Find the Right Path Using the NICE Framework | SANS Institute

Find the Right Path Using the NICE Framework

The NICE Framework is a fundamental reference for describing and sharing information about cybersecurity work.

The Framework is designed to help you identify the right training and certifications for your current or desired cybersecurity role.

For more information on this framework and how it can assist you in finding the right cybersecurity training for you or your organisation, speak to a SANS representative.

NICE Framework Categories

The NICE Framework Categories are a high-level grouping of common cybersecurity functions. Select a category below to help you identify the right training and certifications for your current or desired cybersecurity role.

Oversight and Governance

Oversight and Governance (OG)

Provides leadership, management, direction, and advocacy so the organization may effectively manage cybersecurity-related risks to the enterprise and conduct cybersecurity work.

Design and Development

Design and Development (DD)

Conducts research, conceptualizes, designs, develops, and tests secure technology systems, including on perimeter and cloud-based networks.

Implementation and Operation

Implementation and Operation (IO)

Provides implementation, administration, configuration, operation, and maintenance to ensure effective and efficient technology system performance and security.

Protection and Defense

Protection and Defense (PD)

Protects against, identifies, and analyzes risks to technology systems or networks. Includes investigation of cybersecurity events or crimes related to technology systems and networks.

Investigation

Investigation (IN)

Collects, processes, analyzes, and disseminates information from all sources of intelligence on foreign actors' cyberspace programs, intentions, capabilities, research and development, and operational activities.

Cyber Intelligence

Cyberspace Intelligence (CI)

Collects, processes, analyzes, and disseminates information from all sources of intelligence on foreign actors' cyberspace programs, intentions, capabilities, research and development, and operational activities.

Cyberspace Effects

Cyberspace Effects (CE)

Plans, supports, and executes cyberspace capabilities where the primary purpose is to externally defend or conduct force projection in or through cyberspace.

ICS

Industrial Control Systems (ICS)

ICS security is a security framework that protects industrial control systems against accidental or intentional risks safeguards critical infrastructures.* *Recommended work roles