OTCCF v1.1

Operational Technology Cybersecurity Competency Framework

workforce
sg
Published

September 21, 2026

At a glance

Steward Cyber Security Agency of Singapore (CSA), jointly developed with Mercer Singapore
Canonical page OTCCF publication
Version 1.1 (document self-describes as “version 1.1”, effective 2021-10-08)
Source format PDF
License Copyright Cyber Security Agency of Singapore. CSA granted written permission to reference and integrate the OTCCF’s structure for non-commercial, academic and research purposes
framework_summary slug otccf-v1.1

Structure in cybed: terms

OTCCF structural mapping Frameworkotccf:FrameworkJob role(15 job roles, plus 30 Technical Skill Competencies)otccf:JobRole= cybed:Role = cybed:OrganizingUnitKey Task, Critical Core Skill, Knowledge, Ability= cybed:RoleElementcontainscybed:hasOrganizingUnithas elementcybed:hasElement
Job roles carry Key Tasks through nested Critical Work Functions; Technical Skill Competencies carry per-level Knowledge and Ability statements. Click any box or edge label to flip between plain English and the technical schema name.

Counts

Table 1
Measure Value
Organizing units (job roles and TSC categories) 61
Job roles 15
Strict elements 1,612
Unit-relation edges (career-map and TSC cross-references) 310
Elements per organizing unit 26.4
Elements per job role 18.0

15 job roles sit under 5 career-map tracks, each carrying Key Tasks through nested Critical Work Functions, Technical Skills & Competencies at a required proficiency level, and Critical Core Skills at a Basic/Intermediate/ Advanced level. 30 Technical Skill Competencies carry a six-level proficiency grid (Level 1 to Level 6) with per-level Knowledge and Ability statements on every Technical Skill Competency page. Level 1 is never populated for any skill; content starts at Level 2, 3, or 4 depending on the skill. 8 of the 30 are sourced from the SkillsFuture ICT Framework rather than authored by CSA and are flagged as such in the ingested data.

Provenance

Source

The Operational Technology Cybersecurity Competency Framework PDF, jointly developed by CSA and Mercer Singapore, supported by SkillsFuture Singapore and the Infocomm Media Development Authority.

Ingestion

scripts/010-ingest-otccf.R parses the Career Map, Skills Map, and TSC sections into the cybed schema, copying source text verbatim with no paraphrase, re-levelling, or summarisation, per the licence’s fidelity condition.

License

Copyright Cyber Security Agency of Singapore. CSA granted written permission to reference and integrate the OTCCF’s structure for non-commercial, academic and research use, on two conditions: a fixed attribution string, and that ingestion never misrepresent or alter the intent of CSA’s published job roles, skills, or mappings. The grant covers structure only, not statement text. This site shows OTCCF job-role and TSC titles, counts, and mappings, and does not reproduce statement text.

Caveats

  • The CSA grant is structure only. Cross-framework analyses that need OTCCF statement text must consult the source PDF directly; this site and the package’s public outputs stop at identifiers, titles, and counts.
  • Eight Technical Skill Competencies are sourced from the SkillsFuture ICT Framework, a body separate from CSA, and are flagged in the ingested data rather than folded silently into CSA-authored content.
  • The document names Mercer Singapore as a joint developer; whether Mercer holds any interest the CSA grant does not reach is unresolved.
Back to top

Reuse

CSA copyright; non-commercial academic