Oversight and Governance · OG-WRL-014 · OPM code 722
Systems Security Management
From NICE Framework Components v2.2.0
Description
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0Responsible for managing the cybersecurity of a program, organization, system, or enclave.
Tasks
From NICE Framework Components v2.2.0, open one for the AI skills Workforce Automation maps to it
Free · NICE Framework Components v2.2.0T1019 Determine special needs of cyber-physical systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1020 Determine the operational and safety impacts of cybersecurity lapses
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1022 Review enterprise information technology (IT) goals and objectives
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1023 Identify critical technology procurement requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1026 Determine procurement requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1052 Integrate black-box security testing tools into quality assurance processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1056 Acquire resources to support cybersecurity program goals and objectives
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1057 Conduct an effective enterprise continuity of operations program
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1058 Advise senior management on risk levels and security posture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1059 Perform cost/benefit analyses of cybersecurity programs, policies, processes, systems, and elements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1060 Advise senior management on organizational cybersecurity efforts
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1061 Advise senior leadership and authorizing official of changes affecting the organization's cybersecurity posture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1086 Collect and maintain system cybersecurity report data
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1087 Create system cybersecurity reports
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1088 Communicate the value of cybersecurity to organizational stakeholders
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1113 Develop the enterprise continuity of operations strategy
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1114 Establish the enterprise continuity of operations program
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1178 Determine if security improvement actions are evaluated, validated, and implemented as required
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1180 Determine if cybersecurity inspections, tests, and reviews are coordinated for the network environment
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1181 Determine if cybersecurity requirements are integrated into continuity planning
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1182 Determine if security engineering is used when acquiring or developing protection and detection capabilities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1183 Determine if protection and detection capabilities are consistent with organization-level cybersecurity architecture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1186 Establish enterprise information security architecture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1188 Determine if baseline security safeguards are appropriately installed
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1201 Determine implications of new and upgraded technologies to the cybersecurity program
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1221 Disseminate incident and other Computer Network Defense (CND) information
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1222 Determine security requirements for new information technologies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1223 Determine security requirements for new operational technologies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1224 Determine impact of noncompliance on organizational risk levels
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1225 Determine impact of noncompliance on effectiveness of the enterprise's cybersecurity program
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1226 Align cybersecurity priorities with organizational security strategy
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1227 Manage cybersecurity budget, staffing, and contracting
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1233 Monitor cybersecurity data sources
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1234 Develop Computer Network Defense (CND) guidance for organizational stakeholders
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1235 Manage threat and target analysis
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1236 Manage the production of threat information
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1238 Determine the effectiveness of enterprise cybersecurity safeguards
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1245 Oversee the cybersecurity training and awareness program
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1246 Establish Security Assessment and Authorization processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1247 Develop computer environment cybersecurity plans and requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1284 Develop standard operating procedures for secure network system operations
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1285 Distribute standard operating procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1286 Maintain standard operating procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1291 Advise stakeholders on the development of continuity of operations plans
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1293 Advise on security requirements to be included in statements of work
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1295 Provide cybersecurity awareness and training
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1298 Communicate situational awareness information to leadership
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1300 Report cybersecurity incidents
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1304 Recommend organizational cybersecurity resource allocations
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1307 Develop cybersecurity policy recommendations
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1308 Coordinate cybersecurity policy review and approval processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1310 Implement protective or corrective measures when a cybersecurity incident or vulnerability is discovered
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1317 Determine if appropriate threat mitigation actions have been taken
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1321 Manage computing environment system operations
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1335 Promote cybersecurity awareness to management
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1336 Verify the inclusion of sound cybersecurity principles in the organization's vision and goals
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1342 Oversee policy standards and implementation strategy development
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1343 Provide cybersecurity guidance to organizational risk governance processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1344 Determine if procurement activities sufficiently address supply chain risks
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1345 Recommend improvements to procurement activities to address cybersecurity requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1354 Identify system cybersecurity requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1355 Determine if vulnerability remediation plans are in place
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1356 Develop vulnerability remediation plans
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1357 Determine if cybersecurity requirements have been successfully implemented
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1358 Determine the effectiveness of organizational cybersecurity policies and procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1368 Support cybersecurity compliance activities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1369 Determine if acquisitions, procurement, and outsourcing efforts address cybersecurity requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1373 Determine organizational compliance
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1374 Forecast ongoing service demands
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1375 Conduct periodic reviews of security assumptions
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1376 Develop critical infrastructure protection policies and procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1377 Implement critical infrastructure protection policies and procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1476 Promote awareness of cybersecurity policy and strategy among management
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1586 Conduct cybersecurity risk assessments
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1601 Advise stakeholders on enterprise cybersecurity risk management
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1602 Advise stakeholders on supply chain risk management
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yet
Knowledge
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- K0092Knowledge of technology integration processes
- K0674Knowledge of computer networking protocols
- K0675Knowledge of risk management processes
- K0676Knowledge of cybersecurity laws and regulations
- K0677Knowledge of cybersecurity policies and procedures
- K0678Knowledge of privacy laws and regulations
- K0679Knowledge of privacy policies and procedures
- K0680Knowledge of cybersecurity principles and practices
- K0681Knowledge of privacy principles and practices
- K0682Knowledge of cybersecurity threats
- K0683Knowledge of cybersecurity vulnerabilities
- K0684Knowledge of cybersecurity threat characteristics
- K0685Knowledge of access control principles and practices
- K0686Knowledge of authentication and authorization tools and techniques
- K0687Knowledge of business operations standards and best practices
- K0701Knowledge of data backup and recovery policies and procedures
- K0709Knowledge of business continuity and disaster recovery (BCDR) policies and procedures
- K0710Knowledge of enterprise cybersecurity architecture principles and practices
- K0716Knowledge of host access control (HAC) systems and software
- K0717Knowledge of network access control (NAC) systems and software
- K0721Knowledge of risk management principles and practices
- K0723Knowledge of vulnerability data sources
- K0724Knowledge of incident response principles and practices
- K0725Knowledge of incident response tools and techniques
- K0726Knowledge of incident handling tools and techniques
- K0727Knowledge of analysis standards and best practices
- K0731Knowledge of systems security engineering (SSE) principles and practices
- K0732Knowledge of intrusion detection tools and techniques
- K0734Knowledge of Risk Management Framework (RMF) requirements
- K0735Knowledge of risk management models and frameworks
- K0736Knowledge of information technology (IT) security principles and practices
- K0740Knowledge of system performance indicators
- K0741Knowledge of system availability measures
- K0743Knowledge of new and emerging technologies
- K0744Knowledge of operating system (OS) systems and software
- K0746Knowledge of policy-based access controls
- K0747Knowledge of Risk Adaptive (Adaptable) Access Controls (RAdAC)
- K0749Knowledge of process engineering principles and practices
- K0751Knowledge of system threats
- K0752Knowledge of system vulnerabilities
- K0754Knowledge of resource management principles and practices
- K0758Knowledge of server administration principles and practices
- K0759Knowledge of client and server architecture
- K0765Knowledge of software engineering principles and practices
- K0769Knowledge of system design standards and best practices
- K0770Knowledge of system administration principles and practices
- K0771Knowledge of system life cycle management principles and practices
- K0778Knowledge of enterprise information technology (IT) architecture principles and practices
- K0779Knowledge of systems engineering processes
- K0783Knowledge of network attack characteristics
- K0791Knowledge of defense-in-depth principles and practices
- K0798Knowledge of program management principles and practices
- K0799Knowledge of project management principles and practices
- K0803Knowledge of supply chain risk management principles and practices
- K0818Knowledge of new and emerging cybersecurity risks
- K0820Knowledge of supply chain risks
- K0822Knowledge of risk tolerance principles and practices
- K0823Knowledge of incident response policies and procedures
- K0824Knowledge of incident response roles and responsibilities
- K0825Knowledge of threat vector characteristics
- K0827Knowledge of software quality assurance (SQA) principles and practices
- K0831Knowledge of network attack vectors
- K0834Knowledge of technology procurement principles and practices
- K0837Knowledge of hardening tools and techniques
- K0838Knowledge of supply chain risk management policies and procedures
- K0839Knowledge of critical infrastructure systems and software
- K0840Knowledge of hardware reverse engineering tools and techniques
- K0842Knowledge of software reverse engineering tools and techniques
- K0848Knowledge of network systems management principles and practices
- K0849Knowledge of network systems management tools and techniques
- K0851Knowledge of reverse engineering principles and practices
- K0859Knowledge of encryption tools and techniques
- K0865Knowledge of data classification standards and best practices
- K0866Knowledge of data classification tools and techniques
- K0870Knowledge of enterprise architecture (EA) reference models and frameworks
- K0871Knowledge of enterprise architecture (EA) principles and practices
- K0877Knowledge of application firewall principles and practices
- K0878Knowledge of network firewall principles and practices
- K0891Knowledge of the Open Systems Interconnect (OSI) reference model
- K0892Knowledge of cyber defense laws and regulations
- K0915Knowledge of network architecture principles and practices
- K0917Knowledge of Personally Identifiable Information (PII) data security standards and best practices
- K0918Knowledge of Payment Card Industry (PCI) data security standards and best practices
- K0919Knowledge of Personal Health Information (PHI) data security standards and best practices
- K0928Knowledge of systems engineering principles and practices
- K0934Knowledge of data classification policies and procedures
- K0947Knowledge of computer engineering principles and practices
- K0955Knowledge of penetration testing principles and practices
- K0956Knowledge of penetration testing tools and techniques
- K0962Knowledge of targeting laws and regulations
- K0963Knowledge of exploitation laws and regulations
- K0983Knowledge of computer networking principles and practices
- K1014Knowledge of network security principles and practices
- K1050Knowledge of critical information requirements
- K1077Knowledge of data security controls
- K1079Knowledge of web application security risks
- K1084Knowledge of data privacy controls
- K1093Knowledge of black-box software testing
- K1133Knowledge of cybersecurity engineering
- K1137Knowledge of cybersecurity requirements
- K1171Knowledge of mission assurance practices and principles
- K1179Knowledge of organization's security strategy
- K1180Knowledge of organizational cybersecurity goals and objectives
- K1183Knowledge of organizational cybersecurity policies and procedures
- K1188Knowledge of organizational policies and procedures
- K1189Knowledge of organizational policy and procedures
- K1209Knowledge of risk mitigation principles and practices
- K1225Knowledge of system life cycles
Skills
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- S0462Skill in integrating information security requirements in the acquisitions process
- S0463Skill in implementing software quality control processes
- S0465Skill in identifying critical infrastructure systems
- S0466Skill in identifying systems designed without security considerations
- S0479Skill in evaluating supplier trustworthiness
- S0509Skill in evaluating security products
- S0564Skill in creating system security policies
- S0572Skill in detecting host- and network-based intrusions
- S0574Skill in developing security system controls
- S0578Skill in evaluating security designs
- S0616Skill in applying black-box software testing
- S0617Skill in interpreting signatures
- S0826Skill in communicating with external organizations
- S0841Skill in identifying possible security violations
- S0850Skill in performing cost/benefit analysis
- S0858Skill in performing economic analysis
- S0878Skill in performing risk analysis
Workforce Automation analysis, not part of the source
O*NET jobs this role maps to
WFA · Part of the paid plan when accounts openJobs from the ETO-CSET NICE/O*NET crosswalk (2024), with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill. We haven’t mapped AI skills to this role’s own tasks yet; until then, these jobs show the coverage the role reaches through the occupations it maps to.
- Information Technology Project Managers 15-1299.09DWAs covered3 of 18
- Computer and Information Systems Managers 11-3021.00DWAs covered0 of 24
Equivalents
O*NET jobs
Mapped to this role by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3
Free · O*NET 30.3- Information Technology Project Managers 15-1299.09
- Computer and Information Systems Managers 11-3021.00
DCWF work roles
From DoD DCWF Tool v5.3 (2026-09-25), linked by its NCWF ID or NICE's OPM code
Free · DoD DCWF Tool v5.3 (2026-09-25)- Information Systems Security Manager 722 · Cybersecurity · linked by DCWF Tool NCWF ID