Updated NICE Framework Issued by CISA
The National Initiative for Cybersecurity Education (NICE) has released an updated version of its Framework, now at version 2.0.0. This resource continues to establish a standard approach and common language for describing cybersecurity work and learner capabilities, not only in the nation but also across public, private, and academic sectors.
The NICE Framework, initially developed by the Department of Defense (DoD), is now maintained by the Cybersecurity and Infrastructure Security Agency (CISA). This latest update aims to help employers develop their cybersecurity workforce, improve the identification, recruitment, development, and retention of cybersecurity talent, and foster better communication among stakeholders in the cybersecurity ecosystem.
Version 2.0.0 of the NICE Framework has seen several significant changes. Two work role categories, cyberspace effects and cyberspace intelligence, have been removed and can now be found in the DoD Cyber Workforce Framework (DCWF). In their place, a new work role, operational technology cybersecurity engineering (DD-WRL-009), has been added.
Moreover, one competency area, cyber resiliency (NF-COM-007), has been updated, as well as two work roles, digital evidence analysis (IN-WRL-002) and insider threat analysis (PD-WRL-005). Administrative updates include fixing typos and spelling errors, as well as the removal of duplicate or redundant TKS statements.
It's important to note that while users may choose to continue using older versions of the NICE Framework, the NICE Program Office encourages referencing the most recent published version of the components. Outdated versions may not be supported by the NICE Program Office.
The NICE Framework remains a nationally focused resource for cybersecurity workforce development. Its primary goal is to provide a comprehensive understanding of various cybersecurity roles, competencies, and work roles, helping to bridge the gap between education and industry needs.
For more information about the NICE Framework 2.0.0, please visit the official CISA website.