Msanifu wa usalama
Wasanifu wa usalama husanifu usalama wa huduma za afya za kidijitali za taasisi, ili taarifa za wagonjwa zibaki za siri, sahihi na zinapatikana matunzo yanapozihitaji. Huweka mifumo na udhibiti wa usalama, hutathmini hatari za usalama za miundo mipya na wasambazaji, na kuzisaidia timu kufanya maamuzi yanayotegemea hatari yanayoweka huduma salama na zinazoweza kutumika kwa madaktari na wagonjwa.
Tafsiri hii ilifanywa kutoka Kiingereza na msaidizi wa akili bandia na bado haijakaguliwa na mzungumzaji asilia. Nukuu kutoka UK GDaD PCF (Mfumo wa Uwezo wa Taaluma ya Kidijitali na Data wa Serikali ya Uingereza) na ESCO zinabaki kwa Kiingereza.
- Familia
- Usanifu
- Jukumu la UK GDaD PCF
- Security architect (Architecture)
- Taaluma za ESCO
- ICT system architect (ISCO-08 2511); cybersecurity risk manager (ISCO-08 2529)
- Kwenye GitHub
- Hati ya jukumu · Data za jukumu
Ngazi
| Daraja | Ngazi ya jukumu | Kiwango cha UK GDaD PCF | Madaraja ya Utumishi wa Umma | Alama za tathmini ya kazi |
|---|---|---|---|---|
| 8a | Msanifu wa usalama | Security architect | HEO/SEO/G7 | 560 |
| 8b | Msanifu kiongozi wa usalama | Lead security architect | G7/G6 | 613 |
| 8c | Msanifu mkuu wa usalama | Principal security architect | G6 | 662 |
Katika taasisi ya huduma za afya za kidijitali
- Taasisi za afya ni walengwa wa mara kwa mara wa programu za kutaka fidia na wizi wa data, na shambulio linaweza kusimamisha huduma za kitabibu, hivyo upatikanaji ni muhimu kama usiri.
- Udhibiti wa usalama haupaswi kuzuia matunzo ya dharura, hivyo miundo husawazisha uthibitishaji imara na ufikiaji wa haraka katika mazingira ya kitabibu.
- Vifaa tiba vilivyounganishwa na mifumo ya zamani ya kitabibu mara nyingi haviwezi kuwekewa marekebisho haraka, hivyo wasanifu husanifu udhibiti mbadala kama ugawaji.
- Wafanyakazi wengi, taasisi washirika na wasambazaji wanahitaji ufikiaji wa kumbukumbu za wagonjwa, hivyo utambulisho, ufikiaji unaotegemea nafasi na ukaguzi ni kiini.
- Miundo ya usalama lazima iunge mkono wajibu wa usimamizi wa taarifa na viwango vilivyochapishwa vya usalama, kama vile ISO/IEC 27001.
Maelezo ya jukumu la UK GDaD PCF
A security architect designs and builds secure solutions.
Taaluma na ujuzi wa ESCO
ESCO huorodhesha ujuzi na maarifa ambayo waajiri kwa kawaida huhitaji (muhimu) au wanaweza kuhitaji (hiari) kwa kila taaluma. Yatumie kama orodha ya ukaguzi kwa mazungumzo ya maendeleo.
ICT system architect
ICT system architects design architecture, components, modules, interfaces, and data for a multi-components system to meet specified requirements.
Ujuzi na maarifa ya Muhimu (23)
Ujuzi na umahiri
- acquire system component
- align software with system architectures
- analyse business requirements
- apply ICT systems theory
- assess ICT knowledge
- create data models
- define technical requirements
- design enterprise architecture
- design information system
- implement ICT security policies
- integrate system components
- manage database
- manage system testing
- use an application-specific interface
- use markup languages
Maarifa
Ujuzi na maarifa ya Hiari (69)
Ujuzi na umahiri
- apply technical communication skills
- build business relationships
- design cloud architecture
- design database in the cloud
- design database scheme
- design for organisational complexity
- design process
- develop with cloud services
- manage cloud data and storage
- manage staff
- manage standards for data exchange
- perform resource planning
- plan migration to cloud
- provide cost benefit analysis reports
- solve ICT system problems
- use object-oriented programming
Maarifa
- ABAP
- AJAX
- APL
- ASP.NET
- Agile project management
- Assembly (computer programming)
- C#
- C++
- COBOL
- CoffeeScript
- Common Lisp
- Erlang
- Groovy
- Haskell
- ICT process quality models
- ICT project management methodologies
- ICT security legislation
- ICT system integration
- ICT system programming
- Java (computer programming)
- JavaScript
- Lisp
- MATLAB
- ML (computer programming)
- Microsoft Visual C++
- Objective-C
- OpenEdge Advanced Business Language
- Oracle WebLogic
- PHP
- Pascal (computer programming)
- Perl
- Process-based management
- Prolog (computer programming)
- Python (computer programming)
- R
- Ruby (computer programming)
- SAP R3
- SAS language
- Scala
- Scratch (computer programming)
- Smalltalk (computer programming)
- Swift (computer programming)
- TypeScript
- VBScript
- Visual Basic
- computer programming
- defence standard procedures
- image recognition
- information structure
- lean project management
- model based system engineering
- security engineering
- task algorithmisation
cybersecurity risk manager
Cybersecurity risk managers identify, analyse, assess, estimate and mitigate cybersecurity-related risks of ICT infrastructures such as systems or services. They manage these aspects by planning risk analysis, applying, reporting, assessing, communicating, and treating them. They establish a risk management strategy for the organisation and ensure that risks remain at an acceptable level for the organisation by selecting mitigation actions and controls.
Ujuzi na maarifa ya Muhimu (22)
Ujuzi na umahiri
- advice on security risk management
- communicate with stakeholders
- engage with stakeholders
- ensure adherence to organisational ICT standards
- establish an ICT security prevention plan
- establish an Information Security Management System
- implement ICT risk management
- manage system security
Maarifa
- ICT network security risks
- ICT performance analysis methods
- ICT security standards
- assessment of risks and threats
- attack vectors
- cyber attack counter-measures
- cyber security
- ethical hacking principles
- information security strategy
- internal risk management policy
- risk management
- security engineering
- security threats
Mengineyo
Ujuzi na maarifa ya Hiari (50)
Ujuzi na umahiri
- define security policies
- define technology strategy
- design for organisational complexity
- develop information security strategy
- develop with cloud services
- execute ICT audits
- identify ICT security risks
- implement ICT security policies
- implement a firewall
- implement a virtual private network
- implement anti-virus software
- implement cloud security and compliance
- implement spam protection
- lead disaster recovery exercises
- manage disaster recovery plans
- manage keys for data protection
- remove computer virus or malware from a computer
- solve ICT system problems
- use ICT ticketing system
- use an application-specific interface
- use back-up and recovery tools
Maarifa
- ICT encryption
- ICT problem management techniques
- ICT process quality models
- ICT project management
- ICT quality policy
- ICT recovery techniques
- ICT security legislation
- ICT system user requirements
- Internet of Things
- Open source model
- Outsourcing model
- audit techniques
- cloud monitoring and reporting
- cloud security and compliance
- computer forensics
- decision support systems
- domain name service
- hybrid model
- information confidentiality
- internet governance
- investment analysis
- legal requirements of ICT products
- levels of software testing
- mobile device management
- organisational resilience
- service-oriented modelling
- systems development life-cycle
- tools for ICT test automation
- web application security threats
Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.