Cyber risk management
A senior leadership skill. You can: - maintain a clear understanding of the cyber and information security risks across the whole organisation - develop and implement risk assessment processes - oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities Examples of leadership using this skill: - building a culture where teams have awareness of, and take responsibility for, risks and mitigating them - advising programme owners and people running IT services about risks in a way that enables them to act on that advice - communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk
Niveaux
- 1. Sensibilisation
*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
- maintain a clear understanding of the cyber and information security risks across the whole organisation
- develop and implement risk assessment processes
- oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities
- building a culture where teams have awareness of, and take responsibility for, risks and mitigating them
- advising programme owners and people running IT services about risks in a way that enables them to act on that advice
- communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk
- 2. Pratique
*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
- maintain a clear understanding of the cyber and information security risks across the whole organisation
- develop and implement risk assessment processes
- oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities
- building a culture where teams have awareness of, and take responsibility for, risks and mitigating them
- advising programme owners and people running IT services about risks in a way that enables them to act on that advice
- communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk
- 3. Confirmé
*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
- maintain a clear understanding of the cyber and information security risks across the whole organisation
- develop and implement risk assessment processes
- oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities
- building a culture where teams have awareness of, and take responsibility for, risks and mitigating them
- advising programme owners and people running IT services about risks in a way that enables them to act on that advice
- communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk
- 4. Expert
*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
- maintain a clear understanding of the cyber and information security risks across the whole organisation
- develop and implement risk assessment processes
- oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities
- building a culture where teams have awareness of, and take responsibility for, risks and mitigating them
- advising programme owners and people running IT services about risks in a way that enables them to act on that advice
- communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk
Contains public sector information from the UK Government Digital and Data Profession Capability Framework (https://understand-digital-data-roles-skills.service.gov.uk/), licensed under the Open Government Licence v3.0. © Crown copyright.
Compétences ESCO les plus proches
Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.
Niveaux de rôle qui attendent cette compétence
| Niveau de rôle | Rôle | Bande | Niveau attendu |
|---|---|---|---|
| Analyste des opérations de sécurité senior | Analyste des opérations de sécurité | 7 | Pratique |
| Ingénieur sécurité senior | Ingénieur sécurité | 7 | Pratique |
| Ingénieur sécurité référent | Ingénieur sécurité | 8a | Confirmé |
| Responsable de la cybersécurité | Responsable de la cybersécurité | 8a | Confirmé |
| Responsable senior de la cybersécurité | Responsable de la cybersécurité | 8b | Confirmé |
| Directeur de la cybersécurité | Responsable de la cybersécurité | 8c | Expert |
| Responsable de la sécurité des systèmes d'information | Responsable de la cybersécurité | 8d | Expert |