02. REVISED PWS Supplement – Task Descriptions.xlsx
XLSX spreadsheet 307 KB Posted
- Attached to
- ENTERPRISE CYBER CAPABILITIES (EC2)
- Solicitation number
- FA877322R0005
View the file
Other files
Show all 28
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Performance Objectives
| Performance Objectives | Specialty Area Description | Title/Role | PWS Map/Nesting | Description | |||
| OM-DTA-001 | Develops and administers databases and/or data management systems that allow for the storage, query, protection, and utilization of data. | Database Administrator | 2.1.1 | Administers databases and/or data management systems that allow for the secure storage, query, protection, and utilization of data. | Master KSA List | Master Task List | Omitted Labor Categories |
| OM-DTA-002 | Data Analyst | 2.1.1 | Examines data from multiple disparate sources with the goal of providing security and privacy insight. Designs and implements custom algorithms, workflow processes, and layouts for complex, enterprise-scale data sets used for modeling, data mining, and research purposes. | ||||
| OM-KMG-001 | Manages and administers processes and tools that enable the organization to identify, document, and access intellectual capital and information content | Knowledge Manager | 2.1.2 | Responsible for the management and administration of processes and tools that enable the government to identify, document, and access intellectual capital and information content. | |||
| OM-STS-001 | Addresses problems; installs, configures, troubleshoots, and provides maintenance and training in response to customer requirements or inquiries (e.g., tiered-level customer support). Typically provides initial incident information to the Incident Response (IR) Specialty. | Technical Support Specialist | 2.1.3 | Provides technical support to customers who need assistance utilizing client-level hardware and software in accordance with established or approved governmental process components (i.e., Master Incident Management Plan, when applicable) | |||
| OM-NET-001 | Installs, configures, tests, operates, maintains, and manages networks and their firewalls, including hardware (e.g., hubs, bridges, switches, multiplexers, routers, cables, proxy servers, and protective distributor systems) and software that permit the sharing and transmission of all spectrum transmissions of information to support the security of information and information systems. | Network Operations Specialist | 2.1.4 | Plans, implements, and operates network services/systems, to include hardware and virtual environments. | |||
| OM-ADM-001 | Installs, configures, troubleshoots, and maintains server configurations (hardware and software) to ensure their confidentiality, integrity, and availability. Manages accounts, firewalls, and patches. Responsible for access control, passwords, and account creation and administration. | System Administrator | 2.1.5 | Responsible for setting up and maintaining a system or specific components of a system (e.g. for example, installing, configuring, and updating hardware and software; establishing and managing user accounts; overseeing or conducting backup and recovery tasks; implementing operational and technical security controls; and adhering to governmental security policies and procedures). | |||
| OM-ANA-001 | Studies an organization's current computer systems and procedures, and designs information systems solutions to help the organization operate more securely, efficiently, and effectively. Brings business and information technology (IT) together by understanding the needs and limitations of both. | Systems Security Analyst | 2.1.6 | Responsible for the analysis and development of the integration, testing, operations, and maintenance of systems security. | |||
| MP-MGT-001 | Assists in managing the cybersecurity program of an information system or network, including managing information security implications within the organization, specific program, or other area of responsibility, to include strategic, personnel, infrastructure, requirements, policy enforcement, emergency planning, security awareness, and other resources. | Information Systems Security Officer (ISSO) | 2.2.1 | Assists the Information Systems Security Manager (ISSM) with overseeing the cybersecurity of a program, organization, system, or enclave; and, ensures that all users have the requisite security clearances and access authorization, and are aware of their cybersecurity responsibilities before being granted access to information systems. | |||
| MP-MGT-002 | Communications Security (COMSEC) Manager | 2.2.1 | Individual who manages the Communications Security (COMSEC) resources of an organization or key custodian for a Crypto Key Management System (CKMS). | ||||
| MP-SPP-001 | Develops policies and plans and/or advocates for changes in policy that support organizational cyberspace initiatives or required changes/enhancements. | Cyber Workforce Developer and Manager | 2.2.2 | Assists the government with the development of cyberspace workforce plans, strategies, and guidance to support cyberspace workforce manpower, personnel, training and education requirements and to address changes to cyberspace policy, doctrine, materiel, force structure, and education and training requirements. | |||
| MP-SPP-002 | Cyber Policy and Strategy Planner | 2.2.2 | Assists the government with the development and maintenance of cybersecurity plans, strategy, and policy to support and align with governmental cybersecurity initiatives and regulatory compliance. | ||||
| MP-PMA-001 | Applies knowledge of data, information, processes, organizational interactions, skills, and analytical expertise, as well as systems, networks, and information exchange capabilities to manage acquisition programs. Executes duties governing hardware, software, and information system acquisition programs and other program management policies. Provides direct support for acquisitions that use information technology (IT) (including National Security Systems), applying IT-related laws and policies, and provides IT-related guidance throughout the total acquisition life cycle. | Program Manager | 2.2.3 | Leads, coordinates, communicates, integrates, and is accountable for the overall success of the program, ensuring alignment with agency or enterprise priorities. | |||
| MP-PMA-002 | Cyber/IT Project Manager | 2.2.3 | Manages the package of support functions required to field and maintain the readiness and operational capability of systems and components. | ||||
| MP-PMA-003 | Product Support Manager | 2.2.3 | Product Support Manager: Manages the package of support functions required to field and maintain the readiness and operational capability of systems and components. | ||||
| MP-PMA-004 | Cyber/IT Investment/Portfolio Manager - Administration, Financial, and Acquisition | 2.2.3 | Assists the government with the management of a portfolio of Cyber/IT investments that align with the overall needs of mission and enterprise priorities. | ||||
| MP-PMA-005 | Cyber/IT Program Auditor | 2.2.3 | Conducts evaluations of an Cyber/IT program or its individual components to determine compliance with published standards. | ||||
| MP-TEA-001 | Conducts training of personnel within pertinent subject domain. Develops, plans, coordinates, delivers and/or evaluates training courses, methods, and techniques as appropriate. | Cyber Instructional Curriculum Developer | 2.2.4 | Develops, plans, coordinates, and evaluates cyber training/education courses, methods, and techniques based on instructional needs. | |||
| MP-TEA-002 | Cyber Instructor | 2.2.4 | Develops and conducts training or education of personnel within cyber domain. | ||||
| PR-CDA-001 | Uses defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the network to protect information, information systems, and networks from threats. | Cyber Defense Analyst | 2.3.1 | Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purposes of mitigating threats. | |||
| PR-INF-001 | Tests, implements, deploys, maintains, reviews, and administers the infrastructure hardware and software that are required to effectively manage the computer network defense service provider network and resources. Monitors network to actively remediate unauthorized activities. | Cyber Defense Infrastructure Support Specialist | 2.3.2 | Tests, implements, deploys, maintains, and administers the infrastructure hardware and software. | |||
| PR-CIR-001 | Responds to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security. Investigates and analyzes all relevant response activities. | Cyber Defense Incident Responder | 2.3.3 | Investigates, analyzes, and responds to cyber incidents within the network environment or enclave. | |||
| PR-VAM-001 | Conducts assessments of threats and vulnerabilities; determines deviations from acceptable configurations, enterprise or local policy; assesses the level of risk; and develops and/or recommends appropriate mitigation countermeasures in operational and nonoperational situations. | Vulnerability Assessment Analyst | 2.3.4 | Performs assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Measures effectiveness of defense-in-depth architecture against known vulnerabilities. | |||
| AN-TWA-001 | Identifies and assesses the capabilities and activities of cybersecurity criminals or foreign intelligence entities; produces findings to help initialize or support law enforcement and counterintelligence investigations or activities. | Threat/Warning Analyst | 2.4.1 | Develops cyber indicators to maintain awareness of the status of the highly dynamic operating environment. Collects, processes, analyzes, and disseminates cyber threat/warning assessments. | |||
| AN-EXP-001 | Analyzes collected information to identify vulnerabilities and potential for exploitation. | Exploitation Analyst | 2.4.2 | Collaborates to identify access and collection gaps that can be satisfied through cyber collection and/or preparation activities. Leverages all authorized resources and analytic techniques to penetrate targeted networks. | |||
| AN-ASA-001 | Analyzes threat information from multiple sources, disciplines, and agencies across the Intelligence Community. Synthesizes and places intelligence information in context; draws insights about the possible implications. | All-Source Analyst | 2.4.3 | Analyzes data/information from one or multiple sources to conduct preparation of the environment, respond to requests for information, and submit intelligence collection and production requirements in support of planning and operations. | |||
| AN-ASA-002 | Mission Assessment Specialist | 2.4.3 | Develops assessment plans and measures of performance/effectiveness. Conducts strategic and operational effectiveness assessments as required for cyber events. Determines whether systems performed as expected, provides input to the determination of operational effectiveness, and advises the government accordingly. | ||||
| AN-TGT-001 | Applies current knowledge of one or more regions, countries, non-state entities, and/or technologies. | Target Developer | 2.4.4 | Performs target system analysis, builds and/or maintains electronic target folders to include inputs from environment preparation, and/or internal or external intelligence sources. Coordinates with partner target activities and intelligence organizations, and presents candidate targets for vetting and validation. | |||
| AN-TGT-002 | Target Network Analyst | 2.4.4 | Conducts advanced analysis of collection and open-source data to ensure target continuity; to profile targets and their activities; and develop techniques to gain more target information. Determines how targets communicate, move, operate and live based on knowledge of target technologies, digital networks, and the applications on them. | ||||
| AN-LNG-001 | Applies language, cultural, and technical expertise to support information collection, analysis, and other cybersecurity activities. | Multi-Disciplined Language Analyst | 2.4.5 | Applies language and culture expertise with target/threat and technical knowledge to process, analyze, and/or disseminate intelligence information derived from language, voice and/or graphic material. Creates and maintains language-specific databases and working aids to support cyber action execution and ensure critical knowledge sharing. Provides subject matter expertise in foreign language-intensive or interdisciplinary projects. | |||
| CO-CLO-001 | Executes collection using appropriate strategies and within the priorities established through the collection management process. | All Source-Collection Manager | 2.5.1 | Identifies collection authorities and environment; incorporates priority information requirements into collection management; develops concepts to meet leadership's intent. Determines capabilities of available collection assets, identifies new collection capabilities; and constructs and disseminates collection plans. Monitors execution of tasked collection to ensure effective execution of the collection plan and advises the government accordingly. | |||
| CO-CLO-002 | All Source-Collection Requirements Manager | 2.5.1 | Evaluates collection operations and develops effects-based collection requirements strategies using available sources and methods to improve collection. Develops, processes, validates, and coordinates submission of collection requirements. Evaluates performance of collection assets and collection operations and advises the government accordingly. | ||||
| CO-OPL-001 | Performs in-depth joint targeting and cybersecurity planning process. Gathers information and develops detailed Operational Plans and Orders supporting requirements. Conducts strategic and operational-level planning across the full range of operations for integrated information and cyberspace operations. | Cyber Intel Planner | 2.5.2 | Develops detailed intelligence plans to satisfy cyber operations requirements. Collaborates with cyber operations planners to identify, validate, and levy requirements for collection and analysis. Participates in targeting selection, validation, synchronization, and execution of cyber actions. Synchronizes intelligence activities to support the government's objectives in cyberspace. | |||
| CO-OPL-002 | Cyber Ops Planner | 2.5.2 | Develops detailed plans for the conduct or support of the applicable range of cyber operations through collaboration with other planners, operators and/or analysts. Participates in targeting selection, validation, synchronization, and enables integration during the execution of cyber actions. | ||||
| CO-OPL-003 | Partner Integration Planner | 2.5.2 | Works to advance cooperation across organizational or national borders between cyber operations partners. Aids the government with the integration of partner cyber teams by providing guidance, resources, and collaboration to develop best practices and facilitate organizational support for achieving objectives in integrated cyber actions. | ||||
| CO-OPS-001 | Performs activities to gather evidence on criminal or foreign intelligence entities to mitigate possible or real-time threats, protect against espionage or insider threats, foreign sabotage, international terrorist activities, or to support other intelligence activities. | Cyber Operator | 2.5.3 | Conducts collection, processing, and/or geolocation of systems to exploit, locate, and/or track targets of interest. Performs network navigation, tactical forensic analysis, and, when directed, executes on-net operations. | |||
| IN-INV-001 | Applies tactics, techniques, and procedures for a full range of investigative tools and processes to include, but not limited to, interview and interrogation techniques, surveillance, counter surveillance, and surveillance detection, and appropriately balances the benefits of prosecution versus intelligence gathering. | Cyber Crime Investigator | 2.6.1 | Identifies, collects, examines, and preserves evidence using controlled and documented analytical and investigative techniques. | |||
| IN-FOR-001 | Collects, processes, preserves, analyzes, and presents computer-related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigations. | Law Enforcement /Counter-Intelligence Forensics Analyst | 2.6.2 | Conducts detailed investigations on computer-based crimes establishing documentary or physical evidence, to include digital media and logs associated with cyber intrusion incidents. | |||
| IN-FOR-002 | Cyber Defense Forensics Analyst | 2.6.2 | Analyzes digital evidence and investigates computer security incidents to derive useful information in support of system/network vulnerability mitigation. | ||||
| SP-RSK-002 | Oversees, evaluates, and supports the documentation, validation, assessment, and authorization processes necessary to assure that existing and new information technology (IT) systems meet the organization's cybersecurity and risk requirements. Ensures appropriate treatment of risk, compliance, and assurance from internal and external perspectives. | Security Control Assessor | 2.7.1 | Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information system to determine the overall effectiveness of the controls (as defined in NIST SP 800-37). | |||
| SP-DEV-001 | Develops and writes/codes new (or modifies existing) computer applications, software, or specialized utility programs following software assurance best practices. | Software Developer | 2.7.2 | Develops, creates, maintains, and writes/codes new (or modifies existing) computer applications, software, or specialized utility programs. | |||
| SP-DEV-002 | Secure Software Assessor | 2.7.2 | Analyzes the security of new or existing computer applications, software, or specialized utility programs and provides actionable results. | ||||
| SP-ARC-001 | Develops system concepts and works on the capabilities phases of the systems development life cycle; translates technology and environmental conditions (e.g., law and regulation) into system and security designs and processes. | Enterprise Architect | 2.7.3 | Develops and maintains business, systems, and information processes to support enterprise mission needs; assists the government with the development of Cyber/IT rules and requirements that describe baseline and target architectures. | |||
| SP-ARC-002 | Security Architect | 2.7.3 | Ensures that the stakeholder security requirements necessary to protect the government’s mission and business processes are adequately addressed in all aspects of enterprise architecture including reference models, segment and solution architectures, and the resulting systems supporting those missions and business processes. | ||||
| SP-TRD-001 | Conducts technology assessment and integration processes; provides and supports a prototype capability and/or evaluates its utility. | Research & Development Specialist | 2.7.4 | Conducts software and systems engineering and software systems research to develop new capabilities, ensuring cybersecurity is fully integrated. Conducts comprehensive technology research to evaluate potential vulnerabilities in cyberspace systems. | |||
| SP-SRP-001 | Consults with customers to gather and evaluate functional requirements and translates these requirements into technical solutions. Provides guidance to customers about applicability of information systems to meet business needs. | Systems Requirements Planner | 2.7.5 | Consults with customers to evaluate functional requirements and translate functional requirements into technical solutions. | |||
| SP-TST-001 | Develops and conducts tests of systems to evaluate compliance with specifications and requirements by applying principles and methods for cost-effective planning, evaluating, verifying, and validating of technical, functional, and performance characteristics (including interoperability) of systems or elements of systems incorporating IT. | System Testing and Evaluation Specialist | 2.7.6 | Plans, prepares, and executes tests of systems to evaluate results against specifications and requirements as well as analyze/report test results. | |||
| SP-SYS-001 | Works on the development phases of the systems development life cycle. | Information Systems Security Developer | 2.7.7 | Designs, develops, tests, and evaluates information system security throughout the systems development life cycle. | |||
| SP-SYS-002 | Systems Developer | 2.7.7 | Designs, develops, tests, and evaluates information systems throughout the systems development life cycle. |
OM-DTA-001
| Operate and Maintain (OM) | Database Administrator (OM-DTA-001): Administers databases and/or data management systems that allow for the secure storage, query, protection, and utilization of data. | |
| Data Administration (DTA) | Labor Categories |
| KSA ID | KSA |
| Knowledge | |
| K0001 | Knowledge of computer networking concepts and protocols, and network security methodologies. |
| K0002 | Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). |
| K0003 | Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. |
| K0004 | Knowledge of cybersecurity and privacy principles. |
| K0005 | Knowledge of cyber threats and vulnerabilities. |
| K0006 | Knowledge of specific operational impacts of cybersecurity lapses. |
| K0020 | Knowledge of data administration and data standardization policies. |
| K0021 | Knowledge of data backup and recovery. |
| K0022 | Knowledge of data mining and data warehousing principles. |
| K0023 | Knowledge of database management systems, query languages, table relationships, and views. |
| K0025 | Knowledge of digital rights management. |
| K0031 | Knowledge of enterprise messaging systems and associated software. |
| K0056 | Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML). |
| K0060 | Knowledge of operating systems. |
| K0065 | Knowledge of policy-based and risk adaptive access controls. |
| K0069 | Knowledge of query languages such as SQL (structured query language). |
| K0083 | Knowledge of sources, characteristics, and uses of the organization’s data assets. |
| K0097 | Knowledge of the characteristics of physical and virtual data storage media. |
| K0197 | Knowledge of database access application programming interfaces (e.g., Java Database Connectivity [JDBC]). |
| K0260 | Knowledge of Personally Identifiable Information (PII) data security standards. |
| K0261 | Knowledge of Payment Card Industry (PCI) data security standards. |
| K0262 | Knowledge of Personal Health Information (PHI) data security standards. |
| K0277 | Knowledge of current and emerging data encryption (e.g., Column and Tablespace Encryption, file and disk encryption) security features in databases (e.g. built-in cryptographic key management features). |
| K0278 | Knowledge of current and emerging data remediation security features in databases. |
| K0287 | Knowledge of an organization's information classification program and procedures for information compromise. |
| K0420 | Knowledge of database theory. |
| Skills | |
| S0002 | Skill in allocating storage capacity in the design of data management systems. |
| S0013 | Skill in conducting queries and developing algorithms to analyze data structures. |
| S0037 | Skill in generating queries and reports. |
| S0042 | Skill in maintaining databases. (i.e., backup, restore, delete data, transaction log files, etc.). |
| S0045 | Skill in optimizing database performance. |
| Abilities | |
| A0176 | Ability to maintain databases. (i.e., backup, restore, delete data, transaction log files, etc.). |
| Task ID | Task |
| T0008 | Analyze and plan for anticipated changes in data capacity requirements. |
| T0137 | Maintain database management systems software. |
| T0139 | Maintain directory replication services that enable information to replicate automatically from rear servers to forward units via optimized routing. |
| T0140 | Maintain information exchanges through publish, subscribe, and alert functions that enable users to send and receive critical information as required. |
| T0146 | Manage the compilation, cataloging, caching, distribution, and retrieval of data. |
| T0152 | Monitor and maintain databases to ensure optimal performance. |
| T0162 | Perform backup and recovery of databases to ensure data integrity. |
| T0210 | Provide recommendations on new database technologies and architectures. |
| T0305 | Performs configuration management, problem management, capacity management, and financial management for databases and data management systems. |
| T0306 | Supports incident management, service-level management, change management, release management, continuity management, and availability management for databases and data management systems. |
| T0330 | Maintain assured message delivery systems. |
| T0422 | Implement data management standards, requirements, and specifications. |
| T0459 | Implement data mining and data warehousing applications. |
| T0490 | Install and configure database management systems and software. |
OM-DTA-002
| Operate and Maintain (OM) | Data Analyst (OM-DTA-002): Examines data from multiple disparate sources with the goal of providing security and privacy insight. Designs and implements custom algorithms, workflow processes, and layouts for complex, enterprise-scale data sets used for modeling, data mining, and research purposes. | |
| Data Administration (DTA) | Labor Categories |
| Knowledge | KSA |
| Knowledge | |
| K0001 | Knowledge of computer networking concepts and protocols, and network security methodologies. |
| K0002 | Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). |
| K0003 | Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. |
| K0004 | Knowledge of cybersecurity and privacy principles. |
| K0005 | Knowledge of cyber threats and vulnerabilities. |
| K0006 | Knowledge of specific operational impacts of cybersecurity lapses. |
| K0015 | Knowledge of computer algorithms. |
| K0016 | Knowledge of computer programming principles |
| K0020 | Knowledge of data administration and data standardization policies. |
| K0022 | Knowledge of data mining and data warehousing principles. |
| K0023 | Knowledge of database management systems, query languages, table relationships, and views. |
| K0025 | Knowledge of digital rights management. |
| K0031 | Knowledge of enterprise messaging systems and associated software. |
| K0051 | Knowledge of low-level computer languages (e.g., assembly languages). |
| K0052 | Knowledge of mathematics (e.g. logarithms, trigonometry, linear algebra, calculus, statistics, and operational analysis). |
| K0056 | Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML). |
| K0060 | Knowledge of operating systems. |
| K0065 | Knowledge of policy-based and risk adaptive access controls. |
| K0068 | Knowledge of programming language structures and logic. |
| K0069 | Knowledge of query languages such as SQL (structured query language). |
| K0083 | Knowledge of sources, characteristics, and uses of the organization’s data assets. |
| K0095 | Knowledge of the capabilities and functionality associated with various technologies for organizing and managing information (e.g., databases, bookmarking engines). |
| K0129 | Knowledge of command-line tools (e.g., mkdir, mv, ls, passwd, grep). |
| K0139 | Knowledge of interpreted and compiled computer languages. |
| K0140 | Knowledge of secure coding techniques. |
| K0193 | Knowledge of advanced data remediation security features in databases. |
| K0197 | Knowledge of database access application programming interfaces (e.g., Java Database Connectivity [JDBC]). |
| K0229 | Knowledge of applications that can log errors, exceptions, and application faults and logging. |
| K0236 | Knowledge of how to utilize Hadoop, Java, Python, SQL, Hive, and Pig to explore data. |
| K0238 | Knowledge of machine learning theory and principles. |
| K0325 | Knowledge of Information Theory (e.g., source coding, channel coding, algorithm complexity theory, and data compression). |
| K0420 | Knowledge of database theory. |
| Skills | |
| S0013 | Skill in conducting queries and developing algorithms to analyze data structures. |
| S0017 | Skill in creating and utilizing mathematical or statistical models. |
| S0202 | Skill in data mining techniques (e.g., searching file systems) and analysis. |
| S0028 | Skill in developing data dictionaries. |
| S0029 | Skill in developing data models. |
| S0037 | Skill in generating queries and reports. |
| S0060 | Skill in writing code in a currently supported programming language (e.g., Java, C++). |
| S0088 | Skill in using binary analysis tools (e.g., Hexedit, command code xxd, hexdump). |
| S0089 | Skill in one-way hash functions (e.g., Secure Hash Algorithm [SHA], Message Digest Algorithm [MD5]). |
| S0094 | Skill in reading Hexadecimal data. |
| S0095 | Skill in identifying common encoding techniques (e.g., Exclusive Disjunction [XOR], American Standard Code for Information Interchange [ASCII], Unicode, Base64, Uuencode, Uniform Resource Locator [URL] encode). |
| S0103 | Skill in assessing the predictive power and subsequent generalizability of a model. |
| S0106 | Skill in data pre-processing (e.g., imputation, dimensionality reduction, normalization, transformation, extraction, filtering, smoothing). |
| S0109 | Skill in identifying hidden patterns or relationships. |
| S0113 | Skill in performing format conversions to create a standard representation of the data. |
| S0114 | Skill in performing sensitivity analysis. |
| S0118 | Skill in developing machine understandable semantic ontologies. |
| S0119 | Skill in Regression Analysis (e.g., Hierarchical Stepwise, Generalized Linear Model, Ordinary Least Squares, Tree-Based Methods, Logistic). |
| S0123 | Skill in transformation analytics (e.g., aggregation, enrichment, processing). |
| S0125 | Skill in using basic descriptive statistics and techniques (e.g., normality, model distribution, scatter plots). |
| S0126 | Skill in using data analysis tools (e.g., Excel, STATA, SAS, SPSS). |
| S0127 | Skill in using data mapping tools. |
| S0129 | Skill in using outlier identification and removal techniques. |
| S0130 | Skill in writing scripts using R, Python, PIG, HIVE, SQL, etc. |
| S0160 | Skill in the use of design modeling (e.g., unified modeling language). |
| S0369 | Skill to identify sources, characteristics, and uses of the organization’s data assets. |
| Abilities | |
| A0029 | Ability to build complex data structures and high-level programming languages. |
| A0035 | Ability to dissect a problem and examine the interrelationships between data that may appear unrelated. |
| A0036 | Ability to identify basic common coding flaws at a high level. |
| A0041 | Ability to use data visualization tools (e.g., Flare, HighCharts, AmCharts, D3.js, Processing, Google Visualization API, Tableau, Raphael.js). |
| A0066 | Ability to accurately and completely source all data used in intelligence, assessment and/or planning products. |
| Task ID | Task |
| T0007 | Analyze and define data requirements and specifications. |
| T0008 | Analyze and plan for anticipated changes in data capacity requirements. |
| T0068 | Develop data standards, policies, and procedures. |
| T0146 | Manage the compilation, cataloging, caching, distribution, and retrieval of data. |
| T0195 | Provide a managed flow of relevant information (via web-based portals or other means) based on mission requirements. |
| T0210 | Provide recommendations on new database technologies and architectures. |
| T0342 | Analyze data sources to provide actionable recommendations. |
| T0347 | Assess the validity of source data and subsequent findings. |
| T0349 | Collect metrics and trending data. |
| T0351 | Conduct hypothesis testing using statistical processes. |
| T0353 | Confer with systems analysts, engineers, programmers, and others to design application. |
| T0361 | Develop and facilitate data-gathering methods. |
| T0366 | Develop strategic insights from large data sets. |
| T0381 | Present technical information to technical and nontechnical audiences. |
| T0382 | Present data in creative formats. |
| T0383 | Program custom algorithms. |
| T0385 | Provide actionable recommendations to critical stakeholders based on data analysis and findings. |
| T0392 | Utilize technical documentation or resources to implement a new mathematical, data science, or computer science method. |
| T0402 | Effectively allocate storage capacity in the design of data management systems. |
| T0403 | Read, interpret, write, modify, and execute simple scripts (e.g., Perl, VBScript) on Windows and UNIX systems (e.g., those that perform tasks such as: parsing large data files, automating manual tasks, and fetching/processing remote data). |
| T0404 | Utilize different programming languages to write code, open files, read files, and write output to different files. |
| T0405 | Utilize open source language such as R and apply quantitative techniques (e.g., descriptive and inferential statistics, sampling, experimental design, parametric and non-parametric tests of difference, ordinary least squares regression, general line). |
| T0460 | Develop and implement data mining and data warehousing programs. |
OM-KMG-001
| Operate and Maintain (OM) | Knowledge Manager (OM-KMG-001): Responsible for the management and administration of processes and tools that enable the organization to identify, document, and access intellectual capital and information content. | |
| Knowledge Management (KMG) | Labor Categories |
| Knowledge | KSA |
| Knowledge | |
| K0001 | Knowledge of computer networking concepts and protocols, and network security methodologies. |
| K0002 | Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). |
| K0003 | Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. |
| K0004 | Knowledge of cybersecurity and privacy principles. |
| K0005 | Knowledge of cyber threats and vulnerabilities. |
| K0006 | Knowledge of specific operational impacts of cybersecurity lapses. |
| K0013 | Knowledge of cyber defense and vulnerability assessment tools and their capabilities. |
| K0094 | Knowledge of the capabilities and functionality associated with content creation technologies (e.g., wikis, social networking, content management systems, blogs). |
| K0095 | Knowledge of the capabilities and functionality associated with various technologies for organizing and managing information (e.g., databases, bookmarking engines). |
| K0096 | Knowledge of the capabilities and functionality of various collaborative technologies (e.g., groupware, SharePoint). |
| K0146 | Knowledge of the organization's core business/mission processes. |
| K0194 | Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration. |
| K0195 | Knowledge of data classification standards and methodologies based on sensitivity and other risk factors. |
| K0228 | Knowledge of taxonomy and semantic ontology theory. |
| K0260 | Knowledge of Personally Identifiable Information (PII) data security standards. |
| K0261 | Knowledge of Payment Card Industry (PCI) data security standards. |
| K0262 | Knowledge of Personal Health Information (PHI) data security standards. |
| K0283 | Knowledge of use cases related to collaboration and content synchronization across platforms (e.g., Mobile, PC, Cloud). |
| K0287 | Knowledge of an organization's information classification program and procedures for information compromise. |
| K0315 | Knowledge of the principal methods, procedures, and techniques of gathering information and producing, reporting, and sharing information. |
| K0338 | Knowledge of data mining techniques. |
| K0420 | Knowledge of database theory. |
| Skills | |
| S0011 | Skill in conducting information searches. |
| S0012 | Skill in conducting knowledge mapping (e.g., map of knowledge repositories). |
| S0049 | Skill in the measuring and reporting of intellectual capital. |
| S0055 | Skill in using knowledge management technologies. |
| Abilities | |
| A0002 | Ability to match the appropriate knowledge repository technology for a given application or environment. |
| Task ID | Task |
| T0037 | Construct access paths to suites of information (e.g., link pages) to facilitate access by end-users. |
| T0060 | Develop an understanding of the needs and requirements of information end-users. |
| T0154 | Monitor and report the usage of knowledge management assets and resources. |
| T0185 | Plan and manage the delivery of knowledge management projects. |
| T0209 | Provide recommendations on data structures and databases that ensure correct and quality production of reports/management information. |
| T0339 | Lead efforts to promote the organization's use of knowledge management and information sharing. |
| T0421 | Manage the indexing/cataloguing, storage, and access of explicit organizational knowledge (e.g., hard copy documents, digital files). |
| T0452 | Design, build, implement, and maintain a knowledge management framework that provides end-users access to the organization’s intellectual capital. |
| T0524 | Promote knowledge sharing between information owners/users through an organization’s operational processes and systems. |
OM-STS-001
| Operate and Maintain (OM) | Technical Support Specialist (OM-STS-001): Provides technical support to customers who need assistance utilizing client-level hardware and software in accordance with established or approved organizational process components (i.e., Master Incident Management Plan, when applicable). | |
| Customer Service and Technical Support (STS) | Labor Categories |
| KSA ID | KSA |
| Knowledge | |
| K0001 | Knowledge of computer networking concepts and protocols, and network security methodologies. |
| K0002 | Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). |
| K0003 | Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. |
| K0004 | Knowledge of cybersecurity and privacy principles. |
| K0005 | Knowledge of cyber threats and vulnerabilities. |
| K0006 | Knowledge of specific operational impacts of cybersecurity lapses. |
| K0053 | Knowledge of measures or indicators of system performance and availability. |
| K0088 | Knowledge of systems administration concepts. |
| K0109 | Knowledge of physical computer components and architectures, including the functions of various components and peripherals (e.g., CPUs, Network Interface Cards, data storage). |
| K0114 | Knowledge of electronic devices (e.g., computer systems/components, access control devices, digital cameras, digital scanners, electronic organizers, hard drives, memory cards, modems, network components, networked appliances, networked home control devices, printers, removable storage devices, telephones, copiers, facsimile machines, etc.). |
| K0116 | Knowledge of file extensions (e.g., .dll, .bat, .zip, .pcap, .gzip). |
| K0194 | Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration. |
| K0224 | Knowledge of system administration concepts for operating systems such as but not limited to Unix/Linux, IOS, Android, and Windows operating systems. |
| K0237 | Knowledge of industry best practices for service desk. |
| K0242 | Knowledge of organizational security policies. |
| K0247 | Knowledge of remote access processes, tools, and capabilities related to customer support. |
| K0260 | Knowledge of Personally Identifiable Information (PII) data security standards. |
| K0261 | Knowledge of Payment Card Industry (PCI) data security standards. |
| K0262 | Knowledge of Personal Health Information (PHI) data security standards. |
| K0287 | Knowledge of an organization's information classification program and procedures for information compromise. |
| K0292 | Knowledge of the operations and processes for incident, problem, and event management. |
| K0294 | Knowledge of IT system operation, maintenance, and security needed to keep equipment functioning properly. |
| K0302 | Knowledge of the basic operation of computers. |
| K0317 | Knowledge of procedures used for documenting and querying reported incidents, problems, and events. |
| K0330 | Knowledge of successful capabilities to identify the solutions to less common and more complex system problems. |
| Skills | |
| S0039 | Skill in identifying possible causes of degradation of system performance or availability and initiating actions needed to mitigate this degradation. |
| S0058 | Skill in using the appropriate tools for repairing software, hardware, and peripheral equipment of a system. |
| S0142 | Skill in conducting research for troubleshooting novel client-level problems. |
| S0159 | Skill in configuring and validating network workstations and peripherals in accordance with approved standards and/or specifications. |
| S0365 | Skill to design incident response for cloud service models. |
| Abilities | |
| A0025 | Ability to accurately define incidents, problems, and events in the trouble ticketing system. |
| A0034 | Ability to develop, update, and/or maintain standard operating procedures (SOPs). |
| A0122 | Ability to design capabilities to find solutions to less common and more complex system problems. |
| Task ID | Task |
| T0125 | Install and maintain network infrastructure device operating system software (e.g., IOS, firmware). |
| T0237 | Troubleshoot system hardware and software. |
| T0308 | Analyze incident data for emerging trends. |
| T0315 | Develop and deliver technical training to educate others or meet customer needs. |
| T0331 | Maintain incident tracking and solution database. |
| T0468 | Diagnose and resolve customer reported system incidents, problems, and events. |
| T0482 | Make recommendations based on trend analysis for enhancements to software and hardware solutions to enhance customer experience. |
| T0491 | Install and configure hardware, software, and peripheral equipment for system users in accordance with organizational standards. |
| T0494 | Administer accounts, network rights, and access to systems and equipment. |
| T0496 | Perform asset management/inventory of information technology (IT) resources. |
| T0502 | Monitor and report client-level computer system performance. |
| T0530 | Develop a trend analysis and impact report. |
OM-NET-001
| Operate and Maintain (OM) | Network Operations Specialist (OM-NET-001): Plans, implements, and operates network services/systems, to include hardware and virtual environments. | |
| Network Services (NET) | Labor Categories |
| KSA ID | KSA |
| Knowledge | |
| K0001 | Knowledge of computer networking concepts and protocols, and network security methodologies. |
| K0002 | Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). |
| K0003 | Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. |
| K0004 | Knowledge of cybersecurity and privacy principles. |
| K0005 | Knowledge of cyber threats and vulnerabilities. |
| K0006 | Knowledge of specific operational impacts of cybersecurity lapses. |
| K0010 | Knowledge of communication methods, principles, and concepts that support the network infrastructure. |
| K0011 | Knowledge of capabilities and applications of network equipment including routers, switches, bridges, servers, transmission media, and related hardware. |
| K0029 | Knowledge of organization's Local and Wide Area Network connections. |
| K0038 | Knowledge of cybersecurity and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data. |
| K0049 | Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption). |
| K0050 | Knowledge of local area and wide area networking principles and concepts including bandwidth management. |
| K0053 | Knowledge of measures or indicators of system performance and availability. |
| K0061 | Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]). |
| K0071 | Knowledge of remote access technology concepts. |
| K0076 | Knowledge of server administration and systems engineering theories, concepts, and methods. |
| K0093 | Knowledge of telecommunications concepts (e.g., Communications channel, Systems Link Budgeting, Spectral efficiency, Multiplexing). |
| K0104 | Knowledge of Virtual Private Network (VPN) security. |
| K0108 | Knowledge of concepts, terminology, and operations of a wide range of communications media (computer and telephone networks, satellite, fiber, wireless). |
| K0111 | Knowledge of network tools (e.g., ping, traceroute, nslookup) |
| K0113 | Knowledge of different types of network communication (e.g., LAN, WAN, MAN, WLAN, WWAN). |
| K0135 | Knowledge of web filtering technologies. |
| K0136 | Knowledge of the capabilities of different electronic communication systems and methods (e.g., e-mail, VOIP, IM, web forums, Direct Video Broadcasts). |
| K0137 | Knowledge of the range of existing networks (e.g., PBX, LANs, WANs, WIFI, SCADA). |
| K0138 | Knowledge of Wi-Fi. |
| K0159 | Knowledge of Voice over IP (VoIP). |
| K0160 | Knowledge of the common attack vectors on the network layer. |
| K0179 | Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth). |
| K0180 | Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools. |
| K0200 | Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]). |
| K0201 | Knowledge of symmetric key rotation techniques and concepts. |
| K0203 | Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model). |
| K0260 | Knowledge of Personally Identifiable Information (PII) data security standards. |
| K0261 | Knowledge of Payment Card Industry (PCI) data security standards. |
| K0262 | Knowledge of Personal Health Information (PHI) data security standards. |
| K0274 | Knowledge of transmission records (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP)), and jamming techniques that enable transmission of undesirable information, or prevent installed systems from operating correctly. |
| K0287 | Knowledge of an organization's information classification program and procedures for information compromise. |
| K0332 | Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services. |
| K0622 | Knowledge of controls related to the use, processing, storage, and transmission of data. |
| Skills | |
| S0004 | Skill in analyzing network traffic capacity and performance characteristics. |
| S0035 | Skill in establishing a routing schema. |
| S0040 | Skill in implementing, maintaining, and improving established network security practices. |
| S0041 | Skill in installing, configuring, and troubleshooting LAN and WAN components such as routers, hubs, and switches. |
| S0056 | Skill in using network management tools to analyze network traffic patterns (e.g., simple network management protocol). |
| S0077 | Skill in securing network communications. |
| S0079 | Skill in protecting a network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters). |
| S0084 | Skill in configuring and utilizing network protection components (e.g., Firewalls, VPNs, network intrusion detection systems). |
| S0150 | Skill in implementing and testing network infrastructure contingency and recovery plans. |
| S0162 | Skill in applying various subnet techniques (e.g., CIDR) |
| S0170 | Skill in configuring and utilizing computer protection components (e.g., hardware firewalls, servers, routers, as appropriate). |
| Abilities | |
| A0052 | Ability to operate network equipment including hubs, routers, switches, bridges, servers, transmission media, and related hardware. |
| A0055 | Ability to operate common network tools (e.g., ping, traceroute, nslookup). |
| A0058 | Ability to execute OS command line (e.g., ipconfig, netstat, dir, nbtstat). |
| A0059 | Ability to operate the organization's LAN/WAN pathways. |
| A0062 | Ability to monitor measures or indicators of system performance and availability. |
| A0063 | Ability to operate different electronic communication systems and methods (e.g., e-mail, VOIP, IM, web forums, Direct Video Broadcasts). |
| A0065 | Ability to monitor traffic flows across the network. |
| A0159 | Ability to interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute). |
| Task ID | Task |
| T0035 | Configure and optimize network hubs, routers, and switches (e.g., higher-level protocols, tunneling). |
| T0065 | Develop and implement network backup and recovery procedures. |
| T0081 | Diagnose network connectivity problem. |
| T0121 | Implement new system design procedures, test procedures, and quality standards. |
| T0125 | Install and maintain network infrastructure device operating system software (e.g., IOS, firmware). |
| T0126 | Install or replace network hubs, routers, and switches. |
| T0129 | Integrate new systems into existing network architecture. |
| T0153 | Monitor network capacity and performance. |
| T0160 | Patch network vulnerabilities to ensure that information is safeguarded against outside parties. |
| T0200 | Provide feedback on network requirements, including network architecture and infrastructure. |
| T0232 | Test and maintain network infrastructure including software and hardware devices. |
OM-ADM-001
| Operate and Maintain (OM) | System Administrator (OM-ADM-001): Responsible for setting up and maintaining a system or specific components of a system (e.g. for example, installing, configuring, and updating hardware and software; establishing and managing user accounts; overseeing or conducting backup and recovery tasks; implementing operational and technical security controls; and adhering to organizational security policies and procedures). | |
| Systems Administration (ADM) | Labor Categories |
| KSA ID | KSA |
| Knowledge | |
| K0001 | Knowledge of computer networking concepts and protocols, and network security methodologies. |
| K0002 | Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). |
| K0003 | Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. |
| K0004 | Knowledge of cybersecurity and privacy principles. |
| K0005 | Knowledge of cyber threats and vulnerabilities. |
| K0006 | Knowledge of specific operational impacts of cybersecurity lapses. |
| K0049 | Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption). |
| K0050 | Knowledge of local area and wide area networking principles and concepts including bandwidth management. |
| K0053 | Knowledge of measures or indicators of system performance and availability. |
| K0064 | Knowledge of performance tuning tools and techniques. |
| K0077 | Knowledge of server and client operating systems. |
| K0088 | Knowledge of systems administration concepts. |
| K0100 | Knowledge of the enterprise information technology (IT) architecture. |
| K0103 | Knowledge of the type and frequency of routine hardware maintenance. |
| K0104 | Knowledge of Virtual Private Network (VPN) security. |
| K0117 | Knowledge of file system implementations (e.g., New Technology File System [NTFS], File Allocation Table [FAT], File Extension [EXT]). |
This is the start of the file's text. The full file is on GovTribe.
File details come from the government source that posted it. Updated .