首页 网络安全 网络安全经理 首席信息安全官 首席信息安全官 第 8d 职级 · 网络安全经理 ·
716 岗位评估分
本文由人工智能助手从英文翻译而来，尚未经过母语人士审校。引自英国政府数字与数据专业能力框架（UK GDaD PCF）和 ESCO 的内容保留英文原文。
首席信息安全官对全组织的网络安全负有全组织责任，并往往对共享其服务的合作组织负有同样责任。
职责 对网络安全负有全组织责任，并向董事会报告。 与董事会一起确定安全风险偏好，并确保其指导全组织的决策。 在组织提供共享服务时，领导跨共享服务和合作组织的网络安全工作。 与执行团队和相关主管部门合作，指挥组织对最严重网络事件的响应。 通过与合作伙伴和行业机构合作，塑造医疗卫生和照护领域的网络安全实践。 领导安全职能，并持有跨多项服务的预算。 技能 技能 期望等级 该等级的含义 Strategic cyber security planning UK GDaD PCF 专家 (4) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
determine the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress decide areas that need security investment create a security roadmap that enables the organisation to achieve its objectives explaining the mutual benefits of the security strategy to a range of stakeholders and teams to bring them onboard advising other leaders on how to integrate security requirements in their strategies ensuring security is part of all the organisation's initiatives, despite competing priorities gaining support for investment in security from other leaders Cyber security governance UK GDaD PCF 专家 (4) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
develop an effective cyber and information security governance framework that is integrated with overall organisational governance prioritise issues affecting the organisation’s ability to meet security policies and follow standards lead a continuous review process to ensure governance meets changing regulations, legislation and best practices mitigate risks caused by unavoidable exceptions to the governance framework escalating risks to the highest level in the organisation when governance issues do not have defined owners persuading others to use their financial resources for changes needed to comply with the framework helping stakeholders be aware of the risks that are caused when an exception is agreed Cyber risk management UK GDaD PCF 专家 (4) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
maintain a clear understanding of the cyber and information security risks across the whole organisation develop and implement risk assessment processes oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities building a culture where teams have awareness of, and take responsibility for, risks and mitigating them advising programme owners and people running IT services about risks in a way that enables them to act on that advice communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk Cyber incident management UK GDaD PCF 专家 (4) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
implement cyber incident management processes that reflect the level of risk accepted by the organisation ensure the organisation is prepared for and can effectively respond to incidents determine the impact of critical incidents on the organisation’s technology lead the response to critical incidents that affect the whole organisation helping the incident management team build relationships with senior leaders leading simulation exercises with the board so they understand their role in incident response processes and the implications of potential incidents assessing what to communicate to the board, ministers or the whole organisation, and when to do it Changing security culture UK GDaD PCF 专家 (4) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
put in place continuous cyber and information security awareness and education programs, for example, training for specific groups use a range of methods to assess whether people’s security behaviour is improving compare the maturity of security awareness and culture in your organisation against others across government to determine effective improvements incentivising the right behaviours across the whole organisation so that everyone knows how they contribute to security persuading senior leadership to represent a campaign personally communicating insights from previous incidents to ensure they are learned from 信息治理与数据保护 本参考资料 熟练 (3) 您可以：
领导数据保护影响评估和信息共享协议 就合法依据、同意、保密和保存向团队提供建议 调查事件并提出改进建议 组织风险管理 本参考资料 专家 (4) 您可以：
设计组织的风险管理框架和风险偏好 就战略风险向董事会提供建议 了解医疗卫生和照护服务 本参考资料 熟练 (3) 您可以：
分析一项服务如何融入跨组织的照护路径 与临床医生、照护人员和患者合作塑造数字服务 解释数字决策对照护、安全和员工工作量的影响 人员管理 本参考资料 专家 (4) 您可以：
领导经理并塑造大领域的文化 设计人力规划和组织变革 辅导负责人并解决复杂的人员问题 预算管理 本参考资料 熟练 (3) 您可以：
持有并管理预算，进行预测并解释差异 编制包含成本和效益的商业论证
典型资质与经验 在董事会层面或为多个组织领导网络安全方面拥有广泛经验。 第 8d 职级概要
知识 跨职能以及整个医疗卫生和照护体系的战略性知识。
自主性 制定全组织战略；代理总监职责。
范围 一项主要职能或多项职能。
领导力 领导多项职能或一个大型部门。
问责 主要职能、大额预算和全组织风险。 岗位评估（示例） 因素 等级 等级概述 分数 沟通与人际关系技能 6 在接受方面存在重大障碍时，运用最高水平的沟通技能传递高度复杂、高度争议的信息。 60 知识、培训和经验 8 高级知识（博士学位加进一步培训或同等），或长期积累的跨多个学科的专门知识。 240 分析与判断技能 5 对需要分析、解读和比较方案的高度复杂事实或情况作出判断。 60 规划与组织技能 5 制定长期战略规划，存在不确定性并影响整个组织。 60 身体技能 2 通过练习获得的技能，例如标准键盘操作或驾驶。 15 对患者和服务对象照护的责任 1 在偶然接触中帮助患者、服务对象或亲属。 4 政策与服务发展的责任 5 为一个总监部实施和制定一系列政策或服务。 45 对财务和实物资源的责任 5 为多项服务持有或制定预算，或管理资产。 45 对人员的责任 5 直线管理多个部门，或管理全组织的培训或人力资源的很大一部分。 45 对信息资源的责任 6 以管理和开发全组织的信息系统为主要职责。 46 对研究与开发的责任 2 作为工作的一部分，定期开展研究、开发、试验或设备与系统测试。 12 行动自由度 5 在一般政策范围内工作，并在大多数情况下自行决定如何解读。 45 体力消耗 1 坐、站和行走，体力消耗很少。 3 脑力消耗 4 经常长时间专注，或偶尔高度专注。 18 情绪消耗 2 偶尔接触，或经常间接接触令人痛苦的情况。 11 工作条件 2 偶尔接触不良条件，经常出差或户外工作，或大多数日子几乎持续使用屏幕。 7 总计（第 8d 职级：675 至 720） 716
此级别适用于较大的组织，或向合作伙伴提供共享数字服务的组织。较小的组织通常以第 8c 职级的网络安全主管作为最高级别的安全岗位。
