Tools and resources

Introduction

The SFIA Foundation collates useful resources to share with SFIA users.  These come from a variety of sources and are published to support specific user needs. Please contact the SFIA Foundation to find out more or if you have suggestions for additional tools and resources. Formal endorsement of the resources is not intended at this stage.

Resources

Current resources include:

• SFIA User stories - webinars, slides & articles describing real-world use of SFIA by employers, government bodies and academic institutions 
• A collection of standard SFIA skill profiles aligned to common jobs and roles
• SFIA 8 skills profiles – suggested mappings of SFIA 8 skills to common industry career groups. 
• SFIA views to help users identify the SFIA skills which are most relevant to specific professional disciplines, industry topics and complementary frameworks.
  
• Guidance on the knowledge component of the SFIA capability model and the relationship between the SFIA framework and Bodies of Knowledge (BoKs)
  
• Guidelines for good practice with SFIA self-assessments

• SFIA skills for service design - A list of SFIA skills with examples of service design activities and artefacts.

Framework mappings

Service management

• Mapping of SFIA 8 skills to ITIL® 4 Practice areas and generic service management roles
• A brief summary of the service management related changes to SFIA 8

COBIT 2019

• Mapping of SFIA 8 skills to the 40 governance and management objectives
• This is an update to the SFIA 7 version
• To aid readability - the order of the skills has also been changed - from alphabetic to importance

 US government NIST Cybersecurity Framework (CSF).

• Mapping of SFIA 8 skills to the 23 categories and 108 sub-categories in the NIST CSF
• An initial mapping was done to identify potential improvements for SFIA 8
• SFIA 8 provided a number of enhancements to support cybersecurity workforce initiatives, including:
• additional cybersecurity-related skills - such as Vulnerability assessment, Threat intelligence, Vulnerability research
• additional skill level descriptions for cybersecurity-related skills
• the information and cyber security view of the SFIA framework
• enhanced readability across the entire SFIA framework including guidance notes and concise skill descriptions

US Government NICE Cybersecurity Workforce Framework

• Mapping of SFIA 8 skills to the 52 information and cyber security roles published by the US National Institute of Standards and Technology (NIST).

Bodies of knowledge

• There are now 53 industry bodies of knowledge listed on the site.
• The list has been updated to reflect the new categories in SFIA 8.

Software applications

Some SFIA Partners have developed software tools to support the adoption and use of SFIA in a number of ways.

• However, currently, the SFIA Foundation does not provide its own, endorsed software apps or tools