Cyber Security Capability Framework & Mapping of ISM Roles - agimo

Information SecurityAnalyses and Evaluates1. Specifies organisational procedures for the assessment of an activity, process,product or service, against recognised criteria, such as ISO 27001.2. Provides leadership and guidelines on information assurance security expertise forthe organisation, working effectively with strategic organisational functions such aslegal experts and technical support to provide authoritative advice and guidance onthe requirements for security controls.3. Reviews security plans and procedural documentation, including disaster recoveryplans, to ensure that information security incidents are avoided during shutdown andlong term protection of archived resources is achieved.Technology Audit1. Develops plans for risk-based audit coverage of technology systems for inclusion inaudit planning and uses experience to ensure audit coverage is sufficient to providethe business with assurance of adequacy and integrity.2. Leads and manages complex technical audits, managing specialists contracted tocontribute highly specialised technical knowledge and experience.3. Identifies areas of risk and specifies interrogation programs. Recommends changesin processes and control procedures based on audit findings, including, whereappropriate, the assessment of safety-related software systems to determinecompliance with standards and required levels of safety integrity.Emerging Technology Monitoring1. Co-ordinates the identification and assessment of new and emerging hardware,software and communication technologies, products, methods and techniques.2. Evaluates likely relevance of these for the organisation. Provides regular briefingsto staff and management.3. Works with the CISO to formulate the organisation’s information security budget.4. Interprets and/or approves security requirements as they relate to the capabilitiesof new information technologies, taking into account organisational policies andgovernment guidelines and legislation.Applies Technical Proficiency1. Evaluates and approves development efforts to ensure that baseline security safeguards areappropriately installed.2. Provides for restoration of information systems by ensuring that protection, detection, andreaction capabilities are incorporated.3. Recommends and schedules information security related repairs within the organisation’sinfrastructure and undertakes more complex repairs.4. Validates the planning and scheduling of the installation of new or modified hardware, operatingsystems, and software applications ensuring integration with information security requirementsfor the infrastructure.4. Provides general and specific advice, and authorises the issue of formal reports tomanagement on the effectiveness and efficiency of control mechanisms.5. Reviews or develops effective vulnerability countermeasures6. Reviews the report of, or participates in, an information security risk assessment or review.7. Oversees the development of the audit planning process.8. Reports to senior managers on technical aspects of information security management, andcompliance with and enforcement of policies across the agency.5. Ensures that protection and detection capabilities are acquired or developed using anengineering approach and are consistent with the organisation’s information technologysecurity architecture.6. Identifies security program implications of new technologies or technology upgrades.Produced for AGIMO by Workplace Research Associates Pty Ltd 2010 Page 18