Files
skillfactor-pipeline/skills/cybersecurity-risk-manager/references/skills.md
skillfactor-pipeline af05383bb1 chore: v1 baseline - full 3,039-package catalog with AI-skill enrichment and O*NET backfill
Snapshot before the quality program (relevance gates, tiered mapping,
QA linter). v1 is the immutable before/after reference; evidence crawl
was at ~175/3039 occupations when tagged.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PDKeXvpT6tENSvyQGLV1Uq
2026-07-09 05:32:49 +02:00

3.4 KiB

Competences — cybersecurity risk manager

Source: ESCO v1.2.1 occupation-skill relations (http://data.europa.eu/esco/occupation/7754d570-9519-48c2-b1c9-8e165f8bca0f).

Essential

  • advice on security risk management (skill/competence)
  • assessment of risks and threats (knowledge)
  • attack vectors (knowledge)
  • communicate with stakeholders (skill/competence)
  • cyber attack counter-measures (knowledge)
  • cyber security (knowledge)
  • engage with stakeholders (skill/competence)
  • ensure adherence to organisational ICT standards (skill/competence)
  • establish an ICT security prevention plan (skill/competence)
  • establish an Information Security Management System (skill/competence)
  • ethical hacking principles (knowledge)
  • ICT network security risks (knowledge)
  • ICT performance analysis methods (knowledge)
  • ICT safety (nan)
  • ICT security standards (knowledge)
  • implement ICT risk management (skill/competence)
  • information security strategy (knowledge)
  • internal risk management policy (knowledge)
  • manage system security (skill/competence)
  • risk management (knowledge)
  • security engineering (knowledge)
  • security threats (knowledge)

Optional

  • audit techniques (knowledge)
  • cloud monitoring and reporting (knowledge)
  • cloud security and compliance (knowledge)
  • computer forensics (knowledge)
  • decision support systems (knowledge)
  • define security policies (skill/competence)
  • define technology strategy (skill/competence)
  • design for organisational complexity (skill/competence)
  • develop information security strategy (skill/competence)
  • develop with cloud services (skill/competence)
  • domain name service (knowledge)
  • execute ICT audits (skill/competence)
  • hybrid model (knowledge)
  • ICT encryption (knowledge)
  • ICT problem management techniques (knowledge)
  • ICT process quality models (knowledge)
  • ICT project management (knowledge)
  • ICT quality policy (knowledge)
  • ICT recovery techniques (knowledge)
  • ICT security legislation (knowledge)
  • ICT system user requirements (knowledge)
  • identify ICT security risks (skill/competence)
  • implement a firewall (skill/competence)
  • implement a virtual private network (skill/competence)
  • implement anti-virus software (skill/competence)
  • implement cloud security and compliance (skill/competence)
  • implement ICT security policies (skill/competence)
  • implement spam protection (skill/competence)
  • information confidentiality (knowledge)
  • internet governance (knowledge)
  • Internet of Things (knowledge)
  • investment analysis (knowledge)
  • lead disaster recovery exercises (skill/competence)
  • legal requirements of ICT products (knowledge)
  • levels of software testing (knowledge)
  • manage disaster recovery plans (skill/competence)
  • manage keys for data protection (skill/competence)
  • mobile device management (knowledge)
  • Open source model (knowledge)
  • organisational resilience (knowledge)
  • Outsourcing model (knowledge)
  • remove computer virus or malware from a computer (skill/competence)
  • service-oriented modelling (knowledge)
  • solve ICT system problems (skill/competence)
  • systems development life-cycle (knowledge)
  • tools for ICT test automation (knowledge)
  • use an application-specific interface (skill/competence)
  • use back-up and recovery tools (skill/competence)
  • use ICT ticketing system (skill/competence)
  • web application security threats (knowledge)