ENISA has developed the European Cybersecurity Skills Framework (ECSF) to address Europe’s growing need for a unified approach to defining roles and skills in the cybersecurity field. The ECSF is a cornerstone for advancing Europe’s digital future, offering a practical tool to identify and articulate the tasks, competences, and knowledge associated with key cybersecurity roles.
Endorsed by the European Commission's Communication on the Cybersecurity Skills Academy in April 2023, the ECSF is recognized as the EU’s reference point for defining and assessing cybersecurity skills. It is promoted as the common language for cybersecurity professional competencies across the EU.
The ECSF categorises the cybersecurity workforce into 12 distinct professional profiles, detailing the role, responsibilities, required skillsand interdependencies if applicable. By fostering a shared understanding of cybersecurity roles, facilitating skill recognition and supporting the development of tailored training programmes, the ECSF has become an indispensable resource for organisations, professionals, and the academia throughout Europe.
Watch the "What is ECSF?" video and explore its professional profiles to understand how the framework can support your national cybersecurity strategy. Additionally, discover other ENISA initiatives, including challenges, aiming to assist in addressing the broader cybersecurity skills gap.