Skip to content

The European Cybersecurity Competence Framework (ECSF) provides an open tool to build a common understanding of cybersecurity professional profiles in Europe and common matches with the appropriate skills required.

In Luxembourg, a growing cybersecurity market requires a skilled workforce to respond to the growing challenges of the cyber threat. In this context, the ECSF summarises cybersecurity-related roles into 12 profiles, individually analysing their responsibilities, competences, synergies and interdependencies. It provides a common understanding of the relevant roles, skills and knowledge primarily required in cybersecurity, thereby facilitating the recognition of cybersecurity skills and supporting the design of cybersecurity-related training programs.

In April 2023, the European Commission adopted the Communication on a Cybersecurity Skills Academy, a policy initiative to bring together existing initiatives on cybersecurity skills and improve their coordination. The ECSF is the basis on which the Academy will define and assess relevant competences, monitor the evolution of skills gaps and provide guidance on emerging needs.

The impact and future of the ECSF, as well as its role in the Academy, were discussed at the 2nd edition of ENISA’s Cybersecurity Skills Conference, which took place in September 2023, in Segovia, Spain.

The European Cybersecurity Competence Framework (ECSF) documents are now available in French!

  • The document ECSF Role Profiles– It lists the 12 typical role profiles of cybersecurity professionals with their identified titles, missions, tasks, skills, knowledge and competences.
  • The ESTC user manual– It provides advice and practical examples on how to exploit and benefit from the framework as an organisation, learning programme provider or individual.