# Tasks & work activities — chief ICT security officer

Source: O*NET 30.3, occupation 15-1212.00 (Information Security Analysts) — manual nearest-occupation mapping via ISCO group 2529; the official ESCO crosswalk has no entry for this ESCO occupation.

## Task statements

- **[Core]** Train users and promote security awareness to ensure system security and to improve server and network efficiency.
- **[Core]** Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- **[Core]** Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
- **[Core]** Monitor current reports of computer viruses to determine when to update virus protection systems.
- **[Core]** Modify computer security files to incorporate new software, correct errors, or change individual access status.
- **[Core]** Coordinate implementation of computer system plan with establishment personnel and outside vendors.
- **[Core]** Monitor use of data files and regulate access to safeguard information in computer files.
- **[Core]** Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
- **[Core]** Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
- **[Core]** Document computer security and emergency measures policies, procedures, and tests.
- **[Core]** Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.

## Detailed work activities

- Collaborate with others to resolve information technology issues.
- Coordinate project activities with other personnel or departments.
- Develop computer or information security policies or procedures.
- Document operational procedures.
- Implement security measures for computer or information systems.
- Monitor the security of digital information.
- Test computer system operations to ensure proper functioning.
- Train others in computer interface or software use.
- Troubleshoot issues with computer applications or systems.
- Update knowledge about emerging industry or technology trends.