SGC Job Analysis Questionnaire - R3G07 - Intrusion Analyst

 

 

You have completed 0% of this survey
0%
100%

For the role of Intrusion Analyst in the Smartgrid Cybersecurity environment, please indicate how frequently each task below would be performed by a person at the listed level of expertise, and how important is it that this task be completed by a person with the listed level of expertise.
*Report business and technical impacts of the incident and response activities (Task ID: R3-9678)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Report to security management and system owners when systems have been successfully contained (Task ID: R3-9672)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Conduct security drills that incorporate the latest threats and vulnerabilities in the scenarios (Task ID: R3-9856)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Alert operators to events occurring so that they may increase system logging or retain logs where normally such logs may be simply lost due to system storage constraints. (Task ID: R3-9128)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Analyze test results to ensure systems functioning nominally (Task ID: R3-9401)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Attend incident response scenarios. (Task ID: R3-9495)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Develop a schedule for testing elements of the incident response plan and organizations involved in the process (Task ID: R3-9397)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Develop incident report template to be used when reporting the final status of an incident response. (Task ID: R3-9407)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Develop incident response scenarios. (Task ID: R3-9214)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Develop schedule, test plans, evaluation criteria, and sign-off for evaluating test success and/or failure. (Task ID: R3-9622)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Document all incident response exercises and test (Task ID: R3-9398)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Document gaps and outcomes to multiple parties to improve process and procedures. (Task ID: R3-9409)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Document shortcomings and lessons learned from IR exercises and formulate action plans to ensure they're corrected as rapidly as possible. (Task ID: R3-9400)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Escalate analysis findings in accordance with defined plan. (Task ID: R3-9126)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master)