AUTHORIZING OFFICIAL/DESIGNATING REPRESENTATIVE

K0126

Knowledge of Supply Chain Risk Management Practices (NIST SP 800-161)

K0163

Knowledge of critical information technology (IT) procurement requirements.

K0257

Knowledge of information technology (IT) acquisition/procurement requirements.

K0270

Knowledge of the acquisition/procurement life cycle process.

K0260

Knowledge of Personally Identifiable Information (PII) data security standards.

K0261

Knowledge of Payment Card Industry (PCI) data security standards.

K0262

Knowledge of Personal Health Information (PHI) data security standards.

K0066

Knowledge of Privacy Impact Assessments.

K0615

Knowledge of privacy disclosure statements based on current laws.

K0364

Knowledge of available databases and tools necessary to assess appropriate collection tasking.

K0419

Knowledge of database administration and maintenance.

K0622

Knowledge of controls related to the use, processing, storage, and transmission of data.

K0193

Knowledge of advanced data remediation security features in databases.

K0420

Knowledge of database theory.

K0278

Knowledge of current and emerging data remediation security features in databases.

K0373

Knowledge of basic software applications (e.g., data storage and backup, database applications) and the types of vulnerabilities that have been found in those applications.

K0019

Knowledge of cryptography and cryptographic key management concepts

K0308

Knowledge of cryptology.

K0403

Knowledge of cryptologic capabilities, limitations, and contributions to cyber operations.

K0427

Knowledge of encryption algorithms and cyber capabilities/tools (e.g., SSL, PGP).

K0018

Knowledge of encryption algorithms

K0285

Knowledge of implementing enterprise key escrow systems to support data-at-rest encryption.

K0025

Knowledge of digital rights management.

K0277

Knowledge of current and emerging data encryption (e.g., Column and Tablespace Encryption, file and disk encryption) security features in databases (e.g. built-in cryptographic key management features).

K0104

Knowledge of Virtual Private Network (VPN) security.

K0190

Knowledge of encryption methodologies.

K0305

Knowledge of encryption algorithms, stenography, and other forms of data concealment.

K0428

Knowledge of encryption algorithms and tools for wireless local area networks (WLANs).

K0201

Knowledge of symmetric key rotation techniques and concepts.

K0101

Knowledge of the organization’s enterprise information technology (IT) goals and objectives.

K0199

Knowledge of security architecture concepts and enterprise architecture reference models (e.g., Zachman, Federal Enterprise Architecture [FEA]).

K0031

Knowledge of enterprise messaging systems and associated software.

K0063

Knowledge of parallel and distributed computing concepts.

K0200

Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).

K0291

Knowledge of the enterprise information technology (IT) architectural concepts and patterns (e.g., baseline, validated design, and target architectures.)

K0293

Knowledge of integrating the organization’s goals and objectives into the architecture.

K0255

Knowledge of network architecture concepts including topology, protocols, and components.

K0067

Knowledge of process engineering concepts.

K0047

Knowledge of information technology (IT) architectural concepts and frameworks.

K0313

Knowledge of external organizations and academic institutions with cyber focus (e.g., cyber curriculum/training and Research & Development).

K0233

Knowledge of the National Cybersecurity Workforce Framework, work roles, and associated tasks, knowledge, skills, and abilities.

K0027

Knowledge of organization's enterprise information security architecture.

K0037

Knowledge of Security Assessment and Authorization process.

K0038

Knowledge of cybersecurity and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data.

K0044

Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

K0054

Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities.

K0203

Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).

K0295

Knowledge of confidentiality, integrity, and availability principles.

K0074

Knowledge of key concepts in security management (e.g., Release Management, Patch Management).

K0211

Knowledge of confidentiality, integrity, and availability requirements.

K0240

Knowledge of multi-level security systems and cross domain solutions.

K0246

Knowledge of relevant concepts, procedures, software, equipment, and technology applications.

K0004

Knowledge of cybersecurity and privacy principles.

K0435

Knowledge of fundamental cyber concepts, principles, limitations, and effects.

K0561

Knowledge of the basics of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).

K0461

Knowledge of intelligence production processes.

K0049

Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).

K0179

Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).

K0075

Knowledge of security system design tools, methods, and techniques.

K0326

Knowledge of demilitarized zones.

K0487

Knowledge of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).

K0033

Knowledge of host/network access control mechanisms (e.g., access control list, capabilities lists).

K0112

Knowledge of defense-in-depth principles and network security architecture.

K0145

Knowledge of security event correlation tools.

K0045

Knowledge of information security systems engineering principles (NIST SP 800-160).

K0276

Knowledge of security management.

K0488

Knowledge of network security implementations (e.g., host-based IDS, IPS, access control lists), including their function and placement in a network.

K0357

Knowledge of analytical constructs and their use in assessing the operational environment.

K0319

Knowledge of technical delivery capabilities and their limitations.

K0053

Knowledge of measures or indicators of system performance and availability.

K0001

Knowledge of computer networking concepts and protocols, and network security methodologies.

K0395

Knowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.).

K0417

Knowledge of data communications terminology (e.g., networking protocols, Ethernet, IP, encryption, optical devices, removable media).

K0471

Knowledge of Internet network addressing (IP addresses, classless inter-domain routing, TCP/UDP port numbering).

K0516

Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.

K0565

Knowledge of the common networking and routing protocols (e.g. TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications.

K0552

Knowledge of tasking mechanisms.

K0221

Knowledge of OSI model and underlying network protocols (e.g., TCP/IP).

K0437

Knowledge of general Supervisory control and data acquisition (SCADA) system components.

K0170

Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.

K0322

Knowledge of embedded systems.

K0061

Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).

K0332

Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.

K0333

Knowledge of network design processes, to include understanding of security objectives, operational objectives, and trade-offs.

K0114

Knowledge of electronic devices (e.g., computer systems/components, access control devices, digital cameras, digital scanners, electronic organizers, hard drives, memory cards, modems, network components, networked appliances, networked home control devices, printers, removable storage devices, telephones, copiers, facsimile machines, etc.).

K0113

Knowledge of different types of network communication (e.g., LAN, WAN, MAN, WLAN, WWAN).

K0300

Knowledge of network mapping and recreating network topologies.

K0303

Knowledge of the use of sub-netting tools.

K0034

Knowledge of network services and protocols interactions that provide network communications.

K0230

Knowledge of cloud service models and how those models can limit incident response.

K0296

Knowledge of capabilities, applications, and potential vulnerabilities of network equipment including hubs, routers, switches, bridges, servers, transmission media, and related hardware.

K0443

Knowledge of how hubs, switches, routers work together in the design of a network.

K0470

Knowledge of Internet and routing protocols.

K0489

Knowledge of network topology.

K0050

Knowledge of local area and wide area networking principles and concepts including bandwidth management.

K0486

Knowledge of network construction and topology.

K0011

Knowledge of capabilities and applications of network equipment including routers, switches, bridges, servers, transmission media, and related hardware.

K0029

Knowledge of organization's Local and Wide Area Network connections.

K0137

Knowledge of the range of existing networks (e.g., PBX, LANs, WANs, WIFI, SCADA).

K0491

Knowledge of networking and Internet communications fundamentals (i.e. devices, device configuration, hardware, software, applications, ports/protocols, addressing, network architecture and infrastructure, routing, operating systems, etc.).

K0003

Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.

K0410

Knowledge of cyber laws and their effect on Cyber planning.

K0168

Knowledge of applicable laws, statutes (e.g., in Titles 10, 18, 32, 50 in U.S. Code), Presidential Directives, executive branch guidelines, and/or administrative/criminal legal guidelines and procedures.

K0267

Knowledge of laws, policies, procedures, or governance relevant to cybersecurity for critical infrastructures.

K0411

Knowledge of cyber laws and legal considerations and their effect on cyber planning.

K0127

Knowledge of the nature and function of the relevant information structure (e.g., National Information Infrastructure).

K0123

Knowledge of legal governance related to admissibility (e.g. Rules of Evidence).

K0125

Knowledge of processes for collecting, packaging, transporting, and storing electronic evidence while maintaining chain of custody.

K0155

Knowledge of electronic evidence law.

K0156

Knowledge of legal rules of evidence and court procedure.

K0251

Knowledge of the judicial process, including the presentation of facts and evidence.

K0351

Knowledge of applicable statutes, laws, regulations and policies governing cyber targeting and exploitation.

K0222

Knowledge of relevant laws, legal authorities, restrictions, and regulations pertaining to cyber defense activities.

K0341

Knowledge of foreign disclosure policies and import/export control regulations as related to cybersecurity.

K0196

Knowledge of Import/Export Regulations related to cryptography and other security technologies.

K0524

Knowledge of relevant laws, regulations, and policies.

K0495

Knowledge of ongoing and future operations.

K0496

Knowledge of operational asset constraints.

K0498

Knowledge of operational planning processes.

K0563

Knowledge of the capabilities, limitations and tasking methodologies of internal and external collections as they apply to planned cyber activities.

K0436

Knowledge of fundamental cyber operations concepts, terminology/lexicon (i.e., environment preparation, cyber-attack, cyber defense), principles, capabilities, limitations, and effects.

K0465

Knowledge of internal and external partner cyber operations capabilities and tools.

K0400

Knowledge of crisis action planning for cyber operations.

K0414

Knowledge of cyber operations support or enabling processes.

K0494

Knowledge of objectives, situation, operational environment, and the status and disposition of internal and external partner collection capabilities available to support planning.

K0497

Knowledge of operational effectiveness assessment.

K0499

Knowledge of operations security.

K0501

Knowledge of organization cyber operations programs, strategies, and resources.

K0589

Knowledge of the process used to assess the performance and impact of operations.

K0590

Knowledge of the processes to synchronize operational assessment procedures with the critical information requirement process.

K0593

Knowledge of the range of cyber operations and their underlying intelligence support needs, topics, and focus areas.

K0594

Knowledge of the relationships between end states, objectives, effects, lines of operation, etc.

K0597

Knowledge of the role of network operations in supporting and facilitating other organization operations.

K0591

Knowledge of the production responsibilities and organic analysis and production capabilities.

K0316

Knowledge of business or military operation plans, concept operation plans, orders, policies, and standing rules of engagement.

K0413

Knowledge of cyber operation objectives, policies, and legalities.

K0416

Knowledge of cyber operations.

K0425

Knowledge of different organization objectives at all levels, including subordinate, lateral and higher.

K0477

Knowledge of leadership's Intent and objectives.

K0513

Knowledge of organizational priorities, legal authorities and requirements submission processes.

K0579

Knowledge of the organization, roles and responsibilities of higher, lower and adjacent sub-elements.

K0581

Knowledge of the organization’s planning, operations and targeting cycles.

K0583

Knowledge of the organizational plans/directives/guidance that describe objectives.

K0613

Knowledge of who the organization’s operational planners are, how and where they can be contacted, and what are their expectations.

K0511

Knowledge of organizational hierarchy and cyber decision-making processes.

K0598

Knowledge of the structure and intent of organization specific plans, guidance and authorizations.

K0146

Knowledge of the organization's core business/mission processes.

K0350

Knowledge of accepted organization planning systems.

K0502

Knowledge of organization decision support tools and/or methods.

K0504

Knowledge of organization issues, objectives, and operations in cyber as well as regulations and policy directives governing cyber operations.

K0506

Knowledge of organization objectives, leadership priorities, and decision-making risks.

K0508

Knowledge of organization policies and planning concepts for partnering with internal and/or external organizations.

K0512

Knowledge of organizational planning concepts.

K0514

Knowledge of organizational structures and associated intelligence capabilities.

K0572

Knowledge of the functions and capabilities of internal teams that emulate threat activities to benefit the organization.

K0582

Knowledge of the organizational planning and staffing process.

K0585

Knowledge of the organizational structure as it pertains to full spectrum cyber operations, including the functions, responsibilities, and interrelationships among distinct internal elements.

K0241

Knowledge of organizational human resource policies, processes, and procedures.

K0509

Knowledge of organizational and partner authorities, responsibilities, and contributions to achieving objectives.

K0510

Knowledge of organizational and partner policies, tools, capabilities, and procedures.

K0425

Knowledge of different organization objectives at all levels, including subordinate, lateral and higher.

K0477

Knowledge of leadership's Intent and objectives.

K0513

Knowledge of organizational priorities, legal authorities and requirements submission processes.

K0579

Knowledge of the organization, roles and responsibilities of higher, lower and adjacent sub-elements.

K0581

Knowledge of the organization’s planning, operations and targeting cycles.

K0583

Knowledge of the organizational plans/directives/guidance that describe objectives.

K0613

Knowledge of who the organization’s operational planners are, how and where they can be contacted, and what are their expectations.

K0511

Knowledge of organizational hierarchy and cyber decision-making processes.

K0598

Knowledge of the structure and intent of organization specific plans, guidance and authorizations.

K0146

Knowledge of the organization's core business/mission processes.

K0350

Knowledge of accepted organization planning systems.

K0502

Knowledge of organization decision support tools and/or methods.

K0504

Knowledge of organization issues, objectives, and operations in cyber as well as regulations and policy directives governing cyber operations.

K0506

Knowledge of organization objectives, leadership priorities, and decision-making risks.

K0508

Knowledge of organization policies and planning concepts for partnering with internal and/or external organizations.

K0512

Knowledge of organizational planning concepts.

K0514

Knowledge of organizational structures and associated intelligence capabilities.

K0572

Knowledge of the functions and capabilities of internal teams that emulate threat activities to benefit the organization.

K0582

Knowledge of the organizational planning and staffing process.

K0585

Knowledge of the organizational structure as it pertains to full spectrum cyber operations, including the functions, responsibilities, and interrelationships among distinct internal elements.

K0241

Knowledge of organizational human resource policies, processes, and procedures.

K0509

Knowledge of organizational and partner authorities, responsibilities, and contributions to achieving objectives.

K0510

Knowledge of organizational and partner policies, tools, capabilities, and procedures.

K0432

Knowledge of existing, emerging, and long-range issues related to cyber operations strategy, policy, and organization.

K0002

Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).

K0527

Knowledge of risk management and mitigation strategies.

K0048

Knowledge of Risk Management Framework (RMF) requirements.

K0084

Knowledge of structured analysis principles and methods.

K0169

Knowledge of information technology (IT) supply chain security and supply chain risk management policies, requirements, and procedures.

K0379

Knowledge of client organizations, including information needs, objectives, structure, capabilities, etc.

K0455

Knowledge of information security concepts, facilitating technologies and methods.

K0214

Knowledge of the Risk Management Framework Assessment Methodology.

K0264

Knowledge of program protection planning (e.g. information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements).

K0376

Knowledge of internal and external customers and partner organizations, including information needs, objectives, structure, capabilities, etc.

K0149

Knowledge of organization's risk tolerance and/or risk management approach.

K0154

Knowledge of supply chain risk management standards, processes, and practices.

K0165

Knowledge of risk threat assessment.

K0518

Knowledge of planning activity initiation.

K0248

Knowledge of strategic theory and practice.

K0575

Knowledge of the impacts of internal and external partner staffing estimates.

K0235

Knowledge of how to leverage research and development centers, think tanks, academic research, and industry systems.

K0028

Knowledge of organization's evaluation and validation requirements.

K0089

Knowledge of systems diagnostic tools and fault identification techniques.

K0091

Knowledge of systems testing and evaluation methods.

K0290

Knowledge of systems security testing and evaluation methods.

K0380

Knowledge of collaborative tools and environments.

K0431

Knowledge of evolving/emerging communications technologies.

K0059

Knowledge of new and emerging information technology (IT) and cybersecurity technologies.

K0309

Knowledge of emerging technologies that have potential for exploitation.

K0311

Knowledge of industry indicators useful for identifying technology trends.

K0335

Knowledge of current and emerging cyber technologies.

K0212

Knowledge of cybersecurity-enabled software products.

K0115

Knowledge that technology that can be exploited.

K0523

Knowledge of products and nomenclature of major vendors (e.g., security suites - Trend Micro, Symantec, McAfee, Outpost, and Panda) and how those products affect exploitation and reduce vulnerabilities.

K0071

Knowledge of remote access technology concepts.

K0094

Knowledge of the capabilities and functionality associated with content creation technologies (e.g., wikis, social networking, content management systems, blogs).

K0096

Knowledge of the capabilities and functionality of various collaborative technologies (e.g., groupware, SharePoint).

K0476

Knowledge of language processing tools and techniques.

K0005

Knowledge of cyber threats and vulnerabilities.

K0006

Knowledge of specific operational impacts of cybersecurity lapses.

K0392

Knowledge of common computer/network infections (virus, Trojan, etc.) and methods of infection (ports, attachments, etc.).

K0013

Knowledge of cyber defense and vulnerability assessment tools and their capabilities.

K0040

Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).

K0070

Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).

K0342

Knowledge of penetration testing principles, tools, and techniques.

K0624

Knowledge of Application Security Risks (e.g. Open Web Application Security Project Top 10 list)

K0538

Knowledge of target and threat organization structures, critical capabilities, and critical vulnerabilities

K0147

Knowledge of emerging security issues, risks, and vulnerabilities.

K0106

Knowledge of what constitutes a network attack and a network attack’s relationship to both threats and vulnerabilities.

K0301

Knowledge of packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).

K0339

Knowledge of how to use network analysis tools to identify vulnerabilities.

K0119

Knowledge of hacking methodologies.

K0187

Knowledge of file type abuse by adversaries for anomalous behavior.

K0062

Knowledge of packet-level analysis.

K0009

Knowledge of application vulnerabilities.

K0314

Knowledge of industry technologies’ potential cybersecurity vulnerabilities.

K0481

Knowledge of methods and techniques used to detect various exploitation activities.

K0531

Knowledge of security implications of software configurations.

K0574

Knowledge of the impact of language analysis on on-net operator functions.