Oversight and Governance · OG-WRL-002 · OPM code 752
Cybersecurity Policy and Planning
From NICE Framework Components v2.2.0
Description
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0Responsible for developing and maintaining cybersecurity plans, strategy, and policy to support and align with organizational cybersecurity initiatives and regulatory compliance.
Tasks
From NICE Framework Components v2.2.0, open one for the AI skills Workforce Automation maps to it
Free · NICE Framework Components v2.2.0T0226 Serve on agency and interagency policy boards
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1020 Determine the operational and safety impacts of cybersecurity lapses
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1028 Research new vulnerabilities in emerging technologies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1107 Evaluate functional requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1158 Develop cybersecurity implementation policies and guidelines
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1184 Establish stakeholder communication channels
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1185 Maintain stakeholder communication channels
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1306 Conduct technology program and project audits
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1335 Promote cybersecurity awareness to management
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1336 Verify the inclusion of sound cybersecurity principles in the organization's vision and goals
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1357 Determine if cybersecurity requirements have been successfully implemented
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1358 Determine the effectiveness of organizational cybersecurity policies and procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1394 Develop independent cybersecurity audit processes for application software, networks, and systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1395 Implement independent cybersecurity audit processes for application software, networks, and systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1396 Oversee independent cybersecurity audits
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1397 Determine if research and design processes and procedures are in compliance with cybersecurity requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1398 Determine if research and design processes and procedures are accurately followed by cybersecurity staff when performing their day-to-day activities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1436 Acquire adequate funding for cybersecurity training
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1464 Determine if cybersecurity workforce management policies and procedures comply with legal and organizational requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1476 Promote awareness of cybersecurity policy and strategy among management
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1482 Conduct cybersecurity workforce assessments
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1492 Integrate laws and regulations into policy
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1518 Develop organizational cybersecurity strategy
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1543 Develop cybersecurity policies and procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1605 Advise management, staff, and users on cybersecurity policy
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yet
Knowledge
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- K0674Knowledge of computer networking protocols
- K0675Knowledge of risk management processes
- K0676Knowledge of cybersecurity laws and regulations
- K0677Knowledge of cybersecurity policies and procedures
- K0678Knowledge of privacy laws and regulations
- K0679Knowledge of privacy policies and procedures
- K0680Knowledge of cybersecurity principles and practices
- K0681Knowledge of privacy principles and practices
- K0682Knowledge of cybersecurity threats
- K0683Knowledge of cybersecurity vulnerabilities
- K0684Knowledge of cybersecurity threat characteristics
- K0691Knowledge of cyber defense tools and techniques
- K0692Knowledge of vulnerability assessment tools and techniques
- K0743Knowledge of new and emerging technologies
- K0751Knowledge of system threats
- K0752Knowledge of system vulnerabilities
- K0773Knowledge of telecommunications principles and practices
- K0812Knowledge of digital communication systems and software
- K0892Knowledge of cyber defense laws and regulations
- K0943Knowledge of industry indicators
- K0962Knowledge of targeting laws and regulations
- K0963Knowledge of exploitation laws and regulations
- K0969Knowledge of cyber-attack tools and techniques
- K0983Knowledge of computer networking principles and practices
- K0990Knowledge of cyber operations principles and practices
- K1014Knowledge of network security principles and practices
- K1023Knowledge of network exploitation tools and techniques
- K1079Knowledge of web application security risks
- K1137Knowledge of cybersecurity requirements
- K1180Knowledge of organizational cybersecurity goals and objectives
- K1183Knowledge of organizational cybersecurity policies and procedures
- K1186Knowledge of organizational human resource (HR) policies and procedures
- K1206Knowledge of research and design processes and procedures
Skills
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- S0406Skill in developing policy plans
- S0497Skill in developing client organization profiles
- S0515Skill in identifying partner capabilities
- S0519Skill in detecting exploitation activities
- S0687Skill in performing administrative planning activities
- S0712Skill in evaluating data source quality
- S0713Skill in evaluating information quality
- S0729Skill in preparing plans
- S0821Skill in collaborating with internal and external stakeholders
Workforce Automation analysis, not part of the source
O*NET jobs this role maps to
WFA · Part of the paid plan when accounts openJobs from the ETO-CSET NICE/O*NET crosswalk (2024), with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill. We haven’t mapped AI skills to this role’s own tasks yet; until then, these jobs show the coverage the role reaches through the occupations it maps to.
- Information Technology Project Managers 15-1299.09DWAs covered3 of 18
- Computer and Information Systems Managers 11-3021.00DWAs covered0 of 24
Equivalents
O*NET jobs
Mapped to this role by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3
Free · O*NET 30.3- Information Technology Project Managers 15-1299.09
- Computer and Information Systems Managers 11-3021.00
DCWF work roles
From DoD DCWF Tool v5.3 (2026-09-25), linked by its NCWF ID or NICE's OPM code
Free · DoD DCWF Tool v5.3 (2026-09-25)- Cyber Policy and Strategy Planner 752 · Cyber Enablers · linked by DCWF Tool NCWF ID