Protection and Defense · PD-WRL-007 · OPM code 541
Vulnerability Analysis
From NICE Framework Components v2.2.0
Description
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0Responsible for assessing systems and networks to identify deviations from acceptable configurations, enclave policy, or local policy. Measure effectiveness of defense-in-depth architecture against known vulnerabilities.
Tasks
From NICE Framework Components v2.2.0, open one for the AI skills Workforce Automation maps to it
Free · NICE Framework Components v2.2.0T1020 Determine the operational and safety impacts of cybersecurity lapses
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1041 Determine impact of software configurations
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1069 Evaluate organizational cybersecurity policy regulatory compliance
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1070 Evaluate organizational cybersecurity policy alignment with organizational directives
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1079 Develop cybersecurity risk profiles
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1084 Identify anomalous network activity
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1091 Perform authorized penetration testing on enterprise network assets
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1118 Identify vulnerabilities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1119 Recommend vulnerability remediation strategies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1229 Maintain deployable cyber defense audit toolkits
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1279 Prepare audit reports
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1341 Perform required reviews
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1489 Correlate incident data
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1619 Perform risk and vulnerability assessments
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1620 Recommend cost-effective security controls
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yet
Knowledge
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- K0674Knowledge of computer networking protocols
- K0675Knowledge of risk management processes
- K0676Knowledge of cybersecurity laws and regulations
- K0677Knowledge of cybersecurity policies and procedures
- K0678Knowledge of privacy laws and regulations
- K0679Knowledge of privacy policies and procedures
- K0680Knowledge of cybersecurity principles and practices
- K0681Knowledge of privacy principles and practices
- K0682Knowledge of cybersecurity threats
- K0683Knowledge of cybersecurity vulnerabilities
- K0684Knowledge of cybersecurity threat characteristics
- K0685Knowledge of access control principles and practices
- K0686Knowledge of authentication and authorization tools and techniques
- K0688Knowledge of common application vulnerabilities
- K0698Knowledge of cryptographic key management principles and practices
- K0701Knowledge of data backup and recovery policies and procedures
- K0710Knowledge of enterprise cybersecurity architecture principles and practices
- K0716Knowledge of host access control (HAC) systems and software
- K0717Knowledge of network access control (NAC) systems and software
- K0728Knowledge of Confidentiality, Integrity and Availability (CIA) principles and practices
- K0729Knowledge of non-repudiation principles and practices
- K0730Knowledge of cyber safety principles and practices
- K0742Knowledge of identity and access management (IAM) principles and practices
- K0751Knowledge of system threats
- K0752Knowledge of system vulnerabilities
- K0760Knowledge of server diagnostic tools and techniques
- K0761Knowledge of Fault Detection and Diagnostics (FDD) tools and techniques
- K0770Knowledge of system administration principles and practices
- K0778Knowledge of enterprise information technology (IT) architecture principles and practices
- K0779Knowledge of systems engineering processes
- K0783Knowledge of network attack characteristics
- K0791Knowledge of defense-in-depth principles and practices
- K0797Knowledge of ethical hacking tools and techniques
- K0813Knowledge of interpreted and compiled programming language characteristics
- K0832Knowledge of cyberattack characteristics
- K0833Knowledge of cyberattack actor characteristics
- K0837Knowledge of hardening tools and techniques
- K0844Knowledge of cyber attack stages
- K0845Knowledge of cyber intrusion activity phases
- K0865Knowledge of data classification standards and best practices
- K0866Knowledge of data classification tools and techniques
- K0870Knowledge of enterprise architecture (EA) reference models and frameworks
- K0871Knowledge of enterprise architecture (EA) principles and practices
- K0879Knowledge of industry cybersecurity models and frameworks
- K0880Knowledge of access control models and frameworks
- K0882Knowledge of ethical hacking principles and practices
- K0891Knowledge of the Open Systems Interconnect (OSI) reference model
- K0915Knowledge of network architecture principles and practices
- K0924Knowledge of network analysis tools and techniques
- K0934Knowledge of data classification policies and procedures
- K0939Knowledge of packet-level analysis tools and techniques
- K0942Knowledge of cryptology principles and practices
- K0955Knowledge of penetration testing principles and practices
- K0956Knowledge of penetration testing tools and techniques
- K0969Knowledge of cyber-attack tools and techniques
- K0983Knowledge of computer networking principles and practices
- K1014Knowledge of network security principles and practices
- K1076Knowledge of risk scoring principles and practices
- K1079Knowledge of web application security risks
- K1087Knowledge of social engineering tools and techniques
- K1129Knowledge of cyber defense auditing laws and regulations
- K1130Knowledge of cyber defense auditing policies and practices
- K1182Knowledge of organizational cybersecurity policies and configurations
Skills
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- S0483Skill in identifying software communications vulnerabilities
- S0492Skill in performing threat environment analysis
- S0532Skill in analyzing software configurations
- S0543Skill in scanning for vulnerabilities
- S0544Skill in recognizing vulnerabilities
- S0572Skill in detecting host- and network-based intrusions
- S0574Skill in developing security system controls
- S0578Skill in evaluating security designs
- S0588Skill in performing threat modeling
- S0591Skill in performing social engineering
- S0597Skill in writing code in a currently supported programming language
- S0641Skill in reviewing logs
- S0642Skill in identifying evidence of past intrusions
- S0656Skill in assessing application vulnerabilities
- S0675Skill in optimizing system performance
- S0686Skill in performing risk assessments
- S0688Skill in performing network data analysis
- S0804Skill in assessing an organization's threat environment
Workforce Automation analysis, not part of the source
O*NET jobs this role maps to
WFA · Part of the paid plan when accounts openJobs from the ETO-CSET NICE/O*NET crosswalk (2024), with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill. We haven’t mapped AI skills to this role’s own tasks yet; until then, these jobs show the coverage the role reaches through the occupations it maps to.
- Information Security Analysts 15-1212.00DWAs covered10 of 10
- Penetration Testers 15-1299.04DWAs covered3 of 18
Equivalents
O*NET jobs
Mapped to this role by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3
Free · O*NET 30.3- Information Security Analysts 15-1212.00
- Penetration Testers 15-1299.04
DCWF work roles
From DoD DCWF Tool v5.3 (2026-09-25), linked by its NCWF ID or NICE's OPM code
Free · DoD DCWF Tool v5.3 (2026-09-25)- Vulnerability Assessment Analyst 541 · Cybersecurity · linked by DCWF Tool NCWF ID