The National Initiative for Cybersecurity Education (NICE) Workforce Framework for Cybersecurity has undergone a significant update, with the release of its version 2.0.0 introducing numerous enhancements aimed at standardizing how cybersecurity work and competencies are understood and managed.
This major revision of the NICE Framework by the U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) establishes a streamlined structure to better define, recruit, and develop cyber talent.
The NICE Framework is a critical resource for organizations, professionals, and educators involved in cybersecurity workforce development.
It provides a common language to describe work roles, competency areas, and the associated tasks, knowledge, and skills (TKS) needed.
By aligning these components, the framework seeks to improve talent management across the cybersecurity domain.
Version 2.0.0 brings substantial updates to the framework’s components, ensuring alignment with evolving industry needs. Here’s a breakdown of the changes:
Work Role Categories
One of the most notable changes is the removal of two Work Role Categories—Cyberspace Effects and Cyberspace Intelligence—along with several associated Work Roles.
These removed elements can now be found in the Department of Defense Cyber Workforce Framework (DCWF), which focuses on more specialized defense-related roles.
Affected Work Roles include:
This shift allows NICE to focus on more universally applicable cybersecurity workforce roles and competencies, while defense-specific roles are managed under the DCWF.
Version 2.0.0 introduces one new Work Role and revises two existing ones:
The addition of OT Cybersecurity Engineering reflects the growing importance of securing operational technology systems in industries such as energy, manufacturing, and utilities.
Updates to existing roles aim to ensure relevance and clarity in rapidly evolving cybersecurity fields.
The Cyber Resiliency (NF-COM-007) Competency Area now includes refined elements to better address the skills required for building robust cyber defense systems.
NICE 2.0.0 introduces substantial administrative improvements:
Training providers whose courses are listed in the NICCS Education & Training Catalog will need to remap their curricula to align with the updated framework.
Organizations are encouraged to reach out to NICCS for guidance on incorporating these revisions.
While some of the interactive tools on the NICCS platform are still running version 1.0.0 data, updates are underway to ensure seamless integration of version 2.0.0.
A comprehensive summary of changes is available on the NICE Framework History & Change Logs page.
Cybersecurity professionals and organizations alike are encouraged to explore the updated framework to better prepare for the rapidly changing cybersecurity landscape.
By streamlining workforce definitions, NICE continues to set the standard for excellence in cyber talent management.
Find this News Interesting! Follow us on Google News, LinkedIn, & X to Get Instant Updates!
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…