1. Workforce Development
  2. NICE Workforce Framework for Cybersecurity (NICE Framework)
  3. Knowledge Search
  4. K1076

Knowledge statement ID: K1076

Knowledge of risk scoring principles and practices

Work roles with this Knowledge

  • Security Control Assessment

    NICE Framework ID: OG-WRL-012

    Responsible for conducting independent comprehensive assessments of management, operational, and technical security controls and control enhancements employed within or inherited by a system to determine their overall effectiveness.

  • Operational Technology (OT) Cybersecurity Engineering

    NICE Framework ID: DD-WRL-009

    Responsible for working within the engineering department to design and create systems, processes, and procedures that maintain the safety, reliability, controllability, and security of industrial systems in the face of intentional and incidental cyber events. Interfaces with Chief Information Security Officer, plant managers, and industrial cybersecurity technicians.

  • Vulnerability Analysis

    NICE Framework ID: PD-WRL-007

    Responsible for assessing systems and networks to identify deviations from acceptable configurations, enclave policy, or local policy. Measure effectiveness of defense-in-depth architecture against known vulnerabilities.