Oversight and Governance
OG-WRL-007

Executive Cybersecurity Leadership

Responsible for establishing vision and direction for an organization's cybersecurity operations and resources and their impact on digital and physical spaces. Possesses authority to make and execute decisions that impact an organization broadly, including policy approval and stakeholder engagement.

  • T0006: Advocate organization's official position in legal and legislative proceedings
  • T1020: Determine the operational and safety impacts of cybersecurity lapses
  • T1036: Integrate leadership priorities
  • T1038: Integrate organization objectives in intelligence collection
  • T1054: Scope analysis reports to various audiences that accounts for data sharing classification restrictions
  • T1055: Determine if priority information requirements are satisfied
  • T1056: Acquire resources to support cybersecurity program goals and objectives
  • T1057: Conduct an effective enterprise continuity of operations program
  • T1059: Perform cost/benefit analyses of cybersecurity programs, policies, processes, systems, and elements
  • T1060: Advise senior management on organizational cybersecurity efforts
  • T1088: Communicate the value of cybersecurity to organizational stakeholders
  • T1145: Develop strategic plans
  • T1146: Maintain strategic plans
  • T1221: Disseminate incident and other Computer Network Defense (CND) information
  • T1226: Align cybersecurity priorities with organizational security strategy
  • T1227: Manage cybersecurity budget, staffing, and contracting
  • T1234: Develop Computer Network Defense (CND) guidance for organizational stakeholders
  • T1238: Determine the effectiveness of enterprise cybersecurity safeguards
  • T1307: Develop cybersecurity policy recommendations
  • T1308: Coordinate cybersecurity policy review and approval processes
  • T1310: Implement protective or corrective measures when a cybersecurity incident or vulnerability is discovered
  • T1335: Promote cybersecurity awareness to management
  • T1336: Verify the inclusion of sound cybersecurity principles in the organization's vision and goals
  • T1342: Oversee policy standards and implementation strategy development
  • T1354: Identify system cybersecurity requirements
  • T1355: Determine if vulnerability remediation plans are in place
  • T1356: Develop vulnerability remediation plans
  • T1376: Develop critical infrastructure protection policies and procedures
  • T1377: Implement critical infrastructure protection policies and procedures
  • T1450: Allocate and distribute human capital assets
  • T1476: Promote awareness of cybersecurity policy and strategy among management
  • T1518: Develop organizational cybersecurity strategy
  • T1543: Develop cybersecurity policies and procedures
  • T1586: Conduct cybersecurity risk assessments
  • T1779: Coordinate strategic planning efforts with internal and external partners
  • T1862: Establish cybersecurity risk assessment processes
  • T1906: Establish a cybersecurity risk management program