The National Initiative for Cybersecurity Education (NICE) has published for comment a framework for Cybersecurity. Comments are requested by December 16, 2011.
Do you like the functional framework and do you think it is effective? Tell us what you think.



Comments
Full disclosure: I am the founder of the Security Awareness Training Framework that was launched in September 2011 at Derbycon in Louisville, KY (for more information: http://blogs.csoonline.com/1789/practitioners_launch_security_awareness_training_framework)
It is too early to tell; however, I do believe it is high-time to start focusing on the layer 8 issues within information security. If the NICE framework helps achieve that goal, then there is a net positive to the community.
The challenge for the NICE framework is that the same people that will generally judge its effectiveness are the same ones that we are failing to reach. As a result, it is up to the information security practitioner to carry the torch, something that we have historically failed miserably in accomplishing.