: Approximately 41 distinct job functions (e.g., Incident Responder, Database Administrator) that define specific responsibilities regardless of job title.
: CISOs can map their existing team against framework roles to identify missing expertise or training needs.
: Groups of related Knowledge and Skill statements that help assess broad capabilities in domains like Cloud Security or Risk Management .