Find the Right Path Using the NICE Framework | SANS Institute

Find the Right Path Using the NICE Framework

The NICE Framework is a fundamental reference for describing and sharing information about cybersecurity work.

The Framework is designed to help you identify the right training and certifications for your current or desired cybersecurity role.

NICE Framework Categories

The NICE Framework Categories are a high-level grouping of common cybersecurity functions. Select a category below to help you identify the right training and certifications for your current or desired cybersecurity role.

Security Provisionals (SP)

Conceptualizes, designs, procures, and/or builds secure information technology (IT) systems, with responsibility for aspects of system and/or network development.

Operate and Maintain (OM)

Provides leadership, management, direction, or development and advocacy, so the organization may effectively conduct cybersecurity work

Oversee and Govern (OV)

Provides leadership, management, direction, or development and advocacy so the organization may effectively conduct cybersecurity work.

Protect and Defend (PR)

Identifies, analyzes, and mitigates threats to internal information technology (IT) systems and/or networks.

Performs highly-specialized review and evaluation of incoming cybersecurity information to determine its usefulness for intelligence.

Collect and Operate (CO)

Provides specialized denial and deception operations and collection of cybersecurity information that may be used to develop intelligence.

Investigate (IN)

Investigates cybersecurity events or crimes related to information technology (IT) systems, network, and digital evidence.

Industrial Control Systems

ICS security is a security framework that protects industrial control systems against accidental or intentional risks safeguards critical infrastructures.* *Recommended work roles