OffSec maps cyber training to global workforce frameworks

OffSec has launched a framework hub that ties its cybersecurity courses, labs and learning paths to major global role frameworks, giving security leaders a way to show what their teams can do and where skills still need work. The move comes as employers and regulators face widening cyber skills gaps and tighter workforce requirements.

Why it matters: - Security leaders need a clearer way to translate training into workforce capability. - OffSec’s framework hub is designed to help CISOs show boards and regulators how team skills align with defined cyber roles. - The mapping can also help organizations identify gaps and plan training against the roles they already use. - The shift comes as cyber workforce qualifications face more scrutiny from employers, governments and regulators.

What happened: - OffSec launched a new framework hub that maps its modular cybersecurity content library to major workforce frameworks. - The hub breaks down each role and shows which courses, labs, learning paths and modules build the required skills. - The company said the hub is aimed at helping security leaders plan training around existing roles and report progress in board- and regulator-friendly terms. - Cody Vitez, OffSec vice president of sales for the Americas, said cyber workforce development should start with the business, the technology stack and the skills needed to protect it.

The details: - The hub covers the NICE Workforce Framework for Cybersecurity, versions 2.2 and 2.1. - The hub also covers the U.S. Department of Defense Cyber Workforce Framework, ENISA’s European Cybersecurity Skills Framework, Saudi Arabia’s Cybersecurity Workforce Framework and Oman’s Cyber Resilience Omani Workforce Framework. - OffSec said employers worldwide list OSCP in job requirements. - OffSec said its Learn Enterprise subscription includes more than 8,000 hours of content. - The company said its training model is built around modular and stackable content that can adapt as teams scale and roles change. - OffSec said Live Training has reached more than 1,800 learners across 75 sessions. - OffSec said its OSAI program lets learners build and run their own AI agents and work alongside them.

Between the lines: - The launch reflects a broader industry push to measure cyber talent against standardized role definitions instead of relying on titles or certifications alone. - OffSec is positioning its content library as a living system that can be updated faster than attacker tactics change. - The company is also leaning into AI-focused defense training as adversaries accelerate their use of AI. - OffSec said 59% of organizations report critical or significant cybersecurity skills gaps, citing the ISC2 2025 Cybersecurity Workforce Study. - Regulations such as NIS2 in the EU and DoD 8140 in the U.S. are raising expectations for workforce qualification.

What’s next: - Security leaders can explore the role mappings at the framework hub. - OffSec said organizations can speak with a workforce development expert through the same site. - The company said it will keep updating its content library to track changes in adversarial tactics, techniques and procedures.

The bottom line: - OffSec is turning cybersecurity training into a framework-aligned workforce planning tool, not just a certification path.