Many cybersecurity frameworks. One queryable graph.

Compare structure, density, and coverage across NICE Framework v2.2.0, DCWF v5.1, ENISA ECSF, SFIA 9, Cyber.org K-12, CSTA K-12 CS, CSTA PK-12 CS (2026), ACM/IEEE CSEC2017, DigComp 3.0, CyQUAL 1.2.0, CCSSF 2022, OTCCF v1.1, SCyWF 1.5, CyBOK v1.1.0. The differences each framework was authored to express stay intact.

Why this exists Browse frameworks

The same question, different answers

Granularity per organizing unit, by design. The spread runs roughly 13 to one across the corpus. It tracks what each framework was authored to specify, not relative quality.

Workforce Pedagogy

<div class="bar-row" data-type="workforce">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="US"><use href="#icon-us"/></svg>
      <svg class="bar-icon" role="img" aria-label="Workforce"><use href="#icon-workforce"/></svg>
    </span>
    <a class="bar-name" href="frameworks/dcwf-v51.html">DCWF v5.1</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 100.0%;"></div>
    <span class="bar-value">54.8</span>
  </div>
</div>
<div class="bar-row" data-type="workforce">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="US"><use href="#icon-us"/></svg>
      <svg class="bar-icon" role="img" aria-label="Workforce"><use href="#icon-workforce"/></svg>
    </span>
    <a class="bar-name" href="frameworks/nice-v2.html">NICE Framework v2.2.0</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 76.6%;"></div>
    <span class="bar-value">42.0</span>
  </div>
</div>
<div class="bar-row" data-type="pedagogy">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="EU"><use href="#icon-eu"/></svg>
      <svg class="bar-icon" role="img" aria-label="Pedagogy"><use href="#icon-pedagogy"/></svg>
    </span>
    <a class="bar-name" href="frameworks/digcomp-30.html">DigComp 3.0</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 62.0%;"></div>
    <span class="bar-value">34.0</span>
  </div>
</div>
<div class="bar-row" data-type="workforce">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="EU"><use href="#icon-eu"/></svg>
      <svg class="bar-icon" role="img" aria-label="Workforce"><use href="#icon-workforce"/></svg>
    </span>
    <a class="bar-name" href="frameworks/ecsf-v1.html">ENISA ECSF</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 59.3%;"></div>
    <span class="bar-value">32.5</span>
  </div>
</div>
<div class="bar-row" data-type="pedagogy">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="UK"><use href="#icon-uk"/></svg>
      <svg class="bar-icon" role="img" aria-label="Pedagogy"><use href="#icon-pedagogy"/></svg>
    </span>
    <a class="bar-name" href="frameworks/cybok.html">CyBOK v1.1.0</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 51.8%;"></div>
    <span class="bar-value">28.4</span>
  </div>
</div>
<div class="bar-row" data-type="workforce">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="SG"><use href="#icon-sg"/></svg>
      <svg class="bar-icon" role="img" aria-label="Workforce"><use href="#icon-workforce"/></svg>
    </span>
    <a class="bar-name" href="frameworks/otccf.html">OTCCF v1.1</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 48.2%;"></div>
    <span class="bar-value">26.4</span>
  </div>
</div>
<div class="bar-row" data-type="workforce">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="CA"><use href="#icon-ca"/></svg>
      <svg class="bar-icon" role="img" aria-label="Workforce"><use href="#icon-workforce"/></svg>
    </span>
    <a class="bar-name" href="frameworks/ccssf.html">CCSSF 2022</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 41.6%;"></div>
    <span class="bar-value">22.8</span>
  </div>
</div>
<div class="bar-row" data-type="workforce">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="CZ"><use href="#icon-cz"/></svg>
      <svg class="bar-icon" role="img" aria-label="Workforce"><use href="#icon-workforce"/></svg>
    </span>
    <a class="bar-name" href="frameworks/cyqual.html">CyQUAL 1.2.0</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 37.8%;"></div>
    <span class="bar-value">20.7</span>
  </div>
</div>
<div class="bar-row" data-type="pedagogy">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="US"><use href="#icon-us"/></svg>
      <svg class="bar-icon" role="img" aria-label="Pedagogy"><use href="#icon-pedagogy"/></svg>
    </span>
    <a class="bar-name" href="frameworks/csta-2026.html">CSTA PK-12 CS (2026)</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 33.8%;"></div>
    <span class="bar-value">18.5</span>
  </div>
</div>
<div class="bar-row" data-type="workforce">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="SA"><use href="#icon-sa"/></svg>
      <svg class="bar-icon" role="img" aria-label="Workforce"><use href="#icon-workforce"/></svg>
    </span>
    <a class="bar-name" href="frameworks/scywf.html">SCyWF 1.5</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 31.9%;"></div>
    <span class="bar-value">17.5</span>
  </div>
</div>
<div class="bar-row" data-type="pedagogy" data-outlier>
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="US"><use href="#icon-us"/></svg>
      <svg class="bar-icon" role="img" aria-label="Pedagogy"><use href="#icon-pedagogy"/></svg>
    </span>
    <a class="bar-name" href="frameworks/csta-2017.html">CSTA K-12 CS</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 18.8%;"></div>
    <span class="bar-value">10.3</span>
  </div>
</div>
<div class="bar-row" data-type="workforce">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="Global"><use href="#icon-global"/></svg>
      <svg class="bar-icon" role="img" aria-label="Workforce"><use href="#icon-workforce"/></svg>
    </span>
    <a class="bar-name" href="frameworks/sfia-9.html">SFIA 9</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 10.2%;"></div>
    <span class="bar-value">5.6</span>
  </div>
</div>
<div class="bar-row" data-type="pedagogy">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="Global"><use href="#icon-global"/></svg>
      <svg class="bar-icon" role="img" aria-label="Pedagogy"><use href="#icon-pedagogy"/></svg>
    </span>
    <a class="bar-name" href="frameworks/csec2017.html">ACM/IEEE CSEC2017</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 9.1%;"></div>
    <span class="bar-value">5.0</span>
  </div>
</div>
<div class="bar-row" data-type="pedagogy">
  <div class="bar-meta">
    <span class="bar-pictograms">
      <svg class="bar-icon" role="img" aria-label="US"><use href="#icon-us"/></svg>
      <svg class="bar-icon" role="img" aria-label="Pedagogy"><use href="#icon-pedagogy"/></svg>
    </span>
    <a class="bar-name" href="frameworks/cyberorg-k12.html">Cyber.org K-12</a>
  </div>
  <div class="bar-visual">
    <div class="bar-fill" style="width: 7.7%;"></div>
    <span class="bar-value">4.2</span>
  </div>
</div>

Elements per top-level organizing unit, with examples included. Bar widths are scaled to the highest value (DCWF v5.1, 54.8).

NICE specifies tasks, knowledge statements, and skill statements per work role. DigComp specifies competence areas designed for citizen self-assessment. Different questions, different shapes.

See the full cross-framework analysis.

The frameworks at a glance

US Workforce DCWF v5.1 Units 74 · Elements 4,052 US Workforce NICE Framework v2.2.0 Units 53 · Elements 2,225 EU Pedagogy DigComp 3.0 Units 26 · Elements 884 EU Workforce ENISA ECSF Units 12 · Elements 390 UK Pedagogy CyBOK v1.1.0 Units 21 · Elements 596 SG Workforce OTCCF v1.1 Units 61 · Elements 1,612 CA Workforce CCSSF 2022 Units 59 · Elements 1,345 CZ Workforce CyQUAL 1.2.0 Units 161 · Elements 3,340 US Pedagogy CSTA PK-12 CS (2026) Units 53 · Elements 983 SA Workforce SCyWF 1.5 Units 81 · Elements 1,419 US Pedagogy CSTA K-12 CS Units 25 · Elements 258 Global Workforce SFIA 9 Units 147 · Elements 821 Global Pedagogy ACM/IEEE CSEC2017 Units 8 · Elements 40 US Pedagogy Cyber.org K-12 Units 116 · Elements 492

What this is and isn’t

cybedtools is a comparison and querying layer over existing cybersecurity workforce and learning frameworks. When the package’s outputs disagree with a framework steward’s own view of their framework, the steward’s view is correct.

The package extends framework-based analysis. It gives researchers a uniform query surface across heterogeneous artefacts. It does not replace any framework, redistribute source text under more permissive terms than the framework’s own license, or rank frameworks against each other.