Security, privacy and ethics SCPE
Ensuring the protection of sensitive information, uphold privacy of data and individuals, and promotes ethical conduct within and outside the organisation.
SFIA 9 is in development
- SFIA 9 planned for publication October 2024
- This is subject to change before publication.
Guidance notes
Security, privacy and ethics in SFIA represent a progression from basic awareness to strategic leadership. It involves:
- understanding and adhering to organisational rules and expectations
- applying professional working practices
- implementing standards and best practices
- promoting a culture of security, privacy and ethical conduct
- using AI and data responsibly
- ensuring compliance with relevant regulations
- leading strategic initiatives to embed these principles, including addressing AI-related risks such as bias, privacy, and security.
Effective management of security, privacy and ethics encompasses technical knowledge, ethical decision-making skills and the ability to balance competing priorities. It also involves creating an environment where these principles are embedded in all aspects of work. As professionals advance, their role in sustaining an organisational culture that prioritises these critical aspects becomes increasingly important, particularly in a world where data breaches, privacy concerns and ethical dilemmas are increasingly common.
Level 1 - Follow
- Develops an understanding of the rules and expectations of their role and the organisation.
Level 2 - Assist
- Has a good understanding of their role and the organisation’s rules and expectations.
Level 3 - Apply
- Applies appropriate professionalism and working practices and knowledge to work.
Level 4 - Enable
- Applies and adapts applicable standards and recognises their importance in achieving team outcomes.
Level 5 - Ensure, advise
- Proactively contributes to the implementation of professional working practices and culture.
Level 6 - Initiate, influence
- Takes a leading role in promoting and ensuring appropriate culture and working practices, including the provision of equal access and opportunity to people with diverse abilities.
Level 7 - Set strategy, inspire, mobilise
- Provides clear direction and strategic leadership for the implementation of compliance and organisational culture and working practices, and actively promotes diversity and inclusivity.