Legal Advice and Advocacy (LGA)
- Work Role Definition
Provides legal advice and recommendations on relevant topics related to cyber law.
Recommended SANS Training & GIAC Certification:- LEG523: Law of Data Security and Investigations
- Certification: GIAC Law of Data Security & Investigations (GLEG)
- Certification: GIAC Law of Data Security & Investigations (GLEG)
- SEC402: Cybersecurity Writing: Hack the Reader
- LEG523: Law of Data Security and Investigations
- Work Role Definition
Develops and oversees privacy compliance program and privacy program staff, supporting privacy compliance needs of privacy and security executives and their teams.
Recommended SANS Training & GIAC Certification:- SEC301: Introduction to Cyber Security
- Certification: GIAC Information Security Fundamentals (GISF)
- Certification: GIAC Information Security Fundamentals (GISF)
- MGT512: Security Leadership Essentials for Managers
- Certification: GIAC Security Leadership (GSLC)
- Certification: GIAC Security Leadership (GSLC)
- ICS456: Essentials for NERC Critical Infrastructure Protection
- Certification: GIAC Critical Infrastructure Protection (GCIP)
- Certification: GIAC Critical Infrastructure Protection (GCIP)
- SEC504: Hacker Tools, Techniques, and Incident Handling
- Certification: GIAC Certified Incident Handler (GCIH)
- SEC301: Introduction to Cyber Security
Training, Education, and Awareness (TEA)
-
Work Role Definition:
Develops, plans, coordinates, and evaluates cyber training/education courses, methods, and techniques based on instructional needs.
Recommended SANS Training & GIAC Certification:- SEC401: Security Essentials: Network, Endpoint, and Cloud
- Certification: GIAC Security Essentials (GSEC)
- Certification: GIAC Security Essentials (GSEC)
- MGT433: Managing Human Risk: Mature Security Awareness Programs
- Certification: SANS Security Awareness Professional (SSAP)
- Certification: SANS Security Awareness Professional (SSAP)
- MGT521: Leading Cybersecurity Change: Building a Security-Based Culture
- SEC504: Hacker Tools, Techniques, and Incident Handling
- Certification: GIAC Certified Incident Handler (GCIH)
- SEC401: Security Essentials: Network, Endpoint, and Cloud
-
Work Role Definition:
Develops and conducts training or education of personnel within cyber domain.
Recommended SANS Training & GIAC Certification- SEC401: Security Essentials: Network, Endpoint, and Cloud
- Certification: GIAC Security Essentials (GSEC)
- Certification: GIAC Security Essentials (GSEC)
- SEC504: Hacker Tools, Techniques, and Incident Handling
- Certification: GIAC Certified Incident Handler (GCIH)
- Certification: GIAC Certified Incident Handler (GCIH)
- SEC501: Advanced Security Essentials - Enterprise Defender
- Certification: GIAC Certified Enterprise Defender (GCED)
- Certification: GIAC Certified Enterprise Defender (GCED)
- SEC402: Cybersecurity Writing: Hack the Reader
- SEC403: Secrets to Successful Cybersecurity Presentation
- SEC401: Security Essentials: Network, Endpoint, and Cloud
- Work Role Definition:
Builds, maintains and measures the organizations security awareness and communications program with the goal of securing the workforce’s behaviors and ultimately creating a secure culture.
Recommended SANS Training & GIAC Certification- MGT433: Managing Human Risk: Mature Security Awareness Programs
- Certification: SANS Security Awareness Professional (SSAP)
- Certification: SANS Security Awareness Professional (SSAP)
- MGT512: Security Leadership Essentials for Managers
- Certification: GIAC Security Leadership (GSLC)
- Certification: GIAC Security Leadership (GSLC)
- MGT521: Leading Cybersecurity Change: Building a Security-Based Culture
- SEC402: Cybersecurity Writing: Hack the Reader
- SEC403: Secrets to Successful Cybersecurity Presentation
- MGT433: Managing Human Risk: Mature Security Awareness Programs
Cybersecurity Management (MGT)
-
Work Role Definition:
Responsible for the cybersecurity of a program, organization, system, or enclave.
Recommended SANS Training & GIAC Certification- MGT512: Security Leadership Essentials for Managers
- Certification: GIAC Security Leadership (GSLC)
- Certification: GIAC Security Leadership (GSLC)
- MGT514: Security Strategic Planning, Policy, and Leadership
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- MGT520: Leading Cloud Security Design and Implementation
- MGT521: Leading Cybersecurity Change: Building a Security-Based Culture
- MGT553: Cyber Incident Management
- MGT551: Building and Leading Security Operations Centers
- Certification: GIAC Security Operations Manager (GSOM)
- Certification: GIAC Security Operations Manager (GSOM)
- SEC504: Hacker Tools, Techniques, and Incident Handling
- Certification: GIAC Certified Incident Handler (GCIH)
- Certification: GIAC Certified Incident Handler (GCIH)
- SEC488: Cloud Security Essentials
- Certification: GIAC Cloud Security Essentials (GCLD)
- MGT512: Security Leadership Essentials for Managers
- Work Role Definition:
Manages the Communications Security (COMSEC) resources of an organization (CNSSI No. 4009).
Recommended SANS Training & GIAC Certification- SEC301: Introduction to Cyber Security
- Certification: GIAC Information Security Fundamentals (GISF)
- Certification: GIAC Information Security Fundamentals (GISF)
- MGT512: Security Leadership Essentials for Managers
- Certification: GIAC Security Leadership (GSLC)
- Certification: GIAC Security Leadership (GSLC)
- MGT553: Cyber Incident Management
- SEC301: Introduction to Cyber Security
Strategic Planning and Policy (SPP)
-
Work Role Definition:
Develop cyberspace workforce plans, strategies and guidance to support cyberspace workforce manpower, personnel, training and education requirements and to address changes to cyberspace policy, doctrine, materiel, force structure, and education and training requirements.
Recommended SANS Training & GIAC Certification
- MGT512: Security Leadership Essentials for Managers
- Certification: GIAC Security Leadership (GSLC)
- Certification: GIAC Security Leadership (GSLC)
- MGT514: Security Strategic Planning, Policy, and Leadership
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- MGT521: Leading Cybersecurity Change: Building a Security-Based Culture
- MGT553: Cyber Incident Management
- MGT512: Security Leadership Essentials for Managers
- Work Role Definition:
Develops cyberspace plans, strategy and policy to support and align with organizational cyberspace missions and initiatives.Recommended SANS Training & GIAC Certification
- MGT512: Security Leadership Essentials for Managers
- Certification: GIAC Security Leadership (GSLC)
- Certification: GIAC Security Leadership (GSLC)
- MGT514: Security Strategic Planning, Policy, and Leadership
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- MGT521: Leading Cybersecurity Change: Building a Security-Based Culture
- MGT553: Cyber Incident Management
- MGT512: Security Leadership Essentials for Managers
Executive Cyber Leadership (EXL)
-
Work Role Definition
Executes decision making authorities and establishes vision and direction for an organization's cyber and cyber-related resources and/or operations.
Recommended SANS Training & GIAC Certification
- MGT514: Security Strategic Planning, Policy, and Leadership
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- MGT521: Leading Cybersecurity Change: Building a Security-Based Culture
- MGT553: Cyber Incident Management
- MGT514: Security Strategic Planning, Policy, and Leadership
Program/Project Management (PMA) and Acquisition
-
Work Role Definition
Leads, coordinates, communicates, integrates and is accountable for the overall success of the program, ensuring alignment with critical agency priorities.
Recommended SANS Training & GIAC Certification
- MGT512: Security Leadership Essentials for Managers
- Certification: GIAC Security Leadership (GSLC)
- Certification: GIAC Security Leadership (GSLC)
- MGT514: Security Strategic Planning, Policy, and Leadership
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- MGT512: Security Leadership Essentials for Managers
- Work Role Definition
Directly manages information technology projects to provide a unique service or product.Recommended SANS Training & GIAC Certification
- MGT512: Security Leadership Essentials for Managers
- Certification: GIAC Security Leadership (GSLC)
- Certification: GIAC Security Leadership (GSLC)
- MGT525: Managing Cybersecurity Initiatives and Effective Communication
- Certification: GIAC Certified Project Manager (GCPM)
- Certification: GIAC Certified Project Manager (GCPM)
- MGT514: Security Strategic Planning, Policy, and Leadership
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- Certification: GIAC Strategic Planning, Policy, and Leadership (GSTRT)
- MGT512: Security Leadership Essentials for Managers
- Work Role Definition
Manages the package of support functions required to field and maintain the readiness and operational capability of systems and components.Recommended SANS Training & GIAC Certification
- MGT512: Security Leadership Essentials for Managers
- Certification: GIAC Security Leadership (GSLC)
- Certification: GIAC Security Leadership (GSLC)
- MGT525: Managing Cybersecurity Initiatives and Effective Communication
- Certification: GIAC Certified Project Manager (GCPM)
- Certification: GIAC Certified Project Manager (GCPM)
- MGT512: Security Leadership Essentials for Managers
- Work Role Definition
Manages a portfolio of IT capabilities that align with the overall needs of mission and business enterprise priorities.Recommended SANS Training & GIAC Certification
- MGT512: Security Leadership Essentials for Managers
- Certification: GIAC Security Leadership (GSLC)
- Certification: GIAC Security Leadership (GSLC)
- SEC401: Security Essentials: Network, Endpoint, and Cloud
- Certification: GIAC Security Essentials (GSEC)
- Certification: GIAC Security Essentials (GSEC)
- SEC504: Hacker Tools, Techniques, and Incident Handling
- Certification: GIAC Certified Incident Handler (GCIH)
- MGT512: Security Leadership Essentials for Managers
- Work Role Definition
Conducts evaluations of an IT program or its individual components, to determine compliance with published standards.
Recommended SANS Training & GIAC Certification- AUD507: Auditing & Monitoring Networks, Perimeters & Systems
- Certification: GIAC Systems and Network Auditor (GSNA)
- Certification: GIAC Systems and Network Auditor (GSNA)
- SEC460: Enterprise and Cloud | Threat and Vulnerability Assessment
- Certification: GIAC Enterprise Vulnerability Assessor (GEVA)
- Certification: GIAC Enterprise Vulnerability Assessor (GEVA)
- SEC402: Cybersecurity Writing: Hack the Reader
- SEC403: Secrets to Successful Cybersecurity Presentation
- AUD507: Auditing & Monitoring Networks, Perimeters & Systems