All Source-Collection Manager

Identifies collection authorities and environment; incorporates priority information requirements into collection management; develops concepts to meet leadership’s intent. Determines capabilities of available collection assets, identifies new collection capabilities; and constructs and disseminates collection plans. Monitors execution of tasked collection to ensure effective execution of the collection plan.

Below are the Knowledge, Skills, Abilities and Tasks identified as being required to perform this work role.

Knowledge of computer networking concepts and protocols, and network security methodologies.
Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
K0003Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
K0004Knowledge of cybersecurity and privacy principles.
K0005Knowledge of cyber threats and vulnerabilities.
K0006Knowledge of specific operational impacts of cybersecurity lapses.
K0036Knowledge of human-computer interaction principles.
K0058Knowledge of network traffic analysis methods.
K0109Knowledge of physical computer components and architectures, including the functions of various components and peripherals (e.g., CPUs, Network Interface Cards, data storage).
K0177Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
K0353Knowledge of possible circumstances that would result in changing collection management authorities.
K0361Knowledge of asset availability, capabilities and limitations.
K0364Knowledge of available databases and tools necessary to assess appropriate collection tasking.
K0380Knowledge of collaborative tools and environments.
K0382Knowledge of collection capabilities and limitations.
K0383Knowledge of collection capabilities, accesses, performance specifications, and constraints utilized to satisfy collection plan.
K0386Knowledge of collection management tools.
K0387Knowledge of collection planning process and collection plan.
K0390Knowledge of collection strategies.
K0392Knowledge of common computer/network infections (virus, Trojan, etc.) and methods of infection (ports, attachments, etc.).
K0395Knowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.).
K0401Knowledge of criteria for evaluating collection products.
K0404Knowledge of current collection requirements.
K0405Knowledge of current computer-based intrusion sets.
K0412Knowledge of cyber lexicon/terminology
K0417Knowledge of data communications terminology (e.g., networking protocols, Ethernet, IP, encryption, optical devices, removable media).
K0419Knowledge of database administration and maintenance.
K0425Knowledge of different organization objectives at all levels, including subordinate, lateral and higher.
K0427Knowledge of encryption algorithms and cyber capabilities/tools (e.g., SSL, PGP).
K0431Knowledge of evolving/emerging communications technologies.
K0435Knowledge of fundamental cyber concepts, principles, limitations, and effects.
K0440Knowledge of host-based security products and how those products affect exploitation and reduce vulnerability.
K0444Knowledge of how Internet applications work (SMTP email, web-based email, chat clients, VOIP).
K0445Knowledge of how modern digital and telephony networks impact cyber operations.
K0446Knowledge of how modern wireless communications systems impact cyber operations.
K0448Knowledge of how to establish priorities for resources.
K0449Knowledge of how to extract, analyze, and use metadata.
K0453Knowledge of indications and warning.
K0454Knowledge of information needs.
K0467Knowledge of internal and external partner organization capabilities and limitations (those with tasking, collection, processing, exploitation and dissemination responsibilities).
K0471Knowledge of Internet network addressing (IP addresses, classless inter-domain routing, TCP/UDP port numbering).
K0474Knowledge of key cyber threat actors and their equities.
K0475Knowledge of key factors of the operational environment and threat.
K0477Knowledge of leadership’s Intent and objectives.
K0480Knowledge of malware.
K0482Knowledge of methods for ascertaining collection asset posture and availability.
K0492Knowledge of non-traditional collection methodologies.
K0495Knowledge of ongoing and future operations.
K0496Knowledge of operational asset constraints.
K0498Knowledge of operational planning processes.
K0503Knowledge of organization formats of resource and asset readiness reporting, its operational relevance and intelligence collection impact.
K0505Knowledge of organization objectives and associated demand on collection management.
K0513Knowledge of organizational priorities, legal authorities and requirements submission processes.
K0516Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.
K0521Knowledge of priority information, how it is derived, where it is published, how to access, etc.
K0522Knowledge of production exploitation and dissemination needs and architectures.
K0526Knowledge of research strategies and knowledge management.
K0527Knowledge of risk management and mitigation strategies.
K0552Knowledge of tasking mechanisms.
K0553Knowledge of tasking processes for organic and subordinate collection assets.
K0554Knowledge of tasking, collection, processing, exploitation and dissemination.
K0558Knowledge of the available tools and applications associated with collection requirements and collection management.
K0560Knowledge of the basic structure, architecture, and design of modern communication networks.
K0561Knowledge of the basics of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).
K0562Knowledge of the capabilities and limitations of new and emerging collection capabilities, accesses and/or processes.
K0563Knowledge of the capabilities, limitations and tasking methodologies of internal and external collections as they apply to planned cyber activities.
K0565Knowledge of the common networking and routing protocols (e.g. TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications.
K0569Knowledge of the existent tasking, collection, processing, exploitation and dissemination architecture.
K0570Knowledge of the factors of threat that could impact collection operations.
K0579Knowledge of the organization, roles and responsibilities of higher, lower and adjacent sub-elements.
K0580Knowledge of the organization??s established format for collection plan.
K0581Knowledge of the organization??s planning, operations and targeting cycles.
K0583Knowledge of the organizational plans/directives/guidance that describe objectives.
K0584Knowledge of the organizational policies/procedures for temporary transfer of collection authority.
K0587Knowledge of the POC??s, databases, tools and applications necessary to establish environment preparation and surveillance products.
K0588Knowledge of the priority information requirements from subordinate, lateral and higher levels of the organization.
K0596Knowledge of the request for information process.
K0601Knowledge of the systems/architecture/communications used for coordination.
K0605Knowledge of tipping, cueing, mixing, and redundancy.
K0610Knowledge of virtualization products (VMware, Virtual PC).
K0612Knowledge of what constitutes a ??threat?? to a network.
K0613Knowledge of who the organization??s operational planners are, how and where they can be contacted, and what are their expectations.
S0238Skill in information prioritization as it relates to operations.
S0304Skill to access information on current assets available, usage.
S0305Skill to access the databases where plans/directives/guidance are maintained.
S0311Skill to apply the capabilities, limitations and tasking methodologies of available platforms, sensors, architectures and apparatus as they apply to organization objectives.
S0313Skill to articulate a needs statement/requirement and integrate new and emerging collection capabilities, accesses and/or processes into collection operations.
S0316Skill to associate Intelligence gaps to priority information requirements and observables.
S0317Skill to compare indicators/observables with requirements.
S0324Skill to determine feasibility of collection.
S0325Skill to develop a collection plan that clearly shows the discipline that can be used to collect the information needed.
S0327Skill to ensure that the collection strategy leverages all available resources.
S0328Skill to evaluate factors of the operational environment to objectives, and information requirements.
S0330Skill to evaluate the capabilities, limitations and tasking methodologies of organic, theater, national, coalition and other collection capabilities.
S0332Skill to extract information from available tools and applications associated with collection requirements and collection operations management.
S0334Skill to identify and apply tasking, collection, processing, exploitation and dissemination to associated collection disciplines.
S0335Skill to identify Intelligence gaps.
S0336Skill to identify when priority information requirements are satisfied.
S0339Skill to interpret readiness reporting, its operational relevance and intelligence collection impact.
S0342Skill to optimize collection system performance through repeated adjustment, testing, and re-adjustment.
S0344Skill to prepare and deliver reports, presentations and briefings, to include using visual aids or presentation technology.
S0347Skill to review performance specifications and historical information about collection assets.
S0351Skill to translate the capabilities, limitations and tasking methodologies of organic, theater, national, coalition and other collection capabilities.
S0352Skill to use collaborative tools and environments for collection operations.
S0362Skill to analyze and assess internal and external partner organization capabilities and limitations (those with tasking, collection, processing, exploitation and dissemination responsibilities).
A0069Ability to apply collaborative skills and strategies.
A0070Ability to apply critical reading/thinking skills.
A0076Ability to coordinate and collaborate with analysts regarding surveillance requirements and essential information development.
A0078Ability to coordinate, collaborate and disseminate information to subordinate, lateral and higher-level organizations.
A0079Ability to correctly employ each organization or element into the collection plan and matrix.
T0562Adjust collection operations or collection plan to address identified issues/challenges and to synchronize collections with overall operational requirements.
T0564Analyze feedback to determine extent to which collection products and services are meeting requirements.
T0568Analyze plans, directives, guidance and policy for factors that would influence collection management’s operational structure and requirement s (e.g., duration, scope, communication requirements, interagency/international agreements).
T0573Assess and apply operational environment factors and risks to collection management process.
T0578Assess performance of collection assets against prescribed specifications.
T0604Compare allocated and available assets to collection demand as expressed through requirements.
T0605Compile lessons learned from collection management activity’s execution of organization collection objectives.
T0625Consider efficiency and effectiveness of collection assets and resources if/when applied against priority information requirements.
T0626Construct collection plans and matrixes using established guidance and procedures.
T0631Coordinate resource allocation of collection assets against prioritized collection requirements with collection discipline leads.
T0632Coordinate inclusion of collection plan in appropriate documentation.
T0634Re-task or re-direct collection assets and resources.
T0645Determine course of action for addressing changes to objectives, guidance, and operational environment.
T0646Determine existing collection management webpage databases, libraries and storehouses.
T0647Determine how identified factors affect the tasking, collection, processing, exploitation and dissemination architecture’s form and function.
T0649Determine organizations and/or echelons with collection authority over all accessible collection assets.
T0651Develop a method for comparing collection reports to outstanding requirements to identify information gaps.
T0657Develop coordinating instructions by collection discipline for each phase of an operation.
T0662Allocate collection assets based on leadership’s guidance, priorities, and/or operational emphasis.
T0674Disseminate tasking messages and collection plans.
T0681Establish alternative processing, exploitation and dissemination pathways to address identified issues or problems.
T0683Establish processing, exploitation and dissemination management activity using approved guidance and/or procedures.
T0698Facilitate continuously updated intelligence, surveillance, and visualization input to common operational picture managers.
T0702Formulate collection strategies based on knowledge of available intelligence discipline capabilities and gathering methods that align multi-discipline collection capabilities and accesses with targets and their observables.
T0714Identify collaboration forums that can serve as mechanisms for coordinating processes, functions, and outputs with specified organizations and functional groups.
T0716Identify coordination requirements and procedures with designated collection authorities.
T0721Identify issues or problems that can disrupt and/or degrade processing, exploitation and dissemination architecture effectiveness.
T0723Identify potential collection disciplines for application against priority information requirements.
T0725Identify and mitigate risks to collection management ability to support the plan, operations and target cycle.
T0734Issue requests for information.
T0737Link priority collection requirements to optimal assets and resources.
T0750Monitor completion of reallocated collection efforts.
T0753Monitor operational status and effectiveness of the processing, exploitation and dissemination architecture.
T0755Monitor the operational environment for potential factors and risks to the collection operation management process.
T0757Optimize mix of collection assets and resources to increase effectiveness and efficiency against essential information associated with priority intelligence requirements.
T0773Prioritize collection requirements for collection platforms based on platform capabilities.
T0779Provide advice/assistance to operations and intelligence decision makers with reassignment of collection assets and resources in response to dynamic operational situations.
T0806Request discipline-specific processing, exploitation, and disseminate information collected using discipline’s collection assets and resources in accordance with approved guidance and/or procedures.
T0809Review capabilities of allocated collection assets.
T0810Review intelligence collection guidance for accuracy/applicability.
T0811Review list of prioritized collection requirements and essential information.
T0812Review and update overarching collection plan, as required.
T0814Revise collection matrix based on availability of optimal assets and resources.
T0820Specify changes to collection plan and/or operational environment that necessitate re-tasking or re-directing of collection assets and resources.
T0821Specify discipline-specific collections and/or taskings that must be executed in the near term.
T0827Synchronize the integrated employment of all available organic and partner intelligence collection assets using available collaboration capabilities and techniques.