Will AI replace Cyber security professionals?

Not as a job, but it is already doing parts of the work. Across the 161 official task statements scored for Cyber security professionals (United Kingdom, SOC 2135), 55% of the importance-weighted core work is made of tasks today's AI could already do most of. The overall exposure score is 59 out of 100 (range 53–65, band: partial). That is a statement about tasks, not about headcount: this measures what AI could do, not whether any employer adopts it, whether the law allows it, or whether doing the routine parts faster creates more demand for the human parts. Figures are from release 2026-q4.1.

Which tasks in “Cyber security professionals” can AI already do?

The highest-scoring tasks in release 2026-q4.1 are: “Write and execute scripts to automate tasks, such as parsing large data files” (100/100, very high); “Assist in creating cyber security awareness training for colleagues” (93/100, very high); “Write reports in the context of the cyber security role” (93/100, very high). Each score comes from five published 0–4 ratings turned into a number by a published formula, and each carries the model's one-sentence reason on the page.

Which tasks in “Cyber security professionals” stay human?

About 19% of this job's task weight sits in work that scores low for AI exposure. The lowest-scoring tasks in release 2026-q4.1 are: “Collect evidence from crime scenes” (0/100, minimal); “Undergo security checks and vetting procedures” (2/100, minimal); “Justify findings under cross-examination in courts of law” (2/100, minimal). Low scores usually mean the task needs a body in a room, a legally accountable human, or trust built in real time. Those are the three things the scoring rubric treats as gates rather than obstacles.

What should someone working in “Cyber security professionals” do about AI?

Start from the ledger rather than the headline: 55% of this job's weighted core work is exposed, and roughly 19% is not. The practical move is to spend more of your week on the tasks that score low, the ones above, and to get fluent at directing AI through the tasks that score high, because those are the parts that change whether or not you are ready for them. This page does not predict your job, and nothing here is career advice tailored to you: the score describes the occupation, not the person.

How is the AI exposure score for Cyber security professionals calculated?

Each official task statement for the occupation is rated on five published 0–4 dimensions (output replicability, physical embodiment, licensed accountability, real-time human trust, and data availability) by claude-opus-5 using scoring prompt task_scoring_v1.0. The model never writes the score; a published formula turns the five ratings into a 0–100 number, so every score can be recomputed by hand. The occupation figure is the importance-weighted mean across 161 scored tasks. The prompt, the rubric, the formula and the full dataset are published at https://futureproof.collab365.com/method and https://futureproof.collab365.com/data/2026-q4.1 under CC BY 4.0.

UK dataswitch to US

Cyber security professionals

carrying out a security risk assessment on a basic IT system to identify threats and offer recommendations, producing threat assessment reports to evaluate potential risks and develop computer information resources for data security and control. If that's your week, this page is about your job.

The honest answer

Most tasks in this job are the kind AI has learned to do: drafting cyber defence recommendations based on research. The tasks, though, are not you.

Your move: three real directions from here ↓

Where the work sits, by task weight

shifting to AI: 55%
changing shape: 26%
staying human: 19%

These bars are tasks changing hands, not people being counted out. The ledger below shows which.

Whole-job exposure score 59 out of 100 (53–65 allowing for uncertainty): partial exposure, across 161 scored tasks. The number is the support for the sentence above it, not a headline about anyone’s future.

How we know this

What is measured: Every published task statement for cyber security professionals is rated on five dimensions: can a model produce the output, does the work need a body in a room, does it need a legally accountable person, does it depend on a person being trusted in the moment, and how much data exists. A published formula turns those five ratings into the score; the model never writes the number.

How the bar is built: Each task’s share of the bar is its published importance weight, so a task you do all day counts for more than one you do twice a year.

Release: 2026-q4.1, scores computed 2026-08-04. Read the full method.

It would be a lie to soften that; participating in cyber war gaming and simulations to understand cyber-attack and defence is what this work rebuilds around. The routes below start from it.

Your week, as this page understands it

Cyber security professionals design, implement, test and maintain cyber security systems and track, investigate and analyse data linked to cybercrime. The job title says “cyber security professionals”. The real job is the part underneath: participating in cyber war gaming and simulations to understand cyber-attack and defence. That is the thing someone has to be right about.

The exposed part of this job is specific, and we won’t pretend it is coming back. But cyber security professionals is not one task. It is 161 scored ones, and they are nowhere near equally exposed. The most durable of them, on this evidence, is participating in cyber war gaming and simulations to understand cyber-attack and defence, and the ledger below shows exactly why.

Where the work sits, by task weight

shifting to AI: 55%
changing shape: 26%
staying human: 19%

These bars are tasks changing hands, not people being counted out. The ledger below shows which.

How we know this

How the bar is built: Each task’s share of the bar is its published importance weight, so a task you do all day counts for more than one you do twice a year.

Release: 2026-q4.1, scores computed 2026-08-04. Read the full method.

Your job, task by task

These are the official task statements for this occupation, in plain English, sorted by what the evidence says is happening to each one. The official wording sits under every line so you can check the rewrite against it.

2 rows are marked low confidence, so treat them as a ballpark rather than a fine measurement.
50 of this occupation's scored task statements carry a score that was measured under a different occupation's context, because the statement is shared between jobs and has only been scored once so far. Each one names the occupation it was measured under in the free routes below; none is presented as a measurement for this job.
Task clusters are not derived in this release, so the task-cluster field is empty and no Collab365 Space routing is attached to this occupation yet.

Shifting to AI

85 tasks

Tasks today’s tools can already do most of. This is the part we will not soften: where these rows are the bulk of your week, the week changes.

Carrying out cyber security risk assessments
This is reading one thing and writing another: cyber security risk assessments in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/01, 2135/02, 2135/04
Source: “Carry out cyber security risk assessments.” (UK task statement)
How this row was scored
Exposure score: 66 out of 100 (62–70 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Risk assessment follows published frameworks and mostly produces a document, which software drafts to a good standard.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Carrying out a security risk assessment on a basic IT system to identify threats and offer recommendations
This is reading one thing and writing another: a security risk assessment in, a record out. That is the shape today's tools are built for.
importance 95 · 2135/01, 2135/02, 2135/04
Source: “Carry out a security risk assessment on a basic IT system to identify threats and offer recommendations.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (79–87 allowing for uncertainty): very high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Risk assessment on a straightforward system follows published frameworks closely, so software produces a usable assessment and recommendations.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Simulating security breaches to engage in ethical hacking
This is reading one thing and writing another: security breaches in, a record out. That is the shape today's tools are built for.
importance 95 · 2135/01, 2135/02, 2135/04
Source: “Simulate security breaches to engage in ethical hacking.” (UK task statement)
How this row was scored
Exposure score: 66 out of 100 (59–73 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Attack simulation is well documented and increasingly automated, so software can carry out most of a standard test.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Drafting cyber defence recommendations based on research
This is reading one thing and writing another: cyber defence recommendations in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/02, 2135/03, 2135/04
Source: “Draft cyber defence recommendations based on research.” (UK task statement)
How this row was scored
Exposure score: 93 out of 100 (86–100 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Reading research and drafting recommendations is writing work software does at least as well as most practitioners.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.

Changing shape

42 tasks

Tasks where the machine takes the producing and a person keeps the checking, the deciding, or the answering-for-it. For most jobs this is the biggest group, and it is where "transformation, not termination" is literally visible.

Coordinating responses to cyber security incidents to mitigate risks
The software now makes the first pass at responses, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 90 · 2135/01, 2135/02, 2135/04
Source: “Coordinate responses to cyber security incidents to mitigate risks.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Software helps with the steps, but coordinating people under pressure during an incident is a human job.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Developing solutions to address information security challenges
The software now makes the first pass at solutions, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 85 · 2135/01, 2135/02, 2135/04
Source: “Develop solutions to address information security challenges.” (UK task statement)
How this row was scored
Exposure score: 49 out of 100 (42–56 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Solutions can be drafted quickly, but fitting them to a particular estate takes an engineer’s judgement.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Supporting cyber security audits
The software now makes the first pass at cyber security audits, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 85 · 2135/01, 2135/02, 2135/04
Source: “Support cyber security audits.” (UK task statement)
How this row was scored
Exposure score: 56 out of 100 (49–63 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Gathering and presenting evidence for an audit is document work, though an accountable person must stand behind it.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.

Staying human

34 tasks

Tasks that stay with a person, because they happen in the physical world, because the rules need someone accountable, or because the value is that a specific person does them.

Participating in cyber war gaming and simulations to understand cyber-attack and defence
The value here is that a specific person handles cyber war and stands behind it. That is earned, not computed.
importance 90 · 2135/01, 2135/02, 2135/04
Source: “Participate in cyber war gaming and simulations to understand cyber-attack and defence.” (UK task statement)
How this row was scored
Exposure score: 30 out of 100 (23–37 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Exercises are about a team practising together, so software can prepare scenarios but not take part for you.
The five ratings: output a model can produce 2/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Preserving and maintaining digital forensic evidence for analysis
This work happens in the physical world: digital forensic evidence, in a real place. Software cannot follow it there.
importance 90 · 2135/03, 2135/04
Source: “Preserve and maintain digital forensic evidence for analysis.” (UK task statement)
How this row was scored
Exposure score: 15 out of 100 (8–22 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; work that happens in the physical world; someone qualified has to answer for it.
The rating behind it: Evidence has to be seized and imaged from physical devices in a way an accountable examiner can defend later.
The five ratings: output a model can produce 1/4 · needs a body in a room 2/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Adhering to legal policies and procedures related to handling digital media
The rules require a named, qualified person to answer for legal policies, and that person cannot be a piece of software.
importance 85 · 2135/03, 2135/04
Source: “Adhere to legal policies and procedures related to handling digital media.” (UK task statement)
How this row was scored
Exposure score: 32 out of 100 (25–39 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; someone qualified has to answer for it.
The rating behind it: Software can state the rules, but handling evidence lawfully is done by a trained, accountable person.
The five ratings: output a model can produce 2/4 · needs a body in a room 1/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.

Show the other 151 tasks

Writing and executing scripts to automate tasks
shifting to AI
This is reading one thing and writing another: scripts in, a record out. That is the shape today's tools are built for.
importance 70 · 2135/04
Source: “Write and execute scripts to automate tasks, such as parsing large data files.” (UK task statement)
How this row was scored
Exposure score: 100 out of 100 (96–100 allowing for uncertainty): very high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Writing scripts to parse data files is among the things software does fastest and most reliably.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Assisting in creating cyber security awareness training for colleagues
shifting to AI
This is reading one thing and writing another: creating cyber security awareness in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/01, 2135/02
Source: “Assist in creating cyber security awareness training for colleagues.” (UK task statement)
How this row was scored
Exposure score: 93 out of 100 (86–100 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Writing training material is exactly what text software does well, and the subject matter is widely published.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Writing reports in the context of the cyber security role
shifting to AI
This is reading one thing and writing another: reports in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/01, 2135/02, 2135/04
Source: “Write reports in the context of the cyber security role.” (UK task statement)
How this row was scored
Exposure score: 93 out of 100 (86–100 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Turning findings into a clear written report is one of the things text software does best.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Monitoring systems for intrusions or denial of service attacks
shifting to AI
This is reading one thing and writing another: systems in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/02
Source: “Monitor systems for intrusions or denial of service attacks.” (UK task statement)
How this row was scored
Exposure score: 93 out of 100 (89–97 allowing for uncertainty): very high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Watching traffic for attacks is done by detection software around the clock, far faster than a person could.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Compiling reports on project or operational status
shifting to AI
This is reading one thing and writing another: reports in, a record out. That is the shape today's tools are built for.
importance 70 · 2135/02
Source: “Compile reports on project or operational status.” (UK task statement)
How this row was scored
Exposure score: 93 out of 100 (89–97 allowing for uncertainty): very high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Status reports are written from information already in the systems, which software does well.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Designing test cases and scripts to meet the test scope coverage criteria
shifting to AI
This is reading one thing and writing another: test cases in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/04
Source: “Design test cases and scripts to meet the test scope coverage criteria.” (UK task statement)
How this row was scored
Exposure score: 93 out of 100 (86–100 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Generating test cases and scripts from written criteria is one of software's strongest capabilities.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Encrypting data transmissions to conceal confidential information during transmission
shifting to AI
This is reading one thing and writing another: data transmissions in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/01
Source: “Encrypt data transmissions to conceal confidential information during transmission.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Setting up encryption follows well-published standards, so software can produce the configuration for a typical case.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Identifying common vulnerabilities in IT networks to improve defence strategies
shifting to AI
This is reading one thing and writing another: common vulnerabilities in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/01
Source: “Identify common vulnerabilities in IT networks to improve defence strategies.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Known weaknesses are catalogued publicly and scanning is already automated, so software finds most of them.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Monitoring current reports of computer viruses to determine when to update virus protection systems
shifting to AI
This is reading one thing and writing another: current reports of computer viruses in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/01
Source: “Monitor current reports of computer viruses to determine when to update virus protection systems.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Watching threat feeds and flagging when protection needs updating is monitoring work software already does.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Documenting computer security and emergency measures policies
shifting to AI
This is reading one thing and writing another: computer security in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/01
Source: “Document computer security and emergency measures policies, procedures, and tests.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (79–87 allowing for uncertainty): very high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Security policies and procedures follow widely published templates, so software drafts them to a standard the team can work from.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Ensuring network settings and parameters adhere to established controls
shifting to AI
This is reading one thing and writing another: network settings in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/01
Source: “Ensure network settings and parameters adhere to established controls.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Comparing configuration against a written control list is checking work software does quickly and accurately.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Maintaining and updating databases of cybersecurity threats and hacker profiles
shifting to AI
This is reading one thing and writing another: databases of cybersecurity threats in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/01
Source: “Maintain and update databases of cybersecurity threats and hacker profiles.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Keeping a threat database current is data curation from published feeds, which software handles well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Modifying computer security files to incorporate new software
shifting to AI
This is reading one thing and writing another: computer security files in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/01
Source: “Modify computer security files to incorporate new software.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Editing configuration files to accommodate new software is well-documented technical work software does reliably.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Monitoring use of data files to safeguard information
shifting to AI
This is reading one thing and writing another: use of data files in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/01
Source: “Monitor use of data files to safeguard information.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Watching who opens which files is exactly the kind of monitoring already handled by automated tools.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Applying engineering principles to the software development process
shifting to AI
This is reading one thing and writing another: principles in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/01, 2135/04
Source: “Apply engineering principles to the software development process, including requirements analysis and design.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (79–87 allowing for uncertainty): very high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Requirements analysis and design are heavily documented disciplines, so tools produce strong work engineers refine.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Designing high-quality software solutions
shifting to AI
This is reading one thing and writing another: high-quality software solutions in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/01, 2135/04
Source: “Design high-quality software solutions.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (79–87 allowing for uncertainty): very high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Software design is abundantly documented, so these tools produce solid solutions that developers refine.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Investigating security alerts
shifting to AI
This is reading one thing and writing another: security alerts in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/02
Source: “Investigate security alerts.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Alert triage is high-volume, well-documented work that automated tools already handle for most cases.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Monitoring and managing user access and security
shifting to AI
This is reading one thing and writing another: user access in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/02
Source: “Monitor and manage user access and security.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Access reviews and permission changes are rule-based, well-documented tasks that tools already largely automate.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Monitoring for abuse of permissions by authorised system users
shifting to AI
This is reading one thing and writing another: abuse of permissions in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/02
Source: “Monitor for abuse of permissions by authorised system users.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Spotting unusual use of legitimate access is pattern-watching across logs, which automated tools do well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Monitoring 'phishing' emails and 'pharming' activity
shifting to AI
This is reading one thing and writing another: 'phishing' emails in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/02
Source: “Monitor 'phishing' emails and 'pharming' activity.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Detecting phishing is a well-studied pattern problem that automated filters already handle at scale.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Researching and investigating attack techniques and recommending defence strategies
shifting to AI
This is reading one thing and writing another: attack techniques in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/02, 2135/04
Source: “Research and investigate attack techniques and recommend defence strategies.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Attack techniques are extensively published, so reading them up and writing recommendations suits software well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Using advanced analytic tools to determine emerging threat patterns and vulnerabilities
shifting to AI
This is reading one thing and writing another: advanced analytic tools in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/02
Source: “Use advanced analytic tools to determine emerging threat patterns and vulnerabilities.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Finding patterns in large security datasets is precisely what analysis software is built to do.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Researching, and applying thing latest technologies relevant to the job role
shifting to AI
This is reading one thing and writing another: this work in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/02
Source: “Research and apply the latest technologies relevant to the job role.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (79–87 allowing for uncertainty): very high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Keeping up with new technology draws on abundant published material software summarises well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Keeping up to date with evolving cybercrime methods and developments within the digital forensics field
shifting to AI
This is reading one thing and writing another: to date in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/03
Source: “Keep up to date with evolving cybercrime methods and developments within the digital forensics field.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Keeping current means reading a large, well-published literature, which software summarises efficiently.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Maintaining knowledge of laws, regulations, policies or other issuances pertaining to digital forensics or information privacy
shifting to AI
This is reading one thing and writing another: knowledge of laws, regulations in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/03, 2135/04
Source: “Maintain knowledge of laws, regulations, policies or other issuances pertaining to digital forensics or information privacy.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: The laws and policies are published in full, so tracking and summarising them suits software well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Identifying reverse-engineering tools to improve system capabilities
shifting to AI
This is reading one thing and writing another: tools in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/03, 2135/04
Source: “Identify reverse-engineering tools to improve system capabilities.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Choosing from a well-documented set of tools is a look-up and comparison job software does well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Determining data collection methods for research projects or surveys
shifting to AI
This is reading one thing and writing another: data collection methods in, a record out. That is the shape today's tools are built for.
importance 60 · 2135/03
Source: “Determine data collection methods for research projects or surveys.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Choosing a data collection method follows well-published research practice, which software advises on confidently.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Implementing security protocols in system development
shifting to AI
This is reading one thing and writing another: security protocols in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/04
Source: “Implement security protocols in system development.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Building documented security protocols into code is well-covered ground where software is already strong.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Analysing web service network traffic to detect anomalies
shifting to AI
This is reading one thing and writing another: web service network traffic in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/04
Source: “Analyse web service network traffic to detect anomalies.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Spotting unusual patterns in traffic data is exactly the kind of analysis software excels at.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Planning and creating penetration methods
shifting to AI
This is reading one thing and writing another: penetration methods in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/04
Source: “Plan and create penetration methods, scripts and tests.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Test scripts and methods are heavily published, so software produces most of them, with a specialist setting scope.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Understanding complex computer systems and technical cyber security terms
shifting to AI
This is reading one thing and writing another: complex computer systems in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/04
Source: “Understand complex computer systems and technical cyber security terms.” (UK task statement)
How this row was scored
Exposure score: 83 out of 100 (76–90 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: This knowledge is extensively published, so software can explain and apply the terminology accurately.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Maintaining relevant certificates and records for registrations and accreditations
shifting to AI
This is reading one thing and writing another: relevant certificates in, a record out. That is the shape today's tools are built for.
importance 70 · 2135/03
Source: “Maintain relevant certificates and records for registrations and accreditations.” (UK task statement)
How this row was scored
Exposure score: 81 out of 100 (74–88 allowing for uncertainty): very high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Tracking certificates and renewal dates is straightforward record-keeping that software handles very well.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Preparing technical and operational reports for internal and external stakeholders
shifting to AI
This is reading one thing and writing another: technical and operational reports in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/02
Source: “Prepare technical and operational reports for internal and external stakeholders.” (UK task statement)
How this row was scored
Exposure score: 79 out of 100 (72–86 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Turning technical findings into reports for different audiences is writing work software does very well.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Communicating work results through written reports or oral presentations
shifting to AI
This is reading one thing and writing another: work results in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/03
Source: “Communicate work results through written reports or oral presentations.” (UK task statement)
How this row was scored
Exposure score: 79 out of 100 (72–86 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Written reports are produced very well by these tools, though delivering them aloud remains human.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Developing network security measures, firewalls and security audits
shifting to AI
This is reading one thing and writing another: network security measures, firewalls and security audits in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/01
Source: “Develop network security measures including firewalls and security audits.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Firewall rules and audit routines are documented practice software can produce.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Testing and evaluating security products
shifting to AI
This is reading one thing and writing another: security products in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/01, 2135/02
Source: “Test and evaluate security products.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Running products through tests and writing up the comparison is documented desk work software handles well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Creating contingency plans for security breaches
shifting to AI
This is reading one thing and writing another: contingency plans in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/01, 2135/02
Source: “Create contingency plans for security breaches.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (71–79 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Breach response plans follow published templates and produce a document, which software drafts well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Implementing protective measures like firewalls and encryption
shifting to AI
This is reading one thing and writing another: protective measures like firewalls in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/01, 2135/02
Source: “Implement protective measures like firewalls and encryption.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Firewall and encryption setup is well documented, though an engineer remains answerable for it.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Monitoring new threats and assessing their impact
shifting to AI
This is reading one thing and writing another: new threats in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/01
Source: “Monitor new threats and assess their impact.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Threat monitoring is well published and largely automated, though judging impact needs knowledge of your own systems.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Producing threat assessment reports to evaluate potential risks
shifting to AI
This is reading one thing and writing another: threat assessment reports in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/01
Source: “Produce threat assessment reports to evaluate potential risks.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (71–79 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: This produces a written assessment from published threat information, which software drafts to a usable standard.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Analysing business and technical requirements to select and specify appropriate technology solutions
shifting to AI
This is reading one thing and writing another: business in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/01, 2135/04
Source: “Analyse business and technical requirements to select and specify appropriate technology solutions.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (71–79 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Matching requirements to technology options is well supported by these tools, with a specialist confirming the fit.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Maintaining technical security controls in accordance with relevant procedures and standards
shifting to AI
This is reading one thing and writing another: technical security controls in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/01
Source: “Maintain technical security controls in accordance with relevant procedures and standards.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Keeping controls in line with written procedures is documented, repeatable work that software supports strongly.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Identifying organisational information requirements and model data solutions using conceptual data modelling techniques
shifting to AI
This is reading one thing and writing another: organisational information requirements in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/01
Source: “Identify organisational information requirements and model data solutions using conceptual data modelling techniques.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Conceptual data modelling follows documented techniques tools apply well, with a specialist confirming the organisation's needs.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Developing security designs with justifications to meet defined cyber security parameters
shifting to AI
This is reading one thing and writing another: security designs in, a record out. That is the shape today's tools are built for.
importance 95 · 2135/02, 2135/04
Source: “Develop security designs with justifications to meet defined cyber security parameters.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Producing a design with written justification against set parameters is documented desk work software handles well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Developing disaster recovery plans
shifting to AI
This is reading one thing and writing another: disaster recovery plans in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/02
Source: “Develop disaster recovery plans.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (71–79 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Disaster recovery plans follow published templates software can draft closely.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Evaluating the potential impact of cybersecurity threats on business operations and user safety
shifting to AI
This is reading one thing and writing another: the potential impact of cybersecurity threats in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/02, 2135/04
Source: “Evaluate the potential impact of cybersecurity threats on business operations and user safety.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Software can reason through the impact, but the answer depends on knowing how your own business runs.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Identifying potential system weaknesses to enhance security protocols
shifting to AI
This is reading one thing and writing another: potential system weaknesses in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/02
Source: “Identify potential system weaknesses to enhance security protocols.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (71–79 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Spotting weaknesses is systematic analysis of configuration and known issues, which tools do quickly.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Develop computer information resources for data security and control
shifting to AI
This is reading one thing and writing another: computer information resources in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/02
Source: “Develop computer information resources for data security and control.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Building secure information resources follows documented patterns software can produce and a manager can check.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Gathering cyber intelligence to identify vulnerabilities
shifting to AI
This is reading one thing and writing another: cyber intelligence in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/02, 2135/04
Source: “Gather cyber intelligence to identify vulnerabilities.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Collecting and sifting intelligence from published and internal sources is search-and-summarise work software does well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Maintaining an information security risk register
shifting to AI
This is reading one thing and writing another: an information security risk register in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/02
Source: “Maintain an information security risk register.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (71–79 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: A risk register is a structured document, and keeping it current is exactly what software is good at.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Planning for disaster recovery in information management
shifting to AI
This is reading one thing and writing another: disaster recovery in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/02
Source: “Plan for disaster recovery in information management.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (71–79 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Disaster recovery plans follow well-published templates that software can draft.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Overseeing backup systems for data protection
shifting to AI
This is reading one thing and writing another: backup systems in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/02
Source: “Oversee backup systems for data protection.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (71–79 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Backup systems largely run and report on themselves already.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Assessing IT processes and technologies for operational efficiency
shifting to AI
This is reading one thing and writing another: IT processes in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/02
Source: “Assess IT processes and technologies for operational efficiency.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (71–79 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Reviewing processes and technology for efficiency is analysis of records and data software does well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Preparing operational budgets for IT and software development projects
shifting to AI
This is reading one thing and writing another: operational budgets in, a record out. That is the shape today's tools are built for.
importance 70 · 2135/02
Source: “Prepare operational budgets for IT and software development projects.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (71–79 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Budgets are built from figures already in the systems, so drafts come easily.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Conducting predictive or reactive analyses on security measures to support cyber security initiatives
shifting to AI
This is reading one thing and writing another: predictive in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/03, 2135/04
Source: “Conduct predictive or reactive analyses on security measures to support cyber security initiatives.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: This is data analysis against documented methods, which software carries out quickly and reliably.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Understanding how the flaws that you identify could affect a business
shifting to AI
This is reading one thing and writing another: how the flaws in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/04
Source: “Understand how the flaws that you identify could affect a business, or business function, if they're not fixed.” (UK task statement)
How this row was scored
Exposure score: 75 out of 100 (68–82 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Software can reason it through, but the answer depends on knowing how your own organisation actually works.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Analysing log files to identify perpetrators of network intrusions
shifting to AI
This is reading one thing and writing another: log files in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/03, 2135/04
Source: “Analyse log files to identify perpetrators of network intrusions.” (UK task statement)
How this row was scored
Exposure score: 72 out of 100 (65–79 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Sifting log files for signs of an intruder is data analysis software does quickly and thoroughly.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Conducting remote testing of a client's network to expose security weaknesses
shifting to AI
This is reading one thing and writing another: remote testing of a client's network in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/04
Source: “Conduct remote testing of a client's network to expose security weaknesses.” (UK task statement)
How this row was scored
Exposure score: 72 out of 100 (65–79 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Remote testing happens entirely over the network using well-documented, increasingly automated techniques.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Implementing programming changes based on user discussions
shifting to AI
This is reading one thing and writing another: changes in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/01
Source: “Implement programming changes based on user discussions.” (UK task statement)
How this row was scored
Exposure score: 70 out of 100 (63–77 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Turning agreed requirements into code is something software now does well for typical changes.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 4/4.
Conducting and presenting effective research
shifting to AI
This is reading one thing and writing another: effective research in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/01, 2135/04
Source: “Conduct and present effective research using engaging, well-structured approaches.” (UK task statement)
How this row was scored
Exposure score: 70 out of 100 (63–77 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Research and well-structured write-ups are strongly supported by these tools, though presenting it stays human.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 4/4.
Advising staff on handling spam and malicious emails
shifting to AI
This is reading one thing and writing another: staff in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/02
Source: “Advise staff on handling spam and malicious emails.” (UK task statement)
How this row was scored
Exposure score: 70 out of 100 (63–77 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: This is standard, widely published guidance, so software produces the advice, though colleagues like hearing it personally.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 4/4.
Recommending hardware and software upgrades based on assessment
shifting to AI
This is reading one thing and writing another: hardware in, a record out. That is the shape today's tools are built for.
importance 70 · 2135/02
Source: “Recommend hardware and software upgrades based on assessment.” (UK task statement)
How this row was scored
Exposure score: 70 out of 100 (63–77 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Upgrade recommendations rest on published product information software handles well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 4/4.
Advising on methods to fix or reducing security risks to systems
shifting to AI
This is reading one thing and writing another: methods in, a record out. That is the shape today's tools are built for.
importance 90 · 2135/04
Source: “Advise on methods to fix or reduce security risks to systems.” (UK task statement)
How this row was scored
Exposure score: 70 out of 100 (63–77 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Advice on fixing security weaknesses is widely published, so software produces good recommendations for most situations.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 4/4.
Writing and reviewing reports on digital investigations to present evidence and findings
shifting to AI
This is reading one thing and writing another: reports in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/03
Source: “Write and review reports on digital investigations to present evidence and findings.” (UK task statement)
How this row was scored
Exposure score: 69 out of 100 (62–76 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; someone qualified has to answer for it.
The rating behind it: Writing up findings is work software does well, though the examiner must stand behind the evidential report.
The five ratings: output a model can produce 4/4 · needs a body in a room 0/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Analysing ethical and legal implications of digital and technology solutions and making recommendations as a result of this analysis
shifting to AI
This is reading one thing and writing another: ethical in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/01, 2135/04
Source: “Analyse ethical and legal implications of digital and technology solutions and make recommendations as a result of this analysis.” (UK task statement)
How this row was scored
Exposure score: 66 out of 100 (62–70 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Ethical and legal implications of technology are widely written about, so software produces a sound analysis and recommendations.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Analysing security requirements and developing a security case considering all applicable laws and regulations
shifting to AI
This is reading one thing and writing another: security requirements in, a record out. That is the shape today's tools are built for.
importance 95 · 2135/02, 2135/04
Source: “Analyse security requirements and develop a security case considering all applicable laws and regulations.” (UK task statement)
How this row was scored
Exposure score: 66 out of 100 (59–73 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: A security case is a reasoned written argument against published law and standards, which software drafts well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Following electronic data trails to reveal links or communication between individuals or groups
shifting to AI
This is reading one thing and writing another: electronic data trails in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/03
Source: “Follow electronic data trails to reveal links or communication between individuals or groups.” (UK task statement)
How this row was scored
Exposure score: 66 out of 100 (59–73 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Linking communications across datasets is exactly the kind of pattern work software does well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Investigating incidents of hacking in digital systems
shifting to AI
This is reading one thing and writing another: incidents in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/03
Source: “Investigate incidents of hacking in digital systems.” (UK task statement)
How this row was scored
Exposure score: 66 out of 100 (59–73 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Much of the log and code analysis is automatable, though an experienced investigator still directs the work.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Unlocking digital images to reveal the identity of places or persons
shifting to AI
This is reading one thing and writing another: digital images in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/03
Source: “Unlock digital images to reveal the identity of places or persons.” (UK task statement)
How this row was scored
Exposure score: 66 out of 100 (59–73 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Identifying places and people from image detail is analysis work software is now strong at.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Developing plans for investigating alleged computer crimes and suspicious activity
shifting to AI
This is reading one thing and writing another: plans in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/03, 2135/04
Source: “Develop plans for investigating alleged computer crimes and suspicious activity.” (UK task statement)
How this row was scored
Exposure score: 66 out of 100 (59–73 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Investigation plans follow documented methods, so software can draft one, though an accountable investigator approves it.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Assisting with the promotion of cyber security awareness programmes
shifting to AI
This is reading one thing and writing another: the promotion of cyber security awareness programmes in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/01
Source: “Assist with the promotion of cyber security awareness programmes.” (UK task statement)
How this row was scored
Exposure score: 64 out of 100 (57–71 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Producing the campaign material is straightforward for software, though persuading colleagues to engage still needs people.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Managing technology solutions projects through systematic planning
shifting to AI
This is reading one thing and writing another: technology solutions projects in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/01
Source: “Manage technology solutions projects through systematic planning, execution, and closing using industry-standard methods.” (UK task statement)
How this row was scored
Exposure score: 64 out of 100 (57–71 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Project plans and reports are easily produced, though keeping people to them is a human job.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Analysing business processes to identify opportunities for improvement
shifting to AI
This is reading one thing and writing another: business processes in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/01, 2135/04
Source: “Analyse business processes to identify opportunities for improvement.” (UK task statement)
How this row was scored
Exposure score: 64 out of 100 (60–68 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Mapping how a process works and where it could improve is well-documented analysis software produces to a usable standard.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Overseeing development of plans to safeguard computer files against unauthorised access
shifting to AI
This is reading one thing and writing another: development of plans in, a record out. That is the shape today's tools are built for.
importance 75 · 2135/01
Source: “Oversee development of plans to safeguard computer files against unauthorised access.” (UK task statement)
How this row was scored
Exposure score: 64 out of 100 (60–68 allowing for uncertainty): high exposure, high confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Access protection plans follow documented patterns and can be drafted from the organisation’s own setup.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Developing and enforcing security standards
shifting to AI
This is reading one thing and writing another: security standards in, a record out. That is the shape today's tools are built for.
importance 95 · 2135/02
Source: “Develop and enforce security standards.” (UK task statement)
How this row was scored
Exposure score: 64 out of 100 (57–71 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Writing standards is well suited to software, though enforcing them across an organisation needs a person.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Administering training and awareness materials to enhance knowledge
shifting to AI
This is reading one thing and writing another: awareness materials in, a record out. That is the shape today's tools are built for.
importance 85 · 2135/02
Source: “Administer training and awareness materials to enhance knowledge.” (UK task statement)
How this row was scored
Exposure score: 64 out of 100 (57–71 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Producing and issuing awareness material is drafting and distribution software handles well.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Defining specific performance goals and deadlines for the department
shifting to AI
This is reading one thing and writing another: specific performance goals in, a record out. That is the shape today's tools are built for.
importance 70 · 2135/02
Source: “Define specific performance goals and deadlines for the department.” (UK task statement)
How this row was scored
Exposure score: 64 out of 100 (57–71 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Setting goals and deadlines is planning work software can draft from project data.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Communicating technical findings and product investigations verbally and in writing
shifting to AI
This is reading one thing and writing another: technical findings in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/03
Source: “Communicate technical findings and product investigations verbally and in writing.” (UK task statement)
How this row was scored
Exposure score: 64 out of 100 (57–71 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: The written half is easy for software; explaining it out loud to colleagues still needs a person.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Presenting ongoing incident findings to the investigation team for collaborative analysis
shifting to AI
This is reading one thing and writing another: incident findings in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/03
Source: “Present ongoing incident findings to the investigation team for collaborative analysis.” (UK task statement)
How this row was scored
Exposure score: 64 out of 100 (57–71 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Preparing the findings is straightforward for software; presenting them to the team still involves a person.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Building, testing and debug digital systems to meet specifications using appropriate tools and technologies
shifting to AI
This is reading one thing and writing another: debug digital systems in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/01
Source: “Build, test, and debug digital systems to meet specifications using appropriate tools and technologies.” (UK task statement)
How this row was scored
Exposure score: 62 out of 100 (55–69 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Software writes and debugs a lot of this, though some of the building involves real hardware.
The five ratings: output a model can produce 3/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Designing, building and testing digital networks based on specific design requirements
shifting to AI
This is reading one thing and writing another: digital networks in, a record out. That is the shape today's tools are built for.
importance 80 · 2135/04
Source: “Design, build, and test digital networks based on specific design requirements.” (UK task statement)
How this row was scored
Exposure score: 62 out of 100 (55–69 allowing for uncertainty): high exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Design and testing can be largely software-driven, though physically building the network needs people.
The five ratings: output a model can produce 3/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Designing, developing and operating secure solutions for cyber security, utilizing relevant tools and technologies
changing shape
The software now makes the first pass at secure solutions, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 95 · 2135/01
Source: “Design, develop, and operate secure solutions for cyber security, utilizing relevant tools and technologies.” (UK task statement)
How this row was scored
Exposure score: 58 out of 100 (51–65 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Software helps design and build these, but running them across a real estate still needs an engineer's judgement.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Implementing cybersecurity solutions to mitigate identified threats
changing shape
The software now makes the first pass at cybersecurity solutions, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 95 · 2135/01, 2135/04
Source: “Implement cybersecurity solutions to mitigate identified threats.” (UK task statement)
How this row was scored
Exposure score: 58 out of 100 (51–65 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Most of this is configuration and code, which software drafts well, though a specialist checks it fits.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Preventing security breaches using a variety of tools
changing shape
The software now makes the first pass at security breaches, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 85 · 2135/04
Source: “Prevent security breaches using a variety of tools, techniques, and processes.” (UK task statement)
How this row was scored
Exposure score: 58 out of 100 (51–65 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Tools do a lot, but keeping an organisation secure day to day still depends on experienced people.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Analysing and identifying specific threats to major security systems to enhance protection measures
changing shape
The software now makes the first pass at specific threats, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 95 · 2135/01, 2135/04
Source: “Analyse and identify specific threats to major security systems to enhance protection measures.” (UK task statement)
How this row was scored
Exposure score: 56 out of 100 (49–63 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Threat analysis against known attack patterns is largely desk research and modelling.
The five ratings: output a model can produce 3/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Overseeing risk assessments to ensure data processing security
changing shape
The software now makes the first pass at risk assessments, but someone has to be answerable for the result, and it cannot be the software. So the job becomes checking and deciding rather than producing.
importance 85 · 2135/01
Source: “Oversee risk assessments to ensure data processing security.” (UK task statement)
How this row was scored
Exposure score: 56 out of 100 (49–63 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; someone qualified has to answer for it.
The rating behind it: Risk assessment paperwork drafts easily, but a named data protection person must be involved before it is relied on.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Reporting and escalating these incidents in accordance with relevant procedures and standards
changing shape
The software now makes the first pass at these incidents, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 80 · 2135/01
Source: “Report and escalate these incidents in accordance with relevant procedures and standards.” (UK task statement)
How this row was scored
Exposure score: 56 out of 100 (49–63 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Writing the incident report follows a set procedure, though an accountable person makes the escalation call.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Supporting external audits by supplying information
changing shape
The software now makes the first pass at external audits, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 70 · 2135/02
Source: “Support external audits by supplying information.” (UK task statement)
How this row was scored
Exposure score: 56 out of 100 (49–63 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Pulling together requested evidence is document work, though someone accountable must confirm that it is accurate.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Recording all steps and findings of forensic investigations to ensure accuracy and accountability
changing shape
The software now makes the first pass at all steps, but someone has to be answerable for the result, and it cannot be the software. So the job becomes checking and deciding rather than producing.
importance 85 · 2135/03
Source: “Record all steps and findings of forensic investigations to ensure accuracy and accountability.” (UK task statement)
How this row was scored
Exposure score: 56 out of 100 (49–63 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; someone qualified has to answer for it.
The rating behind it: Recording forensic steps is structured writing software drafts well, though the examiner must stand behind the account.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Maintaining cyber defence software or hardware to support responses to cyber incidents
changing shape
The software now makes the first pass at cyber defence software, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 75 · 2135/03, 2135/04
Source: “Maintain cyber defence software or hardware to support responses to cyber incidents.” (UK task statement)
How this row was scored
Exposure score: 56 out of 100 (49–63 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Software updates are largely automatable, but the hardware side still needs hands on the kit.
The five ratings: output a model can produce 3/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Securing IT systems and hardware to protect them from security threats
changing shape
The software now makes the first pass at IT systems, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 75 · 2135/03
Source: “Secure IT systems and hardware to protect them from security threats.” (UK task statement)
How this row was scored
Exposure score: 56 out of 100 (49–63 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Configuration hardening is well documented and automatable, though physical kit still needs someone to secure it.
The five ratings: output a model can produce 3/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Developing or modifying automation and controlling system programmes using a variety of different programming tools
changing shape
The software now makes the first pass at automation, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 75 · 2135/04
Source: “Develop or modify automation and control system programmes using a variety of different programming tools, languages and techniques.” (UK task statement)
How this row was scored
Exposure score: 56 out of 100 (49–63 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Control programs are code, and code generates well, though it has to be proved out on the actual plant.
The five ratings: output a model can produce 3/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Performing forensic investigations of operating or filing systems
changing shape
The software now makes the first pass at forensic investigations, but someone has to be answerable for the result, and it cannot be the software. So the job becomes checking and deciding rather than producing.
importance 70 · 2135/04
Source: “Perform forensic investigations of operating or file systems.” (UK task statement)
How this row was scored
Exposure score: 56 out of 100 (49–63 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; someone qualified has to answer for it.
The rating behind it: Much of this analysis is tool-driven, though an accountable examiner directs it and stands behind the findings.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Promoting practices to improve server and network efficiency among users
changing shape
The software now makes the first pass at practices, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 75 · 2135/01
Source: “Promote practices to improve server and network efficiency among users.” (UK task statement)
How this row was scored
Exposure score: 53 out of 100 (46–60 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; the value is that a specific person does it.
The rating behind it: The guidance itself is easy to write, but getting colleagues to change their habits needs persuasion.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Sharing security knowledge with partner organisations
changing shape
The software now makes the first pass at security knowledge, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 70 · 2135/01
Source: “Share security knowledge with partner organisations.” (UK task statement)
How this row was scored
Exposure score: 53 out of 100 (46–60 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Software can prepare the briefing, but sharing sensitive knowledge between organisations rests on relationships and discretion.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Allocating tasks to systems analysts
changing shape
The software now makes the first pass at tasks, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 70 · 2135/02
Source: “Allocate tasks to systems analysts, programmers, and other computer-related workers.” (UK task statement)
How this row was scored
Exposure score: 53 out of 100 (46–60 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Allocating work can be planned by software, but who gets what involves knowing the team.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Presenting findings, risks and conclusions to management and other relevant parties
changing shape
The software now makes the first pass at findings, risks and conclusions, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 75 · 2135/04
Source: “Present findings, risks, and conclusions to management and other relevant parties.” (UK task statement)
How this row was scored
Exposure score: 53 out of 100 (46–60 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; the value is that a specific person does it.
The rating behind it: The slides are easy to produce; convincing management still depends on a person in the room.
The five ratings: output a model can produce 3/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Conducting investigations of information security breaches to identify vulnerabilities and assess the damage
changing shape
The software now makes the first pass at investigations of information security breaches, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 95 · 2135/01
Source: “Conduct investigations of information security breaches to identify vulnerabilities and assess the damage.” (UK task statement)
How this row was scored
Exposure score: 50 out of 100 (43–57 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Software sorts through logs quickly, but scoping a breach and judging real damage still needs an experienced investigator.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Using computer forensics to identify attackers and their methods
changing shape
The software now makes the first pass at computer forensics, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 95 · 2135/01
Source: “Use computer forensics to identify attackers and their methods.” (UK task statement)
How this row was scored
Exposure score: 50 out of 100 (43–57 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Tools do much of the analysis, but tying an attack to a named actor still takes expert judgement.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Developing new forensic investigation methods to enhance digital evidence analysis
changing shape
The software now makes the first pass at new forensic investigation methods, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 85 · 2135/03
Source: “Develop new forensic investigation methods to enhance digital evidence analysis.” (UK task statement)
How this row was scored
Exposure score: 50 out of 100 (43–57 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Software can suggest approaches, but genuinely new forensic methods come from experienced examiners testing them.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Enforcing security standards to protect systems
changing shape
The software now makes the first pass at security standards, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 95 · 2135/01
Source: “Enforce security standards to protect systems.” (UK task statement)
How this row was scored
Exposure score: 49 out of 100 (42–56 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Checking systems against written standards suits software, though enforcing them with colleagues still needs a person.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Investigating and resolving cyber security breaches to protect data integrity
changing shape
The software now makes the first pass at cyber security breaches, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 90 · 2135/01
Source: “Investigate and resolve cyber security breaches to protect data integrity.” (UK task statement)
How this row was scored
Exposure score: 49 out of 100 (42–56 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Software speeds up the analysis, but working out what actually happened and fixing it needs an experienced person.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Applying strategic practice to technology solutions development
changing shape
The software now makes the first pass at strategic practice, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 85 · 2135/01, 2135/04
Source: “Apply strategic practice to technology solutions development.” (UK task statement)
How this row was scored
Exposure score: 49 out of 100 (42–56 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Strategy can be drafted, but applying it to a particular organisation needs inside knowledge.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Demonstrating effective management of cyber security processes and systems within the defined Service Level Agreements
changing shape
The software now makes the first pass at effective management of cyber security processes, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 80 · 2135/01, 2135/04
Source: “Demonstrate effective management of cyber security processes and systems within the defined Service Level Agreements (SLAs).” (UK task statement)
How this row was scored
Exposure score: 49 out of 100 (42–56 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Reporting against service levels is easy to automate, but managing the service itself still needs a person.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Providing technical assistance to staff for resolving technical issues
changing shape
The software now makes the first pass at technical assistance, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 70 · 2135/02
Source: “Provide technical assistance to staff for resolving technical issues.” (UK task statement)
How this row was scored
Exposure score: 48 out of 100 (41–55 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Many technical problems can be diagnosed and fixed remotely, though some need someone at the machine.
The five ratings: output a model can produce 3/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Providing users with technical support for computer problems
changing shape
The software now makes the first pass at users, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 70 · 2135/02
Source: “Provide users with technical support for computer problems.” (UK task statement)
How this row was scored
Exposure score: 48 out of 100 (41–55 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Common computer problems are already solved through guided help, though some need someone at the desk.
The five ratings: output a model can produce 3/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 1/4 · how much data exists 3/4.
Analysing cases of political, industrial and commercial espionage
changing shape
The software now makes the first pass at cases of political, industrial and commercial espionage, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 80 · 2135/03
Source: “Analyse cases of political, industrial, and commercial espionage.” (UK task statement)
How this row was scored
Exposure score: 44 out of 100 (37–51 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: mistakes that are cheap to catch.
The rating behind it: Software can structure the analysis, but the decisive material is often private and needs experienced interpretation.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 2/4.
Designing new security systems for buildings and properties
changing shape
The software now makes the first pass at new security systems, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 70 · 2135/01
Source: “Design new security systems for buildings and properties.” (UK task statement)
How this row was scored
Exposure score: 43 out of 100 (36–50 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Standard camera and access layouts can be drafted, but the design turns on the specific building.
The five ratings: output a model can produce 2/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Examining data from mobile phones and satellite navigation systems to trace people or places
changing shape
The software now makes the first pass at data, but someone has to be answerable for the result, and it cannot be the software. So the job becomes checking and deciding rather than producing.
importance 85 · 2135/03
Source: “Examine data from mobile phones and satellite navigation systems to trace people or places.” (UK task statement)
How this row was scored
Exposure score: 42 out of 100 (35–49 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: reading one thing and writing another; the same decision, made over and over; someone qualified has to answer for it.
The rating behind it: Analysing extracted data suits software well, though getting the data off the device needs a person.
The five ratings: output a model can produce 3/4 · needs a body in a room 1/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Configuring and deploying computer and digital network technology
changing shape
The software now makes the first pass at computer, but part of it still happens in the physical world. So the job becomes checking and deciding rather than producing.
importance 70 · 2135/04
Source: “Configure and deploy computer and digital network technology.” (UK task statement)
How this row was scored
Exposure score: 41 out of 100 (34–48 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch; work that happens in the physical world.
The rating behind it: Configuration is well documented and automatable, but deploying physical kit means someone racking and cabling it.
The five ratings: output a model can produce 3/4 · needs a body in a room 2/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 4/4.
Coordinating implementation of computer system plan with establishment personnel and outside suppliers
changing shape
The software now makes the first pass at implementation of computer system plan, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 80 · 2135/01
Source: “Coordinate implementation of computer system plan with establishment personnel and outside suppliers.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Software can track the plan, but chasing people and suppliers through an implementation is human coordination.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Practising continuous self-learning to keep up to date with industry trends and developments to enhance relevant skills and take responsibility for own professional development
changing shape
The software now makes the first pass at continuous, but the deciding part still needs a person. So the job becomes checking and deciding rather than producing.
importance 80 · 2135/01, 2135/02, 2135/04
Source: “Practise continuous self-learning to keep up to date with industry trends and developments to enhance relevant skills and take responsibility for own professional development.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over.
The rating behind it: Keeping your own skills current is something only the individual can do.
The five ratings: output a model can produce 1/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Planning and overseeing comprehensive security strategies
changing shape
The software now makes the first pass at comprehensive security strategies, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 90 · 2135/02
Source: “Plan and oversee comprehensive security strategies.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: A strategy can be drafted by software, but overseeing it means carrying people and budgets with you.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Discussing cyber security issues with stakeholders
changing shape
The software now makes the first pass at cyber security issues, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 85 · 2135/02
Source: “Discuss cyber security issues with stakeholders.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Software can prepare the briefing, but the value is a person answering questions and reading the room.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Establishing requirements for new systems or modifications in consultation with staff
changing shape
The software now makes the first pass at requirements, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 75 · 2135/02
Source: “Establish requirements for new systems or modifications in consultation with staff, users, and management.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Requirements are written up easily, but drawing them out of users and managers takes conversation.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Managing daily operations of the department
changing shape
The software now makes the first pass at operations of the department, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 75 · 2135/02
Source: “Manage daily operations of the department, including workflow analysis and priority setting.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Workflow analysis can be automated, but setting priorities for a team involves knowing the people.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Consulting with suppliers to understand computing solutions
changing shape
The software now makes the first pass at suppliers, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 60 · 2135/02
Source: “Consult with suppliers to understand computing solutions.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Product information is easy to gather, but supplier conversations shape what is actually on offer.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Consulting with technicians to specify system requirements
changing shape
The software now makes the first pass at technicians, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 60 · 2135/02
Source: “Consult with technicians to specify system requirements.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Specifications can be drafted, though pinning them down means talking to the technicians.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Consulting with users to determine computing needs
changing shape
The software now makes the first pass at users, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 60 · 2135/02
Source: “Consult with users to determine computing needs.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Needs are written up easily; drawing them out of users takes back-and-forth conversation.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Applying change management to technology solutions development
changing shape
The software now makes the first pass at change management, but the part that matters is a person saying it and standing behind it. So the job becomes checking and deciding rather than producing.
importance 75 · 2135/04
Source: “Apply change management to technology solutions development.” (UK task statement)
How this row was scored
Exposure score: 40 out of 100 (33–47 allowing for uncertainty): partial exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Change management is about carrying people with you, which tools support with materials rather than perform.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Accessing hidden, protected or encrypted files
staying human
The ratings behind this row put hidden, protected or encrypted files well outside what today's tools can do on their own.
importance 95 · 2135/03
Source: “Access hidden, protected, or encrypted files.” (UK task statement)
How this row was scored
Exposure score: 38 out of 100 (31–45 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Tools help, but getting into protected data often needs the device in hand and expert persistence.
The five ratings: output a model can produce 2/4 · needs a body in a room 1/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Recovering damaged or deleted files
staying human
The ratings behind this row put damaged well outside what today's tools can do on their own.
importance 90 · 2135/03, 2135/04
Source: “Recover damaged or deleted files.” (UK task statement)
How this row was scored
Exposure score: 38 out of 100 (31–45 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; mistakes that are cheap to catch.
The rating behind it: Recovery tools do much of it, but damaged media often has to be handled physically by a specialist.
The five ratings: output a model can produce 2/4 · needs a body in a room 1/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Addressing security violations in consultation with users
staying human
The value here is that a specific person handles security violations and stands behind it. That is earned, not computed.
importance 90 · 2135/01
Source: “Address security violations in consultation with users.” (UK task statement)
How this row was scored
Exposure score: 35 out of 100 (28–42 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: the value is that a specific person does it.
The rating behind it: Software can explain the rule that was broken, but the conversation with the person involved needs tact.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 2/4.
Discussing computer data access needs with users
staying human
The value here is that a specific person handles computer data access needs and stands behind it. That is earned, not computed.
importance 80 · 2135/01
Source: “Discuss computer data access needs with users.” (UK task statement)
How this row was scored
Exposure score: 35 out of 100 (28–42 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: the value is that a specific person does it.
The rating behind it: Software can propose the right access, but understanding what someone actually needs comes from talking to them.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 2/4.
Carrying out initial investigations to gather evidence
staying human
The ratings behind this row put initial investigations well outside what today's tools can do on their own.
importance 85 · 2135/03
Source: “Carry out initial investigations to gather evidence.” (UK task statement)
How this row was scored
Exposure score: 33 out of 100 (26–40 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: mistakes that are cheap to catch.
The rating behind it: Initial evidence gathering follows known steps, but what matters is usually specific to the incident and the systems involved.
The five ratings: output a model can produce 2/4 · needs a body in a room 1/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 2/4.
Liaising with external agencies like the police for necessary collaboration
staying human
The value here is that a specific person handles external agencies like the police and stands behind it. That is earned, not computed.
importance 80 · 2135/03
Source: “Liaise with external agencies like the police for necessary collaboration.” (UK task statement)
How this row was scored
Exposure score: 31 out of 100 (24–38 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: the value is that a specific person does it.
The rating behind it: Working with the police depends on established relationships and trust rather than paperwork software can produce.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 2/4 · how much data exists 2/4.
Offering guidance and expertise to investigators during criminal case investigations
staying human
The value here is that a specific person handles guidance and stands behind it. That is earned, not computed.
importance 80 · 2135/03
Source: “Offer guidance and expertise to investigators during criminal case investigations.” (UK task statement)
How this row was scored
Exposure score: 31 out of 100 (24–38 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: the value is that a specific person does it.
The rating behind it: Software can supply reference material, but advising an investigation depends on judgement and the investigators' trust.
The five ratings: output a model can produce 2/4 · needs a body in a room 0/4 · needs an accountable person 1/4 · needs to be trusted in the moment 2/4 · how much data exists 2/4.
Managing effective and ethical searches for evidence and information in differing environments
staying human
The rules require a named, qualified person to answer for effective, and that person cannot be a piece of software.
importance 75 · 2135/01
Source: “Manage effective and ethical searches for evidence and information in differing environments, using appropriate tools and technology.” (UK task statement)
How this row was scored
Exposure score: 28 out of 100 (21–35 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: someone qualified has to answer for it.
The rating behind it: Searching for digital evidence follows known methods, but doing it defensibly needs an accountable examiner who can stand behind it.
The five ratings: output a model can produce 2/4 · needs a body in a room 1/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 2/4.
Implementing strategic computing initiatives
staying human
The value here is that a specific person handles strategic computing initiatives and stands behind it. That is earned, not computed.
importance 70 · 2135/02
Source: “Implement strategic computing initiatives.” (UK task statement)
How this row was scored
Exposure score: 28 out of 100 (21–35 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; the value is that a specific person does it.
The rating behind it: Putting a strategy into practice across an organisation depends on influence and follow-through.
The five ratings: output a model can produce 1/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 3/4.
Creating system images or capture network settings to preserve as IT evidence
staying human
This work happens in the physical world: system images, in a real place. Software cannot follow it there.
importance 85 · 2135/03, 2135/04
Source: “Create system images or capture network settings to preserve as IT evidence.” (UK task statement)
How this row was scored
Exposure score: 28 out of 100 (21–35 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; work that happens in the physical world; someone qualified has to answer for it.
The rating behind it: The imaging procedure is well documented, but someone must connect to the device and stand behind the result.
The five ratings: output a model can produce 3/4 · needs a body in a room 2/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Investigating cases of fraud and theft
staying human
The ratings behind this row put cases of fraud well outside what today's tools can do on their own.
importance 80 · 2135/03
Source: “Investigate cases of fraud and theft.” (UK task statement)
How this row was scored
Exposure score: 28 out of 100 (21–35 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: mistakes that are cheap to catch.
The rating behind it: Software can trace transactions and spot patterns, but fraud cases turn on interviews and evidence gathered from real people.
The five ratings: output a model can produce 2/4 · needs a body in a room 1/4 · needs an accountable person 1/4 · needs to be trusted in the moment 1/4 · how much data exists 2/4.
Presenting findings to law enforcement agencies for legal action
staying human
The rules require a named, qualified person to answer for findings, and that person cannot be a piece of software.
importance 85 · 2135/03
Source: “Present findings to law enforcement agencies for legal action.” (UK task statement)
How this row was scored
Exposure score: 20 out of 100 (13–27 allowing for uncertainty): low exposure, medium confidence.
Why it sits in this group: someone qualified has to answer for it; the value is that a specific person does it.
The rating behind it: Software prepares the material, but handing findings to the police is done by an accountable person.
The five ratings: output a model can produce 2/4 · needs a body in a room 1/4 · needs an accountable person 2/4 · needs to be trusted in the moment 2/4 · how much data exists 2/4.
Discussing procedures with violators to prevent repeat breaches
staying human
The value here is that a specific person handles procedures and stands behind it. That is earned, not computed.
importance 75 · 2135/01
Source: “Discuss procedures with violators to prevent repeat breaches.” (UK task statement)
How this row was scored
Exposure score: 18 out of 100 (11–25 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: the value is that a specific person does it.
The rating behind it: Having a frank conversation with someone who broke the rules depends on trust and judgement in the moment.
The five ratings: output a model can produce 1/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 3/4 · how much data exists 2/4.
Resolving problems with managers, suppliers
staying human
The value here is that a specific person handles problems and stands behind it. That is earned, not computed.
importance 65 · 2135/02
Source: “Resolve problems with managers, suppliers, and others.” (UK task statement)
How this row was scored
Exposure score: 18 out of 100 (14–22 allowing for uncertainty): minimal exposure, high confidence.
Why it sits in this group: the value is that a specific person does it.
The rating behind it: Sorting out disputes with managers and suppliers turns on relationships and give-and-take.
The five ratings: output a model can produce 1/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 3/4 · how much data exists 2/4.
Soliciting cooperation from managers, suppliers
staying human
The value here is that a specific person handles cooperation and stands behind it. That is earned, not computed.
importance 65 · 2135/02
Source: “Solicit cooperation from managers, suppliers, and others.” (UK task statement)
How this row was scored
Exposure score: 18 out of 100 (14–22 allowing for uncertainty): minimal exposure, high confidence.
Why it sits in this group: the value is that a specific person does it.
The rating behind it: Getting cooperation out of other people depends on standing and goodwill.
The five ratings: output a model can produce 1/4 · needs a body in a room 0/4 · needs an accountable person 0/4 · needs to be trusted in the moment 3/4 · how much data exists 2/4.
Retrieving and safeguarding data from damaged or compromised storage devices
staying human
This work happens in the physical world: data, in a real place. Software cannot follow it there.
importance 90 · 2135/03
Source: “Retrieve and safeguard data from damaged or compromised storage devices.” (UK task statement)
How this row was scored
Exposure score: 18 out of 100 (11–25 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; work that happens in the physical world.
The rating behind it: Getting data off physically damaged devices means working on the hardware itself in a lab.
The five ratings: output a model can produce 1/4 · needs a body in a room 2/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Handling highly sensitive or confidential data and images in investigations
staying human
The rules require a named, qualified person to answer for sensitive, and that person cannot be a piece of software.
importance 85 · 2135/03
Source: “Handle highly sensitive or confidential data and images in investigations.” (UK task statement)
How this row was scored
Exposure score: 18 out of 100 (11–25 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: someone qualified has to answer for it.
The rating behind it: Careful handling of sensitive or distressing material is a duty carried by a trained, accountable person.
The five ratings: output a model can produce 1/4 · needs a body in a room 1/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 2/4.
Participating in training events to enhance professional skills
staying human
The value here is that a specific person handles training events and stands behind it. That is earned, not computed.
importance 70 · 2135/01
Source: “Participate in training events to enhance professional skills.” (UK task statement)
How this row was scored
Exposure score: 17 out of 100 (10–24 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: the value is that a specific person does it.
The rating behind it: Taking part in training events is about being present and building your own skills.
The five ratings: output a model can produce 1/4 · needs a body in a room 1/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 2/4.
Collaborating with the police to protect the public
staying human
The value here is that a specific person handles the police and stands behind it. That is earned, not computed.
importance 75 · 2135/03
Source: “Collaborate with the police to protect the public.” (UK task statement)
How this row was scored
Exposure score: 15 out of 100 (8–22 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: the value is that a specific person does it.
The rating behind it: Working alongside the police to protect people rests on trusted relationships built between individuals over time.
The five ratings: output a model can produce 1/4 · needs a body in a room 1/4 · needs an accountable person 1/4 · needs to be trusted in the moment 2/4 · how much data exists 2/4.
Collecting retain and disseminate evidence and information in a lawful manner
staying human
This work happens in the physical world: retain, in a real place. Software cannot follow it there.
importance 85 · 2135/03
Source: “Collect, retain, and disseminate evidence and information in a lawful manner.” (UK task statement)
How this row was scored
Exposure score: 13 out of 100 (6–20 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: the same decision, made over and over; work that happens in the physical world; someone qualified has to answer for it.
The rating behind it: Handling evidence properly means a named, accountable person physically taking charge of it.
The five ratings: output a model can produce 1/4 · needs a body in a room 2/4 · needs an accountable person 3/4 · needs to be trusted in the moment 0/4 · how much data exists 3/4.
Supervising and instructing assistants to support professional tasks
staying human
This work happens in the physical world: assistants, in a real place. Software cannot follow it there.
importance 70 · 2135/03
Source: “Supervise and instruct assistants to support professional tasks.” (UK task statement)
How this row was scored
Exposure score: 11 out of 100 (4–18 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: work that happens in the physical world; the value is that a specific person does it.
The rating behind it: Supervising and instructing assistants happens alongside them as the work is done.
The five ratings: output a model can produce 1/4 · needs a body in a room 2/4 · needs an accountable person 0/4 · needs to be trusted in the moment 2/4 · how much data exists 2/4.
Conducting digital investigative decisions using an understanding of physical forensic evidence to ensure evidence preservation
staying human
This work happens in the physical world: digital investigative decisions, in a real place. Software cannot follow it there.
importance 85 · 2135/03
Source: “Conduct digital investigative decisions using an understanding of physical forensic evidence to ensure evidence preservation.” (UK task statement)
How this row was scored
Exposure score: 10 out of 100 (3–17 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: work that happens in the physical world; someone qualified has to answer for it.
The rating behind it: These decisions are made at the scene by a trained examiner who is accountable for the evidence.
The five ratings: output a model can produce 1/4 · needs a body in a room 2/4 · needs an accountable person 3/4 · needs to be trusted in the moment 0/4 · how much data exists 2/4.
Investigating crimes within an institution
staying human
This work happens in the physical world: crimes within an institution, in a real place. Software cannot follow it there.
importance 80 · 2135/03
Source: “Investigate crimes within an institution.” (UK task statement)
How this row was scored
Exposure score: 9 out of 100 (2–16 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: work that happens in the physical world; someone qualified has to answer for it; the value is that a specific person does it.
The rating behind it: Internal investigations involve interviewing people and gathering physical evidence, which needs an accountable person on site.
The five ratings: output a model can produce 1/4 · needs a body in a room 2/4 · needs an accountable person 2/4 · needs to be trusted in the moment 2/4 · how much data exists 2/4.
Sifting and sorting evidence, often held in minuscule quantities
staying human
This work happens in the physical world: evidence, often held, in a real place. Software cannot follow it there.
importance 70 · 2135/03
Source: “Sift and sort evidence, often held in minuscule quantities.” (UK task statement)
How this row was scored
Exposure score: 9 out of 100 (0–21 allowing for uncertainty): minimal exposure, low confidence.
Why it sits in this group: work that happens in the physical world; someone qualified has to answer for it.
The rating behind it: Sorting minute traces of evidence is delicate hands-on work, though the recording side is easier to automate.
The five ratings: output a model can produce 2/4 · needs a body in a room 3/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 2/4.
Securing a system or device to prevent tampering
staying human
This work happens in the physical world: a system, in a real place. Software cannot follow it there.
importance 85 · 2135/03
Source: “Secure a system or device to prevent tampering.” (UK task statement)
How this row was scored
Exposure score: 6 out of 100 (0–13 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: work that happens in the physical world; someone qualified has to answer for it.
The rating behind it: Physically securing a device so nobody can interfere with it needs someone there to do it.
The five ratings: output a model can produce 1/4 · needs a body in a room 3/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 2/4.
Maintaining cryptologic systems for special land
staying human
This work happens in the physical world: cryptologic systems, in a real place. Software cannot follow it there.
importance 70 · 2135/01
Source: “Maintain cryptologic systems for special land, sea surface, and subsurface operations.” (UK task statement)
How this row was scored
Exposure score: 5 out of 100 (0–17 allowing for uncertainty): minimal exposure, low confidence.
Why it sits in this group: work that happens in the physical world.
The rating behind it: This is hands-on maintenance of specialised equipment in the field, and little about it is publicly documented.
The five ratings: output a model can produce 1/4 · needs a body in a room 3/4 · needs an accountable person 1/4 · needs to be trusted in the moment 0/4 · how much data exists 1/4.
Acting as an expert witness during legal proceedings
staying human
The rules require a named, qualified person to answer for an expert witness during legal proceedings, and that person cannot be a piece of software.
importance 90 · 2135/03
Source: “Act as an expert witness during legal proceedings.” (UK task statement)
How this row was scored
Exposure score: 5 out of 100 (1–9 allowing for uncertainty): minimal exposure, high confidence.
Why it sits in this group: someone qualified has to answer for it; the value is that a specific person does it.
The rating behind it: An expert must personally sign and defend their opinion in the witness box, so software cannot take that role.
The five ratings: output a model can produce 0/4 · needs a body in a room 1/4 · needs an accountable person 2/4 · needs to be trusted in the moment 3/4 · how much data exists 2/4.
Giving evidence in court
staying human
The value here is that a specific person handles evidence and stands behind it. That is earned, not computed.
importance 90 · 2135/03
Source: “Give evidence in court.” (UK task statement)
How this row was scored
Exposure score: 5 out of 100 (0–12 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: the value is that a specific person does it.
The rating behind it: Evidence has to be given in person by the individual who did the work, so nothing can appear in their place.
The five ratings: output a model can produce 0/4 · needs a body in a room 1/4 · needs an accountable person 1/4 · needs to be trusted in the moment 3/4 · how much data exists 2/4.
Justifying findings under cross-examination in courts of law
staying human
This work happens in the physical world: findings under cross-examination, in a real place. Software cannot follow it there.
importance 90 · 2135/03
Source: “Justify findings under cross-examination in courts of law.” (UK task statement)
How this row was scored
Exposure score: 2 out of 100 (0–6 allowing for uncertainty): minimal exposure, high confidence.
Why it sits in this group: work that happens in the physical world; someone qualified has to answer for it; the value is that a specific person does it.
The rating behind it: Giving evidence in court is something only the named expert can do, in person and under oath.
The five ratings: output a model can produce 0/4 · needs a body in a room 2/4 · needs an accountable person 4/4 · needs to be trusted in the moment 3/4 · how much data exists 2/4.
Undergoing security checks and vetting procedures
staying human
This work happens in the physical world: security checks, in a real place. Software cannot follow it there.
importance 75 · 2135/03
Source: “Undergo security checks and vetting procedures.” (UK task statement)
How this row was scored
Exposure score: 2 out of 100 (0–9 allowing for uncertainty): minimal exposure, medium confidence.
Why it sits in this group: work that happens in the physical world; someone qualified has to answer for it.
The rating behind it: Being vetted is about you as a person, so nothing here can be done by software.
The five ratings: output a model can produce 0/4 · needs a body in a room 2/4 · needs an accountable person 2/4 · needs to be trusted in the moment 1/4 · how much data exists 1/4.
Collecting evidence from crime scenes
staying human
This work happens in the physical world: evidence, in a real place. Software cannot follow it there.
importance 70 · 2135/03
Source: “Collect evidence from crime scenes.” (UK task statement)
How this row was scored
Exposure score: 0 out of 100 (0–4 allowing for uncertainty): minimal exposure, high confidence.
Why it sits in this group: work that happens in the physical world; someone qualified has to answer for it.
The rating behind it: Collecting evidence means being at the scene and handling it in person.
The five ratings: output a model can produce 0/4 · needs a body in a room 4/4 · needs an accountable person 2/4 · needs to be trusted in the moment 0/4 · how much data exists 2/4.

What this job pays, and how many people do it

Median pay: £54,600a year, before tax, the middle of the range, so half earn more and half earn less.ashe-t14, 2025 · ASHE 2025 provisional (reference April 2025)Provisional, because the ONS revises this figure in the autumn.
How we know this
Source: ashe-t14
Reference period: ASHE 2025 provisional (reference April 2025)
Rounding: Shown to the nearest £100. The exact published figure is in the downloadable dataset. We do not render pounds the survey cannot support.
People doing this job: 91,200in the UK, 2026.nomis-aps · Apr 2025-Mar 2026 (latest APS 12-month period)This headcount comes from a survey, not a census, so treat it as a good estimate rather than an exact count.

What is deliberately not here: a forecast of how many of these jobs exist in ten years. Where an official projection exists for a market we publish it with its vintage; where it does not, we leave the space empty rather than borrow the other country’s number.

Why this is shifting

The reason is boringly specific. Most of what is shifting here is reading one thing and writing another: cyber defence recommendations in, a record out. The rows above are exactly that shape: drafting cyber defence recommendations based on research and carrying out cyber security risk assessments. What it cannot do is be trusted in person, which is what cyber war runs on: someone specific doing it and standing behind it. Which is why this page talks about your tasks changing, not your job ending.

Your move

Over a pint: what I’d tell you if you were my friend

The exposed part of your job is the biggest part, and I am not going to dress that up: drafting cyber defence recommendations based on research is work today's tools do quickly and cheaply, and that is not coming back.

So, given all that: 55% of this job's task weight sits in rows the software is already learning, 26% in rows that change shape rather than disappear, and 19% in rows it is nowhere near. That is the position, measured across 161 scored tasks. It is not a forecast about you.

What you have that the software does not is participating in cyber war gaming and simulations to understand cyber-attack and defence, plus the years of knowing when something looks wrong before you can say why. That is the raw material for everything below.

This week: one thing

Sit on the machine's side of the desk. Pick one real piece of cyber defence recommendations you would normally do yourself, let whatever software you already have take the first pass at it, and then go through what it produced and write down every single thing it got wrong. One evening this week. Do not fix anything yet. Just catch it.

What you end up holding: a written list of the machine’s mistakes, in your handwriting
How long it takes: an evening, or an hour if you pick one job rather than one client

If you can’t run software on your employer’s or your clients’ data: Do the same hunt on paper. Take one printed piece of cyber defence recommendations, work through it the way you always do, and mark every point where you made a call rather than followed a rule. Same evening, same list, nothing to log into and nobody to ask permission from. That list is the same artifact: it is the judgment written down.

Over the next 90 days

Change one sentence about what you do. Not on a CV. Out loud, to whoever pays you. From “my job is drafting cyber defence recommendations based on research” to “I check what the software does and tell you what it means.” Your error list from this week is what makes that sentence true instead of a claim, so use it: show it once, to one person, inside the next ninety days. Same skills, priced as judgment rather than as typing.

Over the next 12 months

Walk toward the end of this job that answers for things, and get it recognised. Pick the one part of participating in cyber war gaming and simulations to understand cyber-attack and defence you are already best at, and spend the year making it formal: a qualification, a named responsibility, a specialism people ask for by name. Price it honestly: that is evenings, it is months rather than weeks, and the seats are competitive because everyone in your position is looking at the same door. Before you pay for anything, spend an hour with National Careers Service. It is free and government-funded, and it is listed below with the rest of the free routes.

The roads out of here, and why I am not sending you down them

I looked at the obvious moves out of this job, and here is what I found.

I checked the 12 nearest UK occupations to cyber security professionals (nearest by the work that AI is not taking, not by job title), and none of them survived. The closest was protective service associate professionals n.e.c.: only about 3% of its durable work is work you already do and it pays 19.5% less. Your own job splits about 55/45: that share of the list sits in the top exposure band and the rest does not. On this evidence the honest move is inside the job rather than out of it. Become the person who owns “analyse and identify specific threats to major security systems to enhance protection…”, and let the exposed end go.

How that was checked: this job was compared against all 412 UK occupations in this release on their official task statements, and the 12 nearest were examined one by one. A move that turns on an industry, an employer or a qualification rather than on the work itself will not show up in a check like that. And this release carries no licence register, so anything you are weighing needs that looked up separately.

3 moves I checked and rejected

These are the obvious-looking jumps. They are here with their reasons rather than quietly dropped, because the ones that fail are worth knowing about. It is one less thing to turn over at night.

Protective service associate professionals n.e.c.
Why it looked obvious: It came up as a near neighbour because one of your tasks is on their list in the same words: “preserve and maintain digital forensic evidence for analysis”. Across the whole of both lists that adds up to about 3% of the work in that job the software is not taking.
Why I am not recommending it: Almost none of it is work you already do: about 3% of the durable side of that job. That is a different job, not a next step. It is a pay cut, in those words: £44,007 against your £54,647, 19.5% less (ASHE Table 14.7a, 2025 provisional (both)). Retraining to earn less is a decision, not advice.
Look at that job’s page anyway →
Managers and proprietors in other services n.e.c.
Why it looked obvious: It came up as a near neighbour on the work AI is not taking: you already investigate and resolve cyber security breaches to protect data integrity, and their equivalent is to investigate and resolve security breaches to ensure client protection. Across both published task lists that is about 3% of the durable work in that job.
Why I am not recommending it: Almost none of it is work you already do: about 3% of the durable side of that job. That is a different job, not a next step. It is a pay cut, in those words: £46,271 against your £54,647, 15.3% less (ASHE Table 14.7a, 2025 provisional (both)). Retraining to earn less is a decision, not advice.
Look at that job’s page anyway →
Information technology directors
Why it looked obvious: It came up as a near neighbour because one of your tasks is on their list in the same words: “develop solutions to address information security challenges”. Across the whole of both lists that adds up to about 3% of the work in that job the software is not taking.
Why I am not recommending it: Almost none of it is work you already do: about 3% of the durable side of that job. That is a different job, not a next step.
Look at that job’s page anyway →

What I’d stop worrying about

A friend tells you what not to spend fear on. This is that list.

The headline number you read somewhere
The big “X% of jobs” figures are about the whole economy, not about you. The number that describes your job is on this page: 55% of its task weight, across 161 scored tasks. Every row behind it is printed above with the source. Check ours; ignore theirs.
“It’s too late for me to become something else”
You are not starting from zero, and the page shows why: participating in cyber war gaming and simulations to understand cyber-attack and defence is work the software cannot do and you already do it. The move above is a repricing of what you know, not a new career. Nobody who has just left college has that.
“I should learn to code”
Almost certainly not. The value in your job is moving toward checking, deciding and answering for the output, not toward writing the software. A weekend of Python will not change your position; the error list from this week will.
The “obvious” next job everyone suggests
I checked the obvious moves and most of them did not survive. The reasons are printed with the routes above, including the pay and the gate. A move that fails on the numbers is worth knowing about so you can stop turning it over at night.

You are reading the United Kingdom figures

The United States splits this work across more than one official group, of which Project Management Specialists is the closest. The pay and employment figures are not directly comparable, and we do not average them together.

Switch to the United States page →partial match

The other groups this work is counted across:

In US official statistics this job is counted as Project Management Specialists, Information Security Analysts, Database Architects, Software Quality Assurance Analysts and Testers, Web and Digital Interface Designers and Computer Occupations, All Other. Pay is shown separately for each of those groups (medians cannot be averaged together), while the task list and the scores on this page are for this group only.

Your route through this

Where to go next, and what it costs

Free, and complete

The moves above cost nothing. These are the real services that go with them: public, government-funded, and free at the point of use. Nothing on this page is behind an email address or a payment.

In England:
National Careers Service
A free hour with a government-funded careers adviser is worth more than another evening of reading. In England that's the National Careers Service.
Free, government-funded
- Discover your skills and careers (the skills assessment)
In England:
National Careers Service - Find a course
Search what's actually running near you before you spend anything.
Free to search; individual courses vary
In England:
Free courses for jobs (Level 3 qualifications)
A free Level 3 qualification you already qualify for beats a paid course you don't need.
Free for eligible adults
In England:
Skills Bootcamps
Free, up to 16 weeks, and you get a job interview at the end. In England these are Skills Bootcamps - search what's running near you.
Free for eligible adults in England
- Skills Bootcamps - what they are and who can do them (DfE, Skills for Careers)
- Skills Bootcamps - JobHelp (DWP)
In Scotland:
My World of Work (Skills Development Scotland)
In Scotland it's My World of Work, from Skills Development Scotland.
Free, publicly funded
- Skills Development Scotland
In Wales:
Careers Wales
In Wales it's Careers Wales.
Free, Welsh Government-funded
In Northern Ireland:
Careers Service Northern Ireland
In Northern Ireland it's the Careers Service on nidirect.
Free, Department for the Economy-funded

No Space for this job, but one for what is happening to it

Nothing Collab365 runs is built for cyber security professionals, and we are not going to point you at the nearest one and call it a fit.

There is one that is not about a job title at all. The AI Authority is about being the person who directs these tools at work rather than the person they get compared to. That is worth saying here, because 55% of the work on this page is already inside what they can do.

Try The AI Authority free →

7 days free, no card needed. Explore up to 2 Spaces before you choose a plan: you pick a plan later, not now.

The AI Authority is a general community about working with AI, not a course for cyber security professionals. You do not need it to act on anything here: the moves above cost nothing and stand on their own. The data on this page is the same either way.

Noted, and thank you. We’ll email you if a Space for cyber security professionals launches. Nothing else.

That did not look like an email address, so nothing was saved. Have another go below.

We could not save that. The fault is ours, not yours, and your address was not stored. Please try again later.

No Space for cyber security professionals yet. Should there be one?

Collab365 Spaces is built by the same people as this site. We find the problems that AI and automation are creating inside one kind of work, then solve them as short courses, briefings and Blueprints. Each Space is the community too, so the research and the people doing your job are in the same place.

What a Space actually is, in full

Collab365 launches new communities where the need is real. If one for cyber security professionals existed, with researched problems, courses and people in the same boat, would you want in?

Your email

We use your email address for one thing: to tell you if a Space for cyber security professionals launches. We never sell it, never use it for unrelated marketing, and every email has a one-click unsubscribe. Our privacy policy has the full version.

This unlocks nothing. Every figure, every row and every step on this page is already yours, whether you fill this in or not.

No deadline on any of this. The page will still be here, and the data is refreshed on a published schedule rather than when someone wants a headline.

Questions people ask about this job

Will AI replace Cyber security professionals?: Not as a job, but it is already doing parts of the work. Across the 161 official task statements scored for Cyber security professionals (United Kingdom, SOC 2135), 55% of the importance-weighted core work is made of tasks today's AI could already do most of. The overall exposure score is 59 out of 100 (range 53–65, band: partial). That is a statement about tasks, not about headcount: this measures what AI could do, not whether any employer adopts it, whether the law allows it, or whether doing the routine parts faster creates more demand for the human parts. Figures are from release 2026-q4.1.
Which tasks in “Cyber security professionals” can AI already do?: The highest-scoring tasks in release 2026-q4.1 are: “Write and execute scripts to automate tasks, such as parsing large data files” (100/100, very high); “Assist in creating cyber security awareness training for colleagues” (93/100, very high); “Write reports in the context of the cyber security role” (93/100, very high). Each score comes from five published 0–4 ratings turned into a number by a published formula, and each carries the model's one-sentence reason on the page.
Which tasks in “Cyber security professionals” stay human?: About 19% of this job's task weight sits in work that scores low for AI exposure. The lowest-scoring tasks in release 2026-q4.1 are: “Collect evidence from crime scenes” (0/100, minimal); “Undergo security checks and vetting procedures” (2/100, minimal); “Justify findings under cross-examination in courts of law” (2/100, minimal). Low scores usually mean the task needs a body in a room, a legally accountable human, or trust built in real time. Those are the three things the scoring rubric treats as gates rather than obstacles.
What should someone working in “Cyber security professionals” do about AI?: Start from the ledger rather than the headline: 55% of this job's weighted core work is exposed, and roughly 19% is not. The practical move is to spend more of your week on the tasks that score low, the ones above, and to get fluent at directing AI through the tasks that score high, because those are the parts that change whether or not you are ready for them. This page does not predict your job, and nothing here is career advice tailored to you: the score describes the occupation, not the person.
How is the AI exposure score for Cyber security professionals calculated?: Each official task statement for the occupation is rated on five published 0–4 dimensions (output replicability, physical embodiment, licensed accountability, real-time human trust, and data availability) by claude-opus-5 using scoring prompt task_scoring_v1.0. The model never writes the score; a published formula turns the five ratings into a 0–100 number, so every score can be recomputed by hand. The occupation figure is the importance-weighted mean across 161 scored tasks. The prompt, the rubric, the formula and the full dataset are published at https://futureproof.collab365.com/method and https://futureproof.collab365.com/data/2026-q4.1 under CC BY 4.0.

Where these numbers come from

About the data on this page

Provisional, because the ONS revises this figure in the autumn.
This headcount comes from a survey, not a census, so treat it as a good estimate rather than an exact count.
2 rows are marked low confidence, so treat them as a ballpark rather than a fine measurement.
The match between this job and its counterpart in the other country is partial, so the two pages count slightly different groups of people.
50 of this occupation's scored task statements carry a score that was measured under a different occupation's context, because the statement is shared between jobs and has only been scored once so far. Each one names the occupation it was measured under in the free routes below; none is presented as a measurement for this job.
Task clusters are not derived in this release, so the task-cluster field is empty and no Collab365 Space routing is attached to this occupation yet.

Task statements: gaisi-indexProcessing: catalogue-bridge → ssc-relatedness-weighting → task-scoring → score-aggregation
Task weights: gaisi-index (relatedness)
Scores: Rubric task_scoring_v1.0, model claude-opus-5, computed 2026-08-05.
Pay and employment: ashe-t14 (ASHE 2025 provisional (reference April 2025))nomis-aps (Apr 2025-Mar 2026 (latest APS 12-month period))

Figures on this page come from release 2026-q4.1, published 2026-08-05. Every release keeps its own permanent address, so a figure you cite in March is still there, unchanged, in November.

The plain-English wording on this page is assembled directly from the task statements and the published ratings, not written by hand for this occupation. That is why it is specific, and it is also why we say so.

The routes and free resources further up are today’s, not the release’s (last reviewed 2026-08-05). A route is an offer, not a historical fact, so it moves on its own clock.

How we score a job Download this release Look up another job

Using these figures?

Cite this

Everything on this site is published under CC BY 4.0. Quote it, chart it, sell something built on it. Just say where it came from, and cite the dated release rather than the site, so the figure you quote stays checkable.

Plain text

Collab365 (2026). Collab365 Futureproof: task-level AI exposure for US and UK occupations, release 2026-q4.1 (methodVersion 2.0.0, promptVersion task_scoring_v1.0). https://futureproof.collab365.com/data/2026-q4.1. Licensed CC BY 4.0. Built with O*NET data (USDOL/ETA, CC BY 4.0); ONS data (Open Government Licence v3.0); GAISI task framework (arXiv:2507.22748, MIT); BLS data (public domain).

BibTeX

@misc{collab365futureproof2026q41,
  title        = {Collab365 Futureproof: task-level AI exposure for US and UK occupations, release 2026-q4.1},
  author       = {{Collab365}},
  year         = {2026},
  url          = {https://futureproof.collab365.com/data/2026-q4.1},
  note         = {Release 2026-q4.1, methodVersion 2.0.0, promptVersion task_scoring_v1.0, CC BY 4.0}
}

Permalink

https://futureproof.collab365.com/data/2026-q4.1

Data as of release 2026-q4.1, published 2026-08-05. Releases never change after publication; when the figures move, a new dated release is published beside this one and this one stays exactly where it is.