JUST Released!

Cybersecurity Skills Framework

A Smarter Starting Point for Cybersecurity Readiness

Launch the Cybersecurity Skills Framework Tool!

The Cybersecurity Skills Framework—Built for Real Teams, Not Just Compliance

Most cybersecurity frameworks are too complex, too narrow, or too focused on compliance checkboxes. Ours is different. Developed by experienced practitioners—not vendors—and tested across real-world cases, this free, industry-agnostic framework helps you build a cybersecurity learning strategy tailored to your team.

Broadly applicable across all tech environments—open source, proprietary, or anything in between.

What It Does

Maps 14 core job families across multiple experience levels
Provides an on-ramp to more complex frameworks
Requires hours—not weeks—to implement

Whether you’re leading a small IT group, scaling an engineering org, or trying to make sense of regulatory demands, this tool gives you a clear, simple way to start.

Why It Matters

Cybersecurity risk isn’t just technical. It’s organizational. Human error is still the weakest link in most breaches, and too many teams are flying blind.

This framework makes it easy to:

Identify gaps in knowledge and skills across your organization
Prioritize training efforts based on real job roles
Show stakeholders you’re investing in people, not just tools

All IT roles require cybersecurity knowledge and expertise.

Who It’s For

CISOs, CTOs, and IT Directors looking for a fast, effective approach
CFOs and risk officers who need proof of security investment beyond infrastructure
Educators, developers, and practitioners who want clear, actionable guidance

Everyone has a responsibility to mitigate risks. Start simple. Make progress. Protect what matters.

Built by Practitioners, Not Vendors

The Cybersecurity Skills Framework is the result of deep collaboration among cybersecurity professionals and educators. It’s vendor-neutral, freely available, and designed to evolve based on feedback from people actually using it in the field.

💡 Learn more about the Cybersecurity Skills Framework

“

The Linux Foundation’s Cybersecurity Skills Framework is a great resource for organisations developing their cybersecurity capabilities. By linking specific technologies and tasks to roles, it complements the SFIA Framework’s broader, internationally adopted approach to defining and developing digital skills, roles and career. Together, these practical frameworks support strong teams by addressing both immediate training needs and long-term workforce development across cybersecurity and the wider digital, data and technology landscape.
Ian SewardGeneral Manager, SFIA Foundation

“

“As the cybersecurity landscape grows more complex, particularly with the rapid rise in AI technologies, security can no longer be siloed. Businesses must champion a culture of security awareness, education, and preparedness across functions. The new framework contributes to a stronger security posture by ensuring every team—from developers to IT leaders—understands the specific security skills they need.”
Jamie ThomasIBM Enterprise Security Executive

“

“Cybersecurity is a shared responsibility, and closing the skills gap is essential to building secure systems at scale. The OpenSSF Cybersecurity Skills Framework provides a clear, actionable roadmap for equipping technical teams with the right knowledge to protect our digital infrastructure, thus raising the bar for security readiness across the industry.”
Arun GuptaVP of Developer Programs, Intel / Governing Board Chair for CNCF & OpenSSF

“

"Cybersecurity today seems more complicated than ever. It can be difficult to keep up with the evolving cyber risk landscape and what skills internal teams need to approach and mitigate those risks. The Cybersecurity Skills Framework is a much needed blueprint for how developers should approach career development, teams plan for adapting to new risks, and organizations build training governance for the continuous evolution of their cybersecurity programs."
Michael LiebermanCTO and Co-Founder, Kusari

“

"The need for experienced cybersecurity practitioners continues to increase, and a clear understanding of cybersecurity roles, responsibilities, and required skills is not just beneficial - it is the foundation for a resilient and secure organization. The Linux Foundation's Cybersecurity Skills Framework provides guidance to help leaders and practitioners understand the baseline skills needed for various roles. It serves as an excellent starting point for cybersecurity practitioners looking to enter the field or plan their career progression. Additionally, it helps leaders identify the necessary roles and skills to meet their cybersecurity demands."
Dave RussoSenior Principal Program Manager, Secure Development, Red Hat