Skip to content. | Skip to navigation

Personal tools

Reference and guide to SFIA version 8. Framework status: Change requests.

Skills

This section contains details of all SFIA skills, organised into categories and subcategories.

Categories and subcategories

The skills in SFIA are grouped into categories and subcategories for the convenience of users.

It is not proposed that these equate to jobs or areas of personal responsibility. The grouping is intended to assist people who are incorporating SFIA skills in role profiles or job descriptions, or who are building an organisation's IT competency framework.

Skills

Each SFIA skill is presented consistently, with a brief overview description of the skill, followed by what it means to practice the skill at each relevant level of responsibility.

Structure of the SFIA professional skills

Skills are constructed with the following reference details:

Skill name:

 

The name used for reference purposes

Skill code:

 

A unique code used as a short reference for the skill

Skill description:

 

A broad definition of the skill, without any reference to the levels at which it might be practiced

Level description:

 

Definitions of the skill for each of the levels at which it is practised.  The phrasing facilitates their use as professional competencies.

Example of a skill structure – illustrated by Digital forensics

Skill name:

 

Digital forensics

Skill code:

 

DGFS

Skill description:

 

The collection, processing, preserving, analysis, and presentation of forensic evidence based on the totality of findings including computer-related evidence in support of security vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigations.

Level description:

 

Level 6: Sets policies and standards and guidelines for how the organisation conducts digital forensic investigations. Leads and manages complex investigations engaging additional specialists if required. Authorises the release of formal forensics reports.

Level 5: Conducts investigations to correctly gather, analyse and present the totality of findings including digital evidence to both business and legal audiences. Collates conclusions and recommendations and presents forensics findings to stakeholders. Contributes to the development of policies, standards and guidelines.

Level 4: Contributes to digital forensic investigations. Processes and analyses evidence in line with policy, standards and guidelines and supports production of forensics findings and reports.