Oversight and Governance · OG-WRL-007 · OPM code 901
Executive Cybersecurity Leadership
From NICE Framework Components v2.2.0
Description
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0Responsible for establishing vision and direction for an organization's cybersecurity operations and resources and their impact on digital and physical spaces. Possesses authority to make and execute decisions that impact an organization broadly, including policy approval and stakeholder engagement.
Tasks
From NICE Framework Components v2.2.0, open one for the AI skills Workforce Automation maps to it
Free · NICE Framework Components v2.2.0T0006 Advocate organization's official position in legal and legislative proceedings
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1020 Determine the operational and safety impacts of cybersecurity lapses
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1036 Integrate leadership priorities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1038 Integrate organization objectives in intelligence collection
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1054 Scope analysis reports to various audiences that accounts for data sharing classification restrictions
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1055 Determine if priority information requirements are satisfied
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1056 Acquire resources to support cybersecurity program goals and objectives
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1057 Conduct an effective enterprise continuity of operations program
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1059 Perform cost/benefit analyses of cybersecurity programs, policies, processes, systems, and elements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1060 Advise senior management on organizational cybersecurity efforts
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1088 Communicate the value of cybersecurity to organizational stakeholders
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1145 Develop strategic plans
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1146 Maintain strategic plans
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1221 Disseminate incident and other Computer Network Defense (CND) information
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1226 Align cybersecurity priorities with organizational security strategy
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1227 Manage cybersecurity budget, staffing, and contracting
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1234 Develop Computer Network Defense (CND) guidance for organizational stakeholders
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1238 Determine the effectiveness of enterprise cybersecurity safeguards
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1307 Develop cybersecurity policy recommendations
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1308 Coordinate cybersecurity policy review and approval processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1310 Implement protective or corrective measures when a cybersecurity incident or vulnerability is discovered
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1335 Promote cybersecurity awareness to management
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1336 Verify the inclusion of sound cybersecurity principles in the organization's vision and goals
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1342 Oversee policy standards and implementation strategy development
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1354 Identify system cybersecurity requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1355 Determine if vulnerability remediation plans are in place
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1356 Develop vulnerability remediation plans
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1376 Develop critical infrastructure protection policies and procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1377 Implement critical infrastructure protection policies and procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1450 Allocate and distribute human capital assets
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1476 Promote awareness of cybersecurity policy and strategy among management
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1518 Develop organizational cybersecurity strategy
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1543 Develop cybersecurity policies and procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1586 Conduct cybersecurity risk assessments
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1779 Coordinate strategic planning efforts with internal and external partners
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1862 Establish cybersecurity risk assessment processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1906 Establish a cybersecurity risk management program
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yet
Knowledge
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- K0644Knowledge of cybersecurity operation policies and procedures
- K0674Knowledge of computer networking protocols
- K0675Knowledge of risk management processes
- K0676Knowledge of cybersecurity laws and regulations
- K0677Knowledge of cybersecurity policies and procedures
- K0678Knowledge of privacy laws and regulations
- K0679Knowledge of privacy policies and procedures
- K0680Knowledge of cybersecurity principles and practices
- K0681Knowledge of privacy principles and practices
- K0682Knowledge of cybersecurity threats
- K0683Knowledge of cybersecurity vulnerabilities
- K0684Knowledge of cybersecurity threat characteristics
- K0688Knowledge of common application vulnerabilities
- K0689Knowledge of network infrastructure principles and practices
- K0728Knowledge of Confidentiality, Integrity and Availability (CIA) principles and practices
- K0729Knowledge of non-repudiation principles and practices
- K0730Knowledge of cyber safety principles and practices
- K0743Knowledge of new and emerging technologies
- K0751Knowledge of system threats
- K0752Knowledge of system vulnerabilities
- K0783Knowledge of network attack characteristics
- K0784Knowledge of insider threat laws and regulations
- K0785Knowledge of insider threat tools and techniques
- K0800Knowledge of evidence admissibility laws and regulations
- K0818Knowledge of new and emerging cybersecurity risks
- K0819Knowledge of import and export control laws and regulations
- K0820Knowledge of supply chain risks
- K0821Knowledge of federal agency roles and responsibilities
- K0825Knowledge of threat vector characteristics
- K0831Knowledge of network attack vectors
- K0839Knowledge of critical infrastructure systems and software
- K0892Knowledge of cyber defense laws and regulations
- K0936Knowledge of network hardware threats and vulnerabilities
- K0983Knowledge of computer networking principles and practices
- K0990Knowledge of cyber operations principles and practices
- K1014Knowledge of network security principles and practices
- K1025Knowledge of decision-making policies and procedures
- K1079Knowledge of web application security risks
- K1083Knowledge of cybersecurity competitions
- K1180Knowledge of organizational cybersecurity goals and objectives
- K1183Knowledge of organizational cybersecurity policies and procedures
- K1188Knowledge of organizational policies and procedures
- K1209Knowledge of risk mitigation principles and practices
- K1225Knowledge of system life cycles
Skills
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- S0111Skill in interfacing with customers
- S0406Skill in developing policy plans
- S0414Skill in evaluating laws
- S0415Skill in evaluating regulations
- S0416Skill in evaluating policies
- S0431Skill in applying critical thinking
- S0506Skill in identifying customer information needs
- S0511Skill in establishing priorities
- S0564Skill in creating system security policies
- S0610Skill in communicating effectively
- S0686Skill in performing risk assessments
- S0707Skill in developing comprehensive cyber operations assessment programs
- S0708Skill in executing comprehensive cyber operations assessment programs
- S0799Skill in anticipating new security threats
- S0800Skill in analyzing organizational patterns and relationships
- S0807Skill in solving problems
- S0821Skill in collaborating with internal and external stakeholders
- S0826Skill in communicating with external organizations
Workforce Automation analysis, not part of the source
O*NET jobs this role maps to
WFA · Part of the paid plan when accounts openJobs from the ETO-CSET NICE/O*NET crosswalk (2024), with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill. We haven’t mapped AI skills to this role’s own tasks yet; until then, these jobs show the coverage the role reaches through the occupations it maps to.
- Information Technology Project Managers 15-1299.09DWAs covered3 of 18
- Computer and Information Systems Managers 11-3021.00DWAs covered0 of 24
Equivalents
O*NET jobs
Mapped to this role by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3
Free · O*NET 30.3- Information Technology Project Managers 15-1299.09
- Computer and Information Systems Managers 11-3021.00
DCWF work roles
From DoD DCWF Tool v5.3 (2026-09-25), linked by its NCWF ID or NICE's OPM code
Free · DoD DCWF Tool v5.3 (2026-09-25)- Executive Cyber Leader 901 · Cyber Enablers · linked by DCWF Tool NCWF ID