This publication from the National Initiative for Cybersecurity Education (NICE) describes the Workforce Framework for Cybersecurity (NICE Framework), a fundamental reference for describing and sharing information about cybersecurity work. It expresses that work as Task statements and describes Knowledge and Skill statements that provide a foundation for learners including students, job seekers, and employees. The use of these statements helps students to develop skills, job seekers to demonstrate competencies, and employees to accomplish tasks. As a common, consistent lexicon that categorizes and describes cybersecurity work, the NICE Framework improves communication about how to identify, recruit, develop, and retain cybersecurity talent. The NICE Framework is a reference source from which organizations or sectors can develop additional publications or tools that meet their needs to define or provide guidance on different aspects of cybersecurity education, training, and workforce development.
Exective Summary
Each of us—individually and organizationally—performs important work that provides a contribution to society. However, as information and technology, including many evolving types of operational technology, grow increasingly complex and interconnected it can be difficult to clearly describe the work that is being performed or that we desire to accomplish, in these areas in particular. The National Initiative for Cybersecurity Education (NICE) recognizes that those performing cybersecurity work—including students, job seekers, and employees— are lifelong learners throughout their efforts to emphasize and address cybersecurity implications across many domains. This segment of people is referenced in this document both as “Learners” and at times as the “cybersecurity workforce”, though the latter is not meant to imply that the work roles and content included in the NICE Framework apply only to those fully embedded in the cybersecurity domain. The tasks that these learners perform are further referenced here as “cybersecurity work”, and the Framework provides a means to describing that work with precision to support learner education or training and in the recruitment, hiring, development, and retention of employees. The NICE Framework has been developed to help provide a reference taxonomy—that is, a common language—of the cybersecurity work and of the individuals who carry out that work. The NICE Framework supports the NICE mission to energize, promote, and coordinate a robust community working together to advance an integrated ecosystem of cybersecurity education, training, and workforce development. The NICE Framework provides a set of building blocks for describing the tasks, knowledge, and skills that are needed to perform cybersecurity work performed by individuals and teams. Through these building blocks, the NICE Framework enables organizations to develop their workforces to perform cybersecurity work, and it helps learners to explore cybersecurity work and to engage in appropriate learning activities to develop their knowledge and skills. This development, in turn, benefits employers and employees through the identification of career pathways that document how to prepare for cybersecurity work using the data of Task, Knowledge, and Skill (TKS) statements bundled into Work Roles and Competencies.
The use of common terms and language helps to organize and communicate the work to be done and the attributes of those that are qualified to perform that work. In this way, the NICE Framework helps to simplify communications and provide focus on the tasks at hand. Finally, use of the NICE Framework improves clarity and consistency at all organizational levels—from an individual to a technology system to a program, organization, sector, state, or nation.
| |
Executive Summary |
|
エグゼクティブサマリー |
| 1 |
Background |
1 |
背景 |
| 1.1 |
Attributes of the NICE Framework |
1.1 |
NICEフレームワークの属性 |
| 1.2 |
Purpose and Applicability |
1.2 |
目的と適用性 |
| 1.3 |
Audience |
1.3 |
想定読者 |
| 1.4 |
Organization of this Publication |
1.4 |
本出版物の構成 |
| 2 |
NICE Framework Building Blocks |
2 |
NICEフレームワークのビルディングブロック |
| 2.1 |
Task Statements |
2.1 |
タスクステートメント |
| 2.2 |
Knowledge Statements |
2.2 |
知識ステートメント |
| 2.3 |
Skill Statements |
2.3 |
スキルステートメント |
| 3 |
Using the NICE Framework |
3 |
NICEフレームワークの利用 |
| 3.1 |
Using Existing Task, Knowledge, and Skill (TKS) Statements |
3.1 |
既存タスク・知識・スキル（TKS）ステートメントの利用 |
| 3.2 |
Creating New TKS Statements |
3.2 |
新規TKSステートメントの作成 |
| 3.3 |
Competencies |
3.3 |
コンピテンシー |
| 3.3.1 |
Using Existing Competencies |
3.3.1 |
既存コンピテンシーの利用 |
| 3.3.2 |
Creating New Competencies |
3.3.2 |
新規コンピテンシーの作成 |
| 3.4 |
Work Roles |
3.4 |
職務 |
| 3.4.1 |
Using Existing Work Roles |
3.4.1 |
既存職務の利用 |
| 3.4.2 |
Creating a New Work Role |
3.4.2 |
新規職務の作成 |
| 3.5 |
Teams |
3.5 |
チーム |
| 3.5.1 |
Building Teams with Work Roles |
3.5.1 |
職務でチームを作る |
| 3.5.2 |
Building Teams with Competencies. |
3.5.2 |
コンピテンシーでチームを作る |
| 4 |
Conclusion |
4 |
結論 |
| 5 |
References |
5 |
参考文献 |
| |
Appendix |
|
補足 |
| A |
Acronyms |
A |
頭字語 |
| B |
Glossary |
B |
用語集 |
4 Conclusion
Through the application of the building block approach described by the NICE Framework, users can benefit from a consistent method for organizing and communicating the work to be done via Task statements and the Knowledge and Skills of individual learners who support that work. The NICE Framework helps guide the efforts of employers to describe cybersecurity work, education and training providers to prepare cybersecurity workers, and learners to demonstrate their capabilities to perform cybersecurity work.
The ability to describe Tasks, Knowledge, and Skills is important to ensure a comprehensive understanding of the work and the workforce. The NICE Framework provides an extensible reference resource that can be applied and used by various organizations or sectors to describe the work to be performed in many areas. The benefits to these organizations support the NICE mission of energizing, promoting, and coordinating a robust community working together to advance an integrated ecosystem of cybersecurity education, training, and workforce development.
Comments