The National Initiative for Cybersecurity Education (NICE)
The National Initiative for Cybersecurity Education (NICE) aims to accelerate learning, inspire urgency, nurture a diverse community, guide career development, and support workforce planning in cybersecurity. With strategic goals focusing on skills development and workforce enhancement, NICE provides a framework for employers and workers in the cybersecurity field, emphasizing the importance of training, recruitment, and retention strategies.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
The National Initiative for Cybersecurity Education (NICE) AFCEA International Cyber Education, Research, and Training Symposium January 17, 2018 Bill Newhouse, Deputy Director of NICE Applied Cybersecurity Division, Information Technology Laboratory, National Institute of Standards and Technology (NIST)
NICE Strategic Goals Accelerate Learning and Skills Development Inspire a sense of urgency in both the public and private sectors to address the shortage of skilled cybersecurity workers Nurture A Diverse Learning Community Strengthen education and training across the ecosystem to emphasize learning, measure outcomes, and diversify the cybersecurity workforce Guide Career Development & Workforce Planning Support employers to address market demands and enhance recruitment, hiring, development, and retention of cybersecurity talent https://nist.gov/nice 2 2
NICE Strategic Goal #3: Guide Career Development and Workforce Planning Support employers to address market demands and enhance recruitment, hiring, development, and retention of cybersecurity talent Objectives: 3.1 Identify and analyze data sources that support projecting present and future demand and supply of qualified cybersecurity workers 3.2 Publish and raise awareness of the NICE Cybersecurity Workforce Framework and encourage adoption 3.3 Facilitate state and regional consortia to identify cybersecurity pathways addressing local workforce needs 3.4 Promote tools that assist human resource professionals and hiring managers with recruitment, hiring, development, and retention of cybersecurity professionals 3.5 Collaborate internationally to share best practices in cybersecurity career development and workforce planning NICE Framework - https://go.usa.gov/xnXsh 3
NICE Framework NIST Special Publication 800-181 Categories of Cybersecurity Work COLLECT AND OPERATE OPERATE AND MAINTAIN PROTECT AND DEFEND OVERSEE AND GOVERN SECURELY PROVISION ANALYZE INVESTIGATE Specialty Areas (33) Distinct areas of cybersecurity work; Work Roles (52) The most detailed groupings of IT, cybersecurity or cyber-related work, which include specific knowledge, skills, and abilities required to perform a set of tasks. Tasks Specific work activities that could be assigned to a professional working in one of the NCWF s Work Roles; and, Knowledge, Skills, and Abilities (KSAs) Attributes required to perform Tasks, generally demonstrated through relevant experience or performance-based education and training. Audience: Employers Current and Future Cybersecurity Workers Training and Certification Providers Education Providers Technology Providers 4
Building Blocks for a Capable and Ready Cybersecurity Workforce 5
National Initiative for Cybersecurity Education (NICE) https://nist.gov/nice Resources/Activities (for industry, gov t, and academia) The NICE Working Group and subgroups (K-12, Collegiate, Competitions, Training and Certifications, and Workforce Management) https://www.nist.gov/itl/applied-cybersecurity/nice/about/working-group Forum to identify and share best practices that help us as a nation make progress towards the NICE Strategic goals and objectives. NICE grants to 5 Regional Alliances and Multistakeholder Partnerships to Stimulate (RAMPS) Cybersecurity Education and Workforce Development NICE grant for the creation of Cyberseek http://cyberseek.org/ NICE challenge Project https://www.nice-challenge.com/ cyber challenge labs emphasize real world skills like problem solving, self-learning, and documentation over regurgitating step-by-step instructions and limited simulations. The NICE strategic plan https://www.nist.gov/itl/applied-cybersecurity/nice/about/strategic-plan The NICE Cybersecurity Workforce Framework https://www.nist.gov/itl/applied- cybersecurity/nice/resources/nice-cybersecurity-workforce-framework 6
Securely Provision (7 Specialty Areas, 11 Work Roles) Category Specialty Area Work Role Authorizing Official/Designating Representative Risk Management Security Control Assessor Software Developer Software Development Secure Software Assessor Enterprise Architect Systems Architecture Securely Provision Security Architect Technology R&D Research & Development Specialist Systems Requirements Planning Test and Evaluation Systems Requirements Planner Testing and Evaluation Specialist Information Systems Security Developer Systems Development Systems Developer 7
Operate and Maintain (6 Specialty Areas, 7 Work Roles) Category Specialty Area Work Role Database Administrator Data Administration Data Analyst Knowledge Management Knowledge Manager Operate and Maintain Customer Service and Technical Support Technical Support Specialist Network Services Network Operations Specialist Systems Administration System Administrator Systems Analysis Systems Security Analyst 8
Oversee and Govern (6 Specialty Areas, 14 Work Roles) Category Specialty Area Work Role Cyber Legal Advisor Privacy Officer/Compliance Manager Cyber Instructional Curriculum Developer Cyber Instructor Information Systems Security Manager Communication Security Manager Legal Advice and Advocacy Training, Education, and Awareness Cybersecurity Management Cyber Workforce Developer and Manager Strategic Planning and Policy Oversee and Govern Cyber Policy and Strategy Planner Executive Cyber Leadership Executive Cyber Leadership Program Manager Program/Project Management and Acquisition IT Project Manager Product Support Manager IT Investment/Portfolio Manager IT Program Auditor 9
Protect and Defend (4 Specialty Areas, 4 Work Roles) Category Specialty Area Work Role Cyber Defense Analysis Cyber Defense Analyst Cyber Defense Infrastructure Support Cyber Defense Infrastructure Support Specialist Protect and Defend Incident Response Cyber Defense Incident Responder Vulnerability Assessment and Management Vulnerability Assessment Analyst 10
Analyze (5 Specialty Areas, 7 Work Roles) Category Specialty Area Work Role Threat Analysis Threat/Warning Analyst Exploitation Analysis Exploitation Analyst All-Source Analyst All-Source Analysis Analyze Mission Assessment Specialist Target Developer Targets Target Network Analyst Language Analysis Multi-Disciplined Language Analyst 11
Operate and Collect (3 Specialty Areas, 6 Work Roles) Category Specialty Area Work Role All Source-Collection Manager Collection Operations All Source-Collection Requirements Manager Cyber Intel Planner Collect and Operate Cyber Ops Planner Cyber Operational Planning Partner Integration Planner Cyber Operations Cyber Operator 12
Investigate (2 Specialty Areas, 3 Work Roles) Category Specialty Area Work Role Cyber Investigation Cyber Crime Investigator Law Enforcement/Counterintelligence Forensics Analyst Investigate Digital Forensics Cyber Defense Forensics Analyst 13
