Many organisations are turning their attention to skills frameworks – structured, evidence-based models that define what capability looks like, how it can be measured, and how individuals can develop and demonstrate it throughout their careers. And at the centre of this movement for cyber skills stands the CIISec Skills Framework.
The CIISec Skills Framework is an industry-recognised standard for defining and benchmarking the knowledge, skills and competencies required of cyber and information security professionals. First published in 2006, it continues to evolve in collaboration with industry, public sector organisations, academia and security leaders to ensure it remains relevant and widely adopted.
The latest release, version 4, includes a new skill area, a clearer distinction between technical and professional skills, and updated terminology. The new skill area: Human Centric Security reflects the importance of the human element in all aspects of cyber security.
You can find out more about the Skills Framework in two webinars:
CIISec Skills Framework: What’s New in Version 4
Thursday 16 April, 12 noon, online | Register to attend
CIISec Skills and Jobs Framework in Action: A Practical Demo
Tuesday 5 May, 12.30pm, online | Register to attend
Skills Framework v4 FAQs
What’s the biggest change between v3 and v4?
The biggest change is the addition of a new skill into the Skills Framework – the skill area is Human Centric Security and has been given the skill area letter J. The professional skills, formerly referenced as J and K skills, are now given a numerical reference rather than a letter. They are referred to as professional skill areas 1 and 2. Only minor adjustments have been made to the other skills to improve their understanding.
Where can I get hold of the Skills Framework v4?
Any CIISec member can download the Skills Framework v4 from the resources tab of the member area. We will keep v3 of the Skills Framework online for those who are still referencing this version.
I am on the ADP which is aligned to the Skills Framework. Do I need to do anything different?
No, you don’t need to do anything different. The sessions as planned will not change, and the ADP will continue to use and refer to v3 of the Skills Framework until it completes. The self-study sessions I, J and K will keep their letter references as per v3.
I am making an application for Associate / Full membership, do I need to change my application?
No, please use the application form that has been sent to you. It will be made clear to you on the application form which version of the Skills Framework you should refer to. If you have an application in progress you should continue to use the application form you’ve been sent.
I have a professional discussion booked in for Full membership, do I need to prepare using v4 of the Skills Framework?
No, if you are waiting for a professional discussion, then your application will have been sent to the assessors already. There is no need to make any adjustments to your application or preparation.
I am an assessor, which version of the Skills Framework should I be using?
It will be made clear to you which version of the Skills Framework is being used to underpin the application. If in doubt, please contact accreditation@ciisec.org when you receive the application form. Please bear with us as we transition fully to v4, as it is likely there you’ll see references to the “J skills” and “Professional skills area 1” across the applications.
Is the Skills Framework v4 available in other formats?
Yes, v4 of the Skills Framework is available to member organisations in an excel format, on request via membership@ciisec.org. All the same terms of the licence apply when using excel format of the Skills Framework.
If you are a Corporate Member organisation and are interested in finding out how our skills implementation partner can work with you to embed v4 of the Skills Framework into your organisation to optimise workforce skills and competencies, then please register for our demonstation webinar:
CIISec Skills and Jobs Framework in Action: A Practical Demo
Tuesday 5 May, 12.30pm, online | Register to attend
