November 2021 - SFIA 8 update
Updated mappings to industry frameworks and minor corrections to SFIA 8 documents
Minor errors in the SFIA 8 documentation.
- The documents have been corrected and the new versions are available here
- Thanks to the members of the SFIA community who identified these errors.
- Apologies for any inconvenience caused by these minor errors.
Updated SFIA mappings to industry frameworks
- Service management
- COBIT
- NIST
- NICE
These mappings help framework users adopt SFIA and help SFIA users access the specialised knowledge in these frameworks.
Service management
- Mapping of SFIA 8 skills to ITIL® 4 Practice areas and generic service management roles
- A brief summary of the service management related changes to SFIA 8
COBIT 2019
- Mapping of SFIA 8 skills to the 40 governance and management objectives
- This is an update to the SFIA 7 version
- To aid readability - the order of the skills has also been changed - from alphabetic to importance
US government NIST Cybersecurity Framework (CSF).
- Mapping of SFIA 8 skills to the 23 categories and 108 sub-categories in the NIST CSF
- An initial mapping was done to identify potential improvements for SFIA 8
- SFIA 8 provided a number of enhancements to support cybersecurity workforce initiatives, including:
- additional cybersecurity-related skills - such as Vulnerability assessment, Threat intelligence, Vulnerability research
- additional skill level descriptions for cybersecurity-related skills
- the information and cyber security view of the SFIA framework
- enhanced readability across the entire SFIA framework including guidance notes and concise skill descriptions
US Government NICE Cybersecurity Workforce Framework
- Mapping of SFIA 8 skills to the 52 information and cyber security roles published by the US National Institute of Standards and Technology (NIST).
Bodies of knowledge
- There are now 53 industry bodies of knowledge listed on the site.
- The list has been updated to reflect the new categories in SFIA 8.