OG-WRL-002
Cybersecurity Policy and Planning OPM Code: 752

Provides leadership, management, direction, and advocacy so the organization may effectively manage cybersecurity-related risks to the enterprise and conduct cybersecurity work.

Responsible for developing and maintaining cybersecurity plans, strategy, and policy to support and align with organizational cybersecurity initiatives and regulatory compliance.

Code Description Work Roles
T0226 Serve on agency and interagency policy boards 2
T1020 Determine the operational and safety impacts of cybersecurity lapses 37
T1028 Research new vulnerabilities in emerging technologies 2
T1107 Evaluate functional requirements 4
T1158 Develop cybersecurity implementation policies and guidelines 2
T1184 Establish stakeholder communication channels 2
T1185 Maintain stakeholder communication channels 3
T1306 Conduct technology program and project audits 7
T1335 Promote cybersecurity awareness to management 6
T1336 Verify the inclusion of sound cybersecurity principles in the organization's vision and goals 6
T1357 Determine if cybersecurity requirements have been successfully implemented 4
T1358 Determine the effectiveness of organizational cybersecurity policies and procedures 4
T1394 Develop independent cybersecurity audit processes for application software, networks, and systems 7
T1395 Implement independent cybersecurity audit processes for application software, networks, and systems 7
T1396 Oversee independent cybersecurity audits 7
T1397 Determine if research and design processes and procedures are in compliance with cybersecurity requirements 7
T1398 Determine if research and design processes and procedures are accurately followed by cybersecurity staff when performing their day-to-day activities 7
T1436 Acquire adequate funding for cybersecurity training 2
T1464 Determine if cybersecurity workforce management policies and procedures comply with legal and organizational requirements 2
T1476 Promote awareness of cybersecurity policy and strategy among management 6
T1482 Conduct cybersecurity workforce assessments 2
T1492 Integrate laws and regulations into policy 3
T1518 Develop organizational cybersecurity strategy 3
T1543 Develop cybersecurity policies and procedures 3
T1605 Advise management, staff, and users on cybersecurity policy 2
Code Description Work Roles
K0644 Knowledge of cybersecurity operation policies and procedures 5
K0674 Knowledge of computer networking protocols 40
K0675 Knowledge of risk management processes 41
K0676 Knowledge of cybersecurity laws and regulations 41
K0677 Knowledge of cybersecurity policies and procedures 41
K0678 Knowledge of privacy laws and regulations 41
K0679 Knowledge of privacy policies and procedures 41
K0680 Knowledge of cybersecurity principles and practices 40
K0681 Knowledge of privacy principles and practices 40
K0682 Knowledge of cybersecurity threats 40
K0683 Knowledge of cybersecurity vulnerabilities 40
K0684 Knowledge of cybersecurity threat characteristics 40
K0691 Knowledge of cyber defense tools and techniques 7
K0692 Knowledge of vulnerability assessment tools and techniques 7
K0743 Knowledge of new and emerging technologies 15
K0751 Knowledge of system threats 40
K0752 Knowledge of system vulnerabilities 40
K0773 Knowledge of telecommunications principles and practices 14
K0812 Knowledge of digital communication systems and software 9
K0892 Knowledge of cyber defense laws and regulations 13
K0943 Knowledge of industry indicators 2
K0962 Knowledge of targeting laws and regulations 11
K0963 Knowledge of exploitation laws and regulations 11
K0969 Knowledge of cyber-attack tools and techniques 7
K0983 Knowledge of computer networking principles and practices 39
K0990 Knowledge of cyber operations principles and practices 8
K1014 Knowledge of network security principles and practices 40
K1023 Knowledge of network exploitation tools and techniques 3
K1079 Knowledge of web application security risks 13
K1137 Knowledge of cybersecurity requirements 11
K1180 Knowledge of organizational cybersecurity goals and objectives 11
K1183 Knowledge of organizational cybersecurity policies and procedures 6
K1186 Knowledge of organizational human resource (HR) policies and procedures 2
K1206 Knowledge of research and design processes and procedures 7
Code Description Work Roles
S0406 Skill in developing policy plans 5
S0497 Skill in developing client organization profiles 4
S0515 Skill in identifying partner capabilities 5
S0519 Skill in detecting exploitation activities 2
S0687 Skill in performing administrative planning activities 9
S0712 Skill in evaluating data source quality 7
S0713 Skill in evaluating information quality 5
S0729 Skill in preparing plans 3
S0821 Skill in collaborating with internal and external stakeholders 9