Lesson 5.22: A skills matrix and a hiring plan
Every plan in this course ends with someone doing the work. A security leader has to know what skills the team really has, where one person is the only expert and what to hire versus grow. The US NICE Workforce Framework (NIST SP 800-181 Rev. 1) gives a shared vocabulary of work roles and competencies used by many organisations worldwide. In the lab you read Northwind's skills matrix, compare it with what the security programme needs, find single experts and missing skills, and decide who to hire and who to train.
18 min
You will learn to
- Read a skills matrix by level
- Compare coverage with programme needs
- Find single points of expertise
- Spot people ready to grow
- Decide hire versus train
Key terms
- Skills matrix
- A table of people, skills and proficiency levels.
- NICE Framework
- NIST SP 800-181 Rev. 1: a common language of cybersecurity work roles, tasks, knowledge and skills.
- Single point of expertise
- A skill only one person has at a working level.
- Build vs buy
- Growing skills internally versus hiring or contracting them.
← Blameless post-incident reviews · All lessons · Compressing and archiving files →