3431
May 21, 2020
KSATs
3431 (NIST ID: K0221)
Knowledge
Knowledge of OSI model and underlying network protocols (e.g., TCP/IP).
Items denoted by a * are CORE KSATs for every Work Role, while other CORE KSATs vary by Work Role.
Core KSAT for the following Work Roles
All-Source Analyst (Core)
Analyzes data/information from one or multiple sources to conduct preparation of the environment, respond to requests for information, and submit intelligence collection and production requirements in support of planning and operations.
Cyber Defense Incident Responder (Core)
Investigates, analyzes, and responds to cyber incidents within the network environment or enclave.
Additional KSAT for the following Work Roles
Cyber Defense Analyst (Additional)
Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs.) to analyze events that occur within their environments for the purposes of mitigating threats.