CORE
COMPETENCIES
PROFESSIONAL PATHWAYS / TECHNICAL COMPETENCIES
CORE VALUES
GOJ
Competency
Model
Information Technology Security and Risk Management

This competence relates to all activities within the GoJ that focus on information security, data and networks.

Return to Information & Communication Technology (ICT)
8 Technical Competence
windows-client
ICT Infrastructure
windows-client
Software Engineering, Information Systems Integration and Operations
windows-client
Information Technology Security and Risk Management
windows-client
Data Management, Science and Analytics
windows-client
ICT Service Delivery and Support
windows-client
ICT Project Management
windows-client
ICT Corporate Governance
windows-client
Information Technology & Strategic Sourcing
Professional Bands
Level 1 Essential
  • Understands and applies authentication and authorisation techniques.
  • Possesses and applies practical knowledge of encryption tools and techniques and concepts of cryptography, cryptanalysis, cryptology & steganography.
  • Manages security throughout the data lifecycle–secure data provisioning, data processing, data in transit, data at rest, and data de-provisioning.
  • Supports the investigation of cyber events and/or crimes related to ICT systems and networks.
  • Develops corrective actions from IT audit exercises.
  • Identifies, analyses and mitigates basic threats relevant to ICT systems or networks.
  • Configures controls for network security–hosts, servers and network storage.
  • Develops IT audit plans.
  • Prepares meaningful reports and communicates audit findings and results that will help the GoJ improve its overall data and network security across the enterprise.
  • Performs risk classification exercises to help decide on mitigation strategies to reduce or eliminate identified risks within the GoJ ICT infrastructure and architecture.
  • Conducts business impact analysis (BIA) and communicates results effectively.
  • Reviews and evaluates incoming cybersecurity information to determine its use for intelligence.
  • Implements security controls for applications within GOJ enterprise.
  • Establishes and implements adequate protocols to exchange personal and confidential information.
  • Manages security throughout the data lifecycle–secures data provisioning, data processing, data in transit, data at rest, and data de-provisioning.
  • Responds to complex data security vulnerabilities in a timely manner.
  • Utilises best practices and recognised tools and models to manage security risks across the enterprise.
  • Uses cyber and computer forensics investigation tools, techniques and best practices.
  • Establishes updates and ensures the implementation of data security.
  • Advocates and champions data networks and cybersecurity within government.
  • Sets data recovery strategies and plans to overcome any emergencies.
  • Executes enterprise IT systems and operations audits.
X