SkillScorer ships with 5 Cybersecurity disciplines and 50 individual skills out of the box. Choose a discipline to see every skill, its description and the levels that come with it — each one fully editable, renameable or removable, and you can add your own to match how your organisation actually works.
10 skills
Security operations analysts detect and respond to attacks as they happen. This scorecard covers monitoring, triage, investigation, containment and communication so security teams can benchmark analysts and improve response times.
- Alert Triage and Prioritisation
- Log Analysis and Threat Hunting
- Incident Investigation and Root Cause Analysis
- Containment, Eradication and Recovery
- Use of SIEM and EDR Tools
- Threat Intelligence Application
- Incident Documentation and Reporting
- Communication During Major Incidents
- + 2 more
See all Security Operations & Incident Response skills → 10 skills
Penetration testers find weaknesses before criminals do. This scorecard covers scoping, technical testing, exploitation, reporting and ethics for offensive security teams and consultancies.
- Scoping, Rules of Engagement and Authorisation
- Reconnaissance and Enumeration
- Web Application Testing
- Network and Infrastructure Testing
- Exploitation and Post-Exploitation Skills
- Social Engineering and Physical Testing Awareness
- Cloud and Container Security Testing
- Report Writing and Risk Rating
- + 2 more
See all Penetration Testing & Ethical Hacking skills → 10 skills
Security engineers and architects build security into systems from the start. This scorecard covers threat modelling, secure design, identity, cloud controls and automation for engineering teams.
- Threat Modelling
- Secure Architecture Patterns
- Identity and Access Management
- Cloud Security Controls
- Encryption and Key Management
- Secure Development and Code Review Support
- Security Automation and Infrastructure as Code
- Vulnerability and Patch Management
- + 2 more
See all Security Architecture & Engineering skills → 10 skills
GRC professionals connect security to business risk and regulatory obligations. This scorecard covers risk assessment, policy, audit, vendor risk and reporting for security and compliance teams.
- Security Risk Assessment
- Policy and Standards Development
- Audit Preparation and Evidence Collection
- Third-Party and Vendor Risk Management
- Privacy and Data Protection Awareness
- Security Awareness and Training Programs
- Risk Register and Treatment Tracking
- Regulatory and Certification Knowledge
- + 2 more
See all Governance, Risk & Compliance skills → 10 skills
Security administrators keep everyday controls working. This scorecard covers firewalls, endpoint protection, identity systems, email security and monitoring for IT and security operations.
- Firewall and Network Segmentation Management
- Endpoint Protection and Device Hardening
- Multi-Factor Authentication and Privileged Access
- Email and Phishing Defence
- Vulnerability Scanning and Patch Coordination
- Logging, Monitoring and Alert Tuning
- Backup and Ransomware Resilience
- Mobile and Remote Work Security
- + 2 more
See all Identity, Network & Endpoint Security skills →