Meneja wa usalama wa mtandao

Daraja la 8a · Meneja wa usalama wa mtandao · Alama 566 za tathmini ya kazi

Tafsiri hii ilifanywa kutoka Kiingereza na msaidizi wa akili bandia na bado haijakaguliwa na mzungumzaji asilia. Nukuu kutoka UK GDaD PCF (Mfumo wa Uwezo wa Taaluma ya Kidijitali na Data wa Serikali ya Uingereza) na ESCO zinabaki kwa Kiingereza.

Meneja wa usalama wa mtandao huendesha kitengo cha usalama wa mtandao, au sehemu kubwa yake, akisimamia hatari za mtandao, uendeshaji wa usalama na uhakikisho.

Wajibu

Kuendesha uendeshaji wa usalama, usimamizi wa udhaifu na kazi ya uhakikisho, na kuripoti utendaji wake.
Kutunza sajili ya hatari za mtandao, na kuhakikisha hatari kwa huduma za kitabibu zinatathminiwa na kuwa na wamiliki.
Kuandika na kutunza sera na viwango vya usalama, na kukagua kama vinafuatwa.
Kuongoza majibu kwa matukio ya mtandao, akifanya kazi na usimamizi wa matukio na viongozi wa kitabibu na wa kiutendaji.
Kuendesha mafunzo ya uelewa wa usalama na mazoezi ya ulaghai wa barua pepe kwa wafanyakazi wote, ikiwemo wafanyakazi wa kitabibu.
Kusimamia moja kwa moja wachambuzi na wahandisi wa usalama.

Ujuzi

Ujuzi	Kiwango kinachotarajiwa	Kiwango hiki kinamaanisha nini
Cyber security governanceUK GDaD PCF	Mtaalamu (3)	Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level. You can: Examples of leadership using this skill: develop an effective cyber and information security governance framework that is integrated with overall organisational governance prioritise issues affecting the organisation’s ability to meet security policies and follow standards lead a continuous review process to ensure governance meets changing regulations, legislation and best practices mitigate risks caused by unavoidable exceptions to the governance framework escalating risks to the highest level in the organisation when governance issues do not have defined owners persuading others to use their financial resources for changes needed to comply with the framework helping stakeholders be aware of the risks that are caused when an exception is agreed
Cyber risk managementUK GDaD PCF	Mtaalamu (3)	Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level. You can: Examples of leadership using this skill: maintain a clear understanding of the cyber and information security risks across the whole organisation develop and implement risk assessment processes oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities building a culture where teams have awareness of, and take responsibility for, risks and mitigating them advising programme owners and people running IT services about risks in a way that enables them to act on that advice communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk
Cyber incident managementUK GDaD PCF	Mtaalamu (3)	Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level. You can: Examples of leadership using this skill: implement cyber incident management processes that reflect the level of risk accepted by the organisation ensure the organisation is prepared for and can effectively respond to incidents determine the impact of critical incidents on the organisation’s technology lead the response to critical incidents that affect the whole organisation helping the incident management team build relationships with senior leaders leading simulation exercises with the board so they understand their role in incident response processes and the implications of potential incidents assessing what to communicate to the board, ministers or the whole organisation, and when to do it
Changing security cultureUK GDaD PCF	Utendaji (2)	Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level. You can: Examples of leadership using this skill: put in place continuous cyber and information security awareness and education programs, for example, training for specific groups use a range of methods to assess whether people’s security behaviour is improving compare the maturity of security awareness and culture in your organisation against others across government to determine effective improvements incentivising the right behaviours across the whole organisation so that everyone knows how they contribute to security persuading senior leadership to represent a campaign personally communicating insights from previous incidents to ensure they are learned from
Uendeshaji wa usalamaMarejeleo haya	Mtaalamu (3)	Unaweza: kuchunguza na kudhibiti matukio ya usalama kuandika kanuni za ugunduzi na uwindaji wa vitisho kuboresha miongozo ya uendeshaji na zana baada ya matukio
Usimamizi wa udhaifuMarejeleo haya	Mtaalamu (3)	Unaweza: kuweka vipaumbele vya udhaifu kwa hatari, ikiwemo kwa huduma za wagonjwa kubainisha wigo na kusimamia majaribio ya kupenya na urekebishaji
Usimamizi wa taarifa na ulinzi wa dataMarejeleo haya	Mtaalamu (3)	Unaweza: kuongoza tathmini za athari za ulinzi wa data na makubaliano ya ushirikishaji wa taarifa kushauri timu kuhusu msingi halali, ridhaa, usiri na uhifadhi kuchunguza matukio na kupendekeza maboresho
Usimamizi wa hatari za taasisiMarejeleo haya	Mtaalamu (3)	Unaweza: kuendesha mchakato wa hatari kwa kurugenzi au programu kutathmini hatari dhidi ya kiwango cha kukubali hatari na kuzipeleka juu kuripoti hatari kwa kamati
Kuelewa huduma za afya na matunzoMarejeleo haya	Utendaji (2)	Unaweza: kueleza mtiririko wa kazi za kitabibu na matunzo ambazo kazi yako inaziunga mkono kutumia istilahi za kawaida za afya kwa usahihi na wenzako wa kitabibu na matunzo kutambua ni lini mabadiliko yanaweza kuathiri matunzo ya wagonjwa na kuyaibua
Usimamizi wa watuMarejeleo haya	Mtaalamu (3)	Unaweza: kusimamia timu moja kwa moja, ukiweka malengo na kuendesha tathmini za utendaji kusaidia ustawi na kusimamia mahudhurio, utendaji na mwenendo kupanga maendeleo ya timu na urithi wa nafasi

Sifa na uzoefu wa kawaida

Uzoefu mpana wa usalama wa mtandao, ikiwemo majibu kwa matukio na usimamizi wa hatari, katika kiwango kinacholingana na shahada ya uzamili.
Cheti cha kitaaluma cha usalama kinachotambuliwa, au uzoefu unaolingana.

Muhtasari wa Daraja la 8a

Maarifa: Ujuzi wa kitaalamu wa taaluma na usimamizi wake.
Uhuru wa kutenda: Hufasiri sera ya taasisi kwa huduma; huweka mwelekeo wa timu.
Wigo: Eneo la huduma au taaluma katika taasisi nzima.
Uongozi: Husimamia timu, au huongoza taaluma bila usimamizi wa moja kwa moja.
Uwajibikaji: Eneo la huduma, wafanyakazi wake, na bajeti yake.

Tathmini ya kazi (ya kielelezo)

Kigezo	Kiwango	Muhtasari wa kiwango	Alama
Ujuzi wa mawasiliano na kujenga mahusiano	5	Hutoa taarifa tata sana au zenye utata zinazohitaji ujuzi uliokuzwa wa ushawishi na majadiliano, hutoa mawasilisho kwa makundi makubwa, au huwasiliana palipo na vikwazo vikubwa vya ukubalifu.	45
Maarifa, mafunzo na uzoefu	7	Maarifa maalumu yaliyokuzwa sana katika upana wa fani hiyo (kiwango cha shahada ya uzamili au kinacholingana).	196
Ujuzi wa uchambuzi na uamuzi	5	Hufanya maamuzi kuhusu ukweli au hali tata sana zinazohitaji uchambuzi, ufasiri na ulinganisho wa chaguzi.	60
Ujuzi wa kupanga na kuratibu	4	Hupanga shughuli au mikakati tata ya aina nyingi, akiirekebisha inapohitajika.	42
Ujuzi wa kimwili	2	Ujuzi unaopatikana kwa mazoezi, kama vile matumizi ya kawaida ya kibodi au kuendesha gari.	15
Wajibu wa huduma kwa wagonjwa na wateja	1	Huwasaidia wagonjwa, wateja au ndugu wakati wa mawasiliano ya bahati.	4
Wajibu wa sera na uendelezaji wa huduma	4	Hutekeleza sera na kuendeleza sera au huduma kwa huduma moja au maeneo kadhaa.	32
Wajibu wa rasilimali za fedha na mali	3	Huidhinisha malipo, hununua baadhi ya mali au vifaa, hufuatilia au husimamia bajeti iliyokabidhiwa, au hutunza mali.	21
Wajibu kwa watu	3	Husimamia kundi la wafanyakazi kila siku, hufundisha mafunzo ya msingi au maalumu, au hutoa ushauri wa msingi wa rasilimali watu.	21
Wajibu wa rasilimali za taarifa	5	Hubuni na kuendeleza mifumo mikubwa ya taarifa, au huendesha mifumo ya taarifa ya huduma kadhaa kama jukumu kuu.	34
Wajibu wa utafiti na maendeleo	2	Mara kwa mara hufanya utafiti, maendeleo, majaribio ya kitaalamu, au majaribio ya vifaa na mifumo kama sehemu ya kazi.	12
Uhuru wa kutenda	5	Hufanya kazi ndani ya sera za jumla, na katika hali nyingi huamua jinsi ya kuzifasiri.	45
Juhudi za kimwili	1	Kukaa, kusimama na kutembea, kwa juhudi ndogo ya kimwili.	3
Juhudi za kiakili	4	Umakini wa muda mrefu mara kwa mara, au umakini mkali mara chache.	18
Juhudi za kihisia	2	Kukumbana mara chache, au kukumbana kwa njia isiyo ya moja kwa moja mara kwa mara, na hali zenye kusikitisha.	11
Mazingira ya kazi	2	Mazingira yasiyopendeza mara chache, safari za mara kwa mara au kazi za nje, au matumizi ya skrini karibu bila kikomo siku nyingi.	7
Jumla (Daraja la 8a: 540 hadi 584)			566

Juhudi za kiakili na za kihisia zinaakisi kuongoza majibu kwa matukio ya mtandao chini ya shinikizo, mara nyingi nje ya saa za kazi, ambapo matunzo ya wagonjwa yanaweza kuwa hatarini.