NISCAP), risk management, intrusion detection, contingency planning, incident handling, configuration control, change management, auditing, security authorization process, principles of Cybersecurity confidentiality, integrity, non-repudiation, availability, access control), and security testing. Working knowledge of the following is required: system security design process, defense-in- depth/breadth, engineering life cycle, information domains, cross-domain solutions, controlled interfaces, identification, authentication and authorization, system integration, ICD 503 (formerly.