Mapping

SFIA professional skills

  • Incident management USUP
  • Information assurance INAS
  • Information security SCTY
  • Security operations SCAD
  • Stakeholder relationship management RLMT

Competencies

  • How to direct incident management activities including advising on updating plans based on evolving threats, learnings and stakeholder engagement.
  • How to review legal and regulatory requirements related to incidents.
  • How to analyse risks, incidents and metrics and communicate these effectively to different stakeholders including executives using business language.
  • How to direct the integration and alignment of incident management strategies with business goals, to mitigate risk, and provide high-level expertise in incident management to the business.
  • How to direct and coordinate the incident management and other teams and stakeholders to manage incident preparedness (e.g. exercises) and an effective response.
  • How to drive continuous improved by incorporating actions from reviews of exercises and actual incidents.

70:20:10 examples

70: Suggested experiential learning

  • Provide executive level crisis response and coordination

20: Suggested professional development

  • Make contributions to the industry e.g. keynotes, board representation.
  • Mentor emerging leaders.
  • Queensland Government strategic crisis management governance (e.g. State Disaster Coordination Group Member Induction).

10: Example formal learning

  • CISM – Certified Information Security Manager