About Concordance

What this site is, how it relates to the cybedtools R package, and how to cite it

Concordance: frameworks, one graph

What this site is, how it relates to the cybedtools R package, and how to cite it.

What this is

The Cybersecurity Framework Concordance is the audience-facing surface for the cybedtools R package. cybedtools ingests, parses, and queries a corpus of cybersecurity workforce and learning frameworks under a shared semantic schema. This site renders the framework data, the cross-framework comparisons, and the working scenarios in a form that does not require running R.

The two carry related but distinct identities. cybedtools is the methodology engine. Concordance is what readers see and cite.

How it relates to cybedtools

cybedtools Concordance
Form R package Quarto subsite
Audience Researchers, methodology collaborators K-12 teachers, curriculum coordinators, workforce-policy analysts
Distribution GitHub plus Zenodo, install via remotes::install_github Static HTML, deployed to gh-pages
License MIT Content CC BY 4.0, code MIT
Canonical citation citation("cybedtools") from R, or CITATION.cff this site (see below)

Every number, table, and lookup widget on this site is derived from the same package the methodology documents.

Install cybedtools

install.packages("remotes")
remotes::install_github("ryanstraight/cybedtools")

Python: pip install cybedtools. See Start for fetching the data release and a first query.

How to cite

cybedtools R package hex sticker

If your work references the methodology, the R package, or any element-level analysis behind the figures on this site, cite the package. The 0.3.0 version, for example:

Straight, R. (2026). cybedtools: Comparison and querying of cybersecurity
workforce and learning frameworks. R package version 0.3.0.
https://doi.org/10.5281/zenodo.20076116

Concordance mark

If your work references Concordance itself (a specific worked scenario, a lookup widget, audience-facing prose, or the persona pages), cite the site:

Straight, R. (2026). Cybersecurity Framework Concordance.
https://ryanstraight.github.io/cybedtools/concordance/

The Zenodo DOI 10.5281/zenodo.20076116 is a concept DOI: it resolves to the latest released version of the package and persists across all subsequent versions. Per-version DOIs are minted automatically when each release is tagged on GitHub.

Author

Ryan Straight, Assistant Professor, College of Information Science, University of Arizona. ORCID: 0000-0002-6251-5662.

Acknowledgments

The frameworks displayed on this site are the work of their respective authoring communities. cybedtools represents them under the layered licensing terms named on each framework’s page. The package’s design owes substantive intellectual debt to:

  • The NICE program at NIST for the Workforce Framework for Cybersecurity (SP 800-181 Rev 1).
  • The DoD Chief Information Officer for the DoD Cyber Workforce Framework v5.1.
  • The European Union Agency for Cybersecurity (ENISA) for the European Cybersecurity Skills Framework v1.
  • The SFIA Foundation for SFIA 9.
  • The Cyber Innovation Center and the Cyber.org K-12 standards team for the K-12 Cybersecurity Learning Standards.
  • The Computer Science Teachers Association for the K-12 CS Standards (Rev 2017).
  • The ACM, IEEE-CS, AIS SIGSEC, and IFIP WG 11.8 Joint Task Force for CSEC2017.
  • Cosgrove and Cachia (Joint Research Centre, European Commission) for DigComp 3.0, building on the original framework authored by Vuorikari, Kluzer, and Punie.

Three frameworks are here on their stewards’ terms. Two of them gave written permission, and the Canadian framework is referenced as its steward asked. Each asked to be credited in a particular way.

  • CyQUAL, the Czech national cybersecurity qualifications framework, developed at Masaryk University. Open data, version 1.2.0, https://platform.cyqual.cz/. Thanks to the CyQUAL team for confirming the open-data terms and for repairing the export so it could be used.
  • Canadian Centre for Cyber Security, The Canadian Cyber Security Skills Framework (ITSM.00.039), 2022 edition. Copyright Government of Canada. Used with permission of the Canadian Centre for Cyber Security. Thanks to the Centre’s Cyber Skills Development Team for supplying the full framework with its annexes.
  • Derived from the Operational Technology Cybersecurity Competency Framework (OTCCF), published by the Cyber Security Agency of Singapore (CSA). Available at: https://www.csa.gov.sg/resources/publications/operational-technology-cybersecurity-competency-framework–otccf-/

CSA’s permission covers the OTCCF’s structure, for non-commercial, academic and research use. This site shows OTCCF roles, skills, levels, and mappings, and does not reproduce its statement text. Terms for all three are in the package’s LICENSING file.

AI disclosure

The development and delivery of both cybedtools and Concordance was substantially accelerated by Anthropic’s Claude Code, under the author’s direction.

License

This site carries layered licensing. Site content (prose, scenarios, query interpretations) is under Creative Commons Attribution 4.0 International (CC BY 4.0). Site source code (R, Quarto, SCSS, JavaScript, SVG) is under the MIT License. Framework source data retains its upstream license per framework. Full terms in LICENSE.

Source and contributions

Back to top