K1306Knowledge of OT assets
- K1307Knowledge of OT inventory principles and practices
- K1308Knowledge of OT network detection tools and techniques
- K1309Knowledge of OT protocols
- K1310Knowledge of process hazard analysis (PHA) assessments
- K1311Knowledge of system assets and boundaries
Skills
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- S0141Skill in assessing security systems designs
- S0384Skill in applying standards
- S0385Skill in communicating complex concepts
- S0386Skill in communicating verbally
- S0387Skill in communicating in writing
- S0391Skill in creating technical documentation
- S0430Skill in collaborating with others
- S0459Skill in creating security assessment reports
- S0461Skill in integrating security requirements and contracts
- S0531Skill in assessing security hardware and software
- S0673Skill in translating operational requirements into security controls
- S0686Skill in performing risk assessments
- S0806Skill in performing incident responses
- S0939Skill in performing event analysis
- S0940Skill in performing risk-based gap analysis
- S0941Skill in identifying gaps in control system network and connectivity architecture
- S0942Skill in performing system recovery for control system environments
- S0943Skill in connecting to OT assets
- S0944Skill in designing and specifying OT systems
- S0945Skill in evaluating OT vendor products
- S0946Skill in interpreting OT network drawings
- S0947Skill in interpreting risk assessments
- S0948Skill in performing zone conduit requirement analysis
- S0949Skill in recognizing and acknowledging unique contributions from varying skillsets
- S0950Skill in reviewing access control lists and firewall rules
- S0951Skill in securing control system communication protocols and media
Workforce Automation analysis, not part of the source
O*NET jobs this role maps to
WFA · Part of the paid plan when accounts openJobs from the ETO-CSET NICE/O*NET crosswalk (2024), with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill. We haven’t mapped AI skills to this role’s own tasks yet; until then, these jobs show the coverage the role reaches through the occupations it maps to.
No jobs map to this role.
Equivalents
O*NET jobs
Mapped to this role by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3
Free · O*NET 30.3No O*NET job maps to this role.
DCWF work roles
From DoD DCWF Tool v5.3 (2026-09-25), linked by its NCWF ID or NICE's OPM code
Free · DoD DCWF Tool v5.3 (2026-09-25)No published DCWF equivalent.