Lack of Cybersecurity skills and competencies required for cybersecurity technical work.
Risk Description
This risk lies in the unavailability of skilled personnel with expertise in information technology and cybersecurity.
Existing Controls
No Control
Risk Mitigation Policy
- Availability of training plans for ICT functional needs.
- Development of employee motivation plans to retain employees and attract external expertise.
- Implementation of training programs for ICT employees that help raise their competencies and skills.
- Periodic monitoring of retention, recruitment, and attrition rates for ICT employees.
- Availability of external employment alternatives for highly qualified and skilled employees.
Location/Contact Person details
The chairman of risk management sub-committee in UTAS-SUR
Dr.Sami Al-Batashi, Phone: +968 9293 9604
Email: sami.albattashi@utas.edu.om
Risk Management Authority
Risk Management Committee in UTAS-SUR
Risk Likelihood
Medium
Risk Impact
High
Risk Level
Medium
Risk Incident Response Procedures
- Actions taken to prevent recurrence include assigning a replacement employee with the appropriate skill to compensate for the shortfall.
- Training other individuals on the required competencies and skills.
- Updating the training and recruitment plan to find new replacements.
- Coordinating with Human Resources to hire new qualified employees.
Risk Termination
By sending the final report explaining the problem causes and how we can mitigate next time.