Mkuu wa usalama wa taarifa

Daraja la 8d · Meneja wa usalama wa mtandao · Alama 716 za tathmini ya kazi

Tafsiri hii ilifanywa kutoka Kiingereza na msaidizi wa akili bandia na bado haijakaguliwa na mzungumzaji asilia. Nukuu kutoka UK GDaD PCF (Mfumo wa Uwezo wa Taaluma ya Kidijitali na Data wa Serikali ya Uingereza) na ESCO zinabaki kwa Kiingereza.

Mkuu wa usalama wa taarifa ana wajibu wa kitaasisi kwa usalama wa mtandao katika taasisi nzima, na mara nyingi katika taasisi washirika zinazoshiriki huduma zake.

Wajibu

Kushikilia wajibu wa kitaasisi kwa usalama wa mtandao, na kuripoti kuuhusu kwa bodi.
Kuweka kiwango cha kukubali hatari za usalama pamoja na bodi, na kuhakikisha kinaunda maamuzi katika taasisi nzima.
Kuongoza usalama wa mtandao katika huduma zinazoshirikiwa na taasisi washirika, pale taasisi inapozitoa.
Kuelekeza majibu ya taasisi kwa matukio makubwa zaidi ya mtandao, akifanya kazi na timu ya watendaji na mamlaka husika.
Kuunda mazoezi ya usalama wa mtandao katika sekta ya afya na matunzo kwa kufanya kazi na washirika na vyombo vya sekta.
Kuongoza kitengo cha usalama na kusimamia bajeti katika huduma kadhaa.

Ujuzi

Ujuzi	Kiwango kinachotarajiwa	Kiwango hiki kinamaanisha nini
Strategic cyber security planningUK GDaD PCF	Bingwa (4)	Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level. You can: Examples of leadership using this skill: determine the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress decide areas that need security investment create a security roadmap that enables the organisation to achieve its objectives explaining the mutual benefits of the security strategy to a range of stakeholders and teams to bring them onboard advising other leaders on how to integrate security requirements in their strategies ensuring security is part of all the organisation's initiatives, despite competing priorities gaining support for investment in security from other leaders
Cyber security governanceUK GDaD PCF	Bingwa (4)	Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level. You can: Examples of leadership using this skill: develop an effective cyber and information security governance framework that is integrated with overall organisational governance prioritise issues affecting the organisation’s ability to meet security policies and follow standards lead a continuous review process to ensure governance meets changing regulations, legislation and best practices mitigate risks caused by unavoidable exceptions to the governance framework escalating risks to the highest level in the organisation when governance issues do not have defined owners persuading others to use their financial resources for changes needed to comply with the framework helping stakeholders be aware of the risks that are caused when an exception is agreed
Cyber risk managementUK GDaD PCF	Bingwa (4)	Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level. You can: Examples of leadership using this skill: maintain a clear understanding of the cyber and information security risks across the whole organisation develop and implement risk assessment processes oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities building a culture where teams have awareness of, and take responsibility for, risks and mitigating them advising programme owners and people running IT services about risks in a way that enables them to act on that advice communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk
Cyber incident managementUK GDaD PCF	Bingwa (4)	Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level. You can: Examples of leadership using this skill: implement cyber incident management processes that reflect the level of risk accepted by the organisation ensure the organisation is prepared for and can effectively respond to incidents determine the impact of critical incidents on the organisation’s technology lead the response to critical incidents that affect the whole organisation helping the incident management team build relationships with senior leaders leading simulation exercises with the board so they understand their role in incident response processes and the implications of potential incidents assessing what to communicate to the board, ministers or the whole organisation, and when to do it
Changing security cultureUK GDaD PCF	Bingwa (4)	Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level. You can: Examples of leadership using this skill: put in place continuous cyber and information security awareness and education programs, for example, training for specific groups use a range of methods to assess whether people’s security behaviour is improving compare the maturity of security awareness and culture in your organisation against others across government to determine effective improvements incentivising the right behaviours across the whole organisation so that everyone knows how they contribute to security persuading senior leadership to represent a campaign personally communicating insights from previous incidents to ensure they are learned from
Usimamizi wa taarifa na ulinzi wa dataMarejeleo haya	Mtaalamu (3)	Unaweza: kuongoza tathmini za athari za ulinzi wa data na makubaliano ya ushirikishaji wa taarifa kushauri timu kuhusu msingi halali, ridhaa, usiri na uhifadhi kuchunguza matukio na kupendekeza maboresho
Usimamizi wa hatari za taasisiMarejeleo haya	Bingwa (4)	Unaweza: kubuni mfumo wa usimamizi wa hatari na kiwango cha kukubali hatari cha taasisi kuishauri bodi kuhusu hatari za kimkakati
Kuelewa huduma za afya na matunzoMarejeleo haya	Mtaalamu (3)	Unaweza: kuchambua jinsi huduma inavyolingana na njia za matunzo katika taasisi mbalimbali kufanya kazi na madaktari, wafanyakazi wa matunzo na wagonjwa kuunda huduma za kidijitali kueleza athari za maamuzi ya kidijitali kwa matunzo, usalama na mzigo wa kazi wa wafanyakazi
Usimamizi wa watuMarejeleo haya	Bingwa (4)	Unaweza: kuongoza mameneja na kuunda utamaduni wa eneo kubwa kubuni mipango ya nguvu kazi na mabadiliko ya taasisi kuwaongoza viongozi na kutatua masuala tata ya watu
Usimamizi wa bajetiMarejeleo haya	Mtaalamu (3)	Unaweza: kumiliki na kusimamia bajeti, ukitabiri na kueleza tofauti kujenga hoja ya kibiashara yenye gharama na manufaa

Sifa na uzoefu wa kawaida

Uzoefu mpana wa kuongoza usalama wa mtandao katika ngazi ya bodi, au kwa taasisi kadhaa.

Muhtasari wa Daraja la 8d

Maarifa: Ujuzi wa kimkakati katika vitengo mbalimbali na mfumo mpana wa afya na huduma.
Uhuru wa kutenda: Huunda mkakati wa taasisi nzima; humwakilisha mkurugenzi.
Wigo: Kitengo kikubwa au vitengo kadhaa.
Uongozi: Huongoza vitengo kadhaa au idara kubwa.
Uwajibikaji: Vitengo vikubwa, bajeti kubwa, na hatari za taasisi nzima.

Tathmini ya kazi (ya kielelezo)

Kigezo	Kiwango	Muhtasari wa kiwango	Alama
Ujuzi wa mawasiliano na kujenga mahusiano	6	Hutoa taarifa tata sana na zenye utata mkubwa palipo na vikwazo vikubwa vya ukubalifu, kwa kutumia kiwango cha juu kabisa cha ujuzi wa mawasiliano.	60
Maarifa, mafunzo na uzoefu	8	Maarifa ya hali ya juu (shahada ya uzamivu pamoja na mafunzo ya ziada au yanayolingana), au maarifa maalumu katika fani zaidi ya moja yaliyojengwa kwa kipindi kirefu.	240
Ujuzi wa uchambuzi na uamuzi	5	Hufanya maamuzi kuhusu ukweli au hali tata sana zinazohitaji uchambuzi, ufasiri na ulinganisho wa chaguzi.	60
Ujuzi wa kupanga na kuratibu	5	Hutunga mipango ya kimkakati ya muda mrefu, yenye kutokuwa na uhakika na athari katika taasisi nzima.	60
Ujuzi wa kimwili	2	Ujuzi unaopatikana kwa mazoezi, kama vile matumizi ya kawaida ya kibodi au kuendesha gari.	15
Wajibu wa huduma kwa wagonjwa na wateja	1	Huwasaidia wagonjwa, wateja au ndugu wakati wa mawasiliano ya bahati.	4
Wajibu wa sera na uendelezaji wa huduma	5	Hutekeleza na kuendeleza sera au huduma mbalimbali kwa kurugenzi.	45
Wajibu wa rasilimali za fedha na mali	5	Husimamia au huweka bajeti, au hudhibiti mali, za huduma kadhaa.	45
Wajibu kwa watu	5	Husimamia idara kadhaa moja kwa moja, au husimamia mafunzo au sehemu kubwa ya rasilimali watu katika taasisi nzima.	45
Wajibu wa rasilimali za taarifa	6	Husimamia na kuendeleza mifumo ya taarifa katika taasisi nzima kama jukumu kuu.	46
Wajibu wa utafiti na maendeleo	2	Mara kwa mara hufanya utafiti, maendeleo, majaribio ya kitaalamu, au majaribio ya vifaa na mifumo kama sehemu ya kazi.	12
Uhuru wa kutenda	5	Hufanya kazi ndani ya sera za jumla, na katika hali nyingi huamua jinsi ya kuzifasiri.	45
Juhudi za kimwili	1	Kukaa, kusimama na kutembea, kwa juhudi ndogo ya kimwili.	3
Juhudi za kiakili	4	Umakini wa muda mrefu mara kwa mara, au umakini mkali mara chache.	18
Juhudi za kihisia	2	Kukumbana mara chache, au kukumbana kwa njia isiyo ya moja kwa moja mara kwa mara, na hali zenye kusikitisha.	11
Mazingira ya kazi	2	Mazingira yasiyopendeza mara chache, safari za mara kwa mara au kazi za nje, au matumizi ya skrini karibu bila kikomo siku nyingi.	7
Jumla (Daraja la 8d: 675 hadi 720)			716

Ngazi hii inafaa taasisi kubwa zaidi, au zile zinazotoa huduma za kidijitali zinazoshirikiwa kwa washirika. Taasisi ndogo kwa kawaida zina mkuu wa usalama wa mtandao katika Daraja la 8c kama nafasi yao ya juu zaidi ya usalama.