NICE Framework | GIAC Certifications

Find the Right Path Using the NICE Framework

The NICE Framework is a fundamental reference for describing and sharing information about cybersecurity work.

The Framework is designed to help you identify the right training and certifications for your current or desired cybersecurity role.

NICE Framework Categories

The NICE Framework Categories are a high-level grouping of common cybersecurity functions. Select a category below to help you identify the right certifications and affiliate training for your current or desired cybersecurity role.

Oversight and Governance

Oversight and Governance (OG)

Provides leadership, management, direction, and advocacy so the organization may effectively manage cybersecurity-related risks to the enterprise and conduct cybersecurity work.

Design and Development

Design and Development (DD)

Conducts research, conceptualizes, designs, develops, and tests secure technology systems, including on perimeter and cloud-based networks.

Implementation and Operation

Implementation and Operation (IO)

Provides implementation, administration, configuration, operation, and maintenance to ensure effective and efficient technology system performance and security.

Protection and Defense

Protection and Defense (PD)

Protects against, identifies, and analyzes risks to technology systems or networks. Includes investigation of cybersecurity events or crimes related to technology systems and networks.

Investigation

Investigation (IN)

Collects, processes, analyzes, and disseminates information from all sources of intelligence on foreign actors' cyberspace programs, intentions, capabilities, research and development, and operational activities.

Cyber Intelligence

Cyberspace Intelligence (CI)

Collects, processes, analyzes, and disseminates information from all sources of intelligence on foreign actors' cyberspace programs, intentions, capabilities, research and development, and operational activities.

Cyberspace Effects

Cyberspace Effects (CE)

Plans, supports, and executes cyberspace capabilities where the primary purpose is to externally defend or conduct force projection in or through cyberspace.

ICS

Industrial Control Systems (ICS)

ICS security is a security framework that protects industrial control systems against accidental or intentional risks safeguards critical infrastructures.* *Recommended work roles

Find the Right Path Using the NICE Framework

The NICE Framework is designed to help you identify the right training and certifications for your current or desired cybersecurity role.

Categories

A high-level grouping of common cybersecurity functions.

Specialty Areas

Distinct areas of cybersecurity work.

Work Roles

The most detailed groupings of cybersecurity work comprised of specific knowledge, skills, and abilities (KSAs) required to perform tasks in a Work Role.