The Platform Behind Every Engagement
CyberTRUE™ is an innovative and standardized workforce engineering process that serves as the foundation of every Cyber Workforce Center™ engagement.
Designed to provide meaningful insight into organizational capability and operational readiness, CyberTRUE™ helps leaders understand how people, roles, and responsibilities influence cybersecurity performance. Rather than focusing solely on technology and security tools, it takes a workforce-first approach that aligns organizational priorities, capability development, and business objectives.
Built to support the complexity of modern critical infrastructure, enterprise operations, and evolving security challenges, the platform delivers actionable intelligence that helps organizations strengthen resilience, improve decision-making, and maintain long-term operational effectiveness.
Workforce Engineering as a Discipline
CyberTRUE™ is the standardized methodology and platform through which the Cyber Workforce Center delivers every service. Rather than applying generic frameworks to your organization, CyberTRUE™ builds a tailored model of your specific workforce — their roles, tasks, skills, and exposure — then maps that reality to your business risk landscape.
- Extends NIST NICE and other frameworks into task-level insights
- Produces executive-ready deliverables in dashboard format
- Designed for OT, IT, and cyber-physical environments
- Scalable across organizational size, complexity, and growth stages
The CyberTRUE™ Methodology
A proven six-phase process that transforms raw organizational data into a living workforce risk model — actionable at every level of your organization. Now, a tool to refocus from only technical risk issues to addressing people and workforce development in cybersecurity.
We begin by understanding your organization's structure, mission, critical assets, and existing cybersecurity posture. Key stakeholders from industry, operations, HR, and executive leadership are engaged to build a complete picture of the environment.
The CyberTRUE™ process guides organizations in understanding and prioritizing the cybersecurity skills required at every level. By pinpointing role-specific gaps, the model ensures training resources truly align with your business objectives.
Unlike role-based frameworks that stop at job titles, CyberTRUE™ drills into the specific tasks each position performs — mapping them against criticality, frequency, and the skill required to execute them safely and effectively.
Using the CyberTRUE™ scoring model, each identified gap is translated into a quantified risk value — expressed in operational exposure and financial terms that executives and boards can directly act upon.
Because the framework pinpoints competency requirements for each position, you'll quickly see where your team excels and where improvement is needed — making it simpler to map comprehensive learning pathways and certification plans.
All findings are packaged into clean, executive-ready dashboards and action plans — POA&Ms, risk registers, and workforce alignment reports — designed to drive decisions and unify managers and employees around clear cybersecurity goals.
Your Workforce Gap Has a Number. CyberTRUE™ Finds It.
CyberTRUE™ evaluates workforce risk across your entire organization — from entry-level operators to executives — at the task level, not just the role level. It identifies capability gaps, scores their business impact, and delivers prioritized action plans in financial language your CFO and board can act on. Where most assessments stop at a heat map, CyberTRUE™ produces scored, quantified intelligence that drives real decisions.
CyberTRUE™ was built by practitioners from Idaho National Laboratory — people who spent their careers protecting national infrastructure, not adapting commercial IT frameworks to environments they weren't designed for. The platform applies deep operational technology methodology to OT, ICS, and SCADA environments where workforce gaps carry physical, operational, and safety consequences that generic tools consistently miss.
CyberTRUE™ doesn't replace your existing compliance obligations — it extends them into actionable workforce intelligence. The platform aligns directly with NIST NICE 800-181, NIST CSF, NERC/CIP, the Purdue Model, and ISO 31000, mapping every role, task, and capability gap to the standards your regulators, auditors, and insurers already recognize. The result is work that integrates with your governance structure rather than running parallel to it.
Most workforce assessments are snapshots — useful on delivery, outdated within months. CyberTRUE™ is designed differently. It scales with your organization as you adopt new technology, expand services, or face new threats — producing executive-ready dashboards built for ongoing decision-making, not a single filing. Every output is designed to enable action, and the model continues working long after the initial engagement is complete.