CO-CLO-002 All Source-Collection Requirements Manager

Provides specialized denial and deception operations and collection of cybersecurity information that may be used to develop intelligence.

Executes collection using appropriate strategies and within the priorities established through the collection management process.

Evaluates collection operations and develops effects-based collection requirements strategies using available sources and methods to improve collection. Develops, processes, validates, and coordinates submission of collection requirements. Evaluates performance of collection assets and collection operations.

Knowledges 74

Code Description Work Roles
K0001 Knowledge of computer networking concepts and protocols, and network security methodologies. 52
K0002 Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). 52
K0003 Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. 52
K0004 Knowledge of cybersecurity and privacy principles. 52
K0005 Knowledge of cyber threats and vulnerabilities. 52
K0006 Knowledge of specific operational impacts of cybersecurity lapses. 52
K0036 Knowledge of human-computer interaction principles. 12
K0058 Knowledge of network traffic analysis methods. 10
K0109 Knowledge of physical computer components and architectures, including the functions of various components and peripherals (e.g., CPUs, Network Interface Cards, data storage). 15
K0177 Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks). 12
K0353 Knowledge of possible circumstances that would result in changing collection management authorities. 2
K0361 Knowledge of asset availability, capabilities and limitations. 2
K0364 Knowledge of available databases and tools necessary to assess appropriate collection tasking. 2
K0380 Knowledge of collaborative tools and environments. 2
K0382 Knowledge of collection capabilities and limitations. 2
K0383 Knowledge of collection capabilities, accesses, performance specifications, and constraints utilized to satisfy collection plan. 2
K0384 Knowledge of collection management functionality (e.g., positions, functions, responsibilities, products, reporting requirements). 1
K0386 Knowledge of collection management tools. 2
K0387 Knowledge of collection planning process and collection plan. 2
K0390 Knowledge of collection strategies. 2
K0395 Knowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.). 10
K0401 Knowledge of criteria for evaluating collection products. 2
K0404 Knowledge of current collection requirements. 2
K0412 Knowledge of cyber lexicon/terminology 2
K0417 Knowledge of data communications terminology (e.g., networking protocols, Ethernet, IP, encryption, optical devices, removable media). 10
K0419 Knowledge of database administration and maintenance. 2
K0421 Knowledge of databases, portals and associated dissemination vehicles. 1
K0425 Knowledge of different organization objectives at all levels, including subordinate, lateral and higher. 2
K0427 Knowledge of encryption algorithms and cyber capabilities/tools (e.g., SSL, PGP). 8
K0431 Knowledge of evolving/emerging communications technologies. 11
K0435 Knowledge of fundamental cyber concepts, principles, limitations, and effects. 5
K0444 Knowledge of how Internet applications work (SMTP email, web-based email, chat clients, VOIP). 11
K0445 Knowledge of how modern digital and telephony networks impact cyber operations. 9
K0446 Knowledge of how modern wireless communications systems impact cyber operations. 8
K0448 Knowledge of how to establish priorities for resources. 2
K0453 Knowledge of indications and warning. 2
K0454 Knowledge of information needs. 2
K0467 Knowledge of internal and external partner organization capabilities and limitations (those with tasking, collection, processing, exploitation and dissemination responsibilities). 2
K0474 Knowledge of key cyber threat actors and their equities. 2
K0475 Knowledge of key factors of the operational environment and threat. 2
K0477 Knowledge of leadership's Intent and objectives. 2
K0480 Knowledge of malware. 8
K0482 Knowledge of methods for ascertaining collection asset posture and availability. 2
K0492 Knowledge of non-traditional collection methodologies. 2
K0495 Knowledge of ongoing and future operations. 2
K0496 Knowledge of operational asset constraints. 2
K0498 Knowledge of operational planning processes. 2
K0505 Knowledge of organization objectives and associated demand on collection management. 2
K0513 Knowledge of organizational priorities, legal authorities and requirements submission processes. 2
K0516 Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc. 10
K0521 Knowledge of priority information, how it is derived, where it is published, how to access, etc. 2
K0526 Knowledge of research strategies and knowledge management. 2
K0527 Knowledge of risk management and mitigation strategies. 2
K0552 Knowledge of tasking mechanisms. 2
K0554 Knowledge of tasking, collection, processing, exploitation and dissemination. 2
K0558 Knowledge of the available tools and applications associated with collection requirements and collection management. 2
K0560 Knowledge of the basic structure, architecture, and design of modern communication networks. 10
K0561 Knowledge of the basics of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection). 8
K0562 Knowledge of the capabilities and limitations of new and emerging collection capabilities, accesses and/or processes. 2
K0563 Knowledge of the capabilities, limitations and tasking methodologies of internal and external collections as they apply to planned cyber activities. 2
K0565 Knowledge of the common networking and routing protocols (e.g. TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications. 11
K0568 Knowledge of the definition of collection management and collection management authority. 1
K0569 Knowledge of the existent tasking, collection, processing, exploitation and dissemination architecture. 2
K0570 Knowledge of the factors of threat that could impact collection operations. 2
K0579 Knowledge of the organization, roles and responsibilities of higher, lower and adjacent sub-elements. 3
K0580 Knowledge of the organization’s established format for collection plan. 2
K0581 Knowledge of the organization’s planning, operations and targeting cycles. 2
K0584 Knowledge of the organizational policies/procedures for temporary transfer of collection authority. 2
K0587 Knowledge of the POC’s, databases, tools and applications necessary to establish environment preparation and surveillance products. 2
K0588 Knowledge of the priority information requirements from subordinate, lateral and higher levels of the organization. 2
K0596 Knowledge of the request for information process. 3
K0605 Knowledge of tipping, cueing, mixing, and redundancy. 2
K0610 Knowledge of virtualization products (VMware, Virtual PC). 7
K0612 Knowledge of what constitutes a “threat” to a network. 8

Skills 19

Code Description Work Roles
S0304 Skill to access information on current assets available, usage. 3
S0305 Skill to access the databases where plans/directives/guidance are maintained. 3
S0316 Skill to associate Intelligence gaps to priority information requirements and observables. 2
S0317 Skill to compare indicators/observables with requirements. 2
S0327 Skill to ensure that the collection strategy leverages all available resources. 2
S0330 Skill to evaluate the capabilities, limitations and tasking methodologies of organic, theater, national, coalition and other collection capabilities. 2
S0334 Skill to identify and apply tasking, collection, processing, exploitation and dissemination to associated collection disciplines. 2
S0335 Skill to identify Intelligence gaps. 2
S0336 Skill to identify when priority information requirements are satisfied. 2
S0339 Skill to interpret readiness reporting, its operational relevance and intelligence collection impact. 2
S0344 Skill to prepare and deliver reports, presentations and briefings, to include using visual aids or presentation technology. 2
S0347 Skill to review performance specifications and historical information about collection assets. 2
S0352 Skill to use collaborative tools and environments for collection operations. 2
S0329 Skill to evaluate requests for information to determine if response information exists. 2
S0337 Skill to implement established procedures for evaluating collection management and operations activities. 1
S0346 Skill to resolve conflicting collection requirements. 1
S0348 Skill to specify collections and/or taskings that must be conducted in the near term. 1
S0353 Skill to use systems and/or tools to track collection requirements and determine if they are satisfied. 1
S0362 Skill to analyze and assess internal and external partner organization capabilities and limitations (those with tasking, collection, processing, exploitation and dissemination responsibilities). 2

Abilities 3

Code Description Work Roles
A0069 Ability to apply collaborative skills and strategies. 3
A0070 Ability to apply critical reading/thinking skills. 9
A0078 Ability to coordinate, collaborate and disseminate information to subordinate, lateral and higher-level organizations. 2

Tasks 33

Code Description Work Roles
T0564 Analyze feedback to determine extent to which collection products and services are meeting requirements. 2
T0565 Analyze incoming collection requests. 1
T0568 Analyze plans, directives, guidance and policy for factors that would influence collection management's operational structure and requirement s (e.g., duration, scope, communication requirements, interagency/international agreements). 2
T0577 Assess efficiency of existing information exchange and management systems. 1
T0578 Assess performance of collection assets against prescribed specifications. 2
T0580 Assess the effectiveness of collections in satisfying priority information gaps, using available capabilities and methods, and adjust collection strategies and collection requirements accordingly. 1
T0596 Close requests for information once satisfied. 1
T0602 Collaborate with customer to define information requirements. 1
T0605 Compile lessons learned from collection management activity's execution of organization collection objectives. 2
T0613 Conduct formal and informal coordination of collection requirements in accordance with established guidelines and procedures. 1
T0651 Develop a method for comparing collection reports to outstanding requirements to identify information gaps. 2
T0668 Develop procedures for providing feedback to collection managers, asset managers, and processing, exploitation and dissemination centers. 1
T0673 Disseminate reports to inform decision makers on collection issues. 1
T0675 Conduct and document an assessment of the collection results using established procedures. 1
T0682 Validate the link between collection requests and critical information requirements and priority intelligence requirements of leadership. 1
T0689 Evaluate extent to which collected information and/or produced intelligence satisfy information requests. 1
T0693 Evaluate extent to which collection operations are synchronized with operational requirements. 1
T0694 Evaluate the effectiveness of collection operations against the collection plan. 1
T0714 Identify collaboration forums that can serve as mechanisms for coordinating processes, functions, and outputs with specified organizations and functional groups. 2
T0725 Identify and mitigate risks to collection management ability to support the plan, operations and target cycle. 2
T0730 Inform stakeholders (e.g., collection managers, asset managers, processing, exploitation and dissemination centers) of evaluation results using established procedures. 1
T0734 Issue requests for information. 4
T0746 Modify collection requirements as necessary. 1
T0780 Provide advisory and advocacy support to promote collection planning as an integrated component of the strategic campaign plans and other adaptive plans. 1
T0809 Review capabilities of allocated collection assets. 2
T0810 Review intelligence collection guidance for accuracy/applicability. 2
T0811 Review list of prioritized collection requirements and essential information. 2
T0819 Solicit and manage to completion feedback from requestors on quality, timeliness, and effectiveness of collection against collection requirements. 1
T0822 Submit information requests to collection requirement management section for processing as collection requests. 1
T0830 Track status of information requests, including those processed as collection requests and production requirements, using established procedures. 1
T0831 Translate collection requests into applicable discipline-specific collection requirements. 1
T0832 Use feedback results (e.g., lesson learned) to identify opportunities to improve collection management efficiency and effectiveness. 1
T0833 Validate requests for information according to established criteria. 1