NICE framework provides resource for a strong cybersecurity workforce

November 3, 2016, National Institute of Standards and Technology
NICE framework provides resource for a strong cybersecurity workforce
The NICE Cybersecurity Workforce Framework provides building blocks for a trained workforce. Credit: Natasha Hanacek/NIST

The U.S. Commerce Department's National Institute of Standards and Technology (NIST) released a resource that will help U.S. employers more effectively identify, recruit, develop and maintain cybersecurity talent. The draft NICE Cybersecurity Workforce Framework (NCWF) provides a common language to categorize and describe cybersecurity work to help organizations build a strong staff to protect their systems and data. It was announced today at the 2016 NICE Conference and Expo.

Cybersecurity is still a nascent and rapidly developing field in which job titles and role descriptions vary from organization to organization and sector to sector. The NCWF can be viewed as a cybersecurity workforce dictionary that will help organizations define and share information in a detailed, consistent and descriptive way.

The NICE workforce framework was developed by the NIST-led National Initiative for Cybersecurity Education (NICE ) and is the culmination of many years of collaboration between industry, government and academia. The U.S. Departments of Defense and Homeland Security were significant contributors.

The NCWF was designed to serve several key groups, including employers, current cybersecurity staff, students and workers considering a career in the field, educators and workforce trainers and technology providers.

In addition to helping educate, recruit, train and retain a qualified cybersecurity workforce, the NCWF will serve as a building block for the development of training standards, as well as for individual career planning. It will also allow organizations to develop a more realistic image of their cybersecurity workforce.

"When identifying their cybersecurity staff, many organizations overlook cybersecurity tasks being performed by lawyers, auditors and procurement officers," said Bill Newhouse, NICE deputy director and lead author of the document. "The NCWF can help an organization identify cybersecurity tasks within a work role that are vital to its mission and then examine if its current staff can perform those tasks and, if not, hire staff who can."

The NCWF organizes the workforce into an overarching structure of seven high-level categories that group work and workers sharing common functions. Two examples are "Oversight and Govern" and "Protect and Defend." The seven categories are made up of more than 30 specialty areas such as "Incident Response" and "Legal Advice and Advocacy." Some specialty areas map to a single work role and others are contained in more than one work role.

The more than 50 work roles defined in the framework include "cyber legal advisor" and "vulnerability analyst." Each work role is defined by extensive sets of related knowledge, skills and abilities (KSAs) and tasks.

The federal government will soon be using the NCWF to identify its , as directed by the Federal Cybersecurity Workforce Assessment Act of 2015 (Division N, Consolidated Appropriations Act, 2016 ).

Explore further: NICE issues cybersecurity workforce framework for public comment

Related Stories

Cybersecurity report imagines threat scenarios

May 2, 2016

The Center for Long-Term Cybersecurity at UC Berkeley's School of Information lays out five cybersecurity threat scenarios in a new report, Cybersecurity Futures 2020. The report is available online.

Recommended for you

Engineering cellular function without living cells

March 25, 2019

Genes in living cells are activated – or not – by proteins called transcription factors. The mechanisms by which these proteins activate certain genes and deactivate others play a fundamental role in many biological processes. ...

What ionized the universe?

March 25, 2019

The sparsely distributed hot gas that exists in the space between galaxies, the intergalactic medium, is ionized. The question is, how? Astronomers know that once the early universe expanded and cooled enough, hydrogen (its ...

Catalyst advance removes pollutants at low temperatures

March 25, 2019

Researchers at Washington State University, University of New Mexico, Eindhoven University of Technology, and Pacific Northwest National Laboratory have developed a catalyst that can both withstand high temperatures and convert ...


Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.