Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
NICE Framework Public Comments
To remain effective now and in the future, the NICE Framework Components — Task, Knowledge, and Skill (TKS) statements; Work Roles and Work Role Categories; and Competency Areas — are regularly reviewed and adjusted to respond to and anticipate changing needs of the cybersecurity workforce. These changes are driven by new and evolving technologies, threats, and approaches to securing organizations and the Nation.
Proposed major and minor changes to the NICE Framework are made available for public comment prior to finalization. Public and private stakeholders may view and provide comments on candidates during defined comment periods. Comments on candidates are reviewed by NIST as part of its adjudication process prior to final release of the draft content. Comments received by the deadline will be acknowledged by email. All comments are reviewed and adjudicated to inform any necessary updates to the relevant proposed changes. Final updates will be incorporated in the next release of the NICE Framework Components.
Visit the Change Request FAQs webpage for information on how to request proposed changes outside of the public comment periods.
Comment Period | Description | Links |
December 18, 2025 – February 2, 2026 | Cybersecurity Supply Chain Risk Management (new OG-WRL-017): New proposed Work Role including Task, Knowledge, and Skill (TKS) statements and Task-to-Knowledge/Skill alignments. | |
December 18, 2025 – February 2, 2026 | Risk Management Work Role (new OG-WRL-018): New proposed Work Role including TKS statements and Task-to-Knowledge/Skill alignments. | |
December 18, 2025 – February 2, 2026 | Learning Program Management Work Role (new OG-WRL-019): New proposed Work Role including TKS statements and Task-to-Knowledge/Skill alignments. | |
December 18, 2025 – February 2, 2026 | Cryptography Competency Area (NF-COM-006): Competency Area updated with Knowledge and Skill statement inventory. | |
December 18, 2025 – February 2, 2026 | DevSecOps Competency Area (NF-COM-008): Competency Area updated with Knowledge and Skill statement inventory. |
Past Comment Periods
The below reflects comment periods from 2024 to current. Earlier periods can be found on the Latest Updates page.
- June 2 – July 17, 2025
- Artificial Intelligence (AI) Security Competency Area (NF-COM-002)
NF-COM-002 Public Comment Spreadsheet - Cybercrime Investigation Work Role (IN-WRL-001)
IN-WRL-002 Public Comment Spreadsheet
- Artificial Intelligence (AI) Security Competency Area (NF-COM-002)
- September 30 – November 14, 2024
- Cyber Resiliency Competency Area (NF-COM-007)
NF-COM-007 Public Comment Spreadsheet - Digital Evidence Analysis Work Role (IN-WRL-002)
IN-WRL-002 Public Comment Spreadsheet - Insider Threat Analysis Work Role (PD-WRL-005)
PD-WRL-005 Public Comment Spreadsheet - Operational Technology (OT) Cybersecurity Engineering Work Role (New DD-WRL-009)
DD-WRL-009 Public Comment Spreadsheet
- Cyber Resiliency Competency Area (NF-COM-007)