State-Level Views on Professional Competencies in the Field of IoT and Cloud Information Security

Abstract

Two important areas of our lives -- Internet of Things (IoT) and Clouds -- are based on the general information and communication technologies (ICT) concepts. If so, the modern state-level requirements for the competencies of information security (IS) professionals are completely applicable to IS professionals needed for the IoT and Clouds. That is why the peculiarities of American, Australian and European approaches to the development of IS professional competencies are discussed on four best-in-the-breed examples: "The Competency and Functional Framework for IT Security Workforce Development" by the U. S. DHS/NCSD, the NICE by NIST, "The Cyber Security Capability Framework & Mapping of Information Security Manual Roles" by AGIMO and "The European e-Competence Framework" by the European Commission. Pros and cons of all approaches are marked. A short prediction on the new international standard ISO/IEC 27021 content with IS professional competencies is proposed. The discussion of all these documents' applicability to the IoT and Cloud IS professional competencies concludes the paper.