OV-TEA-002 Cyber Instructor

Provides leadership, management, direction, or development and advocacy so the organization may effectively conduct cybersecurity work.

Conducts training of personnel within pertinent subject domain. Develops, plans, coordinates, delivers and/or evaluates training courses, methods, and techniques as appropriate.

Develops and conducts training or education of personnel within cyber domain.

Knowledges 31

Code Description Work Roles
K0001 Knowledge of computer networking concepts and protocols, and network security methodologies. 52
K0002 Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). 52
K0003 Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. 52
K0004 Knowledge of cybersecurity and privacy principles. 52
K0005 Knowledge of cyber threats and vulnerabilities. 52
K0006 Knowledge of specific operational impacts of cybersecurity lapses. 52
K0007 Knowledge of authentication, authorization, and access control methods. 4
K0059 Knowledge of new and emerging information technology (IT) and cybersecurity technologies. 12
K0115 Knowledge that technology that can be exploited. 1
K0124 Knowledge of multiple cognitive domains and tools and methods applicable for learning in each domain. 2
K0130 Knowledge of virtualization technologies and virtual machine development and maintenance. 2
K0146 Knowledge of the organization's core business/mission processes. 10
K0147 Knowledge of emerging security issues, risks, and vulnerabilities. 4
K0204 Knowledge of learning assessment techniques (rubrics, evaluation plans, tests, quizzes). 3
K0208 Knowledge of computer based training and e-learning services. 2
K0213 Knowledge of instructional design and evaluation models (e.g., ADDIE, Smith/Ragan model, Gagne’s Events of Instruction, Kirkpatrick’s model of evaluation). 2
K0215 Knowledge of organizational training policies. 2
K0216 Knowledge of learning levels (i.e., Bloom’s Taxonomy of learning). 2
K0217 Knowledge of Learning Management Systems and their use in managing learning. 2
K0218 Knowledge of learning styles (e.g., assimilator, auditory, kinesthetic). 1
K0220 Knowledge of modes of learning (e.g., rote learning, observation). 2
K0226 Knowledge of organizational training systems. 1
K0239 Knowledge of media production, communication, and dissemination techniques and methods, including alternative ways to inform via written, oral, and visual media. 2
K0245 Knowledge of principles and processes for conducting training and education needs assessment. 2
K0246 Knowledge of relevant concepts, procedures, software, equipment, and technology applications. 2
K0250 Knowledge of Test & Evaluation processes for learners. 3
K0252 Knowledge of training and education principles and methods for curriculum design, teaching and instruction for individuals and groups, and the measurement of training and education effects. 2
K0287 Knowledge of an organization's information classification program and procedures for information compromise. 18
K0313 Knowledge of external organizations and academic institutions with cyber focus (e.g., cyber curriculum/training and Research & Development). 3
K0319 Knowledge of technical delivery capabilities and their limitations. 1
K0628 Knowledge of cyber competitions as a way of developing skills by providing hands-on experience in simulated, real-world situations. 3

Skills 32

Code Description Work Roles
S0001 Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems. 6
S0004 Skill in analyzing network traffic capacity and performance characteristics. 2
S0006 Skill in applying confidentiality, integrity, and availability principles. 3
S0051 Skill in the use of penetration testing tools and techniques. 2
S0052 Skill in the use of social engineering techniques. (e.g., phishing, baiting, tailgating, etc.). 2
S0053 Skill in tuning sensors. 2
S0055 Skill in using knowledge management technologies. 2
S0056 Skill in using network management tools to analyze network traffic patterns (e.g., simple network management protocol). 2
S0057 Skill in using protocol analyzers. 2
S0060 Skill in writing code in a currently supported programming language (e.g., Java, C++). 7
S0064 Skill in developing and executing technical training programs and curricula. 2
S0070 Skill in talking to others to convey information effectively. 2
S0073 Skill in using virtual machines. (e.g., Microsoft Hyper-V, VMWare vSphere, Citrix XenDesktop/Server, Amazon Elastic Compute Cloud, etc.). 5
S0075 Skill in conducting forensic analyses in multiple operating system environments (e.g., mobile device systems). 3
S0076 Skill in configuring and utilizing software-based computer protection tools (e.g., software firewalls, antivirus software, anti-spyware). 3
S0081 Skill in using network analysis tools to identify vulnerabilities. (e.g., fuzzing, nmap, etc.). 2
S0084 Skill in configuring and utilizing network protection components (e.g., Firewalls, VPNs, network intrusion detection systems). 2
S0097 Skill in applying security controls. 3
S0098 WITHDRAWN: Skill in detecting host and network based intrusions via intrusion detection technologies. (See S0025) 1
S0100 Skill in utilizing or developing learning activities (e.g., scenarios, instructional games, interactive exercises). 2
S0101 Skill in utilizing technologies (e.g., SmartBoards, websites, computers, projectors) for instructional purposes. 1
S0121 Skill in system, network, and OS hardening techniques. (e.g., remove unnecessary services, password policies, network segmentation, enable logging, least privilege, etc.). 2
S0131 Skill in analyzing malware. 2
S0156 Skill in performing packet-level analysis. 3
S0184 Skill in analyzing traffic to identify network devices. 4
S0270 Skill in reverse engineering (e.g., hex editing, binary packaging utilities, debugging, and strings analysis) to identify function and ownership of remote tools. 2
S0271 Skill in reviewing and editing assessment products. 3
S0281 Skill in technical writing. 3
S0293 Skill in using tools, techniques, and procedures to remotely exploit and establish persistence on a target. 2
S0301 Skill in writing about facts and ideas in a clear, convincing, and organized manner. 2
S0356 Skill in communicating with all levels of management including Board members (e.g., interpersonal skills, approachability, effective listening skills, appropriate use of style and language for the audience). 4
S0358 Skill to remain aware of evolving technical infrastructures. 2

Abilities 30

Code Description Work Roles
A0006 Ability to prepare and deliver education and awareness briefings to ensure that systems, network, and data users are aware of and adhere to systems security policies and procedures. 1
A0011 Ability to answer questions in a clear and concise manner. 2
A0012 Ability to ask clarifying questions. 3
A0013 Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means. 14
A0014 Ability to communicate effectively when writing. 3
A0015 Ability to conduct vulnerability scans and recognize vulnerabilities in security systems. 8
A0016 Ability to facilitate small group discussions. 2
A0017 Ability to gauge learner understanding and knowledge level. 1
A0018 Ability to prepare and present briefings. 4
A0019 Ability to produce technical documentation. 5
A0020 Ability to provide effective feedback to students for improving learning. 1
A0022 Ability to apply principles of adult learning. 2
A0023 Ability to design valid and reliable assessments. 3
A0024 Ability to develop clear directions and instructional materials. 3
A0032 Ability to develop curriculum for use within a virtual environment. 2
A0055 Ability to operate common network tools (e.g., ping, traceroute, nslookup). 4
A0057 Ability to tailor curriculum that speaks to the topic at the appropriate level for the target audience. 3
A0058 Ability to execute OS command line (e.g., ipconfig, netstat, dir, nbtstat). 3
A0063 Ability to operate different electronic communication systems and methods (e.g., e-mail, VOIP, IM, web forums, Direct Video Broadcasts). 3
A0066 Ability to accurately and completely source all data used in intelligence, assessment and/or planning products. 12
A0070 Ability to apply critical reading/thinking skills. 9
A0083 Ability to evaluate information for reliability, validity, and relevance. 6
A0089 Ability to function in a collaborative environment, seeking continuous consultation with other analysts and experts—both internal and external to the organization—to leverage analytical and technical expertise. 13
A0105 Ability to tailor technical and planning information to a customer’s level of understanding. 7
A0106 Ability to think critically. 9
A0112 Ability to monitor advancements in information privacy technologies to ensure organizational adaptation and compliance. 4
A0114 Ability to develop or procure curriculum that speaks to the topic at the appropriate level for the target. 4
A0118 Ability to understand technology, management, and leadership issues related to organization processes and problem solving. 5
A0119 Ability to understand the basic concepts and issues related to cyber and its organizational impact. 7
A0171 Ability to conduct training and education needs assessment. 2

Tasks 30

Code Description Work Roles
T0316 Develop or assist in the development of computer based training modules or classes. 1
T0317 Develop or assist in the development of course assignments. 1
T0318 Develop or assist in the development of course evaluations. 1
T0319 Develop or assist in the development of grading and proficiency standards. 1
T0320 Assist in the development of individual/collective development, training, and/or remediation plans. 1
T0321 Develop or assist in the development of learning objectives and goals. 1
T0322 Develop or assist in the development of on-the-job training materials or programs. 1
T0323 Develop or assist in the development of written tests for measuring and assessing learner proficiency. 1
T0352 Conduct learning needs assessments and identify requirements. 3
T0365 Develop or assist in the development of training policies and protocols for cyber training. 3
T0367 Develop the goals and objectives for cyber curriculum. 2
T0381 Present technical information to technical and nontechnical audiences. 3
T0382 Present data in creative formats. 2
T0395 Write and publish after action reviews. 2
T0443 Deliver training courses tailored to the audience and physical/virtual environments. 1
T0444 Apply concepts, procedures, software, equipment, and/or technology applications to students. 1
T0450 Design training curriculum and course content based on requirements. 2
T0451 Participate in development of training curriculum and course content. 2
T0467 Ensure that training meets the goals and objectives for cybersecurity training, education, or awareness. 1
T0519 Plan and coordinate the delivery of classroom techniques and formats (e.g., lectures, demonstrations, interactive exercises, multimedia presentations) for the most effective learning environment. 1
T0520 Plan non-classroom educational techniques and formats (e.g., video courses, mentoring, web-based courses). 1
T0535 Recommend revisions to curriculum and course content based on feedback from previous training sessions. 1
T0536 Serve as an internal consultant and advisor in own area of expertise (e.g., technical, copyright, print media, electronic media). 3
T0030 Conduct interactive training exercises to create an effective learning environment. 1
T0073 Develop new or identify existing awareness and training materials that are appropriate for intended audiences. 1
T0101 Evaluate the effectiveness and comprehensiveness of existing training programs. 1
T0224 Review training documentation (e.g., Course Content Documents [CCD], lesson plans, student texts, examinations, Schedules of Instruction [SOI], and course descriptions). 1
T0230 Support the design and execution of exercise scenarios. 2
T0247 Write instructional materials (e.g., standard operating procedures, production manual) to provide detailed guidance to relevant portion of the workforce. 2
T0926 Develop or assist with the development of privacy training materials and other communications to increase employee understanding of company privacy policies, data handling practices and procedures and legal obligations. 2