Competency:
Design technical specification based on an organization’s security requirements.
Identify threats and vulnerabilities applicable to business systems and assets.