Table of Contents

Return to the Cybersecurity Career Playbook

The NICE Workforce Framework for Cybersecurity describes cybersecurity work and learner capabilities. It is not a security control framework. Use NIST CSF, RMF, SP 800-53, contracts, and applicable rules for cybersecurity outcomes and controls.

NIST SP 800-181 Rev. 1 defines the framework structure. NIST maintains the Components separately. As checked on October 10, 2026, the current Components version is 2.2.0. Check the current-versions page before each mapping.

Map Outcomes to Work

Follow this sequence:

  1. Define a business or mission outcome.
  2. Name the cybersecurity service which supports it.
  3. List recurring tasks and decision rights.
  4. Map tasks to current NICE Work Roles.
  5. Select relevant Task, Knowledge, and Skill statements.
  6. Define proficiency evidence.
  7. Compare needed and current capability.
  8. Choose train, hire, contract, redesign, or accept.
  9. Review after the work or risk changes.

Work Roles group work. They are not job titles, people, certifications, or headcount requirements. One job might cover several Work Roles. Several people might share one Work Role.

Define Evidence

Use observable outputs such as a reviewed incident record, tested configuration, risk analysis, code fix, recovery test, or decision log. Attendance and self-rating offer weak performance evidence by themselves.

Workforce Map Exercise

Use a fictional online service. The organization needs alert triage, incident coordination, identity review, secure deployment review, and risk reporting.

Create a table with:

  • Service outcome
  • Task
  • NICE Work Role and version
  • Needed knowledge or skill
  • Evidence standard
  • Current owner
  • Gap
  • Action and review date

Pass condition: Every task maps to an outcome and owner. Every capability has observable evidence. The record identifies the Components version and does not treat NICE as a control checklist.

References

Compare NICE with the DoD model in NICE and DCWF Comparison .