All-Source Collection Requirements Manager

All-Source Collection Requirements Manager Work Role ID: 312 (NIST: CO-CL-002) Category/Specialty Area: Collect & Operate / Collections Operations Workforce Element: Intelligence (Cyberspace)

Evaluates collection operations and develops effects-based collection requirements strategies using available sources and methods to improve collection. Develops, processes, validates, and coordinates submission of collection requirements. Evaluates performance of collection assets and collection operations.


Items denoted by a * are CORE KSATs for every Work Role, while other CORE KSATs vary by Work Role.

Core KSATs

KSAT ID Description KSAT
22

* Knowledge of computer networking concepts and protocols, and network security methodologies.

Knowledge
108

* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).

Knowledge
1157

* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.

Knowledge
1158

* Knowledge of cybersecurity principles.

Knowledge
1159

* Knowledge of cyber threats and vulnerabilities.

Knowledge
2015

Analyze feedback to determine extent to which collection products and services are meeting requirements.

Task
2017

Analyze incoming collection requests.

Task
2021

Analyze plans, directives, guidance and policy for factors that would influence collection management’s operational structure and requirement s (e.g., duration, scope, communication requirements, interagency/international agreements).

Task
2053

Assess the effectiveness of collections in satisfying priority information gaps, using available capabilities and methods, and then adjust collection strategies and collection requirements accordingly.

Task
2093

Collaborate with customer to define information requirements.

Task
2245

Develop a method for comparing collection reports to outstanding requirements to identify information gaps.

Task
2375

Validate the link between collection requests and critical information requirements and priority intelligence requirements of leadership.

Task
2398

Evaluate the effectiveness of collection operations against the collection plan.

Task
2857

Translate collection requests into applicable discipline-specific collection requirements.

Task
3010

Ability to apply collaborative skills and strategies.

Ability
3011

Ability to apply critical reading/thinking skills.

Ability
3102

Knowledge of operational planning processes.

Knowledge
3380

Knowledge of methods for ascertaining collection asset posture and availability.

Knowledge
3557

Knowledge of collection strategies.

Knowledge
4024

Skill to identify and apply tasking, collection, processing, exploitation and dissemination to associated collection disciplines.

Skill
4066

Skill to use collaborative tools and environments.

Skill
6900

* Knowledge of specific operational impacts of cybersecurity lapses.

Knowledge

Additional KSATs

KSAT ID Description KSAT
52

Knowledge of human-computer interaction principles.

Knowledge
87

Knowledge of network traffic analysis methods.

Knowledge
2046

Assess efficiency of existing information exchange and management systems.

Task
2051

Assess performance of collection assets against prescribed specifications.

Task
2082

Close requests for information once satisfied.

Task
2098

Compile lessons learned from collection management activity’s execution of organization collection objectives.

Task
2111

Conduct formal and informal coordination of collection requirements in accordance with established guidelines and procedures.

Task
2311

Develop procedures for providing feedback to collection managers, asset managers, and processing, exploitation and dissemination centers.

Task
2341

Disseminate reports to inform decision makers on collection issues.

Task
2347

Conduct and document an assessment of the collection results using established procedures.

Task
2384

Evaluate extent to which collected information and/or produced intelligence satisfy information requests.

Task
2397

Evaluate extent to which collection operations are synchronized with operational requirements.

Task
2451

Identify collaboration forums that can serve as mechanisms for coordinating processes, functions, and outputs with specified organizations and functional groups.

Task
2479

Identify and mitigate risks to collection management ability to support the plan, operations and target cycle.

Task
2514

Inform stakeholders (e.g., collection managers, asset managers, processing, exploitation and dissemination centers) of evaluation results using established procedures.

Task
2529

Issue requests for information.

Task
2587

Modify collection requirements as necessary.

Task
2727

Provide advisory and advocacy support to promote collection planning as an integrated component of the strategic campaign plans and other adaptive plans.

Task
2807

Review capabilities of allocated collection assets.

Task
2809

Review intelligence collection guidance for accuracy/applicability.

Task
2810

Review list of prioritized collection requirements and essential information.

Task
2827

Solicit and manage to completion feedback from requestors on quality, timeliness, and effectiveness of collection against collection requirements.

Task
2835

Submit information requests to collection requirement management section for processing as collection requests.

Task
2856

Track status of information requests, including those processed as collection requests and production requirements, using established procedures.

Task
2867

Use feedback results (e.g., lesson learned) to identify opportunities to improve collection management efficiency and effectiveness.

Task
2875

Validate requests for information according to established criteria.

Task
3092

Knowledge of database administration and maintenance.

Knowledge
3098

Knowledge of virtualization products (Vmware, Virtual PC).

Knowledge
3116

Knowledge of all possible circumstances that would result in changing collection management authorities.

Knowledge
3127

Knowledge of asset availability, capabilities and limitations.

Knowledge
3128

Knowledge of tasking mechanisms.

Knowledge
3131

Knowledge of available databases and tools necessary to assess appropriate collection tasking.

Knowledge
3135

Knowledge of basic computer components and architectures, including the functions of various peripherals.

Knowledge
3137

Knowledge of basic malicious activity concepts (e.g., foot printing, scanning and enumeration).

Knowledge
3148

Knowledge of collection capabilities and limitations.

Knowledge
3156

Knowledge of collection management tools.

Knowledge
3160

Knowledge of collaborative tools and environments.

Knowledge
3162

Knowledge of collection capabilities, accesses, performance specifications, and constraints utilized to satisfy collection plan.

Knowledge
3165

Knowledge of collection planning process and collection plan.

Knowledge
3175

Knowledge of leadership’s Intent and objectives.

Knowledge
3188

Knowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.).

Knowledge
3195

Knowledge of criteria for evaluating collection products.

Knowledge
3204

Knowledge of current collection requirements.

Knowledge
3217

Knowledge of cyber lexicon/terminology

Knowledge
3225

Knowledge of data communications terminology (e.g., networking protocols, Ethernet, IP, encryption, optical devices, removable media).

Knowledge
3234

Knowledge of databases, portals and associated dissemination vehicles.

Knowledge
3253

Knowledge of encryption algorithms and cyber capabilities/tools (e.g., SSL, PGP).

Knowledge
3262

Knowledge of evolving/emerging communications technologies.

Knowledge
3275

Knowledge of fundamental cyber concepts, principles, limitations, and effects.

Knowledge
3291

Knowledge of how internet applications work (SMTP email, web-based email, chat clients, VOIP).

Knowledge
3292

Knowledge of how modern digital and telephony networks impact cyber operations.

Knowledge
3293

Knowledge of how modern wireless communications systems impact cyber operations.

Knowledge
3297

Knowledge of how to establish priorities for resources.

Knowledge
3322

Knowledge of indications and warning.

Knowledge
3325

Knowledge of information needs.

Knowledge
3361

Knowledge of key cyber threat actors and their equities.

Knowledge
3362

Knowledge of key factors of the operational environment and threat.

Knowledge
3374

Knowledge of malware.

Knowledge
3389

Knowledge of organization objectives and associated demand on collection management.

Knowledge
3417

Knowledge of non-traditional collection methodologies.

Knowledge
3420

Knowledge of ongoing and future operations.

Knowledge
3424

Knowledge of operational asset constraints.

Knowledge
3430

Knowledge of organizational priorities, legal authorities and requirements submission processes.

Knowledge
3441

Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.

Knowledge
3464

Knowledge of research strategies and knowledge management.

Knowledge
3470

Knowledge of risk management and mitigation strategies.

Knowledge
3541

Knowledge of the available tools and applications associated with collection requirements and collection management.

Knowledge
3543

Knowledge of the basic structure, architecture, and design of modern communication networks.

Knowledge
3545

Knowledge of the basics of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).

Knowledge
3549

Knowledge of the capabilities and limitations of new and emerging collection capabilities, accesses and/or processes.

Knowledge
3552

Knowledge of the capabilities, limitations and tasking methodologies of internal and external collections as they apply to planned cyber activities.

Knowledge
3556

Knowledge of collection management functionality (e.g., positions, functions, responsibilities, products, reporting requirements).

Knowledge
3558

Knowledge of the priority information requirements from subordinate, lateral and higher levels of the organization.

Knowledge
3561

Knowledge of the common networking and routing protocols(e.g. TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications.

Knowledge
3568

Knowledge of the definition of collection management and collection management authority.

Knowledge
3574

Knowledge of the existent tasking, collection, processing, exploitation and dissemination architecture.

Knowledge
3575

Knowledge of the factors of threat that could impact collection operations.

Knowledge
3595

Knowledge of the organization, roles and responsibilities of higher, lower and adjacent sub-elements.

Knowledge
3599

Knowledge of the organizational policies/procedures for temporary transfer of collection authority.

Knowledge
3602

Knowledge of the POC’s, databases, tools and applications necessary to establish environment preparation and surveillance products.

Knowledge
3624

Knowledge of different organization objectives at all levels, including subordinate, lateral and higher.

Knowledge
3625

Knowledge of the organization’s established format for collection plan.

Knowledge
3626

Knowledge of the organization’s planning, operations and targeting cycles.

Knowledge
3631

Knowledge of internal and external partner organization capabilities and limitations (those with tasking, collection, processing, exploitation and dissemination responsibilities).

Knowledge
3633

Knowledge of tipping, cueing, mixing, and redundancy.

Knowledge
3650

Knowledge of priority information, how it is derived, where it is published, how to access, etc.

Knowledge
3651

Knowledge of what constitutes a “threat” to a network.

Knowledge
3663

Knowledge of tasking, collection, processing, exploitation and dissemination.

Knowledge
3957

Skill to access information on current assets available, usage.

Skill
3960

Skill to access the databases where plans/directives/guidance are maintained.

Skill
3985

Skill to associate Intelligence gaps to priority information requirements and observables.

Skill
3986

Skill to compare and contrast indicators/observables with requirements.

Skill
3994

Ability to coordinate, collaborate and disseminate information to subordinate, lateral and higher-level organizations.

Ability
4012

Skill to ensure that the collection strategy leverages all available resources.

Skill
4016

Skill to evaluate the capabilities, limitations and tasking methodologies of organic, theater, national, coalition and other collection capabilities.

Skill
4025

Skill to identify Intelligence gaps.

Skill
4027

Skill to identify when priority information requirements are satisfied.

Skill
4028

Skill to implement established procedures for evaluating collection management and operations activities.

Skill
4033

Skill to interpret readiness reporting, its operational relevance and intelligence collection impact.

Skill
4049

Skill to prepare and deliver reports, presentations and briefings, to include using visual aids or presentation technology.

Skill
4055

Skill to resolve conflicting collection requirements.

Skill
4056

Skill to review performance specifications and historical information about collection assets.

Skill
4057

Skill to specify collections and/or taskings that must be conducted in the near term.

Skill
4063

Skill to evaluate requests for information to determine if response information exists.

Skill
4065

Skill to use systems and/or tools to track collection requirements and determine whether or not they are satisfied.

Skill
4113

Knowledge of the request for information process.

Knowledge