Skip to main content
ASTRAReady

Framework crosswalks

Where ASTRA Ready examination objectives relate to concepts in published frameworks. A crosswalk is our own mapping. It is not accreditation, endorsement, equivalence or proof that a credential holder implements the framework.

Crosswalk version 0.2 · reviewed 7 October 2026 · Issued by ASTRA Ready

ASTRA Tech Fundamentals objectives are not yet included.

How to read a row

Direct
— the assessed ASTRA task substantially matches the cited concept at the stated commercial-judgement boundary.
Supporting
— the objective develops judgement relevant to the concept but does not assess performance of the complete framework outcome.
Partial
— one defined aspect overlaps, while substantial professional or operational responsibilities remain outside the ASTRA assessment.

108 of 273 rows shown

Download the crosswalk (CSV)

FinOps Framework 2026

Version 2026 · 2026 · Licence: CC BY 4.0 · FinOps Framework by FinOps Foundation · Reviewed 7 October 2026

ASTRA Ready has mapped the published examination objectives to concepts in the FinOps Framework 2026 where a real relationship exists. The crosswalk covers areas such as cost units, licensing, forecasting, commitments, governance, architecture decisions and technology value. It helps learners, employers, partners and reviewers see where ASTRA Ready commercial-judgement objectives touch established FinOps practice. It does not mean ASTRA Ready programmes are FinOps Foundation certifications, that the Foundation has reviewed or endorsed ASTRA Ready, or that an ASTRA Ready credential shows full FinOps practitioner competence. Objectives with no FinOps row sit outside the Framework's scope. Labels show whether the connection is Direct, Supporting or Partial. ASTRA Ready records the Framework version and review date and will reassess affected rows when the Framework or the objectives change.

25 objectives · 27 rows · Direct 18 · Supporting 9 · Partial 0

Unit Economics (opens in a new tab)

  • AdvisorAdvisor D2.1Relationship: Direct

    Given a scenario, identify the cost meter, period, usage owner and forecast exposure behind a quote.

    ASTRA directly assesses whether the candidate can identify the cost meter, period, usage owner, and forecast exposure; that decision matches FinOps capability Unit Economics at the published assessment boundary.

  • AdvisorAdvisor D2.6Relationship: Supporting

    Given a scenario, calculate commercial economics without merging subscription and partner-service revenue.

    The requirement to calculate commercial economics without merging subscription and partner-service revenue supports FinOps capability Unit Economics; ASTRA assesses the related judgement, not full operational ownership.

  • AdvisorAdvisor D2.7Relationship: Direct

    Given a scenario, calculate released operational capacity while separating model from realised return.

    This objective directly assesses whether candidates can calculate released operational capacity while separating model from realised return; the task matches FinOps capability Unit Economics within ASTRA's scope.

Licensing & SaaS (opens in a new tab)

  • AdvisorAdvisor D2.2Relationship: Direct

    Given a scenario, interpret entitlements, rights and commitment terms under changing demand.

    Here ASTRA directly assesses whether the candidate can interpret entitlements, rights and commitment terms under changing demand; the assessed decision aligns with FinOps capability Licensing & SaaS at the stated boundary.

Invoicing & Chargeback (opens in a new tab)

  • AdvisorAdvisor D2.3Relationship: Direct

    Given a scenario, reconcile a usage record to a defined billing line and find a mismatch.

    This objective directly assesses whether candidates can reconcile a usage record to its billing line and identify a mismatch; the task matches FinOps capability Invoicing & Chargeback within ASTRA's scope.

Rate Optimization (opens in a new tab)

  • AdvisorAdvisor D2.4Relationship: Direct

    Given a scenario, calculate stepped or tiered charges and the cost of unused commitment.

    This objective directly assesses whether candidates can calculate stepped or tiered charges and the cost of unused commitment; the task matches FinOps capability Rate Optimization within ASTRA's scope.

Forecasting (opens in a new tab)

  • AdvisorAdvisor D2.5Relationship: Direct

    Given a scenario, compare scenarios without treating demand assumptions as confirmed savings.

    ASTRA directly assesses whether the candidate can compare scenarios without treating demand assumptions as confirmed savings; that decision matches FinOps capability Forecasting at the published assessment boundary.

Governance, Policy & Risk (opens in a new tab)

  • AdvisorAdvisor D8.1Relationship: Supporting

    Given a scenario, link budget, admission and approval controls to cost and service continuity.

    Requiring candidates to link budget and approval controls to cost and continuity supports FinOps capability Governance, Policy & Risk; ASTRA tests the related decision rather than complete operational practice.

Attribution and reuse
Framework used: FinOps Framework 2026, including the March 2026 update; reviewed 7 October 2026. The crosswalk uses selected Framework capability names and URLs. The FinOps Foundation licenses Framework content under Creative Commons Attribution 4.0 International (CC BY 4.0), which permits sharing and adaptation, including commercial use, with credit, a licence link and an indication of changes. Attribution: "FinOps Framework by FinOps Foundation." ASTRA Ready adapted selected capability references under CC BY 4.0 and made the mapping judgements independently. ASTRA Ready does not use FinOps Foundation trademarks to suggest endorsement. Mapping an objective to a capability does not make an ASTRA Ready programme or credential a FinOps Foundation programme or certification. Links: https://www.finops.org/framework/ · https://creativecommons.org/licenses/by/4.0/

NIST Cybersecurity Framework (CSF) 2.0

Version 2.0 · 2024 · Reuse: NIST publication (CSWP 29); U.S. Government work, not subject to copyright in the United States; source credit given · Reviewed 7 October 2026

ASTRA Ready has mapped the published examination objectives to concepts in the NIST Cybersecurity Framework (CSF) 2.0 where the assessed commercial judgement relates to a CSF outcome. The crosswalk uses CSF Functions and Categories covering governance, roles and authorities, risk, assets, identity, data security, resilience, incident response and recovery. It helps readers see how selected ASTRA Ready objectives connect to a widely used cybersecurity risk vocabulary. It is not a statement that NIST has reviewed, approved, accredited, certified or endorsed ASTRA Ready or its credentials, and passing an ASTRA Ready examination does not show implementation of the CSF or operation of a cybersecurity programme. Rows are omitted where the relationship would be stretched. ASTRA Ready records the framework version and review date so rows can be reassessed when objectives or CSF resources change.

47 objectives · 48 rows · Direct 7 · Supporting 41 · Partial 0

GV.RR — Roles, Responsibilities, and Authorities (opens in a new tab)

  • AdvisorAdvisor D1.2Relationship: Supporting

    Given a scenario, trace the producer, consumer, integrator and business approver through a proposed flow.

    This objective supports NIST CSF concept GV.RR: candidates must trace the producer, consumer, integrator and business approver through a proposed flow; broader operational ownership is not assessed.

  • AdvisorAdvisor D3.3Relationship: Direct

    Given a scenario, assign control operation, disclosure and customer-exception decisions to their authorised owners.

    This objective directly assesses whether candidates can assign control operation, disclosure and customer-exception decisions to their authorised owners; the task matches NIST CSF concept GV.RR within ASTRA's scope.

PR.PS — Platform Security (opens in a new tab)

  • AdvisorAdvisor D3.1Relationship: Supporting

    Given a scenario, identify supported least-privilege and diagnostic controls, and what remains unproven.

    This objective supports NIST CSF concept PR.PS: candidates must identify supported least-privilege and diagnostic controls, and what remains unproven, using related judgement within ASTRA's commercial scope.

GV.OV — Oversight (opens in a new tab)

  • AdvisorAdvisor D3.2Relationship: Supporting

    Given a scenario, translate a scoped security questionnaire into claim-specific evidence requests.

    This objective supports NIST CSF concept GV.OV: candidates must translate a scoped security questionnaire into claim-specific evidence requests, using related judgement within ASTRA's commercial scope.

  • AdvisorAdvisor D3.4Relationship: Supporting

    Given a scenario, interpret an assurance report within its period, tested services and exceptions.

    This objective supports NIST CSF concept GV.OV because candidates must interpret an assurance report within its period, tested services and exceptions; the assessment stays within the published commercial task.

  • AdvisorAdvisor D3.7Relationship: Supporting

    Given a scenario, respond to an assurance objection without extending supplier evidence to a customer tenant.

    This objective supports NIST CSF concept GV.OV because candidates must answer an assurance objection without extending supplier evidence beyond its scope; the assessment stays within the published commercial task.

ID.IM — Improvement (opens in a new tab)

  • AdvisorAdvisor D3.5Relationship: Supporting

    Given a scenario, sequence remediation, retest, customer acceptance and approved messaging.

    The requirement to sequence remediation, retest, customer acceptance and approved messaging supports NIST CSF concept ID.IM; ASTRA assesses the related judgement, not full operational ownership.

RS.CO — Incident Response Reporting and Communication (opens in a new tab)

  • AdvisorAdvisor D3.6Relationship: Supporting

    Given a scenario, calculate incident reporting time using the specified clock trigger and authorisation.

    Requiring candidates to calculate incident reporting time using the specified clock trigger and authorisation supports NIST CSF concept RS.CO; ASTRA tests the related decision rather than complete operational practice.

PR.DS — Data Security (opens in a new tab)

  • AdvisorAdvisor D8.2Relationship: Supporting

    Given a scenario, evaluate retention and subprocessor evidence across the actual data lifecycle.

    This objective supports NIST CSF concept PR.DS: candidates must evaluate retention and subprocessor evidence across the actual data lifecycle, using related judgement within ASTRA's commercial scope.

Attribution and reuse
Framework used: The NIST Cybersecurity Framework (CSF) 2.0, NIST CSWP 29, 26 February 2024; reviewed 7 October 2026. The crosswalk maps selected objectives to CSF Functions and Categories (for example GV.RR, ID.RA, PR.AA, RS.CO, RC.RP). It is ASTRA Ready's interpretation and is not an official NIST Informative Reference. NIST Technical Series works authored by NIST employees are not subject to copyright protection in the United States; NIST asks for source credit. Source credit: "Based on The NIST Cybersecurity Framework (CSF) 2.0, National Institute of Standards and Technology, U.S. Department of Commerce." NIST has not reviewed, approved, certified, accredited or endorsed ASTRA Ready. The crosswalk is not CSF implementation evidence. Links: https://doi.org/10.6028/NIST.CSWP.29 · https://www.nist.gov/copyrights-disclaimers

NIST AI RMF 1.0

Version 1.0 · 2023; revision in progress as of 2026-10-07 · Reuse: NIST publication (AI 100-1); U.S. Government work, not subject to copyright in the United States; source credit given · Reviewed 7 October 2026

ASTRA Ready has mapped the published examination objectives to concepts in the NIST Artificial Intelligence Risk Management Framework (AI RMF) 1.0 where the learning and assessment address AI context, governance, measurement, oversight, provider risk or deployment decisions. The crosswalk uses the GOVERN, MAP, MEASURE and MANAGE functions and selected categories. It makes relationships transparent without presenting ASTRA Ready as an AI governance authority or technical AI assurance scheme. NIST has not reviewed, approved, accredited, certified or endorsed ASTRA Ready. Passing an ASTRA Ready examination does not establish organisation-wide implementation of AI RMF outcomes. NIST is revising AI RMF 1.0; ASTRA Ready marks the version used and will review affected rows after the revision is published.

18 objectives · 18 rows · Direct 4 · Supporting 14 · Partial 0

MAP 1.1 — intended purpose, context and deployment setting (opens in a new tab)

  • AdvisorAdvisor D4.1Relationship: Direct

    Given a scenario, frame an AI-supported workflow by decision consequence, source and permitted action.

    This objective directly assesses whether candidates can frame an AI workflow by consequence, source, and permitted action; the task matches NIST AI RMF concept MAP 1.1 within ASTRA's scope.

MEASURE 1 — methods and metrics identified and applied (opens in a new tab)

  • AdvisorAdvisor D4.2Relationship: Supporting

    Given a scenario, evaluate a measured model result for the intended population and operating threshold.

    This objective supports NIST AI RMF concept MEASURE 1: candidates must evaluate a measured model result for the intended population and operating threshold; broader operational ownership is not assessed.

GOVERN 1 — organizational AI risk policies/processes (opens in a new tab)

  • AdvisorAdvisor D4.3Relationship: Supporting

    Given a scenario, define allowed data, processing purpose, retention and deletion evidence.

    The requirement to define allowed data, processing purpose, retention and deletion evidence supports NIST AI RMF concept GOVERN 1; ASTRA assesses the related judgement, not full operational ownership.

MEASURE 3 — mechanisms track identified AI risks (opens in a new tab)

  • AdvisorAdvisor D4.4Relationship: Supporting

    Given a scenario, interpret intervention metrics and choose the owner-led response to drift.

    Requiring candidates to interpret intervention metrics and choose the owner-led response to drift supports NIST AI RMF concept MEASURE 3; ASTRA tests the related decision rather than complete operational practice.

MANAGE 4 — risk treatments documented and monitored (opens in a new tab)

  • AdvisorAdvisor D6.2Relationship: Supporting

    Given a scenario, prepare a conditional deployment handover with monitoring and reversal gates.

    The requirement to prepare a conditional deployment handover with monitoring and reversal gates supports NIST AI RMF concept MANAGE 4; ASTRA assesses the related judgement, not full operational ownership.

MEASURE 2 — AI systems evaluated for trustworthiness (opens in a new tab)

  • AdvisorAdvisor D8.3Relationship: Supporting

    Given a scenario, distinguish AI assurance evidence from claims it does not establish.

    This objective supports NIST AI RMF concept MEASURE 2 because candidates must distinguish AI assurance evidence from claims it does not establish; the assessment stays within the published commercial task.

GOVERN 2 — accountability structures (opens in a new tab)

  • AdvisorAdvisor D8.5Relationship: Supporting

    Given a scenario, assign business, data, model and execution approval decisions to the correct owners.

    This objective supports NIST AI RMF concept GOVERN 2: candidates must assign business, data, model and execution approval decisions to the correct owners; broader operational ownership is not assessed.

  • AdvisorAdvisor D8.6Relationship: Supporting

    Given a scenario, sequence the review, version binding and release checks for a consequential action.

    This objective supports NIST AI RMF concept GOVERN 2: candidates must sequence the review, version binding and release checks for a consequential action, using related judgement within ASTRA's commercial scope.

GOVERN 6 — third-party AI risk (opens in a new tab)

  • AdvisorAdvisor D8.7Relationship: Supporting

    Given a scenario, decide which provider or model changes require retest before deployment.

    This objective supports NIST AI RMF concept GOVERN 6 because candidates must decide which provider or model changes require retest before deployment; the assessment stays within the published commercial task.

Attribution and reuse
Framework used: NIST Artificial Intelligence Risk Management Framework (AI RMF) 1.0, 26 January 2023; reviewed 7 October 2026. NIST has stated that AI RMF 1.0 is being revised; ASTRA Ready will re-review affected rows after the revision is published. The crosswalk maps selected objectives to GOVERN, MAP, MEASURE and MANAGE concepts. NIST's own crosswalk pages state that inclusion of a crosswalk does not imply NIST endorsement or comprehensive coverage; ASTRA Ready applies the same boundary. Source credit: "Based on the NIST Artificial Intelligence Risk Management Framework (AI RMF) 1.0, National Institute of Standards and Technology, U.S. Department of Commerce." NIST has not reviewed, approved, certified, accredited or endorsed ASTRA Ready. Links: https://www.nist.gov/itl/ai-risk-management-framework · https://airc.nist.gov/airmf-resources/playbook/

NICE Workforce Framework for Cybersecurity

Version SP 800-181 Rev.1; Components v2.2.0 · 2026 · Reuse: NIST publication (SP 800-181 Rev. 1, Components v2.2.0); U.S. Government work, not subject to copyright in the United States; source credit given · Reviewed 7 October 2026

ASTRA Ready has mapped the published examination objectives to concepts in the NICE Workforce Framework for Cybersecurity where ASTRA Cybersecurity Sales Specialist objectives and selected ASTRA Tech Sales Advisor objectives overlap established cybersecurity Work Roles or Competency Areas. The crosswalk uses NIST SP 800-181 Rev. 1 with NICE Framework Components v2.2.0. It describes occupational proximity; it does not turn ASTRA Ready credentials into NICE Work Roles, job qualifications or cybersecurity certifications. NIST and the NICE Program Office have not reviewed, approved, accredited, certified or endorsed ASTRA Ready. ASTRA Tech Sales Associate objectives are not mapped to NICE. ASTRA Ready will review the crosswalk when NICE Framework Components change.

48 objectives · 48 rows · Direct 0 · Supporting 0 · Partial 48

DD-WRL-006 — Systems Requirements Planning (opens in a new tab)

  • AdvisorAdvisor D1.2Relationship: Partial

    Given a scenario, trace the producer, consumer, integrator and business approver through a proposed flow.

    Asking candidates to trace the producer, consumer, integrator and business approver through a proposed flow partially overlaps NICE Work Role DD-WRL-006, while full role or framework performance remains outside ASTRA.

DD-WRL-001 — Cybersecurity Architecture (opens in a new tab)

  • AdvisorAdvisor D3.1Relationship: Partial

    Given a scenario, identify supported least-privilege and diagnostic controls, and what remains unproven.

    The requirement to identify supported least-privilege and diagnostic controls, and what remains unproven partially overlaps NICE Work Role DD-WRL-001, while full professional practice remains outside the ASTRA assessment.

OG-WRL-012 — Security Control Assessment (opens in a new tab)

  • AdvisorAdvisor D3.2Relationship: Partial

    Given a scenario, translate a scoped security questionnaire into claim-specific evidence requests.

    The requirement to translate a scoped security questionnaire into claim-specific evidence requests partially overlaps NICE Work Role OG-WRL-012, while full professional practice remains outside the ASTRA assessment.

  • AdvisorAdvisor D3.4Relationship: Partial

    Given a scenario, interpret an assurance report within its period, tested services and exceptions.

    Asking candidates to interpret an assurance report within its period, tested services and exceptions partially overlaps NICE Work Role OG-WRL-012, while full role or framework performance remains outside ASTRA.

  • AdvisorAdvisor D3.5Relationship: Partial

    Given a scenario, sequence remediation, retest, customer acceptance and approved messaging.

    This objective partially overlaps NICE Work Role OG-WRL-012 through the need to sequence remediation, retest, customer acceptance and approved messaging, while broader operational practice remains outside ASTRA.

OG-WRL-014 — Systems Security Management (opens in a new tab)

  • AdvisorAdvisor D3.3Relationship: Partial

    Given a scenario, assign control operation, disclosure and customer-exception decisions to their authorised owners.

    This objective partially overlaps NICE Work Role OG-WRL-014: candidates must assign control operation, disclosure and customer-exception decisions to their authorised owners, while full framework practice remains outside ASTRA.

PD-WRL-003 — Incident Response (opens in a new tab)

  • AdvisorAdvisor D3.6Relationship: Partial

    Given a scenario, calculate incident reporting time using the specified clock trigger and authorisation.

    This objective partially overlaps NICE Work Role PD-WRL-003: candidates must calculate incident reporting time using the specified clock trigger and authorisation, while full framework practice remains outside ASTRA.

NF-COM-002 — Artificial Intelligence (AI) Security Competency Area (opens in a new tab)

  • AdvisorAdvisor D4.1Relationship: Partial

    Given a scenario, frame an AI-supported workflow by decision consequence, source and permitted action.

    The requirement to frame an AI workflow by consequence, source, and permitted action partially overlaps NICE Competency Area NF-COM-002, while full professional practice remains outside the ASTRA assessment.

  • AdvisorAdvisor D4.2Relationship: Partial

    Given a scenario, evaluate a measured model result for the intended population and operating threshold.

    Asking candidates to evaluate a measured model result for the intended population and operating threshold partially overlaps NICE Competency Area NF-COM-002, while full role or framework performance remains outside ASTRA.

  • AdvisorAdvisor D4.3Relationship: Partial

    Given a scenario, define allowed data, processing purpose, retention and deletion evidence.

    This objective partially overlaps NICE Competency Area NF-COM-002 through the need to define allowed data, processing purpose, retention and deletion evidence, while broader operational practice remains outside ASTRA.

OG-WRL-008 — Privacy Compliance (opens in a new tab)

  • AdvisorAdvisor D8.2Relationship: Partial

    Given a scenario, evaluate retention and subprocessor evidence across the actual data lifecycle.

    The requirement to evaluate retention and subprocessor evidence across the actual data lifecycle partially overlaps NICE Work Role OG-WRL-008, while full professional practice remains outside the ASTRA assessment.

Attribution and reuse
Framework used: Workforce Framework for Cybersecurity (NICE Framework), NIST SP 800-181 Rev. 1, with NICE Framework Components v2.2.0 (28 April 2026); reviewed 7 October 2026. The crosswalk maps ASTRA Cybersecurity Sales Specialist objectives and selected ASTRA Tech Sales Advisor objectives to Work Roles and, where relevant, Competency Areas. ASTRA Tech Sales Associate objectives are not mapped to NICE. Work Roles describe areas of work, not job titles, and NIST notes that assessment typically occurs at the Task level; ASTRA Ready therefore records Work Role relationships as Partial unless a narrower relationship is stated. Source credit: "Based on the NICE Workforce Framework for Cybersecurity, National Institute of Standards and Technology, U.S. Department of Commerce." NIST and the NICE Program Office have not reviewed, approved, certified, accredited or endorsed ASTRA Ready. A mapping does not establish that a credential holder performs the full Work Role. Links: https://www.nist.gov/itl/applied-cybersecurity/nice/nice-framework-resource-center/nice-framework-current-versions

ESCO v1.2.1

Version v1.2.1 · 2025 · Reuse: European Commission reuse policy, Decision 2011/833/EU; acknowledgement given · Reviewed 7 October 2026

ASTRA Ready has mapped the published examination objectives to concepts in ESCO, the European classification of Skills, Competences, Qualifications and Occupations, where a defensible relationship exists to ICT sales occupations or skills. The crosswalk uses ESCO v1.2.1 and its concept URIs for occupations and skills such as ICT account management, ICT business development, presales, customer-needs analysis, business analysis, project management and ICT risk management. It makes the relevance of assessed activities easier to understand across roles and countries. It does not state that the European Commission has approved, accredited, certified or endorsed ASTRA Ready, and an ESCO relationship does not mean an ASTRA Ready credential qualifies a holder for an occupation. This publication uses the ESCO classification of the European Commission.

132 objectives · 132 rows · Direct 0 · Supporting 110 · Partial 22

ICT presales engineer (opens in a new tab)

  • AdvisorAdvisor D1.1Relationship: Supporting

    Given a scenario, frame a scoped technical-commercial pilot from the required outcome and unknown interface capabilities.

    This objective supports ESCO occupation "ICT presales engineer": candidates must frame a scoped technical-commercial pilot from the required outcome and unknown interface capabilities; broader operational ownership is not assessed.

  • AdvisorAdvisor D1.2Relationship: Supporting

    Given a scenario, trace the producer, consumer, integrator and business approver through a proposed flow.

    This objective supports ESCO occupation "ICT presales engineer": candidates must trace the producer, consumer, integrator and business approver through a proposed flow, using related judgement within ASTRA's commercial scope.

  • AdvisorAdvisor D4.1Relationship: Supporting

    Given a scenario, frame an AI-supported workflow by decision consequence, source and permitted action.

    This objective supports ESCO occupation "ICT presales engineer" because candidates must frame an AI workflow by consequence, source, and permitted action; the assessment stays within the published commercial task.

define integration strategy (opens in a new tab)

  • AdvisorAdvisor D1.3Relationship: Supporting

    Given a scenario, choose an integration pattern that meets timing, replay and duplicate constraints.

    The requirement to choose an integration pattern that meets timing, replay and duplicate constraints supports ESCO skill "define integration strategy"; ASTRA assesses the related judgement, not full operational ownership.

perform data analysis (opens in a new tab)

  • AdvisorAdvisor D1.4Relationship: Supporting

    Given a scenario, interpret reliability test measures without hiding retries or failed records.

    This objective supports ESCO skill "perform data analysis" because candidates must interpret reliability test measures without hiding retries or failed records; the assessment stays within the published commercial task.

  • AdvisorAdvisor D2.3Relationship: Supporting

    Given a scenario, reconcile a usage record to a defined billing line and find a mismatch.

    This objective supports ESCO skill "perform data analysis": candidates must reconcile a usage record to its billing line and identify a mismatch; broader operational ownership is not assessed.

  • AdvisorAdvisor D4.2Relationship: Supporting

    Given a scenario, evaluate a measured model result for the intended population and operating threshold.

    This objective supports ESCO skill "perform data analysis": candidates must evaluate a measured model result for the intended population and operating threshold, using related judgement within ASTRA's commercial scope.

interpret technical requirements (opens in a new tab)

  • AdvisorAdvisor D1.5Relationship: Supporting

    Given a scenario, resolve identifier, status, timestamp and version semantics in a two-party data contract.

    This objective supports ESCO skill "interpret technical requirements": candidates must resolve identifier, status, timestamp and version semantics in a two-party data contract; broader operational ownership is not assessed.

  • AdvisorAdvisor D1.6Relationship: Supporting

    Given a scenario, trace technical and approval boundaries across a candidate workflow.

    The requirement to trace technical and approval boundaries across a candidate workflow supports ESCO skill "interpret technical requirements"; ASTRA assesses the related judgement, not full operational ownership.

perform business analysis (opens in a new tab)

  • AdvisorAdvisor D2.1Relationship: Supporting

    Given a scenario, identify the cost meter, period, usage owner and forecast exposure behind a quote.

    This objective supports ESCO skill "perform business analysis" because candidates must identify the cost meter, period, usage owner, and forecast exposure; the assessment stays within the published commercial task.

  • AdvisorAdvisor D2.2Relationship: Supporting

    Given a scenario, interpret entitlements, rights and commitment terms under changing demand.

    This objective supports ESCO skill "perform business analysis": candidates must interpret entitlements, rights and commitment terms under changing demand, using related judgement within ASTRA's commercial scope.

  • AdvisorAdvisor D2.4Relationship: Supporting

    Given a scenario, calculate stepped or tiered charges and the cost of unused commitment.

    This objective supports ESCO skill "perform business analysis": candidates must calculate stepped or tiered charges and the cost of unused commitment, using related judgement within ASTRA's commercial scope.

implement ICT risk management (opens in a new tab)

  • AdvisorAdvisor D3.1Relationship: Partial

    Given a scenario, identify supported least-privilege and diagnostic controls, and what remains unproven.

    This objective partially overlaps ESCO skill "implement ICT risk management": candidates must identify supported least-privilege and diagnostic controls, and what remains unproven, while full professional practice remains outside ASTRA.

  • AdvisorAdvisor D3.3Relationship: Partial

    Given a scenario, assign control operation, disclosure and customer-exception decisions to their authorised owners.

    This objective partially overlaps ESCO skill "implement ICT risk management": candidates must assign control operation, disclosure and customer-exception decisions to their authorised owners, while full professional practice remains outside ASTRA.

  • AdvisorAdvisor D3.5Relationship: Partial

    Given a scenario, sequence remediation, retest, customer acceptance and approved messaging.

    Asking candidates to sequence remediation, retest, customer acceptance and approved messaging partially overlaps ESCO skill "implement ICT risk management", while full role or framework performance remains outside ASTRA.

manage IT security compliances (opens in a new tab)

  • AdvisorAdvisor D3.2Relationship: Partial

    Given a scenario, translate a scoped security questionnaire into claim-specific evidence requests.

    This objective partially overlaps ESCO skill "manage IT security compliances" through the need to translate a scoped security questionnaire into claim-specific evidence requests, while broader operational practice remains outside ASTRA.

  • AdvisorAdvisor D3.4Relationship: Partial

    Given a scenario, interpret an assurance report within its period, tested services and exceptions.

    This objective partially overlaps ESCO skill "manage IT security compliances": candidates must interpret an assurance report within its period, tested services and exceptions, while full framework practice remains outside ASTRA.

manage ICT data classification (opens in a new tab)

  • AdvisorAdvisor D4.3Relationship: Supporting

    Given a scenario, define allowed data, processing purpose, retention and deletion evidence.

    Requiring candidates to define allowed data, processing purpose, retention and deletion evidence supports ESCO skill "manage ICT data classification"; ASTRA tests the related decision rather than complete operational practice.

identify ICT security risks (opens in a new tab)

  • AdvisorAdvisor D4.5Relationship: Supporting

    Given a scenario, distinguish model intent, tool execution and reviewer authority in an AI control event.

    The requirement to separate model intent, tool execution, and reviewer authority supports ESCO skill "identify ICT security risks"; ASTRA assesses the related judgement, not full operational ownership.

propose ICT solutions to business problems (opens in a new tab)

  • AdvisorAdvisor D5.1Relationship: Supporting

    Given a scenario, deliver a bounded architecture recommendation with explicit exit criteria.

    This objective supports ESCO skill "propose ICT solutions to business problems": candidates must deliver a bounded architecture recommendation with explicit exit criteria, using related judgement within ASTRA's commercial scope.

  • AdvisorAdvisor D5.2Relationship: Supporting

    Given a scenario, compare options under complete first-year costs and nonfinancial gates.

    This objective supports ESCO skill "propose ICT solutions to business problems": candidates must compare options under complete first-year costs and nonfinancial gates; broader operational ownership is not assessed.

  • AdvisorAdvisor D5.3Relationship: Supporting

    Given a scenario, give a conditional purchasing decision with named triggers and accountable owners.

    This objective supports ESCO skill "propose ICT solutions to business problems": candidates must give a conditional purchasing decision with named triggers and accountable owners; broader operational ownership is not assessed.

perform project management (opens in a new tab)

  • AdvisorAdvisor D5.5Relationship: Supporting

    Given a scenario, deliver a governed customer/partner handover with review and exit conditions.

    Requiring candidates to deliver a governed customer/partner handover with review and exit conditions supports ESCO skill "perform project management"; ASTRA tests the related decision rather than complete operational practice.

  • AdvisorAdvisor D5.6Relationship: Supporting

    Given a scenario, sequence reversible pilot gates and the earliest evidence-backed next action.

    Requiring candidates to sequence reversible pilot gates and the earliest evidence-backed next action supports ESCO skill "perform project management"; ASTRA tests the related decision rather than complete operational practice.

  • AdvisorAdvisor D6.2Relationship: Supporting

    Given a scenario, prepare a conditional deployment handover with monitoring and reversal gates.

    Requiring candidates to prepare a conditional deployment handover with monitoring and reversal gates supports ESCO skill "perform project management"; ASTRA tests the related decision rather than complete operational practice.

perform customers' needs analysis (opens in a new tab)

  • AdvisorAdvisor D6.1Relationship: Supporting

    Given a scenario, calculate and order dependent testing, security and acceptance activities.

    Requiring candidates to calculate and order dependent testing, security and acceptance activities supports ESCO skill "perform customers' needs analysis"; ASTRA tests the related decision rather than complete operational practice.

  • AdvisorAdvisor D6.4Relationship: Supporting

    Given a scenario, frame a customer decision with technical, financial and governance constraints.

    The requirement to frame a customer decision with technical, financial and governance constraints supports ESCO skill "perform customers' needs analysis"; ASTRA assesses the related judgement, not full operational ownership.

  • AdvisorAdvisor D6.5Relationship: Supporting

    Given a scenario, target discovery questions to the owner and the gate each answer changes.

    This objective supports ESCO skill "perform customers' needs analysis": candidates must target discovery questions to the owner and the gate each answer changes; broader operational ownership is not assessed.

ICT business development manager (opens in a new tab)

  • AdvisorAdvisor D7.1Relationship: Supporting

    Given a scenario, define a partner motion while preserving the customer and supplier boundaries.

    This objective supports ESCO occupation "ICT business development manager": candidates must define a partner motion while preserving the customer and supplier boundaries, using related judgement within ASTRA's commercial scope.

  • AdvisorAdvisor D7.2Relationship: Supporting

    Given a scenario, apply deal-registration and conflict evidence before allocating attribution.

    Requiring candidates to apply deal-registration and conflict evidence before allocating attribution supports ESCO occupation "ICT business development manager"; ASTRA tests the related decision rather than complete operational practice.

  • AdvisorAdvisor D7.3Relationship: Supporting

    Given a scenario, distinguish sourced, influenced and disputed co-sell evidence.

    The requirement to distinguish sourced, influenced and disputed co-sell evidence supports ESCO occupation "ICT business development manager"; ASTRA assesses the related judgement, not full operational ownership.

manage ICT project (opens in a new tab)

  • AdvisorAdvisor D7.6Relationship: Supporting

    Given a scenario, prepare a governed channel handover with economics, owners, gaps and expiry.

    This objective supports ESCO skill "manage ICT project": candidates must prepare a governed channel handover with economics, owners, gaps and expiry, using related judgement within ASTRA's commercial scope.

  • AdvisorAdvisor D8.5Relationship: Supporting

    Given a scenario, assign business, data, model and execution approval decisions to the correct owners.

    The requirement to assign business, data, model and execution approval decisions to the correct owners supports ESCO skill "manage ICT project"; ASTRA assesses the related judgement, not full operational ownership.

  • AdvisorAdvisor D8.6Relationship: Supporting

    Given a scenario, sequence the review, version binding and release checks for a consequential action.

    This objective supports ESCO skill "manage ICT project": candidates must sequence the review, version binding and release checks for a consequential action; broader operational ownership is not assessed.

conduct impact evaluation of ICT processes on business (opens in a new tab)

  • AdvisorAdvisor D8.1Relationship: Supporting

    Given a scenario, link budget, admission and approval controls to cost and service continuity.

    This objective supports ESCO skill "conduct impact evaluation of ICT processes on business": candidates must link budget and approval controls to cost and continuity; broader operational ownership is not assessed.

Attribution and reuse
Classification used: ESCO v1.2.1, last updated 10 December 2025; reviewed 7 October 2026. The crosswalk uses selected ESCO occupation and skill concepts and their persistent URIs. ESCO is developed by the European Commission, which allows ESCO to be linked with other classifications for mapping purposes. Under Commission Decision 2011/833/EU the classification may be reused free of charge subject to acknowledgement and clear indication of adaptations. Acknowledgement: "This publication uses the ESCO classification of the European Commission." ASTRA Ready's relationship labels and rationales are ASTRA Ready's adaptations, not statements by the European Commission, which has not approved, accredited, certified or endorsed ASTRA Ready. An ESCO occupation mapping does not mean a credential qualifies a holder for that occupation. Links: https://esco.ec.europa.eu/en/use-esco · https://eur-lex.europa.eu/eli/dec/2011/833/oj

What this page is not

  • Not accreditation by any framework owner.
  • Not an informative reference accepted by NIST.
  • Not a FinOps Foundation programme.
  • Not a NICE work-role qualification.
  • Not an ESCO occupational qualification.
  • ASTRA Ready credentials are issued by ASTRA Ready and verified at /verify.

This publication uses the ESCO classification of the European Commission. FinOps Framework by FinOps Foundation, CC BY 4.0. Based on the NIST Cybersecurity Framework (CSF) 2.0, the NIST AI Risk Management Framework 1.0 and the NICE Workforce Framework for Cybersecurity, National Institute of Standards and Technology, U.S. Department of Commerce. NIST, the FinOps Foundation and the European Commission have not reviewed, approved or endorsed ASTRA Ready.