Strategic cyber security planning

A senior leadership skill. You can: - determine the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress - decide areas that need security investment - create a security roadmap that enables the organisation to achieve its objectives Examples of leadership using this skill: - explaining the mutual benefits of the security strategy to a range of stakeholders and teams to bring them onboard - advising other leaders on how to integrate security requirements in their strategies - ensuring security is part of all the organisation's initiatives, despite competing priorities - gaining support for investment in security from other leaders

Quoted from the UK GDaD PCF.

Levels

1. Awareness: *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

determine the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress
decide areas that need security investment
create a security roadmap that enables the organisation to achieve its objectives
explaining the mutual benefits of the security strategy to a range of stakeholders and teams to bring them onboard
advising other leaders on how to integrate security requirements in their strategies
ensuring security is part of all the organisation's initiatives, despite competing priorities
gaining support for investment in security from other leaders
2. Working: *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

determine the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress
decide areas that need security investment
create a security roadmap that enables the organisation to achieve its objectives
explaining the mutual benefits of the security strategy to a range of stakeholders and teams to bring them onboard
advising other leaders on how to integrate security requirements in their strategies
ensuring security is part of all the organisation's initiatives, despite competing priorities
gaining support for investment in security from other leaders
3. Practitioner: *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

determine the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress
decide areas that need security investment
create a security roadmap that enables the organisation to achieve its objectives
explaining the mutual benefits of the security strategy to a range of stakeholders and teams to bring them onboard
advising other leaders on how to integrate security requirements in their strategies
ensuring security is part of all the organisation's initiatives, despite competing priorities
gaining support for investment in security from other leaders
4. Expert: *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

determine the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress
decide areas that need security investment
create a security roadmap that enables the organisation to achieve its objectives
explaining the mutual benefits of the security strategy to a range of stakeholders and teams to bring them onboard
advising other leaders on how to integrate security requirements in their strategies
ensuring security is part of all the organisation's initiatives, despite competing priorities
gaining support for investment in security from other leaders

Contains public sector information from the UK Government Digital and Data Profession Capability Framework (https://understand-digital-data-roles-skills.service.gov.uk/), licensed under the Open Government Licence v3.0. © Crown copyright.

Closest ESCO skills

develop information security strategy (close match)
information security strategy (close match)

Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.

Role levels that expect this skill

Role level	Role	Band	Expected level
Senior cyber security manager	Cyber security manager	8b	Working
Head of cyber security	Cyber security manager	8c	Practitioner
Chief information security officer	Cyber security manager	8d	Expert