NICE FRAMEWORK COMPONENTS V2.2.0

NICE is pleased to announce the release of NICE Framework Components v2.2.0. The NICE Workforce Framework for Cybersecurity (NICE Framework) establishes a standard approach and common language for describing cybersecurity work and individual capabilities. NICE Framework Components include Work Role Categories, Work Roles, Competency Areas, and Task, Knowledge, and Skill (TKS) statements as well as the relationships between those elements. 

NICE Framework Components v.2.2.0 includes the following updates:

• Work Roles:
  • Cybersecurity Supply Chain Risk Management Work Role (new OG-WRL-017)
• Competency Areas:
  • Cryptography Competency Area (NF-COM-006)
  • DevSecOps Competency Area (NF-COM-008)

You can access the updated NICE Framework Components on the Current Versions page of the NICE Framework Resource Center. A summary of changes and version records can be found on the NICE Framework Change Logs webpage.

These updates reflect the NICE Program Office’s commitment to maintaining the NICE Framework’s relevance to current cybersecurity practices through the active input of subject matter experts as well as the broader community of cybersecurity practitioners and educators. Learn more about NICE Framework revisions, how to use the NICE Framework, and how to engage in its continued development at the NICE Framework Resource Center.

STAY CONNECTED!

If you have ideas for new Work Roles or Competency Areas, updates to existing Components, or would like to be involved in content review or development, let us know: NICEFramework [at] nist.gov (NICEFramework[at]nist[dot]gov). In addition, the NICE Program Office will continue to look at ways to support use of the NICE Framework in various tools, through mappings and alignments, and by developing new support resources. Stay in touch to learn about these efforts and how to get involved by joining the NICE Framework Users Group.