Cyber security governance

Được trích dẫn từ UK GDaD PCF.

Các mức

1. Nhận biết

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

• develop an effective cyber and information security governance framework that is integrated with overall organisational governance
• prioritise issues affecting the organisation’s ability to meet security policies and follow standards
• lead a continuous review process to ensure governance meets changing regulations, legislation and best practices
• mitigate risks caused by unavoidable exceptions to the governance framework
• escalating risks to the highest level in the organisation when governance issues do not have defined owners
• persuading others to use their financial resources for changes needed to comply with the framework
• helping stakeholders be aware of the risks that are caused when an exception is agreed

2. Vận dụng

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

• develop an effective cyber and information security governance framework that is integrated with overall organisational governance
• prioritise issues affecting the organisation’s ability to meet security policies and follow standards
• lead a continuous review process to ensure governance meets changing regulations, legislation and best practices
• mitigate risks caused by unavoidable exceptions to the governance framework
• escalating risks to the highest level in the organisation when governance issues do not have defined owners
• persuading others to use their financial resources for changes needed to comply with the framework
• helping stakeholders be aware of the risks that are caused when an exception is agreed

3. Thành thạo

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

• develop an effective cyber and information security governance framework that is integrated with overall organisational governance
• prioritise issues affecting the organisation’s ability to meet security policies and follow standards
• lead a continuous review process to ensure governance meets changing regulations, legislation and best practices
• mitigate risks caused by unavoidable exceptions to the governance framework
• escalating risks to the highest level in the organisation when governance issues do not have defined owners
• persuading others to use their financial resources for changes needed to comply with the framework
• helping stakeholders be aware of the risks that are caused when an exception is agreed

4. Chuyên gia

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

• develop an effective cyber and information security governance framework that is integrated with overall organisational governance
• prioritise issues affecting the organisation’s ability to meet security policies and follow standards
• lead a continuous review process to ensure governance meets changing regulations, legislation and best practices
• mitigate risks caused by unavoidable exceptions to the governance framework
• escalating risks to the highest level in the organisation when governance issues do not have defined owners
• persuading others to use their financial resources for changes needed to comply with the framework
• helping stakeholders be aware of the risks that are caused when an exception is agreed

Contains public sector information from the UK Government Digital and Data Profession Capability Framework (https://understand-digital-data-roles-skills.service.gov.uk/), licensed under the Open Government Licence v3.0. © Crown copyright.

Kỹ năng ESCO gần nhất

• establish an Information Security Management System (khớp gần)
• define security policies (khớp hẹp)
• manage IT security compliances (khớp hẹp)

Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.

Các cấp vai trò kỳ vọng kỹ năng này