示例 面向通用数字医疗卫生组织的参考档案,并非正式的职位说明。 关于本参考资料。

Cyber risk management

A senior leadership skill. You can: - maintain a clear understanding of the cyber and information security risks across the whole organisation - develop and implement risk assessment processes - oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities Examples of leadership using this skill: - building a culture where teams have awareness of, and take responsibility for, risks and mitigating them - advising programme owners and people running IT services about risks in a way that enables them to act on that advice - communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk

引自 UK GDaD PCF。

等级

1. 了解

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

  • maintain a clear understanding of the cyber and information security risks across the whole organisation
  • develop and implement risk assessment processes
  • oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities
  • building a culture where teams have awareness of, and take responsibility for, risks and mitigating them
  • advising programme owners and people running IT services about risks in a way that enables them to act on that advice
  • communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk
2. 胜任

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

  • maintain a clear understanding of the cyber and information security risks across the whole organisation
  • develop and implement risk assessment processes
  • oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities
  • building a culture where teams have awareness of, and take responsibility for, risks and mitigating them
  • advising programme owners and people running IT services about risks in a way that enables them to act on that advice
  • communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk
3. 熟练

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

  • maintain a clear understanding of the cyber and information security risks across the whole organisation
  • develop and implement risk assessment processes
  • oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities
  • building a culture where teams have awareness of, and take responsibility for, risks and mitigating them
  • advising programme owners and people running IT services about risks in a way that enables them to act on that advice
  • communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk
4. 专家

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

  • maintain a clear understanding of the cyber and information security risks across the whole organisation
  • develop and implement risk assessment processes
  • oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities
  • building a culture where teams have awareness of, and take responsibility for, risks and mitigating them
  • advising programme owners and people running IT services about risks in a way that enables them to act on that advice
  • communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk

Contains public sector information from the UK Government Digital and Data Profession Capability Framework (https://understand-digital-data-roles-skills.service.gov.uk/), licensed under the Open Government Licence v3.0. © Crown copyright.

最接近的 ESCO 技能

Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.

期望具备该技能的角色级别

角色级别角色职级期望等级
高级安全工程师安全工程师7胜任
首席安全工程师安全工程师8a熟练
高级安全运营分析师安全运营分析师7胜任
网络安全经理网络安全经理8a熟练
高级网络安全经理网络安全经理8b熟练
网络安全主管网络安全经理8c专家
首席信息安全官网络安全经理8d专家