Implementation and Operation · IO-WRL-006 · OPM code 461
Systems Security Analysis
From NICE Framework Components v2.2.0
Description
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0Responsible for developing and analyzing the integration, testing, operations, and maintenance of systems security. Prepares, performs, and manages the security aspects of implementing and operating a system.
Tasks
From NICE Framework Components v2.2.0, open one for the AI skills Workforce Automation maps to it
Free · NICE Framework Components v2.2.0T0309 Assess the effectiveness of security controls
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1020 Determine the operational and safety impacts of cybersecurity lapses
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1023 Identify critical technology procurement requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1075 Implement application cybersecurity policies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1076 Implement system cybersecurity policies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1077 Assess the organization's cybersecurity architecture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1172 Determine if systems security operations and maintenance activities are property documented and updated
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1173 Determine that the application of security patches for commercial products meets timeline requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1174 Document commercial product timeline requirements dictated by the management authority for intended operational environments
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1176 Determine if cybersecurity-enabled products reduce identified risk to acceptable levels
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1177 Determine if security control technologies reduce identified risk to acceptable levels
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1212 Implement cybersecurity countermeasures for systems and applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1218 Integrate automated capabilities for updating or patching system software
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1219 Develop processes and procedures for manual updating and patching of system software
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1255 Perform cybersecurity testing of developed applications and systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1263 Perform security reviews
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1264 Identify gaps in security architecture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1265 Develop a cybersecurity risk management plan
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1278 Recommend system modifications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1287 Document systems security activities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1294 Advise on Risk Management Framework process activities and documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1327 Update security documentation to reflect current application and system security design features
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1437 Determine effectiveness of configuration management processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1522 Determine if systems meet minimum security requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1532 Develop procedures for system operations transfer to alternate sites
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1533 Test failover for system operations transfer to alternative sites
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1539 Analyze organizational cybersecurity posture trends
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1540 Develop organizational cybersecurity posture trend reports
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1541 Develop system security posture trend reports
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1548 Determine adequacy of access controls
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1550 Execute disaster recovery and continuity of operations processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1557 Implement security measures for systems and system components
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1559 Resolve vulnerabilities in systems and system components
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1560 Mitigate risks in systems and system components
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1563 Implement system security measures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1568 Implement cross-domain solutions
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1574 Develop risk acceptance documentation for senior leaders and authorized representatives
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1583 Determine effectiveness of system implementation and testing processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1584 Establish minimum security requirements for applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1585 Determine if applications meet minimum security requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1603 Recommend threat and vulnerability risk mitigation strategies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1615 Advise stakeholders on vulnerability compliance
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1616 Resolve computer security incidents
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1618 Advise stakeholders on disaster recovery, contingency, and continuity of operations plans
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yet
Knowledge
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- K0674Knowledge of computer networking protocols
- K0675Knowledge of risk management processes
- K0676Knowledge of cybersecurity laws and regulations
- K0677Knowledge of cybersecurity policies and procedures
- K0678Knowledge of privacy laws and regulations
- K0679Knowledge of privacy policies and procedures
- K0680Knowledge of cybersecurity principles and practices
- K0681Knowledge of privacy principles and practices
- K0682Knowledge of cybersecurity threats
- K0683Knowledge of cybersecurity vulnerabilities
- K0684Knowledge of cybersecurity threat characteristics
- K0685Knowledge of access control principles and practices
- K0686Knowledge of authentication and authorization tools and techniques
- K0694Knowledge of computer algorithm capabilities and applications
- K0698Knowledge of cryptographic key management principles and practices
- K0707Knowledge of database systems and software
- K0710Knowledge of enterprise cybersecurity architecture principles and practices
- K0719Knowledge of human-computer interaction (HCI) principles and practices
- K0721Knowledge of risk management principles and practices
- K0723Knowledge of vulnerability data sources
- K0728Knowledge of Confidentiality, Integrity and Availability (CIA) principles and practices
- K0729Knowledge of non-repudiation principles and practices
- K0730Knowledge of cyber safety principles and practices
- K0731Knowledge of systems security engineering (SSE) principles and practices
- K0734Knowledge of Risk Management Framework (RMF) requirements
- K0735Knowledge of risk management models and frameworks
- K0736Knowledge of information technology (IT) security principles and practices
- K0739Knowledge of mathematics principles and practices
- K0742Knowledge of identity and access management (IAM) principles and practices
- K0744Knowledge of operating system (OS) systems and software
- K0745Knowledge of parallel and distributed computing principles and practices
- K0749Knowledge of process engineering principles and practices
- K0751Knowledge of system threats
- K0752Knowledge of system vulnerabilities
- K0755Knowledge of configuration management (CM) tools and techniques
- K0756Knowledge of security management principles and practices
- K0757Knowledge of system design tools and techniques
- K0758Knowledge of server administration principles and practices
- K0759Knowledge of client and server architecture
- K0765Knowledge of software engineering principles and practices
- K0772Knowledge of systems testing and evaluation tools and techniques
- K0773Knowledge of telecommunications principles and practices
- K0778Knowledge of enterprise information technology (IT) architecture principles and practices
- K0779Knowledge of systems engineering processes
- K0791Knowledge of defense-in-depth principles and practices
- K0803Knowledge of supply chain risk management principles and practices
- K0820Knowledge of supply chain risks
- K0834Knowledge of technology procurement principles and practices
- K0840Knowledge of hardware reverse engineering tools and techniques
- K0842Knowledge of software reverse engineering tools and techniques
- K0848Knowledge of network systems management principles and practices
- K0849Knowledge of network systems management tools and techniques
- K0851Knowledge of reverse engineering principles and practices
- K0859Knowledge of encryption tools and techniques
- K0865Knowledge of data classification standards and best practices
- K0866Knowledge of data classification tools and techniques
- K0870Knowledge of enterprise architecture (EA) reference models and frameworks
- K0871Knowledge of enterprise architecture (EA) principles and practices
- K0872Knowledge of service management principles and practices
- K0873Knowledge of service management standards and best practices
- K0877Knowledge of application firewall principles and practices
- K0878Knowledge of network firewall principles and practices
- K0879Knowledge of industry cybersecurity models and frameworks
- K0880Knowledge of access control models and frameworks
- K0894Knowledge of computer architecture principles and practices
- K0915Knowledge of network architecture principles and practices
- K0917Knowledge of Personally Identifiable Information (PII) data security standards and best practices
- K0918Knowledge of Payment Card Industry (PCI) data security standards and best practices
- K0919Knowledge of Personal Health Information (PHI) data security standards and best practices
- K0920Knowledge of risk management policies and procedures
- K0924Knowledge of network analysis tools and techniques
- K0928Knowledge of systems engineering principles and practices
- K0930Knowledge of credential management systems and software
- K0931Knowledge of data-at-rest encryption (DARE) standards and best practices
- K0932Knowledge of cryptographic key storage systems and software
- K0934Knowledge of data classification policies and procedures
- K0937Knowledge of countermeasure design principles and practices
- K0942Knowledge of cryptology principles and practices
- K0947Knowledge of computer engineering principles and practices
- K0948Knowledge of embedded systems and software
- K0983Knowledge of computer networking principles and practices
- K1014Knowledge of network security principles and practices
- K1050Knowledge of critical information requirements
- K1120Knowledge of Confidentiality, Integrity, Availability, Authenticity, and Non-repudiation (CIAAN) principles and practices
- K1216Knowledge of service-oriented security architecture practices and principles
- K1222Knowledge of system availability requirements
Skills
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- S0141Skill in assessing security systems designs
- S0479Skill in evaluating supplier trustworthiness
- S0480Skill in evaluating product trustworthiness
- S0483Skill in identifying software communications vulnerabilities
- S0484Skill in developing user credential management systems
- S0485Skill in implementing user credential management systems
- S0486Skill in implementing enterprise key escrow systems
- S0543Skill in scanning for vulnerabilities
- S0544Skill in recognizing vulnerabilities
- S0570Skill in designing the integration of hardware solutions
- S0571Skill in designing the integration of software solutions
- S0574Skill in developing security system controls
- S0578Skill in evaluating security designs
- S0597Skill in writing code in a currently supported programming language
- S0667Skill in assessing security controls
- S0674Skill in installing system and component upgrades
- S0675Skill in optimizing system performance
- S0688Skill in performing network data analysis
Workforce Automation analysis, not part of the source
O*NET jobs this role maps to
WFA · Part of the paid plan when accounts openJobs from the ETO-CSET NICE/O*NET crosswalk (2024), with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill. We haven’t mapped AI skills to this role’s own tasks yet; until then, these jobs show the coverage the role reaches through the occupations it maps to.
- Computer Systems Analysts 15-1211.00DWAs covered10 of 26
- Information Security Engineers 15-1299.05DWAs covered5 of 21
Equivalents
O*NET jobs
Mapped to this role by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3
Free · O*NET 30.3- Computer Systems Analysts 15-1211.00
- Information Security Engineers 15-1299.05
DCWF work roles
From DoD DCWF Tool v5.3 (2026-09-25), linked by its NCWF ID or NICE's OPM code
Free · DoD DCWF Tool v5.3 (2026-09-25)- Systems Security Analyst 461 · Software Engineering · linked by DCWF Tool NCWF ID