Mapping

SFIA professional skills

  • Customer service support CSMG
  • Incident management USUP
  • Information assurance INAS
  • Information security SCTY
  • Security operations SCAD

Competencies

  • How to assist different teams and stakeholders to manage incident preparedness and response.
  • How to support incident management activities including updating plans based on evolving threats and learnings.
  • How to follow legal and regulatory requirements related to incidents including reporting.
  • How to interpret risks, incidents and metrics.
  • Understands key threats, controls and potential incident management responses in the context of the organisation.

70:20:10 examples

70: Suggested experiential learning

  • Monitor key communication channels (e.g. phone, email).
  • Support exercise planning, delivery and review.
  • Support incident management plan development and reviews
  • Support incident recovery and debrief activities.
  • Assist with monitoring and assessing alerts.
  • Collaborate with IT problem and change management staff and processes.

20: Suggested professional development

  • Find a mentor.
  • Shadow other practitioners.
  • Join a cyber security professional association and participate in events such as tabletop exercises.
  • Develop situational awareness of cyber security / incident trends e.g. podcasts, case studies, white papers, news sites, forums.

10: Example formal learning

  • Bachelor degree or post graduate degree in cyber security or a related field (e.g. communications)
  • Certificate IV, Diploma or Advanced Diploma in cyber security or related field (e.g. IT, communications).

Others:

  • Certified in Cyber Security (CC)
  • CompTIA Security +
  • Crisis communications
  • Cyber Security Foundation + Practitioner
  • ITIL Foundations
  • SANS SEC301: Introduction to Cyber Security