Sharing Notice: White Alignment Guide for the Saudi Cybersecurity Workforce Framework «SCyWF» “SCyWF” Framework Alignment Mechanism Listing the job roles within “SCyWF” framework that exist at the organization according to the tasks assigned: • • LIST Review cybersecurity job roles in “SCyWF” framework. Determine the job roles (from “SCyWF” framework) that represent the cybersecurity jobs at the organization based on the tasks of the job roles within “SCyWF” framework and the nature of the organizations’ cybersecurity work, regardless of the structure of the cybersecurity department and units in the organization. Linking the listed job roles to the existing jobs at the organization: • LINK • Examine the organization’s job titles that relate to cybersecurity tasks and link them to the corresponding job roles within “SCyWF” framework. Update the job titles at the organization according to the corresponding job roles within “SCyWF” framework based on the tasks related to the job. Handling special cases, including: • • HANDLE 6 • When a proper justification exists, two or more job roles within “SCyWF” framework can be mapped to one job at the organization, provided that the job title reflects the tasks associated with these job roles. When a proper justification exists, a job role within “SCyWF” framework can be mapped to two or more cybersecurity jobs at the organization, provided that the job titles reflect the tasks associated with them. The jobs of the cybersecurity managers at the organization are related to different specialty areas and job roles within “SCyWF” framework (e.g., the Incident Response Manager). In these cases, the administrative position at the organization can be mapped to two job roles within “SCyWF” framework, one of them is “Cyberseurity Manager” and the other role depends on the specialty of the administrative unit associated with the cybersecurity job. Document Classification: Open

Select target paragraph3