Is aware of the Obtains and acts Ensures that Is an authority on 1. need for on vulnerability information risk the use or impact vulnerability information in managers of vulnerability assessment to accordance with respond assessments Vulnerability E3 maintain Security appropriately to across the public 2. Assessment Information Operating relevant sector or an Security Procedures vulnerability industry sector information Is aware of the Contributes to Manages Is an authority on 1. benefits of security incident security incidents security incident managing management management Incident F1 security incidents across the public Management sector or an 2. industry sector Is aware of the Contributes to Leads Is an authority on 1. basic principles investigations investigations security of investigations into security into security investigations incidents incidents or F2 manages a team Investigation 2. of investigators or provide skills support Is aware of the Contributes to Manages Is an authority on 1. capability of forensic forensic forensics forensics to activities, with capability or F3 Forensics support some provides skilled
E3 Vulnerability Assessment Is aware of the need for vulnerability assessment to maintain Information Security Obtains and acts on vulnerability information in accordance with Security Operating Procedures Ensures that information risk managers respond appropriately to relevant vulnerability information Is an authority on the use or impact of vulnerability assessments across the public sector or an industry sector 1. 2. F1 Incident Management Is aware of the benefits of managing security incidents Contributes to security incident management Manages security incidents Is an authority on security incident management across the public sector or an industry sector 1. 2. F2 Investigation Is aware of the basic principles of investigations Contributes to investigations into security incidents Leads investigations into security incidents or manages a team of investigators or provide skills support Is an authority on security investigations 1. 2. F3 Forensics Is aware of the capability of forensics to support Contributes to forensic activities, with some Manages forensic capability or provides skilled Is an authority on forensics 1.
45_Evidence_Form_Template.docx