role	role_level	band	skill	skill_source	pcf_reference	esco_reference	expected_level	expected_level_number	expected_level_description	self_rating	manager_rating	gap	evidence	development_action
Security architect	Security architect	8a	Analysis	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/2b92a5b2-6758-4ee3-9fb4-b6387a55cc8f; http://data.europa.eu/esco/skill/4707da90-9cfc-46ca-8de0-38a0b7bfb137	working	2	You can: - apply the approach to real problems and consider all relevant information - apply appropriate rigour to ensure a full solution is designed and achieves the business outcome					
Security architect	Security architect	8a	Communication (security architect)	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/c32ad607-0c4d-4e34-b73f-668298f7bf13; http://data.europa.eu/esco/skill/bad614fb-fc66-4401-b75b-3d366013a493	practitioner	3	You can: - demonstrate a deep understanding of security concepts and can apply them to a technical level - effectively translate and accurately communicate security and risk implications to technical and non-technical stakeholders - successfully respond to challenges - manage stakeholder expectations and be flexible, adapting to stakeholder reactions to reach consensus					
Security architect	Security architect	8a	Designing secure systems	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/6f1edc19-191f-4ba5-a048-ee69aff05bab; http://data.europa.eu/esco/skill/958559fd-7ab8-44f6-9d65-eb521dc308a5; http://data.europa.eu/esco/skill/3ff589b7-68df-4ea5-ae41-b395bdb2378f	working	2	You can: - design and review system architectures through the application of patterns and principles					
Security architect	Security architect	8a	Enabling and informing risk-based decisions	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/0efbe2dc-2770-47ec-b8f4-d1bdff6ac0a4; http://data.europa.eu/esco/skill/1dd23dba-dd00-45ab-abf4-642902538317; http://data.europa.eu/esco/skill/64bd4157-5df0-4166-8259-ede237dd7cdf	working	2	You can: - work with risk owners to advise and give feedback - advise on risk impact and whether it's within risk tolerance - describe different risk methodologies and how these are applied, as well as the proportionality of risk					
Security architect	Security architect	8a	Research and innovation	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/7a17d7ce-01a2-4746-bbcc-22ffe22fa16e; http://data.europa.eu/esco/skill/20c920d4-7ff7-4676-ba61-3f04490d9416	working	2	You can: - advise on developments to security properties in technology - identify new technologies and design their use in a business context					
Security architect	Security architect	8a	Security technology	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/dad7e408-162f-46a4-8567-db560e19e2fc; http://data.europa.eu/esco/skill/5898d99a-62a4-4e10-a2e3-0d815ce44248; http://data.europa.eu/esco/skill/501537a7-9d63-491d-ae02-09f04767ff1e	working	2	You can: - explain the effect of vulnerabilities on current and future designs - share information on a range of systems, but may specialise in one					
Security architect	Security architect	8a	Understanding security implications of transformation	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/fe1c2b32-7fe9-4668-affa-07ff658a68cf; http://data.europa.eu/esco/skill/7f27f1ff-2e17-4b69-990e-c23334478313; http://data.europa.eu/esco/skill/f9738fc9-4d67-43e8-bfda-954123e34d42	working	2	You can: - interpret and apply an understanding of policy and process, business architecture, and legal and political implications to assist the development of technical solutions or controls					
Security architect	Security architect	8a	Understanding health and care services	this reference		http://data.europa.eu/esco/skill/9b63d92b-5a3a-46b0-b2ba-c98b39ea5aaf; http://data.europa.eu/esco/skill/6c252ea9-e7df-4f82-8035-7d7ee742ff0e	working	2	You can: - explain the clinical and care workflows your work supports - use common health care terms correctly with clinical and care colleagues - recognise when a change could affect patient care and raise it 					
Security architect	Security architect	8a	Information governance and data protection	this reference		http://data.europa.eu/esco/skill/a4346013-a967-4a58-a533-6b32ad1364c5; http://data.europa.eu/esco/skill/51ece34f-c24e-4183-9bf4-9b6f28748aec; http://data.europa.eu/esco/skill/097c6a36-f031-4d3e-b5c1-62d6ffcb430b	practitioner	3	You can: - lead data protection impact assessments and information sharing agreements - advise teams on lawful basis, consent, confidentiality, and retention - investigate incidents and recommend improvements 					
Security architect	Security architect	8a	Identity and access management	this reference		http://data.europa.eu/esco/skill/ab49f767-296b-47d5-af56-0b4a69515b03; http://data.europa.eu/esco/skill/bc0b0b5d-f6be-405a-b224-b6902a4dbe97	practitioner	3	You can: - design and run identity and access services - review access regularly and fix problems 					
Security architect	Security architect	8a	Vulnerability management	this reference		http://data.europa.eu/esco/skill/fe1c2b32-7fe9-4668-affa-07ff658a68cf; http://data.europa.eu/esco/skill/902fb91c-3113-4004-9b4f-79aa86b638b7	practitioner	3	You can: - prioritise vulnerabilities by risk, including to patient services - scope and manage penetration tests and remediation 					
Security architect	Security architect	8a	Clinical risk management	this reference		http://data.europa.eu/esco/skill/47d491a9-f7c0-4b13-a10f-983d3aa0113e; http://data.europa.eu/esco/skill/4913d0c0-133a-4c46-aac3-f5d4989a982e	working	2	You can: - take part in hazard workshops and contribute to a hazard log - follow the clinical risk management process for your work - provide evidence for a clinical safety case, such as test results 					
Security architect	Security architect	8a	Medical device software regulation	this reference		http://data.europa.eu/esco/skill/f453b1a6-c7db-4d9d-9ba3-47c45159bfe3	awareness	1	You can: - explain that some health software is regulated as a medical device - know who to ask when a product might be a medical device 					
