Enterprise Security Architect

The Enterprise Security Architect ensures that the stakeholder security requirements necessary to protect the organization’s mission and business processes are adequately addressed in all aspects of enterprise architecture including reference models, segment and solution architectures, and the resulting systems supporting those missions and business processes.

wdt_ID	SN	Code	Category	Responsibilities
1	1	T0050	Tasks	Define and prioritize essential system capabilities or business functions required for partial or full system restoration after a catastrophic failure event.
2	2	T0051	Tasks	Define appropriate levels of system availability based on critical system functions and ensure that system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recover/restoration.
3	3	T0071	Tasks	Develop/integrate cybersecurity designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data primarily applicable to government organizations (e.g., UNCLASSIFIED, SECRET, and TOP SECRET).
4	4	T0082	Tasks	Document and address organization's information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition life cycle.
5	5	T0084	Tasks	Employ secure configuration management processes.
6	6	T0090	Tasks	Ensure that acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.
7	7	T0108	Tasks	Identify and prioritize critical business functions in collaboration with organizational stakeholders.
8	8	T0177	Tasks	Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
9	9	T0196	Tasks	Provide advice on project costs, design concepts, or design changes.
10	10	T0203	Tasks	Provide input on security requirements to be included in statements of work and other appropriate procurement documents.
11	11	T0205	Tasks	Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
12	12	T0268	Tasks	Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment.
13	13	T0307	Tasks	Analyze candidate architectures, allocate security services, and select security mechanisms.
14	14	T0314	Tasks	Develop a system security context, a preliminary system security Concept of Operations (CONOPS), and define baseline system security requirements in accordance with applicable cybersecurity requirements.
15	15	T0328	Tasks	Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.
16	16	T0338	Tasks	Write detailed functional specifications that document the architecture development process.
17	17	T0427	Tasks	Analyze user needs and requirements to plan architecture.
18	18	T0448	Tasks	Develop enterprise architecture or system components required to meet user needs.
19	19	T0473	Tasks	Document and update as necessary all definition and architecture activities.
20	20	T0484	Tasks	Determine the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately.
21	21	T0542	Tasks	Translate proposed capabilities into technical requirements.
22	22	T0556	Tasks	Assess and design security management functions as related to cyberspace.
23	23	K0001	Tasks	Knowledge of computer networking concepts and protocols, and network security methodologies.
24	24	K0002	Tasks	Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
25	25	K0003	Tasks	Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
26	26	K0004	Tasks	Knowledge of cybersecurity and privacy principles.
27	27	K0005	Tasks	Knowledge of cyber threats and vulnerabilities.
28	28	K0006	Tasks	Knowledge of specific operational impacts of cybersecurity lapses.
29	29	K0007	Tasks	Knowledge of authentication, authorization, and access control methods.
30	30	K0008	Tasks	Knowledge of applicable business processes and operations of customer organizations.
31	31	K0009	Tasks	Knowledge of application vulnerabilities.
32	32	K0010	Tasks	Knowledge of communication methods, principles, and concepts that support the network infrastructure.
33	33	K0011	Tasks	Knowledge of capabilities and applications of network equipment including routers, switches, bridges, servers, transmission media, and related hardware.
34	34	K0012	Tasks	Knowledge of capabilities and requirements analysis.
35	35	K0013	Tasks	Knowledge of cyber defense and vulnerability assessment tools and their capabilities.
36	36	K0015	Tasks	Knowledge of computer algorithms.
37	37	K0018	Tasks	Knowledge of encryption algorithms
38	38	K0019	Tasks	Knowledge of cryptography and cryptographic key management concepts
39	39	K0024	Tasks	Knowledge of database systems.
40	40	K0026	Tasks	Knowledge of business continuity and disaster recovery continuity of operations plans.
41	41	K0027	Tasks	Knowledge of organization's enterprise information security architecture.
42	42	K0030	Tasks	Knowledge of electrical engineering as applied to computer architecture (e.g., circuit boards, processors, chips, and computer hardware).
43	43	K0035	Tasks	Knowledge of installation, integration, and optimization of system components.
44	44	K0036	Tasks	Knowledge of human-computer interaction principles.
45	45	K0037	Tasks	Knowledge of Security Assessment and Authorization process.
46	46	K0043	Tasks	Knowledge of industry-standard and organizationally accepted analysis principles and methods.
47	47	K0044	Tasks	Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
48	48	K0052	Tasks	Knowledge of mathematics (e.g. logarithms, trigonometry, linear algebra, calculus, statistics, and operational analysis).
49	49	K0055	Tasks	Knowledge of microprocessors.
50	50	K0056	Tasks	Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
51	51	K0057	Tasks	Knowledge of network hardware devices and functions.
52	52	K0059	Tasks	Knowledge of new and emerging information technology (IT) and cybersecurity technologies.
53	53	K0060	Tasks	Knowledge of operating systems.
54	54	K0061	Tasks	Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
55	55	K0063	Tasks	Knowledge of parallel and distributed computing concepts.
56	56	K0071	Tasks	Knowledge of remote access technology concepts.
57	57	K0074	Tasks	Knowledge of key concepts in security management (e.g., Release Management, Patch Management).
58	58	K0082	Tasks	Knowledge of software engineering.
59	59	K0091	Tasks	Knowledge of systems testing and evaluation methods.
60	60	K0092	Tasks	Knowledge of technology integration processes.
61	61	K0093	Tasks	Knowledge of telecommunications concepts (e.g., Communications channel, Systems Link Budgeting, Spectral efficiency, Multiplexing).
62	62	K0102	Tasks	Knowledge of the systems engineering process.
63	63	K0170	Tasks	Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.
64	64	K0180	Tasks	Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
65	65	K0198	Tasks	Knowledge of organizational process improvement concepts and process maturity models (e.g., Capability Maturity Model Integration (CMMI) for Development, CMMI for Services, and CMMI for Acquisitions).
66	66	K0200	Tasks	Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).
67	67	K0202	Tasks	Knowledge of the application firewall concepts and functions (e.g., Single point of authentication/audit/policy enforcement, message scanning for malicious content, data anonymization for PCI and PII compliance, data loss protection scanning, accelerated cryptographic operations, SSL security, REST/JSON processing).
68	68	K0211	Tasks	Knowledge of confidentiality, integrity, and availability requirements.
69	69	K0212	Tasks	Knowledge of cybersecurity-enabled software products.
70	70	K0214	Tasks	Knowledge of the Risk Management Framework Assessment Methodology.
71	71	K0227	Tasks	Knowledge of various types of computer architectures.
72	72	K0240	Tasks	Knowledge of multi-level security systems and cross domain solutions.
73	73	K0260	Tasks	Knowledge of Personally Identifiable Information (PII) data security standards.
74	74	K0261	Tasks	Knowledge of Payment Card Industry (PCI) data security standards.
75	75	K0262	Tasks	Knowledge of Personal Health Information (PHI) data security standards.
76	76	K0264	Tasks	Knowledge of program protection planning (e.g. information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements).
77	77	K0275	Tasks	Knowledge of configuration management techniques.
78	78	K0277	Tasks	Knowledge of current and emerging data encryption (e.g., Column and Tablespace Encryption, file and disk encryption) security features in databases (e.g. built-in cryptographic key management features).
79	79	K0286	Tasks	Knowledge of N-tiered typologies (e.g. including server and client operating systems).
80	80	K0287	Tasks	Knowledge of an organization's information classification program and procedures for information compromise.
81	81	K0291	Tasks	Knowledge of the enterprise information technology (IT) architectural concepts and patterns (e.g., baseline, validated design, and target architectures.)
82	82	K0293	Tasks	Knowledge of integrating the organization’s goals and objectives into the architecture.
83	83	K0320	Tasks	Knowledge of organization's evaluation and validation criteria.
84	84	K0322	Tasks	Knowledge of embedded systems.
85	85	K0323	Tasks	Knowledge of system fault tolerance methodologies.
86	86	K0325	Tasks	Knowledge of Information Theory (e.g., source coding, channel coding, algorithm complexity theory, and data compression).
87	87	K0326	Tasks	Knowledge of demilitarized zones.
88	88	K0332	Tasks	Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
89	89	K0333	Tasks	Knowledge of network design processes, to include understanding of security objectives, operational objectives, and trade-offs.
90	90	K0336	Tasks	Knowledge of access authentication methods.
91	91	K0565	Tasks	Knowledge of the common networking and routing protocols (e.g. TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications.
92	92	S0005	Skills	Skill in applying and incorporating information technologies into proposed solutions.
93	93	S0022	Skills	Skill in designing countermeasures to identified security risks.
94	94	S0024	Skills	Skill in designing the integration of hardware and software solutions.
95	95	S0027	Skills	Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
96	96	S0050	Skills	Skill in design modeling and building use cases (e.g., unified modeling language).
97	97	S0059	Skills	Skill in using Virtual Private Network (VPN) devices and encryption.
98	98	S0061	Skills	Skill in writing test plans.
99	99	S0076	Skills	Skill in configuring and utilizing software-based computer protection tools (e.g., software firewalls, antivirus software, anti-spyware).
100	100	S0116	Skills	Skill in designing multi-level security/cross domain solutions.
101	101	S0122	Skills	Skill in the use of design methods.
102	102	S0138	Skills	Skill in using Public-Key Infrastructure (PKI) encryption and digital signature capabilities into applications (e.g., S/MIME email, SSL traffic).
103	103	S0139	Skills	Skill in applying security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).
104	104	S0152	Skills	Skill in translating operational requirements into protection needs (i.e., security controls).
105	105	S0168	Skills	Skill in setting up physical or logical sub-networks that separate an internal local area network (LAN) from other untrusted networks.
106	106	S0170	Skills	Skill in configuring and utilizing computer protection components (e.g., hardware firewalls, servers, routers, as appropriate).
107	107	S0367	Skills	Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
108	108	S0374	Skills	Skill to identify cybersecurity and privacy issues that stem from connections with internal and external customers and partner organizations.
109	109	A0008	Abilities	Ability to apply the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise information technology (IT) architecture (e.g., Open Group Architecture Framework [TOGAF], Department of Defense Architecture Framework [DoDAF], Federal Enterprise Architecture Framework [FEAF]).
110	110	A0014	Abilities	Ability to communicate effectively when writing.
111	111	A0015	Abilities	Ability to conduct vulnerability scans and recognize vulnerabilities in security systems.
112	112	A0027	Abilities	Ability to apply an organization's goals and objectives to develop and maintain architecture.
113	113	A0038	Abilities	Ability to optimize systems to meet enterprise performance requirements.
114	114	A0048	Abilities	Ability to apply network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
115	115	A0049	Abilities	Ability to apply secure system design tools, methods and techniques.
116	116	A0050	Abilities	Ability to apply system design tools, methods, and techniques, including automated systems analysis and design tools.
117	117	A0061	Abilities	Ability to design architectures and frameworks.
118	118	A0123	Abilities	Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
119	119	A0148	Abilities	Ability to serve as the primary liaison between the enterprise architect and the systems security engineer and coordinates with system owners, common control providers, and system security officers on the allocation of security controls as system-specific, hybrid, or common controls.
120	120	A0149	Abilities	Ability, in close coordination with system security officers, advise authorizing officials, chief information officers, senior information security officers, and the senior accountable official for risk management/risk executive (function), on a range of security-related issues (e.g. establishing system boundaries; assessing the severity of weaknesses and deficiencies in the system; plans of action and milestones; risk mitigation approaches; security alerts; and potential adverse effects of identified vulnerabilities).
121	121	A0170	Abilities	Ability to identify critical infrastructure systems with information communication technology that were designed without system security considerations.
122	122	A0172	Abilities	Ability to set up a physical or logical sub-networks that separates an internal local area network (LAN) from other untrusted networks.

0 Comments

Inline Feedbacks

View all comments