commit e102aed5d1271d97cdad19d295fcb86e0cfc171f Author: skillfactor-pipeline Date: Fri Aug 14 17:29:20 2026 +0200 feat: it-auditor skill package v0.1.0 diff --git a/PROVENANCE.md b/PROVENANCE.md new file mode 100644 index 0000000..aaed664 --- /dev/null +++ b/PROVENANCE.md @@ -0,0 +1,31 @@ +# Data provenance — it-auditor + +Where the content of this skill package comes from, counted by +content items (tasks, competences, tools, evidence entries, curated +knowledge). Rendered live by Gitea: + +```mermaid +%%{init: {'theme':'base','themeVariables':{'pie1':'#f9a825','pie2':'#1e88e5','pie3':'#ff355e','pie4':'#d97757','pie5':'#8e24aa','pieOuterStrokeWidth':'0px','pieSectionTextColor':'#fff'}}}%% +pie showData + title Content sources — it-auditor + "ESCO (occupation & competences)" : 38 + "O*NET (tasks & tools)" : 374 + "Job boards (market evidence)" : 92 + "Anthropic official Claude skills" : 10 + "External AI skill packs (mapped)" : 99 +``` + +| Source | Items | Share | Files | +|---|---|---|---| +| ESCO (occupation & competences) | 38 | 6.2 % | references/profile.md, references/skills.md | +| O*NET (tasks & tools) | 374 | 61.0 % | references/tasks.md, references/tools.md | +| Job boards (market evidence) | 92 | 15.0 % | references/market.md (full report) + "Market evidence" headline sections | +| Wikipedia & AI expert curation | 0 | 0.0 % | glossary, literature, usecases, intake, quality, evals/ | +| Anthropic official Claude skills | 10 | 1.6 % | references/ai-skills.md, section "anthropics/skills" (official Claude Code skills) | +| External AI skill packs (mapped) | 99 | 16.2 % | references/ai-skills.md (per-source attribution inside) | +| Stack Exchange practitioner Q&A (CC-BY-SA) | 0 | 0.0 % | references/practitioner-qa.md (per-entry attribution inside) | + +Licensing: O*NET (USDOL/ETA, CC BY 4.0) · ESCO (© European Union) · +job-ad evidence via official APIs (JSearch/Adzuna) · Wikipedia content +paraphrased with source URLs — never copied · external AI skills are +linked, not copied (Apache-2.0/MIT/source-available, see ai-skills.md). diff --git a/SKILL.md b/SKILL.md new file mode 100644 index 0000000..ec0907b --- /dev/null +++ b/SKILL.md @@ -0,0 +1,67 @@ +--- +name: it-auditor +description: "Occupational skill for the role 'IT auditor' (also: ICT auditor, information technology auditor, IT Quality Appraiser). Use when the user asks for typical IT auditor work such as: typical IT auditor responsibilities" +--- + +# It Auditor + +IT auditors perform audits of information systems, platforms, and operating procedures in accordance with established corporate standards for efficiency, accuracy and security. They evaluate ICT infrastructure in terms of risk to the organisation and establish controls to mitigate loss. They determine and recommend improvements in the current risk management controls and in the implementation of system changes or upgrades. + +## Core workflow + + +## How to use this skill + +- Read [references/profile.md](references/profile.md) for the occupation profile and scope. +- Consult [references/tasks.md](references/tasks.md) for the full task and activity inventory. +- Check [references/skills.md](references/skills.md) for essential vs. optional competences. +- Check [references/tools.md](references/tools.md) for the software commonly used in this role. +- See [references/ai-skills.md](references/ai-skills.md) — matched external AI agent skills (per-source attribution). + +## Key competences (essential) + +- analyse ICT system +- audit techniques +- develop audit plan +- engineering processes +- ensure adherence to organisational ICT standards +- execute ICT audits +- ICT process quality models +- ICT quality policy +- ICT security legislation +- ICT security standards +- improve business processes +- legal requirements of ICT products +- organisational resilience +- perform ICT security testing +- perform quality audits + +## Hot technologies + +- Adobe Acrobat +- Adobe Creative Cloud software +- Adobe Illustrator +- Adobe InDesign +- Adobe Photoshop +- AJAX +- Amazon DynamoDB +- Amazon Elastic Compute Cloud EC2 +- Amazon Redshift +- Amazon Web Services AWS software + + + + +## Hot technologies + +Top tools from 41 gated job ads (see references/market.md, as of 2026-07-14): + +- Microsoft Excel — 12 % +- AWS — 7 % +- Azure — 7 % +- Microsoft Office — 7 % + + + +--- +*Sources: ESCO v1.2.1 (http://data.europa.eu/esco/occupation/cdd3d773-75a4-4f35-bd1d-1ac720afcf9d), O*NET 30.3 (15-1299.09, manual nearest match). See manifest.json for licensing/attribution.* diff --git a/manifest.json b/manifest.json new file mode 100644 index 0000000..df514ea --- /dev/null +++ b/manifest.json @@ -0,0 +1,118 @@ +{ + "name": "it-auditor", + "title": "IT auditor", + "version": "0.1.0", + "layer": "core", + "language": "en", + "generated": "2026-07-07", + "ids": { + "esco_uri": "http://data.europa.eu/esco/occupation/cdd3d773-75a4-4f35-bd1d-1ac720afcf9d", + "esco_code": "2511.18", + "isco_group": "2511", + "onet_soc": "15-1299.09", + "crosswalk_match": "manual nearest via ISCO 2511 (Information Technology Project Managers)" + }, + "sources": [ + { + "name": "ESCO", + "version": "1.2.1", + "url": "https://esco.ec.europa.eu/" + }, + { + "name": "O*NET", + "version": "30.3", + "url": "https://www.onetcenter.org/", + "license": "CC BY 4.0" + } + ], + "attribution": "This package includes information from the O*NET Database (v30.3) by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA), CC BY 4.0. skillfactor is not endorsed by USDOL/ETA. ESCO data (v1.2.1) (c) European Union, used per the ESCO download conditions: https://esco.ec.europa.eu/en/use-esco/download", + "counts": { + "tasks": 0, + "dwas": 0, + "skills_essential": 19, + "skills_optional": 18, + "software": 0 + }, + "enrichment_ai_skills": { + "generated": "2026-07-14", + "method": "deterministic mapping (ISCO prefix + title/competence keywords)", + "sources": { + "anthropics/skills": { + "repo": "https://github.com/anthropics/skills", + "commit": "f6656c1", + "license": "Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available \u2014 see the LICENSE.txt in the upstream skill folder", + "skills": 7 + }, + "obra/superpowers": { + "repo": "https://github.com/obra/superpowers", + "commit": "d884ae0", + "license": "MIT (c) Jesse Vincent", + "skills": 12 + }, + "wshobson/agents": { + "repo": "https://github.com/wshobson/agents", + "commit": "6fd3247", + "license": "MIT (c) Seth Hobson", + "skills": 12 + }, + "NVIDIA/skills": { + "repo": "https://github.com/NVIDIA/skills", + "commit": "153b14b", + "license": "CC-BY-4.0 (skills/docs), Apache-2.0 (code)", + "skills": 12 + }, + "veniceai/skills": { + "repo": "https://github.com/veniceai/skills", + "commit": "de089fa", + "license": "MIT", + "skills": 9 + }, + "google/skills": { + "repo": "https://github.com/google/skills", + "commit": "b15f327", + "license": "Apache-2.0", + "skills": 12 + }, + "phuryn/pm-skills": { + "repo": "https://github.com/phuryn/pm-skills", + "commit": "18468a9", + "license": "MIT", + "skills": 9 + }, + "czlonkowski/n8n-skills": { + "repo": "https://github.com/czlonkowski/n8n-skills", + "commit": "9ea3aa5", + "license": "MIT", + "skills": 12 + } + }, + "total_skills": 85, + "tiers": { + "core": 35, + "adjacent": 50 + } + }, + "provenance": { + "items": { + "esco": 38, + "onet": 374, + "jobads": 92, + "wiki_ai": 0, + "anthropic": 10, + "ai_skills": 99, + "stackx": 0 + }, + "share_percent": { + "esco": 6.2, + "onet": 61.0, + "jobads": 15.0, + "wiki_ai": 0.0, + "anthropic": 1.6, + "ai_skills": 16.2, + "stackx": 0.0 + }, + "method": "content items per source category" + }, + "collar": "white", + "computer_work": true +} \ No newline at end of file diff --git a/references/ai-skills.md b/references/ai-skills.md new file mode 100644 index 0000000..8f031d4 --- /dev/null +++ b/references/ai-skills.md @@ -0,0 +1,167 @@ +# External AI agent skills — it-auditor + +Proven, publicly available AI agent skills mapped to this occupation. +Nothing is copied from the sources: every entry is a name, a one-line +summary and a link to the upstream skill package. Each section names +its source repository, commit, license and retrieval date. + +**Tiers:** `core` = the skill directly exercises a top market hard +skill, tool or method (from gated job-ad evidence) or an essential +ESCO competence of this occupation; `adjacent` = +plausibly useful, secondary. Entries are capped at 12 per source +and 80 in total per occupation (core first, +strongest matches survive); everything beyond the caps is excluded +and logged in the pipeline audit trail, not in this package. + +_Matched deterministically (ISCO group + title/competence keywords, +tiered against market evidence + ESCO essentials) by +`pipeline/p5_enrich_ai_skills.py` on 2026-07-14._ + +## Source: anthropics/skills + +- Repository: [https://github.com/anthropics/skills](https://github.com/anthropics/skills) (commit `f6656c1`, retrieved 2026-07-14) +- License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder + +| Skill | Tier | What it adds | Upstream | +|---|---|---|---| +| `mcp-builder` | adjacent | Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python … | [source](https://github.com/anthropics/skills/tree/main/skills/mcp-builder) | +| `webapp-testing` | adjacent | Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs. | [source](https://github.com/anthropics/skills/tree/main/skills/webapp-testing) | +| `docx` | adjacent | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … | [source](https://github.com/anthropics/skills/tree/main/skills/docx) | +| `skill-creator` | adjacent | Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with … | [source](https://github.com/anthropics/skills/tree/main/skills/skill-creator) | +| `xlsx` | adjacent | Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .xltx, .csv, or .tsv file (e.g., adding columns, computing formulas, … | [source](https://github.com/anthropics/skills/tree/main/skills/xlsx) | +| `claude-api` | adjacent | Reference for the Claude API / Anthropic SDK — model ids, pricing, params, streaming, tool use, MCP, agents, caching, token counting, model migration. TRIGGER — read BEFORE opening the target file; don't skip because it "looks like a … | [source](https://github.com/anthropics/skills/tree/main/skills/claude-api) | +| `pdf` | adjacent | Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … | [source](https://github.com/anthropics/skills/tree/main/skills/pdf) | + +## Source: obra/superpowers + +- Repository: [https://github.com/obra/superpowers](https://github.com/obra/superpowers) (commit `d884ae0`, retrieved 2026-07-14) +- License: MIT (c) Jesse Vincent + +| Skill | Tier | What it adds | Upstream | +|---|---|---|---| +| `executing-plans` | adjacent | Use when you have a written implementation plan to execute in a separate session with review checkpoints | [source](https://github.com/obra/superpowers/tree/main/skills/executing-plans) | +| `test-driven-development` | adjacent | Use when implementing any feature or bugfix, before writing implementation code | [source](https://github.com/obra/superpowers/tree/main/skills/test-driven-development) | +| `writing-plans` | adjacent | Use when you have a spec or requirements for a multi-step task, before touching code | [source](https://github.com/obra/superpowers/tree/main/skills/writing-plans) | +| `brainstorming` | adjacent | You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation. | [source](https://github.com/obra/superpowers/tree/main/skills/brainstorming) | +| `finishing-a-development-branch` | adjacent | Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup | [source](https://github.com/obra/superpowers/tree/main/skills/finishing-a-development-branch) | +| `requesting-code-review` | adjacent | Use when completing tasks, implementing major features, or before merging to verify work meets requirements | [source](https://github.com/obra/superpowers/tree/main/skills/requesting-code-review) | +| `subagent-driven-development` | adjacent | Use when executing implementation plans with independent tasks in the current session | [source](https://github.com/obra/superpowers/tree/main/skills/subagent-driven-development) | +| `using-git-worktrees` | adjacent | Use when starting feature work that needs isolation from current workspace or before executing implementation plans - ensures an isolated workspace exists via native tools or git worktree fallback | [source](https://github.com/obra/superpowers/tree/main/skills/using-git-worktrees) | +| `writing-skills` | adjacent | Use when creating new skills, editing existing skills, or verifying skills work before deployment | [source](https://github.com/obra/superpowers/tree/main/skills/writing-skills) | +| `dispatching-parallel-agents` | adjacent | Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies | [source](https://github.com/obra/superpowers/tree/main/skills/dispatching-parallel-agents) | +| `receiving-code-review` | adjacent | Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation | [source](https://github.com/obra/superpowers/tree/main/skills/receiving-code-review) | +| `systematic-debugging` | adjacent | Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes | [source](https://github.com/obra/superpowers/tree/main/skills/systematic-debugging) | + +## Source: wshobson/agents + +- Repository: [https://github.com/wshobson/agents](https://github.com/wshobson/agents) (commit `6fd3247`, retrieved 2026-07-14) +- License: MIT (c) Seth Hobson + +| Skill | Tier | What it adds | Upstream | +|---|---|---|---| +| `comprehensive-review-security-auditor (agent)` | core | Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and … | [source](https://github.com/wshobson/agents/tree/main/plugins/comprehensive-review/agents/security-auditor.md) | +| `code-documentation-code-reviewer (agent)` | core | Elite code review expert specializing in modern AI-powered code analysis, security vulnerabilities, performance optimization, and production reliability. Masters static analysis tools, security scanning, and configuration review with … | [source](https://github.com/wshobson/agents/tree/main/plugins/code-documentation/agents/code-reviewer.md) | +| `code-refactoring-code-reviewer (agent)` | core | Elite code review expert specializing in modern AI-powered code analysis, security vulnerabilities, performance optimization, and production reliability. Masters static analysis tools, security scanning, and configuration review with … | [source](https://github.com/wshobson/agents/tree/main/plugins/code-refactoring/agents/code-reviewer.md) | +| `codebase-cleanup-code-reviewer (agent)` | core | Elite code review expert specializing in modern AI-powered code analysis, security vulnerabilities, performance optimization, and production reliability. Masters static analysis tools, security scanning, and configuration review with … | [source](https://github.com/wshobson/agents/tree/main/plugins/codebase-cleanup/agents/code-reviewer.md) | +| `comprehensive-review-code-reviewer (agent)` | core | Elite code review expert specializing in modern AI-powered code analysis, security vulnerabilities, performance optimization, and production reliability. Masters static analysis tools, security scanning, and configuration review with … | [source](https://github.com/wshobson/agents/tree/main/plugins/comprehensive-review/agents/code-reviewer.md) | +| `git-pr-workflows-code-reviewer (agent)` | core | Elite code review expert specializing in modern AI-powered code analysis, security vulnerabilities, performance optimization, and production reliability. Masters static analysis tools, security scanning, and configuration review with … | [source](https://github.com/wshobson/agents/tree/main/plugins/git-pr-workflows/agents/code-reviewer.md) | +| `tdd-workflows-code-reviewer (agent)` | core | Elite code review expert specializing in modern AI-powered code analysis, security vulnerabilities, performance optimization, and production reliability. Masters static analysis tools, security scanning, and configuration review with … | [source](https://github.com/wshobson/agents/tree/main/plugins/tdd-workflows/agents/code-reviewer.md) | +| `dbt-transformation-patterns` | core | Master dbt (data build tool) for analytics engineering with model organization, testing, documentation, and incremental strategies. Use when building data transformations, creating data models, or implementing analytics engineering best … | [source](https://github.com/wshobson/agents/tree/main/plugins/data-engineering/skills/dbt-transformation-patterns) | +| `embedding-strategies` | core | Select and optimize embedding models for semantic search and RAG applications. Use when choosing embedding models, implementing chunking strategies, or optimizing embedding quality for specific domains. | [source](https://github.com/wshobson/agents/tree/main/plugins/llm-application-dev/skills/embedding-strategies) | +| `shellcheck-configuration` | core | Master ShellCheck static analysis configuration and usage for shell script quality. Use when setting up linting infrastructure, fixing code issues, or ensuring script portability. | [source](https://github.com/wshobson/agents/tree/main/plugins/shell-scripting/skills/shellcheck-configuration) | +| `uv-package-manager` | core | Master the uv package manager for fast Python dependency management, virtual environments, and modern Python project workflows. Use when setting up Python projects, managing dependencies, or optimizing Python development workflows with uv. | [source](https://github.com/wshobson/agents/tree/main/plugins/python-development/skills/uv-package-manager) | +| `debugging-strategies` | core | Master systematic debugging techniques, profiling tools, and root cause analysis to efficiently track down bugs across any codebase or technology stack. Use when investigating bugs, performance issues, or unexpected behavior. | [source](https://github.com/wshobson/agents/tree/main/plugins/developer-essentials/skills/debugging-strategies) | + +## Source: google/skills + +- Repository: [https://github.com/google/skills](https://github.com/google/skills) (commit `b15f327`, retrieved 2026-07-14) +- License: Apache-2.0 + +| Skill | Tier | What it adds | Upstream | +|---|---|---|---| +| `agent-platform-eval-flywheel` | core | Measures and improves the quality of AI models and agents on Google Cloud using the Eval Quality Flywheel methodology. Use when evaluating an agent or model, building an eval dataset, picking or writing evaluation metrics, analyzing … | [source](https://github.com/google/skills/tree/b15f327/skills/cloud/agent-platform-eval-flywheel) | +| `bigquery-ai-ml` | core | Leverages BigQuery's built-in machine learning and GenAI capabilities for advanced data analytics. Use when you need to write SQL queries that perform time-series forecasting, detect outliers, find key drivers, or leverage generative AI … | [source](https://github.com/google/skills/tree/b15f327/skills/cloud/bigquery-ai-ml) | +| `bigquery-basics` | core | Manages datasets, tables, and jobs in BigQuery. Use when you need to interact with BigQuery, run SQL queries, manage BigQuery resources (datasets, tables, views), or perform basic data ingestion and analysis. | [source](https://github.com/google/skills/tree/b15f327/skills/cloud/bigquery-basics) | +| `datalineage-bigquery-asset-impact-analysis` | core | Analyzes the downstream impact (blast radius) when a BigQuery table or view is broken, stale, or modified. Identifies all downstream tables, dashboards, and processes that will be affected. Use when: - Performing a blast radius or impact … | [source](https://github.com/google/skills/tree/b15f327/skills/cloud/datalineage-bigquery-asset-impact-analysis) | +| `google-analytics-data-api-basics` | core | Manages Google Analytics reporting data, enables the Analytics Data API via the Cloud CLI, and creates reports using the Google Analytics Data API (v1beta). Use when you need to interact with Google Analytics properties, run customized … | [source](https://github.com/google/skills/tree/b15f327/skills/analytics/google-analytics-data-api-basics) | +| `bigtable-basics` | core | Assists in provisioning instances/tables, designing performant schemas, and querying data in Bigtable. Use when designing Bigtable row keys, configuring column families, writing SQL queries or client library code (Java, Go, Python) for … | [source](https://github.com/google/skills/tree/b15f327/skills/cloud/bigtable-basics) | +| `cloud-sql-basics` | core | This file generates or explains Cloud SQL resources. Use this file when the user asks to create a Cloud SQL instance or database for MySQL, PostgreSQL, or SQL Server. Cloud SQL manages third-party MySQL, PostgreSQL, and SQL Server … | [source](https://github.com/google/skills/tree/b15f327/skills/cloud/cloud-sql-basics) | +| `google-analytics-admin-api-basics` | core | Manages Google Analytics account and property settings, enables the Analytics Admin API via the Cloud CLI, lists accounts and properties, and manages data streams, custom dimensions, conversion events, and integrations. Use when you need … | [source](https://github.com/google/skills/tree/b15f327/skills/analytics/google-analytics-admin-api-basics) | +| `agent-platform-alert-configuration` | adjacent | Configures best-practice alerting policies for Google Cloud Vertex AI / Agent Platform agents on Agent Runtime. Use when analyzing, writing, or deploying alerting policies to monitor agent latency, error rates, and quality metrics … | [source](https://github.com/google/skills/tree/b15f327/skills/cloud/agent-platform-alert-configuration) | +| `alloydb-basics` | adjacent | Manages clusters, instances, and backups for AlloyDB for PostgreSQL, and integrates with AlloyDB model context protocol (MCP) tools for automated database operations. | [source](https://github.com/google/skills/tree/b15f327/skills/cloud/alloydb-basics) | +| `gke-observability` | adjacent | Configures GKE observability, including Cloud Logging, Cloud Monitoring, and managed Prometheus. Use when configuring GKE monitoring, setting up GKE logging, or configuring Prometheus metrics collection. Don't use to configure local … | [source](https://github.com/google/skills/tree/b15f327/skills/cloud/gke-observability) | +| `google-cloud-networking-observability` | adjacent | Investigates Google Cloud networking issues by analyzing logs, metrics, and diagnostics. Use when investigating VPC Flow Logs (including cost estimation), NAT, firewall, or threat logs, querying latency and throughput metrics, or running … | [source](https://github.com/google/skills/tree/b15f327/skills/cloud/google-cloud-networking-observability) | + +## Source: czlonkowski/n8n-skills + +- Repository: [https://github.com/czlonkowski/n8n-skills](https://github.com/czlonkowski/n8n-skills) (commit `9ea3aa5`, retrieved 2026-07-14) +- License: MIT + +| Skill | Tier | What it adds | Upstream | +|---|---|---|---| +| `n8n-mcp-tools-expert` | core | Expert guide for using n8n-mcp MCP tools effectively. Use when searching for nodes, validating configurations, accessing templates, managing workflows, managing credentials, auditing instance security, or using any n8n-mcp tool. Provides … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-mcp-tools-expert) | +| `using-n8n-mcp-skills` | adjacent | Use when building, editing, validating, testing, or debugging an n8n workflow through the n8n-mcp MCP server — designing a flow, configuring a node, writing an expression or Code node, wiring credentials, or fixing one that misbehaves. The … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/using-n8n-mcp-skills) | +| `n8n-agents` | adjacent | Design n8n AI agents the right way. Use when building or editing any @n8n/n8n-nodes-langchain.* AI node — an AI Agent, LLM chain, Text Classifier, or Information Extractor — and whenever the user mentions AI agents, LLM with tools, tool … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-agents) | +| `n8n-code-javascript` | adjacent | Write JavaScript code in n8n Code nodes. Use when writing JavaScript in n8n, using $input/$json/$node syntax, making HTTP requests with this.helpers / the $helpers global, working with dates using DateTime, troubleshooting Code node … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-code-javascript) | +| `n8n-code-python` | adjacent | Write Python code in n8n Code nodes. Use when writing Python in n8n, using _input/_json/_node syntax, working with standard library, or need to understand Python limitations in n8n Code nodes. Use this skill when the user specifically … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-code-python) | +| `n8n-code-tool` | adjacent | Write JavaScript or Python for the n8n Custom Code Tool (@n8n/n8n-nodes-langchain.toolCode) — the AI-agent-callable tool, NOT the workflow Code node. Use when building a Code Tool attached to an AI Agent, writing code that an LLM will … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-code-tool) | +| `n8n-expression-syntax` | adjacent | Validate n8n expression syntax and fix common errors. Use when writing n8n expressions, using {{}} syntax, accessing $json/$node variables, troubleshooting expression errors, mapping data between nodes, or referencing webhook data in … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-expression-syntax) | +| `n8n-subworkflows` | adjacent | Build reusable, composable n8n sub-workflows. Use when extracting shared logic, building anything multi-step or reused across workflows, or any workflow over ~10 nodes — and whenever the user mentions sub-workflows, Execute Workflow, … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-subworkflows) | +| `n8n-workflow-patterns` | adjacent | Proven workflow architectural patterns from real n8n workflows. Use when building new workflows, designing workflow structure, choosing workflow patterns, planning workflow architecture, or asking about webhook processing, HTTP API … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-workflow-patterns) | +| `n8n-binary-and-data` | adjacent | Handle files and binary data in n8n correctly. Use when working with files, images, PDFs, attachments, uploads or downloads, base64, vision/multimodal input, or when an AI agent needs a file as tool input or output — and whenever the user … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-binary-and-data) | +| `n8n-error-handling` | adjacent | Wire n8n error handling so failures are loud, structured, and recoverable. Use when building any webhook/API workflow, a scheduled or unattended workflow, or any path where a silent failure would drop user-visible work — and whenever the … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-error-handling) | +| `n8n-multi-instance` | adjacent | Use when an n8n-mcp account targets more than one n8n instance — i.e. the `n8n_instances` tool is available, the user mentions multiple n8n instances or environments (prod vs staging, several teams or clients), a workflow / datatable / … | [source](https://github.com/czlonkowski/n8n-skills/tree/9ea3aa5/skills/n8n-multi-instance) | + +## Source: NVIDIA/skills + +- Repository: [https://github.com/NVIDIA/skills](https://github.com/NVIDIA/skills) (commit `153b14b`, retrieved 2026-07-14) +- License: CC-BY-4.0 (skills/docs), Apache-2.0 (code) + +| Skill | Tier | What it adds | Upstream | +|---|---|---|---| +| `vss-generate-video-report` | core | Use this skill when producing a VSS analysis report — Mode A per-clip VLM, Mode B incident-range via video-analytics. Not for standalone video summarization, real-time alerts or ad-hoc Q&A. | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/vss-generate-video-report) | +| `deepstream-dev` | core | NVIDIA DeepStream SDK 9.0 development with Python pyservicemaker API. Use when building video analytics pipelines, GStreamer-based video processing, TensorRT inference integration, object detection/tracking, or Kafka/message broker … | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/deepstream-dev) | +| `hsb-app` | core | Discover and run Holoscan Sensor Bridge example applications on a connected devkit. Filters available apps by the user's platform, HSB software version, board type, and sensors. Supports timed execution, failure analysis, code-edit … | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/hsb-app) | +| `vss-manage-alerts` | core | Use for VSS alert workflows — real-time monitoring, Alert-Bridge subscriptions, Slack notifications, incident queries, camera onboarding. Not for non-alert analytics. | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/vss-manage-alerts) | +| `vss-query-analytics` | core | Use this skill when reading video-analytics metrics, incidents, alerts, and sensor data via the VA-MCP server (port 9901). Not for live VLM or incident-range narrative reports. | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/vss-query-analytics) | +| `physical-ai-infrastructure-setup-and-resilient-scaling` | core | Use when the user wants to set up, scale, validate, or harden NVIDIA physical AI infrastructure for synthetic data generation workflows across local MicroK8s or Azure AKS, including Kubernetes clusters, inference endpoint deployment, OSMO … | [source](https://github.com/NVIDIA/skills/tree/153b14b/plugins/nvidia-skills/skills/physical-ai-infrastructure-setup-and-resilient-scaling) | +| `vss-generate-video-calibration` | core | Use to run AutoMagicCalib on local MP4s, RTSP, or the bundled sample dataset, and to deploy vss-auto-calibration when needed. Do not use for non-AMC calibration or runtime analytics. | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/vss-generate-video-calibration) | +| `vss-setup-behavior-analytics` | core | Use to deploy the vss-behavior-analytics service standalone (entrypoint, config-source, optional calibration). Not for the full warehouse deploy. | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/vss-setup-behavior-analytics) | +| `vss-setup-video-analytics-api` | core | Use to deploy the vss-video-analytics-api REST service standalone (config-source, data-log bind, Elasticsearch, optional Kafka). Not for full warehouse deploy. | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/vss-setup-video-analytics-api) | +| `rag-eval` | adjacent | Filesystem RAG benchmarks: corpus/, train.json, evaluate_rag.py (RAGAS quality). Not for prod monitoring, latency/throughput benchmarking (use rag-perf), or evals outside this repo layout. | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/rag-eval) | +| `tao-train-mask2former` | adjacent | Mask2Former for universal image segmentation (panoptic, instance, and semantic). Transformer-based with masked attention for high-quality segmentation results. Use when training, evaluating, exporting, quantizing, or running inference for … | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/tao-train-mask2former) | +| `tao-train-optical-inspection` | adjacent | Optical Inspection for defect detection using Siamese networks. Compares image pairs to detect manufacturing defects, anomalies, or quality issues. Use when training, evaluating, exporting, or running inference for a TAO Optical Inspection … | [source](https://github.com/NVIDIA/skills/tree/153b14b/skills/tao-train-optical-inspection) | + +## Source: phuryn/pm-skills + +- Repository: [https://github.com/phuryn/pm-skills](https://github.com/phuryn/pm-skills) (commit `18468a9`, retrieved 2026-07-14) +- License: MIT + +| Skill | Tier | What it adds | Upstream | +|---|---|---|---| +| `cohort-analysis` | core | Perform cohort analysis on user engagement data — retention curves, feature adoption trends, and segment-level insights. Use when analyzing user retention by cohort, studying feature adoption over time, investigating churn patterns, or … | [source](https://github.com/phuryn/pm-skills/tree/18468a9/pm-data-analytics/skills/cohort-analysis) | +| `dummy-dataset` | core | Generate realistic dummy datasets for testing with customizable columns, constraints, and output formats (CSV, JSON, SQL, Python script). Use when creating test data, building mock datasets, or generating sample data for development and … | [source](https://github.com/phuryn/pm-skills/tree/18468a9/pm-execution/skills/dummy-dataset) | +| `metrics-dashboard` | core | Define and design a product metrics dashboard with key metrics, data sources, visualization types, and alert thresholds. Use when creating a metrics dashboard, defining KPIs, setting up product analytics, or building a data monitoring plan. | [source](https://github.com/phuryn/pm-skills/tree/18468a9/pm-product-discovery/skills/metrics-dashboard) | +| `sql-queries` | core | Generate SQL queries from natural language descriptions. Supports BigQuery, PostgreSQL, MySQL, and other dialects. Reads database schemas from uploaded diagrams or documentation. Use when writing SQL, building data reports, exploring … | [source](https://github.com/phuryn/pm-skills/tree/18468a9/pm-data-analytics/skills/sql-queries) | +| `ab-test-analysis` | core | Analyze A/B test results with statistical significance, sample size validation, confidence intervals, and ship/extend/stop recommendations. Use when evaluating experiment results, checking if a test reached significance, interpreting split … | [source](https://github.com/phuryn/pm-skills/tree/18468a9/pm-data-analytics/skills/ab-test-analysis) | +| `gtm-strategy` | adjacent | Create a go-to-market strategy covering marketing channels, messaging, success metrics, and launch timeline. Use when planning a product launch, creating a GTM plan from scratch, or defining a launch strategy for a new market. | [source](https://github.com/phuryn/pm-skills/tree/18468a9/pm-go-to-market/skills/gtm-strategy) | +| `lean-canvas` | adjacent | Generate a Lean Canvas with problem, solution, metrics, cost structure, UVP, unfair advantage, channels, segments, and revenue. Use when exploring a lean startup canvas, testing a business hypothesis, or modeling a new venture. | [source](https://github.com/phuryn/pm-skills/tree/18468a9/pm-product-strategy/skills/lean-canvas) | +| `north-star-metric` | adjacent | Define a North Star Metric and 3-5 supporting input metrics that form a metrics constellation. Classify the business game (Attention, Transaction, Productivity) and validate against 7 criteria for an effective North Star. Use when choosing … | [source](https://github.com/phuryn/pm-skills/tree/18468a9/pm-marketing-growth/skills/north-star-metric) | +| `product-strategy` | adjacent | Create a comprehensive product strategy using the 9-section Product Strategy Canvas — vision, segments, costs, value propositions, trade-offs, metrics, growth, capabilities, and defensibility. Use when building a product strategy, creating … | [source](https://github.com/phuryn/pm-skills/tree/18468a9/pm-product-strategy/skills/product-strategy) | + +## Source: veniceai/skills + +- Repository: [https://github.com/veniceai/skills](https://github.com/veniceai/skills) (commit `de089fa`, retrieved 2026-07-14) +- License: MIT + +| Skill | Tier | What it adds | Upstream | +|---|---|---|---| +| `venice-characters` | adjacent | Discover and use Venice public characters (persona-driven system prompts with a bound model). Covers GET /characters (search/filter/sort), /characters/{slug}, /characters/{slug}/reviews, the Character schema, and how to apply a character … | [source](https://github.com/veniceai/skills/tree/de089fa/skills/venice-characters) | +| `venice-api-keys` | adjacent | Manage Venice API keys. Covers GET/POST/PATCH/DELETE /api_keys, GET /api_keys/{id}, GET /api_keys/rate_limits, GET /api_keys/rate_limits/log, the two-step /api_keys/generate_web3_key wallet flow, INFERENCE vs ADMIN key types, and per-key … | [source](https://github.com/veniceai/skills/tree/de089fa/skills/venice-api-keys) | +| `venice-api-overview` | adjacent | High-level map of the Venice.ai API - base URL, authentication modes, endpoint categories, response headers, pricing model, error shape, and versioning. Load this first when starting any Venice integration. | [source](https://github.com/veniceai/skills/tree/de089fa/skills/venice-api-overview) | +| `venice-auth` | adjacent | Authenticate to the Venice API with a Bearer API key or with an x402 / SIWE wallet. Covers header formats, the SIWE message fields, TTL and nonce rules, the venice-x402-client SDK, and how to choose between the two modes. | [source](https://github.com/veniceai/skills/tree/de089fa/skills/venice-auth) | +| `venice-embeddings` | adjacent | Call POST /embeddings on Venice. Covers request shape (input, model, encoding_format, dimensions, user), OpenAI compatibility, response compression (gzip/br), and practical usage for retrieval, clustering, and RAG. | [source](https://github.com/veniceai/skills/tree/de089fa/skills/venice-embeddings) | +| `venice-errors` | adjacent | Handle Venice API errors correctly. Covers the StandardError / DetailedError / ContentViolationError / X402InferencePaymentRequired body shapes, every meaningful status code (400, 401, 402, 403, 415, 422, 429, 500, 503, 504), the 402 … | [source](https://github.com/veniceai/skills/tree/de089fa/skills/venice-errors) | +| `venice-image-edit` | adjacent | Transform existing images with Venice. Covers POST /image/edit (prompt-driven single-image edit), /image/multi-edit (compose 1-3 images), /image/upscale (2-4x upscale + enhance), and /image/background-remove. Accepts base64, file upload, … | [source](https://github.com/veniceai/skills/tree/de089fa/skills/venice-image-edit) | +| `venice-image-generate` | adjacent | Generate images with Venice. Covers POST /image/generate (Venice-native), POST /images/generations (OpenAI-compatible), GET /image/styles (style presets), request fields (prompt, dimensions, cfg_scale, seed, variants, style_preset, … | [source](https://github.com/veniceai/skills/tree/de089fa/skills/venice-image-generate) | +| `venice-responses` | adjacent | Use Venice's Alpha POST /responses endpoint - an OpenAI-compatible Responses API with typed output blocks (reasoning, message, function_call, web_search_call). Covers request shape, streaming, differences from /chat/completions, supported … | [source](https://github.com/veniceai/skills/tree/de089fa/skills/venice-responses) | diff --git a/references/market.md b/references/market.md new file mode 100644 index 0000000..2542574 --- /dev/null +++ b/references/market.md @@ -0,0 +1,142 @@ +# Market evidence report — it-auditor + +Source: **41 real job ads** (JSearch API, countries: us 39, gb 2), extracted into the MSSQL evidence store; as of 2026-07-14. +This report contains extracted, aggregated facts only — no ad text is +reproduced (copyright / platform terms). + +## Seniority distribution + +| Seniority | Ads | Share | +|---|---|---| +| mid | 25 | 61 % | +| senior | 11 | 27 % | +| lead | 4 | 10 % | +| n/a | 1 | 2 % | + +## Tools — full market ranking + +| # | Item | Ads | Share | +|---|---|---|---| +| 1 | Microsoft Excel | 5 | 12 % | +| 2 | AWS | 3 | 7 % | +| 3 | Azure | 3 | 7 % | +| 4 | Microsoft Office | 3 | 7 % | + +## Hard skills — full market ranking + +| # | Item | Ads | Share | +|---|---|---|---| +| 1 | risk assessment | 18 | 44 % | +| 2 | data analysis | 13 | 32 % | +| 3 | it auditing | 12 | 29 % | +| 4 | it audit | 10 | 24 % | +| 5 | project management | 4 | 10 % | +| 6 | risk management | 4 | 10 % | +| 7 | audit planning | 3 | 7 % | +| 8 | control evaluation | 3 | 7 % | +| 9 | control testing | 3 | 7 % | +| 10 | information systems auditing | 3 | 7 % | +| 11 | internal controls | 3 | 7 % | +| 12 | it risk assessment | 3 | 7 % | +| 13 | report writing | 3 | 7 % | +| 14 | sox compliance | 3 | 7 % | + +## Methods — full market ranking + +| # | Item | Ads | Share | +|---|---|---|---| +| 1 | NIST framework | 7 | 17 % | +| 2 | COBIT framework | 5 | 12 % | +| 3 | coso framework | 5 | 12 % | +| 4 | fisma | 4 | 10 % | +| 5 | fiscam | 3 | 7 % | +| 6 | iiA standards | 3 | 7 % | +| 7 | iso 27001 | 3 | 7 % | + +## Responsibilities — full market ranking + +| # | Item | Ads | Share | +|---|---|---|---| +| 1 | audit execution | 9 | 22 % | +| 2 | audit planning | 8 | 20 % | +| 3 | report preparation | 5 | 12 % | +| 4 | control assessment | 3 | 7 % | +| 5 | issue identification | 3 | 7 % | +| 6 | recommendation development | 3 | 7 % | +| 7 | risk assessment | 3 | 7 % | + +## Regional breakdown + +> **Corpus note:** 41 relevant ads in total — below the 100-ad target for a fully reliable ranking. Percentages above should be read as indicative. + +### US (us) + +39 ads. + +**Top hard skills:** + +- risk assessment — 44 % (17 ads) +- data analysis — 31 % (12 ads) +- it auditing — 28 % (11 ads) +- it audit — 26 % (10 ads) +- project management — 10 % (4 ads) +- risk management — 10 % (4 ads) +- control evaluation — 8 % (3 ads) +- control testing — 8 % (3 ads) +- information systems auditing — 8 % (3 ads) +- internal controls — 8 % (3 ads) + +**Top tools:** + +- Microsoft Excel — 13 % (5 ads) +- AWS — 8 % (3 ads) +- Azure — 8 % (3 ads) +- Microsoft Office — 8 % (3 ads) +- GCP — 5 % (2 ads) +- Microsoft PowerPoint — 5 % (2 ads) +- SAP — 5 % (2 ads) +- TeamMate audit software — 5 % (2 ads) +- Tenable Nessus — 5 % (2 ads) + +**Seniority:** mid 62 % · senior 28 % · lead 8 % · n/a 3 % + +### UK (gb) + +**Insufficient evidence** — 2 ads (minimum for a regional ranking: 30). No ranking is reported for this region. + +### EU/DACH (de, at, ch, nl) + +**Insufficient evidence** — 0 ads (minimum for a regional ranking: 30). No ranking is reported for this region. + + +## Job title variants in the market + +| Title | Ads | +|---|---| +| Senior IT Auditor | 4 | +| IT Audit Manager | 3 | +| IT Auditor | 3 | +| Auditor (Information Systems) - Technology Operations Directorate | 1 | +| Auditor multischema ict | 1 | +| CHIEF OF SECTION, AUDIT - Temporary Job Opening, P5 | 1 | +| Hybrid IT Auditor - SOX & IT Risk, Data Analytics | 1 | +| Hybrid IT Auditor: Risk, Controls & Compliance | 1 | +| ICT Auditor:in 80–100% | 1 | +| Information Security Auditor | 1 | +| Information Technology (IT) Audit Specialist | 1 | +| Information Technology (IT) Auditor | 1 | +| Information Technology Auditor | 1 | +| Information Technology Auditor GMRC005 | 1 | +| Information Technology Auditor/ Auditor | 1 | +| IT Audit Manager (Federal Audit) | 1 | +| IT Audit Supervisor | 1 | +| IT Auditor - Hybrid, Controls & Risk in Higher Education | 1 | +| IT Auditor & Senior IT Auditor - Fortune 200 Co | 1 | +| IT Auditor (Hybrid - 4 days/week onsite) | 1 | +| IT Auditor with SOX (Citizens only) | 1 | +| IT Security Risk Auditor | 1 | +| IT Supervisory Senior Auditor (Federal Audit) | 1 | +| Job Posting Senior IT Auditor- Technology | 1 | +| Principal Auditor - Cyber, Risk and Analysis Technology Audit (Hybrid) | 1 | + +Methodology: entities extracted per ad ({hard_skills, tools, methods, responsibilities, seniority}), normalized, counted as DISTINCT ads per entity; report threshold ≥ 3 ads. Headline sections in skills.md/tools.md use the stricter ≥ 20 % threshold. diff --git a/references/profile.md b/references/profile.md new file mode 100644 index 0000000..5395f6b --- /dev/null +++ b/references/profile.md @@ -0,0 +1,19 @@ +# Occupation profile — IT auditor + +- **ESCO URI:** http://data.europa.eu/esco/occupation/cdd3d773-75a4-4f35-bd1d-1ac720afcf9d +- **ESCO code:** 2511.18 +- **ISCO-08 group:** 2511 — Systems analysts + +## Description (ESCO) + +IT auditors perform audits of information systems, platforms, and operating procedures in accordance with established corporate standards for efficiency, accuracy and security. They evaluate ICT infrastructure in terms of risk to the organisation and establish controls to mitigate loss. They determine and recommend improvements in the current risk management controls and in the implementation of system changes or upgrades. + +## Definition + +nan + +## Alternative labels + +- ICT auditor +- information technology auditor +- IT Quality Appraiser diff --git a/references/skills.md b/references/skills.md new file mode 100644 index 0000000..60f0cee --- /dev/null +++ b/references/skills.md @@ -0,0 +1,66 @@ +# Competences — IT auditor + +Source: ESCO v1.2.1 occupation-skill relations (http://data.europa.eu/esco/occupation/cdd3d773-75a4-4f35-bd1d-1ac720afcf9d). + +## Essential + +- **analyse ICT system** (skill/competence) +- **audit techniques** (knowledge) +- **develop audit plan** (skill/competence) +- **engineering processes** (knowledge) +- **ensure adherence to organisational ICT standards** (skill/competence) +- **execute ICT audits** (skill/competence) +- **ICT process quality models** (knowledge) +- **ICT quality policy** (knowledge) +- **ICT security legislation** (knowledge) +- **ICT security standards** (knowledge) +- **improve business processes** (skill/competence) +- **legal requirements of ICT products** (knowledge) +- **organisational resilience** (knowledge) +- **perform ICT security testing** (skill/competence) +- **perform quality audits** (skill/competence) +- **prepare financial auditing reports** (skill/competence) +- **product life-cycle** (knowledge) +- **quality standards** (knowledge) +- **systems development life-cycle** (knowledge) + +## Optional + +- apply information security policies (skill/competence) +- cloud technologies (knowledge) +- communicate analytical insights (skill/competence) +- cyber security (knowledge) +- define organisational standards (skill/competence) +- develop documentation in accordance with legal requirements (skill/competence) +- develop ICT workflow (skill/competence) +- ICT accessibility standards (knowledge) +- ICT network security risks (knowledge) +- ICT project management (knowledge) +- identify ICT security risks (skill/competence) +- identify legal requirements (skill/competence) +- inform on workplace safety standards (skill/competence) +- information security strategy (knowledge) +- manage IT security compliances (skill/competence) +- monitor technology trends (skill/competence) +- protect personal data and privacy (skill/competence) +- World Wide Web Consortium standards (knowledge) + + + +## Market evidence (job-ad analysis, 41 ads, as of 2026-07-14) + +Share of analyzed job ads mentioning the item (threshold ≥ 20 %). Source: JSearch/Adzuna APIs. + +### Hard skills + +- risk assessment — **44 %** +- data analysis — **32 %** +- it auditing — **29 %** +- it audit — **24 %** + +### Responsibilities + +- audit execution — **22 %** +- audit planning — **20 %** + + diff --git a/references/tasks.md b/references/tasks.md new file mode 100644 index 0000000..ea2bc60 --- /dev/null +++ b/references/tasks.md @@ -0,0 +1,48 @@ +# Tasks & work activities — IT auditor + +Source: O*NET 30.3, occupation 15-1299.09 (Information Technology Project Managers) — manual nearest-occupation mapping via ISCO group 2511; the official ESCO crosswalk has no entry for this ESCO occupation. + +## Task statements + +- **[Core]** Perform risk assessments to develop response strategies. +- **[Core]** Submit project deliverables, ensuring adherence to quality standards. +- **[Core]** Monitor the performance of project team members, providing and documenting performance feedback. +- **[Core]** Confer with project personnel to identify and resolve problems. +- **[Core]** Assess current or future customer needs and priorities by communicating directly with customers, conducting surveys, or other methods. +- **[Core]** Schedule and facilitate meetings related to information technology projects. +- **[Core]** Monitor or track project milestones and deliverables. +- **[Core]** Negotiate with project stakeholders or suppliers to obtain resources or materials. +- **[Core]** Initiate, review, or approve modifications to project plans. +- **[Core]** Identify, review, or select vendors or consultants to meet project needs. +- **[Core]** Establish and execute a project communication plan. +- **[Core]** Identify need for initial or supplemental project resources. +- **[Core]** Direct or coordinate activities of project personnel. +- **[Core]** Develop implementation plans that include analyses such as cost-benefit or return on investment (ROI). +- **[Core]** Coordinate recruitment or selection of project personnel. +- **[Core]** Develop and manage annual budgets for information technology projects. +- **[Core]** Assign duties, responsibilities, and spans of authority to project personnel. +- **[Core]** Prepare project status reports by collecting, analyzing, and summarizing information and trends. +- **[Core]** Manage project execution to ensure adherence to budget, schedule, and scope. +- **[Core]** Develop or update project plans for information technology projects including information such as project objectives, technologies, systems, information specifications, schedules, funding, and staffing. +- **[Core]** Develop and manage work breakdown structure (WBS) of information technology projects. + +## Detailed work activities + +- Analyze data to identify trends or relationships among variables. +- Analyze security of systems, network, or data. +- Assign duties or work schedules to employees. +- Collaborate with others to resolve information technology issues. +- Collect data about customer needs. +- Coordinate resource procurement activities. +- Develop detailed project plans. +- Develop guidelines for system implementation. +- Develop information communication procedures. +- Evaluate utility of software or hardware technologies. +- Identify information technology project resource requirements. +- Inspect products or operations to ensure that standards are met. +- Manage budgets for appropriate resource allocation. +- Manage information technology projects or system activities. +- Monitor financial information. +- Participate in staffing decisions. +- Prepare analytical reports. +- Supervise information technology personnel. diff --git a/references/tools.md b/references/tools.md new file mode 100644 index 0000000..80ba91a --- /dev/null +++ b/references/tools.md @@ -0,0 +1,340 @@ +# Tools & technology — IT auditor + +Source: O*NET 30.3, occupation 15-1299.09 (Information Technology Project Managers) — manual nearest-occupation mapping via ISCO group 2511; the official ESCO crosswalk has no entry for this ESCO occupation. + +| Software | Category | Hot technology | +|---|---|---| +| Adobe Acrobat | Document management software | yes | +| Adobe Creative Cloud software | Graphics or photo imaging software | yes | +| Adobe Illustrator | Graphics or photo imaging software | yes | +| Adobe InDesign | Desktop publishing software | yes | +| Adobe Photoshop | Graphics or photo imaging software | yes | +| AJAX | Web platform development software | yes | +| Amazon DynamoDB | Data base management system software | yes | +| Amazon Elastic Compute Cloud EC2 | Data base user interface and query software | yes | +| Amazon Redshift | Data base user interface and query software | yes | +| Amazon Web Services AWS software | Data base user interface and query software | yes | +| Ansible software | Expert system software | yes | +| Apache Cassandra | Data base management system software | yes | +| Apache Hadoop | Data base management system software | yes | +| Apache Hive | Data base management system software | yes | +| Apache Kafka | Development environment software | yes | +| Apache Maven | Development environment software | yes | +| Apache Spark | Business intelligence and data analysis software | yes | +| Apache Subversion SVN | File versioning software | yes | +| Apache Tomcat | Web platform development software | yes | +| Apple macOS | Operating system software | yes | +| Atlassian Confluence | Project management software | yes | +| Atlassian JIRA | Project management software | yes | +| Autodesk AutoCAD | Computer aided design CAD software | yes | +| Autodesk Revit | Computer aided design CAD software | yes | +| Bash | Operating system software | yes | +| C | Development environment software | yes | +| C# | Object or component oriented development software | yes | +| C++ | Object or component oriented development software | yes | +| Cascading style sheets CSS | Web platform development software | yes | +| Chef | Configuration management software | yes | +| Cisco Webex | Video conferencing software | yes | +| Django | Web platform development software | yes | +| Docker | Application server software | yes | +| Eclipse IDE | Development environment software | yes | +| Elasticsearch | Data base management system software | yes | +| Epic Systems | Medical software | yes | +| ESRI ArcGIS software | Geographic information system | yes | +| Extensible markup language XML | Enterprise application integration software | yes | +| Facebook | Web page creation and editing software | yes | +| Git | File versioning software | yes | +| GitHub | Application server software | yes | +| Go | Development environment software | yes | +| Google Analytics | Data mining software | yes | +| Google Angular | Web platform development software | yes | +| Google Docs | Word processing software | yes | +| Hibernate ORM | Object oriented data base management software | yes | +| Hypertext markup language HTML | Web platform development software | yes | +| IBM DB2 | Data base user interface and query software | yes | +| IBM SPSS Statistics | Analytical or scientific software | yes | +| IBM WebSphere MQ | Cloud-based management software | yes | +| JavaScript | Web platform development software | yes | +| JavaScript Object Notation JSON | Web platform development software | yes | +| jQuery | Object or component oriented development software | yes | +| JUnit | Program testing software | yes | +| Linux | Operating system software | yes | +| Marketo Marketing Automation | Sales and marketing software | yes | +| Microsoft .NET Framework | Development environment software | yes | +| Microsoft Access | Data base user interface and query software | yes | +| Microsoft Active Server Pages ASP | Web platform development software | yes | +| Microsoft ASP.NET | Web platform development software | yes | +| Microsoft Azure software | Development environment software | yes | +| Microsoft Excel | Spreadsheet software | yes | +| Microsoft Office software | Office suite software | yes | +| Microsoft Outlook | Electronic mail software | yes | +| Microsoft PowerPoint | Presentation software | yes | +| Microsoft PowerShell | Development environment software | yes | +| Microsoft Project | Project management software | yes | +| Microsoft SharePoint | Document management software | yes | +| Microsoft SQL Server | Data base user interface and query software | yes | +| Microsoft SQL Server Integration Services SSIS | Enterprise application integration software | yes | +| Microsoft SQL Server Reporting Services SSRS | Data base reporting software | yes | +| Microsoft Team Foundation Server | Development environment software | yes | +| Microsoft Teams | Project management software | yes | +| Microsoft Visio | Process mapping and design software | yes | +| Microsoft Visual Basic | Development environment software | yes | +| Microsoft Visual Basic for Applications VBA | Development environment software | yes | +| Microsoft Visual Studio | Development environment software | yes | +| Microsoft Windows | Operating system software | yes | +| Microsoft Windows Server | Operating system software | yes | +| Microsoft Word | Word processing software | yes | +| MongoDB | Data base management system software | yes | +| MySQL | Data base management system software | yes | +| Node.js | Web platform development software | yes | +| NoSQL | Data base management system software | yes | +| Oracle Database | Data base user interface and query software | yes | +| Oracle Java | Object or component oriented development software | yes | +| Oracle Java 2 Platform Enterprise Edition J2EE | Development environment software | yes | +| Oracle PeopleSoft | Enterprise resource planning ERP software | yes | +| Oracle PL/SQL | Data base management system software | yes | +| Oracle Primavera Enterprise Project Portfolio Management | Project management software | yes | +| Perl | Object or component oriented development software | yes | +| PHP | Web platform development software | yes | +| PostgreSQL | Object oriented data base management software | yes | +| Puppet | Configuration management software | yes | +| Python | Object or component oriented development software | yes | +| R | Object or component oriented development software | yes | +| React | Web platform development software | yes | +| Red Hat Enterprise Linux | Operating system software | yes | +| Red Hat OpenShift | Application server software | yes | +| Ruby | Development environment software | yes | +| Salesforce software | Customer relationship management CRM software | yes | +| SAP ERP | Enterprise resource planning ERP software | yes | +| SAP software | Enterprise resource planning ERP software | yes | +| SAS | Analytical or scientific software | yes | +| Scala | Object or component oriented development software | yes | +| Selenium | Program testing software | yes | +| ServiceNow | Data base user interface and query software | yes | +| Shell script | Operating system software | yes | +| Slack | Cloud-based data access and sharing software | yes | +| Splunk Enterprise | Cloud-based management software | yes | +| Spring Boot | Application server software | yes | +| Spring Framework | Web platform development software | yes | +| Structured query language SQL | Data base user interface and query software | yes | +| Swift | Object or component oriented development software | yes | +| Tableau | Business intelligence and data analysis software | yes | +| Teradata Database | Data base management system software | yes | +| The MathWorks MATLAB | Analytical or scientific software | yes | +| Transact-SQL | Data base user interface and query software | yes | +| Trimble SketchUp Pro | Graphics or photo imaging software | yes | +| UNIX | Operating system software | yes | +| UNIX Shell | Operating system software | yes | +| 24SevenOffice Project | Project management software | | +| 3M Post-it App | Word processing software | | +| Actano Rplan | Project management software | | +| Adobe ActionScript | Development environment software | | +| Adobe Dreamweaver | Web page creation and editing software | | +| Advanced business application programming ABAP | Object or component oriented development software | | +| AEC Software FastTrack Schedule | Project management software | | +| Airtable | Data base user interface and query software | | +| Amazon Kinesis | Data base management system software | | +| AMS REALTIME Projects | Project management software | | +| AnthillPro | Development environment software | | +| Apache Ant | Development environment software | | +| Apache Continuum | Development environment software | | +| Apache Groovy | Object or component oriented development software | | +| Apache Gump | Development environment software | | +| Apache HTTP Server | Portal server software | | +| Apache Pig | Data base management system software | | +| Apache Solr | Data base management system software | | +| Apache Struts | Web platform development software | | +| Apple Final Cut Pro | Video creation and editing software | | +| Ascensio Systems TeamLab | Project management software | | +| Assembla | Project management software | | +| Atlassian Bamboo | Enterprise application integration software | | +| AtTask | Project management software | | +| Automation Centre TrackerSuite.Net | Project management software | | +| Backbone.js | Web platform development software | | +| Basecamp | Project management software | | +| Blackbaud The Raiser's Edge | Customer relationship management CRM software | | +| Blackboard software | Computer based training software | | +| BrightWork pmPoint | Project management software | | +| CA Technologies CA Clarity PPM for IT Governance | Project management software | | +| Canonical Launchpad | Data base user interface and query software | | +| Central Desktop | Project management software | | +| Cisco IOS | Operating system software | | +| Citrix cloud computing software | Access software | | +| Clarity Systems IBM Clarity | Enterprise resource planning ERP software | | +| Clarizen | Project management software | | +| Code hosting software | Application server software | | +| Collaborative application lifecycle management ALM software | Enterprise resource planning ERP software | | +| Common business oriented language COBOL | Development environment software | | +| Continuous integration software | File versioning software | | +| Countersoft Gemini | Project management software | | +| CruiseControl | Development environment software | | +| CS Odessa ConceptDraw Project | Project management software | | +| Customer information control system CICS | Transaction server software | | +| Daptiv PPM | Data base user interface and query software | | +| Dassault Systemes CATIA | Computer aided design CAD software | | +| Delphi Technology | Financial analysis software | | +| Digital Crew Teamwork Project Manager | Project management software | | +| Disarea 5pm | Project management software | | +| Document management system software | Document management software | | +| dotProject | Project management software | | +| Drupal | Web platform development software | | +| Dynamic hypertext markup language DHTML | Web platform development software | | +| easyCIS | Development environment software | | +| Edgewell Trac | Data base user interface and query software | | +| Edulastic | Computer based training software | | +| ElectricCloud ElectricCommander | Development environment software | | +| Element Software Copper | Project management software | | +| Endeavour Agile ALM | Project management software | | +| Enterprise JavaBeans | Web platform development software | | +| Experience in Software Project KickStart | Project management software | | +| Ext JS | Web platform development software | | +| Extensible hypertext markup language XHTML | Web platform development software | | +| Feng Office Collaboration Platform | Data base user interface and query software | | +| FileMaker Pro | Data base user interface and query software | | +| FinalBuilder | Development environment software | | +| Fog Creek Software FogBugz | Development environment software | | +| Forum One Communications ProjectSpaces | Project management software | | +| GanttProject | Project management software | | +| Geographic information system GIS software | Geographic information system | | +| Glasscubes | Cloud-based data access and sharing software | | +| Google Ads | Sales and marketing software | | +| Google Drive | Cloud-based data access and sharing software | | +| Google Meet | Video conferencing software | | +| Healthcare common procedure coding system HCPCS | Medical software | | +| Hewlett Packard HP Project Portfolio Management Solution | Data base user interface and query software | | +| Hewlett Packard HP-UX | Operating system software | | +| Hewlett Packard LoadRunner | Program testing software | | +| Human resource management software HRMS | Human resources software | | +| HyperOffice Collaboration Suite | Project management software | | +| IBM Cognos Impromptu | Business intelligence and data analysis software | | +| IBM Domino | Communications server software | | +| IBM InfoSphere DataStage | Enterprise application integration software | | +| IBM Notes | Electronic mail software | | +| IBM Power Systems software | Enterprise system management software | | +| IBM Rational Build Forge | Development environment software | | +| IBM Software Configuration and Library Manager SCLM | Configuration management software | | +| IBM WebSphere | Cloud-based management software | | +| i-lign | Project management software | | +| InLoox | Project management software | | +| Integrated development environment IDE software | Development environment software | | +| Intellisys Project Desktop | Project management software | | +| Intland Software codeBeamer | Project management software | | +| Issue tracking system software | Data base user interface and query software | | +| JamBoard | Graphics or photo imaging software | | +| JetBrains Team City | Development environment software | | +| Job control language JCL | Operating system software | | +| Jupyter Notebook | Object or component oriented development software | | +| Kforge | Enterprise system management software | | +| Kidasa Milestones Professional | Project management software | | +| KOffice.org Kplato | Project management software | | +| KommandCore | Project management software | | +| KornShell | Operating system software | | +| LAMP Stack | Web platform development software | | +| LexisNexis | Information retrieval or search software | | +| LiquidPlanner | Project management software | | +| Logic Software Easy Projects.NET | Project management software | | +| LogMeIn GoToMeeting | Video conferencing software | | +| LuntBuild | Development environment software | | +| Madrigal Soft Tools Delegator | Project management software | | +| MantisBT | Data base user interface and query software | | +| MatchWare MindView | Pattern design software | | +| McAfee | Transaction security and virus protection software | | +| Microsoft ActiveX | Object or component oriented development software | | +| Microsoft ASP.NET Core MVC | Web platform development software | | +| Microsoft Dynamics | Enterprise resource planning ERP software | | +| Microsoft Dynamics GP | Enterprise resource planning ERP software | | +| Microsoft Exchange | Electronic mail software | | +| Microsoft OneNote | Word processing software | | +| Microsoft Publisher | Desktop publishing software | | +| Microsoft Visual Basic Scripting Edition VBScript | Development environment software | | +| MicroStrategy | Business intelligence and data analysis software | | +| Mind mapping software | Pattern design software | | +| MindGenius | Pattern design software | | +| Minitab | Analytical or scientific software | | +| MinuteMan Systems MinuteMan Project Management Software | Project management software | | +| MPI Micro Planner X-Pert | Pattern design software | | +| Nagios | Network monitoring software | | +| NetSuite ERP | Enterprise resource planning ERP software | | +| Ninian Huddle | Project management software | | +| NortonLifeLock cybersecurity software | Transaction security and virus protection software | | +| NovaMind Merlin Project Manager | Pattern design software | | +| O3spaces Workplace | Document management software | | +| Objective C | Object or component oriented development software | | +| Objective Decision Contactizer Pro | Data base user interface and query software | | +| OfficeWork Software TurboProject | Project management software | | +| Open Dynamics Collabtive | Project management software | | +| OpenMake Software Meister | Development environment software | | +| OpenMake Software Mojo | Development environment software | | +| Oracle Business Intelligence Enterprise Edition | Business intelligence and data analysis software | | +| Oracle E-Business Suite Financials | Financial analysis software | | +| Oracle Eloqua | Customer relationship management CRM software | | +| Oracle Fusion Applications | Enterprise resource planning ERP software | | +| Oracle Fusion Middleware | Enterprise application integration software | | +| Oracle Hyperion | Enterprise resource planning ERP software | | +| Oracle JavaServer Pages JSP | Web platform development software | | +| Oracle JD Edwards EnterpriseOne | Enterprise resource planning ERP software | | +| Oracle JDBC | Data base user interface and query software | | +| Oracle PeopleSoft Financials | Enterprise resource planning ERP software | | +| Oracle Primavera P6 Professional Project Management | Project management software | | +| Oracle Solaris | Operating system software | | +| Oracle Taleo | Human resources software | | +| Oracle WebLogic Server | Application server software | | +| Palbridge Ubidesk | Project management software | | +| Perforce Helix software | Configuration management software | | +| Planbox | Project management software | | +| Planisware | Data base user interface and query software | | +| Planview Process Builder | Enterprise resource planning ERP software | | +| pm ase QuickBuild | Development environment software | | +| Project Manager Online ProjectManager.com | Project management software | | +| Project portfolio management PPM software | Enterprise resource planning ERP software | | +| Project.net | Enterprise resource planning ERP software | | +| ProjectLibre | Project management software | | +| Project-Open | Project management software | | +| Projecturf | Project management software | | +| Qlik Tech QlikView | Business intelligence and data analysis software | | +| QSM SLIM Suite | Data base user interface and query software | | +| Quest Erwin Data Modeler | Metadata management software | | +| QuickBase business management software | Data base user interface and query software | | +| Red Hat WildFly | Application server software | | +| Redmine | Project management software | | +| Relational database management software | Data base management system software | | +| Resource management software | Mobile location based services software | | +| Ruby on Rails | Web platform development software | | +| Salesforce Visualforce | Graphical user interface development software | | +| SAP Business Objects | Enterprise resource planning ERP software | | +| SAP Crystal Reports | Data base reporting software | | +| Scheduling software | Calendar and scheduling software | | +| Sciforma | Project management software | | +| Screencast-O-Matic | Video creation and editing software | | +| SharedPlan Software SharedPlan Pro | Project management software | | +| Siemens Teamcenter | Project management software | | +| Skype | Desktop communications software | | +| SmartBear Software Automated Build Studio | Development environment software | | +| Smartsheet | Project management software | | +| Standpipe Studios Vertabase | Project management software | | +| StataCorp Stata | Analytical or scientific software | | +| Stylite eGroupWare | Project management software | | +| Supervisory control and data acquisition SCADA software | Industrial control software | | +| TaskJuggler | Project management software | | +| Tax software | Accounting software | | +| TeamDynamixHE | Project management software | | +| Tenrox Project Workforce Management | Project management software | | +| The Omni Group OmniPlan | Project management software | | +| ThoughtWorks Studio Mingle | Project management software | | +| Tigris Cabie | Development environment software | | +| Ubuntu | Operating system software | | +| Unawave | Project management software | | +| Unified modeling language UML | Requirements analysis and system architecture software | | +| Veritas NetBackup | Backup or archival software | | +| Version control software | File versioning software | | +| Virtual private networking VPN software | Network security or virtual private network VPN management software | | +| Vitria M3O Operational Intelligence | Enterprise resource planning ERP software | | +| VMware | Clustering software | | +| Voice over internet protocol VoIP system software | Internet protocol IP multimedia subsystem software | | +| VSCOnline VPMi | Project management software | | +| WBS Goplan | Project management software | | +| web2project | Project management software | | +| Wireshark | Network monitoring software | | +| Wrike | Cloud-based data access and sharing software | | +| Xplanner | Data base user interface and query software | | +| Zoho Projects | Project management software | |