The global skills and competency framework for the digital world

Security, privacy and ethics

Ensuring the protection of sensitive information, uphold privacy of data and individuals, and promotes ethical conduct within and outside the organisation.

This is a prototype for SFIA 9. It is subject to change before publication.

Guidance notes

These principles ensure the protection of sensitive information, uphold privacy of data and individuals, and promotes ethical conduct within and outside the organisation.

The SFIA levels provide a progression where professionals begin by understanding and adhering to these foundational principles. As they advance, their focus shifts towards implementing, influencing, and ultimately leading the adoption of practices that reinforce security, privacy, and ethical standards across their organisation. This progression underlines the increasing responsibility professionals bear in sustaining an organisational culture that prioritises security, privacy and ethics.

Level 1 - Follow

  • Develops an awareness of the rules and expectations of their role and the organisation.

Level 2 - Assist

  • Has a good understanding of their role and the organisation’s rules and expectations. 

Level 3 - Apply

  • Applies appropriate professionalism and working practices and knowledge to work. 

Level 4 - Enable

  • Applies and adapts applicable standards and recognises their importance in achieving team outcomes. 

Level 5 - Ensure, advise

  • Proactively contributes to the implementation of professional working practices and culture.  

Level 6 - Initiate, influence

  • Takes a leading role in promoting and ensuring appropriate culture and working practices, including the provision of equal access and opportunity to people with diverse abilities.

Level 7 - Set strategy, inspire, mobilise

  • Provides clear direction and strategic leadership for the implementation of compliance and organisational culture and working practices, and actively promotes diversity and inclusivity.