* Knowledge of computer networking concepts and protocols, and network security methodologies.

Knowledge of current and emerging cyber technologies.

* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).

Knowledge of emerging technologies that have potential for exploitation by adversaries.

Knowledge of external organizations and academic institutions with cyber focus (e.g., cyber curriculum/training and Research & Development).

Analyze organizational cyber policy.

Assess policy needs and collaborate with stakeholders to develop policies to govern cyber activities.

Design/integrate a cyber strategy that outlines the vision, mission, and goals that align with the organization’s strategic plan.

Draft, staff, and publish cyber policy.

Monitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services.

Provide policy guidance to cyber management, staff, and users.

Review, conduct, or participate in audits of cyber programs and projects.

Support the CIO in the formulation of cyber-related policies.

Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.

Knowledge of applicable laws (e.g., Electronic Communications Privacy Act, Foreign Intelligence Surveillance Act, Protect America Act, search and seizure laws, civil liberties and privacy laws), statutes (e.g., in Titles 10, 18, 32, 50 in U.S. Code), Presidential Directives, executive branch guidelines, and/or administrative/criminal legal guidelines and procedures relevant to work performed.

* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.

* Knowledge of cybersecurity principles.

* Knowledge of cyber threats and vulnerabilities.

Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials.

Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization’s mission, vision, and goals.

Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.

Ability to leverage best practices and lessons learned of external organizations and academic institutions dealing with cyber issues.

Knowledge of full spectrum cyber capabilities.

* Knowledge of specific operational impacts of cybersecurity lapses.

* Knowledge of cloud computing service models Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).

* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.

Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).

Ability to determine the validity of technology trend data.

Knowledge of industry indicators useful for identifying technology trends.

Knowledge of the nature and function of the relevant information structure (e.g., National Information Infrastructure).

Define and integrate current and future mission environments.

Develop policy, programs, and guidelines for implementation.

Establish and maintain communication channels with stakeholders.

Seek consensus on proposed policy changes from stakeholders.

Review existing and proposed policies with stakeholders.

Serve on agency and interagency policy boards.

Knowledge of the organization’s core business/mission processes.

Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration.

Ensure cyber workforce management policies and processes comply with legal and organizational requirements regarding equal opportunity, diversity, and fair hiring/employment practices.

Review/Assess cyber workforce effectiveness to adjust skill and/or qualification standards.

Knowledge of cloud service models and possible limitations for an incident response.

Knowledge of strategic theory and practice.