SGC Job Analysis Questionnaire - R3G28 - Intrusion Analyst

 

 

You have completed 0% of this survey
0%
100%

For the role of Intrusion Analyst in the Smartgrid Cybersecurity environment, please indicate how frequently each task below would be performed by a person at the listed level of expertise, and how important is it that this task be completed by a person with the listed level of expertise.
*Document system configuration and access control (Task ID: R3-9792)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Implement controls to prevent unauthorized access tools and data. (Task ID: R3-9794)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Communicate with user and system owners as part of due dilligence (Task ID: R3-9182)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Develop an asset inventory of both hardware and software. Link this inventory to other security tools. (Task ID: R3-9321)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Develop technical libraries for all protocols inuse and noted security issues (Task ID: R3-9315)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Establish Operational Level Agreements and/or Service Level Agreements where appropriate. (Task ID: R3-9172)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Identify business, contractual, SLA and legal requirements that can be met by monitoring solution (Task ID: R3-9148)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Understand how specific tools accomplish their results (i.e. nmap, nessus, metasploit, etc.) - what methods and protocols are used. (Task ID: R3-9344)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Understand the ANSI C12 Standards (i.e. C12.18, C12.19, C12.21, C12.22) (Task ID: R3-9320)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Update network deployments to segragate systems that cannot handle vulnerability scans. (Task ID: R3-9292)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Identify the interdependencies between the data network and the power system including fault isolation and protection (Task ID: R3-9335)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Identify stakeholders which would be users of monitoring solution and their unique requirements (Task ID: R3-9155)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Document procedures for the successful and proper use of all security tools with a special attention to constraints (Task ID: R3-9648)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master) 		 
*Review security operations procedures for tool use and current versions (Task ID: R3-9650)
  Frequency   Importance
  Never Rarely Sometimes Often Always   Unimportant Low Moderately Very Extremely
Novice (Apprentice)  
Intermediate (Journeyman)  
Expert
(Master)