Chief ICT security officer to ICT resilience manager

• already held ICT recovery techniques knowledge
• already held comply with legal regulations skill
• already held cyber security knowledge
• already held develop information security strategy skill
• already held execute ICT audits skill
• already held identify ICT security risks skill
• already held implement ICT risk management skill
• already held internal risk management policy knowledge
• already held lead disaster recovery exercises skill
• already held manage IT security compliances skill
• already held manage disaster recovery plans skill
• already held manage system security skill
• already held organisational resilience knowledge
• already held security engineering knowledge
• already held ICT network security risks knowledge
• already held ICT process quality models knowledge
• already held ICT safety skill
• already held ICT system user requirements knowledge
• already held cloud security and compliance knowledge
• already held coordinate technological activities skill
• already held ethical hacking principles knowledge
• already held manage keys for data protection skill
• already held train employees skill

• optional, not held advise on strengthening security optional
• optional, not held business process modelling optional
• optional, not held core banking software optional
• optional, not held define security policies optional
• optional, not held human-computer interaction optional
• optional, not held respond to incidents in cloud optional
• optional, not held analyse business requirements optional
• optional, not held build business relationships optional
• optional, not held implement a management system optional
• optional, not held manage budgets optional
• optional, not held perform procurement processes optional
• optional, not held perform project management optional
• optional, not held provide cost benefit analysis reports optional

• not needed by the target role ICT communications protocols knowledge
• not needed by the target role ICT encryption knowledge
• not needed by the target role ICT infrastructure knowledge
• not needed by the target role ICT project management knowledge
• not needed by the target role ICT project management methodologies knowledge
• not needed by the target role ICT security legislation knowledge
• not needed by the target role ICT security standards knowledge
• not needed by the target role Internet of Things knowledge
• not needed by the target role World Wide Web Consortium standards knowledge
• not needed by the target role advice on security risk management skill
• not needed by the target role apply operations for an ITIL-based environment skill
• not needed by the target role assess ICT knowledge skill
• not needed by the target role assessment of risks and threats knowledge
• not needed by the target role attack vectors knowledge
• not needed by the target role audit techniques knowledge
• not needed by the target role cloud monitoring and reporting knowledge
• not needed by the target role cloud technologies knowledge
• not needed by the target role communicate with stakeholders skill
• not needed by the target role computer forensics knowledge
• not needed by the target role computer programming knowledge
• not needed by the target role conduct impact evaluation of ICT processes on business skill
• not needed by the target role control objectives for information and related technology knowledge
• not needed by the target role create solutions to problems skill
• not needed by the target role cyber attack counter-measures knowledge
• not needed by the target role data protection knowledge
• not needed by the target role decision support systems knowledge
• not needed by the target role educate on data confidentiality skill
• not needed by the target role engage with stakeholders skill
• not needed by the target role ensure adherence to organisational ICT standards skill
• not needed by the target role ensure compliance with legal requirements skill
• not needed by the target role ensure cross-department cooperation skill
• not needed by the target role ensure information privacy skill
• not needed by the target role establish an ICT security prevention plan skill
• not needed by the target role establish an Information Security Management System skill
• not needed by the target role ethics knowledge
• not needed by the target role forecast organisational risks skill
• not needed by the target role identify legal requirements skill
• not needed by the target role implement ICT security policies skill
• not needed by the target role implement a firewall skill
• not needed by the target role implement a virtual private network skill

18 further entries not listed here

Knowledge gaps usually close through study. Practical skill gaps usually need something you can point at.

• still to learn system backup best practice required
• optional, not held business process modelling optional
• optional, not held core banking software optional
• optional, not held human-computer interaction optional

Yes, and it is a moderate move. A chief ICT security officer already covers 62% of what an ICT resilience manager is expected to do: 23 skills carry over, 14 of which the ICT resilience manager role treats as required.

6 required skills are missing, plus 13 optional ones. They fall into 6 areas of the ESCO skill hierarchy, led by information skills. The single most important is develop contingency plans for emergencies.

Its learning distance is 43.8 out of 100, which is the moderate band. That accounts for both how much is missing and how specialised those skills are.