12
PRIORITY 4 – CAPACITY
BUILDING
This pillar cuts across all the other pillars of the Global Cybersecurity Agenda. However,
let us consider some that we feel nations should pay special attention to under this pillar.
12.1
CYBERSECURITY SKILLS AND TRAINING
Resolution 130 of the ITU Plenipotentiary Conference 2010 invites Member States to
promote the development of educational and training programmes to enhance user
56
awareness of risks in cyberspace. The Resolution also instructs the BDT Director to
continue collaboration and exchange of best practices with relevant organisations. This
could be through workshops and training sessions. This Guide supports this agenda.
12.1.1
Typical Cybersecurity Skills
To ensure secure and prosperous societies, countries require a skilled cybersecurity
workforce. The skills and training requirement addresses the sixth GCA goal, which calls
for the development of a strategy to facilitate human and institutional capacity building to
enhance knowledge across sectors. To illustrate the matter, we group cybersecurity
skills in managerial, information assurance and technical categories as follows:
Management
Cybersecurity Strategy
Legal and Regulatory
Cybersecurity business
case formulation
IT Base skills
Staff Management
skills/ Leadership skills
Personnel Security
Multi-Disciplinary skills
(technology, people etc)
Communication skills
Cyber-Criminal
Psychology
Cyber-Ethics Skills
Information Assurance
Technical
Cybersecurity
Policies, Standards
and Procedures
Risk Management
System Accreditation
Compliance Checking
Audit and Monitoring
User Rights and
Responsibilities
Incident Management
Process Design
Assurance, trust and
confidence
mechanisms
Figure 23 – Typical Cybersecurity skills
56
The ITU Telecommunication Development Bureau (BDT)
68
IT technical skills
(security management)
IT technical skills
(Security deployment)
Security Design
Principles e.g. zoning
Resilient Infrastructure
Data Protection/
System administration
Cryptographic and
Applied Crypto Skills
Data custodianship
Operational Security
Incident Management