role	role_level	band	skill	skill_source	pcf_reference	esco_reference	expected_level	expected_level_number	expected_level_description	self_rating	manager_rating	gap	evidence	development_action
Cyber security manager	Senior cyber security manager	8b	Cyber security governance	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/4918ec9a-0204-4935-8b09-b0112370daa8; http://data.europa.eu/esco/skill/37bc4dc0-1233-4008-98db-1116d0c1cfcc; http://data.europa.eu/esco/skill/06358891-8424-43c5-891e-d40f226bef40	practitioner	3	*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: - develop an effective cyber and information security governance framework that is integrated with overall organisational governance - prioritise issues affecting the organisation’s ability to meet security policies and follow standards - lead a continuous review process to ensure governance meets changing regulations, legislation and best practices - mitigate risks caused by unavoidable exceptions to the governance framework Examples of leadership using this skill: - escalating risks to the highest level in the organisation when governance issues do not have defined owners - persuading others to use their financial resources for changes needed to comply with the framework - helping stakeholders be aware of the risks that are caused when an exception is agreed					
Cyber security manager	Senior cyber security manager	8b	Cyber risk management	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/69cfc5ed-6569-4aca-a4cc-fd782ba51d9c; http://data.europa.eu/esco/skill/fe1c2b32-7fe9-4668-affa-07ff658a68cf; http://data.europa.eu/esco/skill/96ec2d53-4f41-4172-8ef2-70742c4bb540	practitioner	3	*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: - maintain a clear understanding of the cyber and information security risks across the whole organisation - develop and implement risk assessment processes - oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities Examples of leadership using this skill: - building a culture where teams have awareness of, and take responsibility for, risks and mitigating them - advising programme owners and people running IT services about risks in a way that enables them to act on that advice - communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk					
Cyber security manager	Senior cyber security manager	8b	Cyber incident management	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/8181aa4c-42bc-4036-a3d2-5cb6bbb34239; http://data.europa.eu/esco/skill/8071881c-d652-46e7-9cf4-e06a7f1e57c7; http://data.europa.eu/esco/skill/440d5784-52a5-4729-8b04-29f978bd896d	practitioner	3	*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: - implement cyber incident management processes that reflect the level of risk accepted by the organisation - ensure the organisation is prepared for and can effectively respond to incidents - determine the impact of critical incidents on the organisation’s technology - lead the response to critical incidents that affect the whole organisation Examples of leadership using this skill: - helping the incident management team build relationships with senior leaders - leading simulation exercises with the board so they understand their role in incident response processes and the implications of potential incidents - assessing what to communicate to the board, ministers or the whole organisation, and when to do it					
Cyber security manager	Senior cyber security manager	8b	Changing security culture	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/54d774a3-de3b-4425-b0d7-c03bc99a0937; http://data.europa.eu/esco/skill/6aef2baa-5fa7-4c16-bd28-3e070ec4e4df; http://data.europa.eu/esco/skill/a8f2a095-9d03-43f0-980d-2b9fcc59a994	practitioner	3	*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: - put in place continuous cyber and information security awareness and education programs, for example, training for specific groups - use a range of methods to assess whether people’s security behaviour is improving - compare the maturity of security awareness and culture in your organisation against others across government to determine effective improvements Examples of leadership using this skill: - incentivising the right behaviours across the whole organisation so that everyone knows how they contribute to security - persuading senior leadership to represent a campaign personally - communicating insights from previous incidents to ensure they are learned from					
Cyber security manager	Senior cyber security manager	8b	Strategic cyber security planning	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/3579208e-49b3-4ce4-98e7-20e41b1ce8d4; http://data.europa.eu/esco/skill/11eebd42-44ab-401d-8a2c-bdb9fc9beb50	working	2	*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: - determine the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress - decide areas that need security investment - create a security roadmap that enables the organisation to achieve its objectives Examples of leadership using this skill: - explaining the mutual benefits of the security strategy to a range of stakeholders and teams to bring them onboard - advising other leaders on how to integrate security requirements in their strategies - ensuring security is part of all the organisation's initiatives, despite competing priorities - gaining support for investment in security from other leaders					
Cyber security manager	Senior cyber security manager	8b	Information governance and data protection	this reference		http://data.europa.eu/esco/skill/a4346013-a967-4a58-a533-6b32ad1364c5; http://data.europa.eu/esco/skill/51ece34f-c24e-4183-9bf4-9b6f28748aec; http://data.europa.eu/esco/skill/097c6a36-f031-4d3e-b5c1-62d6ffcb430b	practitioner	3	You can: - lead data protection impact assessments and information sharing agreements - advise teams on lawful basis, consent, confidentiality, and retention - investigate incidents and recommend improvements 					
Cyber security manager	Senior cyber security manager	8b	Organisational risk management	this reference		http://data.europa.eu/esco/skill/6eff134b-e34f-4d6e-a6e8-5e47cf2228d0; http://data.europa.eu/esco/skill/00920055-eb50-4cb8-a23d-3deedbf3753e; http://data.europa.eu/esco/skill/96550830-539b-4746-96aa-92aa4959945d	practitioner	3	You can: - run the risk process for a directorate or programme - assess risks against the risk appetite and escalate them - report on risks to committees 					
Cyber security manager	Senior cyber security manager	8b	Understanding health and care services	this reference		http://data.europa.eu/esco/skill/9b63d92b-5a3a-46b0-b2ba-c98b39ea5aaf; http://data.europa.eu/esco/skill/6c252ea9-e7df-4f82-8035-7d7ee742ff0e	practitioner	3	You can: - analyse how a service fits into care pathways across organisations - work with clinicians, care staff, and patients to shape digital services - explain the effect of digital decisions on care, safety, and staff workload 					
Cyber security manager	Senior cyber security manager	8b	People management	this reference		http://data.europa.eu/esco/skill/339ac029-066a-4985-9f9d-b3d7c8fea0bb; http://data.europa.eu/esco/skill/add39442-b8ca-4412-8156-391db53b0c5d	practitioner	3	You can: - line manage a team, setting objectives and running appraisals - support wellbeing and manage attendance, performance, and conduct - plan the team's development and succession 					
Cyber security manager	Senior cyber security manager	8b	Budget management	this reference		http://data.europa.eu/esco/skill/21c5790c-0930-4d74-b3b0-84caf5af12ea; http://data.europa.eu/esco/skill/74688c5d-2af1-4f7a-9d1c-00e808eaa1e6	working	2	You can: - track spending against a small budget and raise variances - authorise spending within your limit 					
