NICE Framework
The NICE Workforce Framework for Cybersecurity defines the roles, skills, and knowledge needed across the industry. Use the Framework as a guide to advance your career with recognized cybersecurity certifications from GIAC.
Find the Right Path Using the NICE Framework
Aligning Certifications to the NICE Framework
The NICE Framework (National Initiative for Cybersecurity Education Cybersecurity Workforce Framework) is a fundamental reference for describing and sharing information about cybersecurity work.
The Framework is designed to help you identify the right training and certifications for your current or desired cybersecurity role.
Videos
NICE Framework Categories
The NICE Framework Categories are a high-level grouping of common cybersecurity functions. Select a category below to help you identify the right certifications and affiliate training for your current or desired cybersecurity role.
Oversight & Governance (OG)
Provides leadership, management, direction, and advocacy so the organization may effectively manage cybersecurity-related risks to the enterprise and conduct cybersecurity work.
Design And Development (DD)
Conducts research, conceptualizes, designs, develops, and tests secure technology systems, including on perimeter and cloud-based networks.
Implementation & Operation (IO)
Provides implementation, administration, configuration, operation, and maintenance to ensure effective and efficient technology system performance and security.
Protection & Defense (PD)
Protects against, identifies, and analyzes risks to technology systems or networks. Includes investigation of cybersecurity events or crimes related to technology systems and networks.
Investigation (IN)
Conducts national cybersecurity and cybercrime investigations, including the collection, management, and analysis of digital evidence.
Workforce Role Alignment
The NICE Framework is designed to help you identify the right training and certifications for your current or desired cybersecurity role.
Categories
High-level groupings of common cybersecurity functions that organize work into broad areas of responsibility across the cybersecurity workforce.
Specialty Areas
Distinct domains within cybersecurity that define focused areas of expertise and represent related sets of activities and responsibilities.
Work Roles
Detailed cybersecurity positions defined by specific knowledge, skills, and abilities (KSAs) required to successfully perform assigned tasks.