Secure operations management

Skill Definition

Secure operations management refers to the ongoing operation, management and continuous improvement of security capabilities throughout an organisation through policies, procedures and guidelines. Principles of the skill include creating and maintaining system understanding, including hardware and software inventories; establishing processes for maintaining the security of information throughout its existence, including establishing and maintaining security operating procedures in accordance with security policies, standards and procedures; assessing and responding to new technical, physical, personnel or procedural vulnerabilities; engaging with suppliers, penetration testers and the change management process to ensure that vulnerabilities are mediated; and managing the implementation of information security programmes, co-ordinating security activities across the organisation.

Awareness

Describes the basic principles of secure operations management
Follows documented principles and guidelines for secure operations management activities
Implements secure operations management processes and procedures

Working

Explains the main processes for secure operations management
Understands the business context in which policies, procedures and guidelines sit
Implements secure operations management processes and procedures

Practitioner

Applies standards into secure operations management processes
Responds to challenges to policies, procedures and guidelines and implements continuous improvements
Identifies and implements new management controls to reflect changes in factors such as threat levels and legislation

Expert

Shapes policies, procedures and guidelines within the organisation and at a national level
Implements business change as a result of policies, procedures and guidelines
Champions the need for and the business benefits of management controls