UK NCSC Cyber Assessment Framework C1.e: C1.e Personnel skills for monitoring and detection

Monitoring and detection staff, including outsourced ones, have the skills, roles and system knowledge that governance, threats and data complexity require. Partially achieved: some investigative skill and data understanding, reporting to other parts of the organisation, ability to follow most workflows, some awareness of systems and essential functions, and manageable workloads. Achieved: staff responsible for proactive and reactive analysis and reporting, defined roles covering the whole process, adherence to all internal and external reporting requirements, freedom to investigate non-standard threats, awareness of systems and assets to prioritise, shaping new log collection, following all workflows and improving the process.