ICT resilience manager to ICT security administrator

• already held ICT network security risks knowledge
• already held ICT safety skill
• already held ethical hacking principles knowledge
• already held manage IT security compliances skill
• already held organisational resilience knowledge
• already held security engineering knowledge
• already held system backup best practice knowledge
• already held build business relationships skill
• already held cloud security and compliance knowledge
• already held cyber security knowledge
• already held execute ICT audits skill
• already held lead disaster recovery exercises skill
• already held manage keys for data protection skill
• already held respond to incidents in cloud skill
• already held train employees skill

• optional, not held ICT encryption optional
• optional, not held ICT infrastructure optional
• optional, not held ICT security legislation optional
• optional, not held ICT security standards optional
• optional, not held assess ICT knowledge optional
• optional, not held cloud monitoring and reporting optional
• optional, not held computer forensics optional
• optional, not held execute software tests optional
• optional, not held implement ICT security policies optional
• optional, not held implement a firewall optional
• optional, not held implement a virtual private network optional
• optional, not held implement anti-virus software optional
• optional, not held implement cloud security and compliance optional
• optional, not held information confidentiality optional
• optional, not held information security strategy optional
• optional, not held manage ICT virtualisation environments optional
• optional, not held manage cloud data and storage optional
• optional, not held perform backups optional
• optional, not held telecom regulations optional
• optional, not held use scripting programming optional
• optional, not held web application security threats optional
• optional, not held address problems critically optional
• optional, not held manage database optional
• optional, not held protect personal data and privacy optional
• optional, not held remove computer virus or malware from a computer optional
• optional, not held store digital data and systems optional

• not needed by the target role ICT process quality models knowledge
• not needed by the target role ICT recovery techniques knowledge
• not needed by the target role ICT system user requirements knowledge
• not needed by the target role advise on strengthening security skill
• not needed by the target role analyse business processes skill
• not needed by the target role analyse business requirements skill
• not needed by the target role analyse the context of an organisation skill
• not needed by the target role business process modelling knowledge
• not needed by the target role comply with legal regulations skill
• not needed by the target role coordinate technological activities skill
• not needed by the target role core banking software knowledge
• not needed by the target role define security policies skill
• not needed by the target role develop contingency plans for emergencies skill
• not needed by the target role develop information security strategy skill
• not needed by the target role human-computer interaction knowledge
• not needed by the target role identify ICT security risks skill
• not needed by the target role implement ICT recovery system skill
• not needed by the target role implement ICT risk management skill
• not needed by the target role implement a management system skill
• not needed by the target role internal risk management policy knowledge
• not needed by the target role manage budgets skill
• not needed by the target role manage disaster recovery plans skill
• not needed by the target role manage system security skill
• not needed by the target role perform ICT security testing skill
• not needed by the target role perform procurement processes skill
• not needed by the target role perform project management skill
• not needed by the target role provide cost benefit analysis reports skill

Knowledge gaps usually close through study. Practical skill gaps usually need something you can point at.

• still to learn Internet of Things required
• still to learn cyber attack counter-measures required
• still to learn database development tools required
• still to learn internet governance required
• still to learn mobile device management required
• still to learn network standards required
• still to learn operating systems required
• still to learn quality assurance methodologies required
• optional, not held ICT encryption optional
• optional, not held ICT infrastructure optional
• optional, not held ICT security legislation optional
• optional, not held ICT security standards optional
• optional, not held cloud monitoring and reporting optional
• optional, not held computer forensics optional
• optional, not held information confidentiality optional
• optional, not held information security strategy optional
• optional, not held telecom regulations optional
• optional, not held web application security threats optional

Yes, and it is a career change move. An ICT resilience manager already covers 27% of what an ICT security administrator is expected to do: 15 skills carry over, 7 of which the ICT security administrator role treats as required.

18 required skills are missing, plus 26 optional ones. They fall into 9 areas of the ESCO skill hierarchy, led by information and communication technologies (icts). The single most important is Internet of Things.

Its learning distance is 79.1 out of 100, which is the career change band. That accounts for both how much is missing and how specialised those skills are.