Department of Defense Cyber Workforce Initiatives. April 2017

Transcription

1 Department of Defense Cyber Workforce Initiatives April 2017

2 Cyber Workforce & Skill Communities Notional Representation Size not to scale Cyber IT Workforce Cybersecurity Workforce Cyber Effects Workforce Intelligence Workforce (Cyber) Intelligence Workforce Office of the DoD Chief Information Officer (CIO) 1

3 Cyber Workforce Skill Categories Preliminary Alignment of DCWF (NCWF) Work Roles Cyber IT Data Analyst Database Administrator Enterprise Architect Knowledge Manager Network Ops Specialist Requirements Planner R&D Specialist Software Developer System Administration Systems Developer Tech Support Specialist T&E Specialist Cybersecurity Authorizing Official COMSEC Manager Cyber Defense Analyst Cyber Def Forensics Analyst Cyber Def. Incident Responder Cyber Defense Infra Spt Spec. Exploitation Analyst Info Sys Sec Developer Info Sys Sec Mgr Secure SW Assessor Security Architect Security Control Assessor Systems Security Analyst Vulnerability Analyst Warning Analyst Cyber Effects Cyber Operator Cyber Ops Planner Partner Integration Planner Mission Assessment Specialist Target Digital Net. Analyst Target Developer Intel All Source Analyst All Source Collection Mgr All Source Collection Reqs Mgr Cyber Intelligence Planner Multi Disc Language Analyst Acquisition: IT Invest/Portfolio Manager, IT Project Manager, Program Manager, Product Support Manager, IT Program Auditor Training & Education: Cyber Instructor, Cyber Instr./Curriculum Dev., Cyber WF Developer & Manager Legal/Law Enforcement: Legal Advisor, Cyber Crime Investigator, Forensics Analyst Leadership: Cyber Policy/Strat Planner, Executive Cyber Leadership Office of the DoD Chief Information Officer (CIO) 2

4 Foundational Journeyman Mastery The Keystone DoD Cyber Workforce Framework Cybersecurity Analysis Inter-relationship Study Criticality Analysis Qualification Criteria Study DoDD 8140 Cyberspace Workforce Management DoDI 8140 Identification, Tracking & Reporting Cyber Workforce Training Reqs & Stds Learning Objectives Competency Analysis Behavioral Indicators Education Qualification Requirements Training Experiential Learning (OJT & Supervisory Evaluation) DoDM 8140 Cybersecurity Workforce Qualifications Performance Based Assessments Credentials DoDI 8140?? Cyber Workforce Core Training Requirements Continuous Development Office of the DoD Chief Information Officer (CIO) 3

5 Securely Provision Work Role Examples Risk Management Architecture Software Development Systems Development Test and Evaluation Authorizing Official Security Control Assessor Enterprise Architect Security Architect Software Developer Secure Software Assessor Systems Developer Information Systems Security Developer System Test and Evaluation Specialist Technology R&D Systems Requirements Planning Research & Development Specialist Systems Requirements Planner 4

6 DCWF Elements Role Definitions: Describe a related set of responsibilities required to execute key functions Tasks: Activities an individual performs on a regular basis to carry out the functions of a job Core Cybersecurity Knowledge Statements: Cybersecurity Knowledge statements applied to all work roles within the DCWF (identified with asterisk) Office of the DoD Chief Information Officer (CIO) KSAs: Standalone statements that describe the attributes required for a job or task 5

7 Enterprise (OSD) Functional Owners (CC/S/A/FA) Enterprise Baseline Requirements Mission Requirements Organizational Requirements Technology Requirements Tool Requirements Environment Requirements Enterprise Baseline Requirements Aligned to Work Role(s) 6

8 Skills Maturity Model Definitions Level Foundational Journeyman Mastery Description At this level, the role requires an individual to have familiarity with basic concepts and processes and the ability to apply these with frequent, specific guidance. An individual must be able to perform successfully in routine, structured situations. At this level, the role requires an individual to have extensive knowledge of basic concepts and process and experience applying these with only periodic-high level guidance. An individual must be able to perform successfully in non-routine and sometimes complicated situations. At this level, the role requires an individual to have an in-depth understanding of advanced concepts and processes and experience applying these with little to no guidance. An individual must be able to serve as a resource and provide guidance to others. An individual must also be able to perform successfully in complex, unstructured situations. 7

9 Experience Based Learning Cyber Workforce Qualifications Process Conceptual Model Security Control Assessor Foundational Journeyman Mastery Education Yes Yes Yes Training Credentials Certifications Operating System Credential Yes Yes No No No Yes No Yes Yes On The Job Training Yes Yes No Performance Based Assesments Yes Yes Yes Continuous Professional Development Yes XX hrs/yr Yes XX hrs/yr Yes XX hrs/yr 8

10 Notional Career Pathing

11 Career Tracks Not Reality Technical Tactical Leadership

12 Career Tracks Closer to Reality Technical Tactical Leadership

13 Career Tracks - Ideal Technical Hybrid Tactical Leadership

14 Contact Information DoD CIO Key Point of Contact: Stephanie Keith Chief, Cyber Workforce Strategy & Policy Division All DoD Cyberspace Workforce related inquiries and questions should be sent to: DoD Cyberspace Workforce Strategy Strategy_signed(final).pdf DoD Directive Cyberspace Workforce Management National Initiative for Cybersecurity Education (NICE) Workforce Framework Office of the DoD Chief Information Officer (CIO) 13

15 Questions? Office of the DoD Chief Information Officer (CIO) 14