The Quest for Cyber Workforce: Overcoming the Skills Shortage Challenge

The National Cyber Workforce and Education Strategy: An Analysis

A Long-Term Approach to Address the Cyber Skills Shortage

The release of the National Cyber Workforce and Education Strategy by the Biden-Harris administration highlights the ongoing efforts to address the deepening cyber skills crisis in the United States. While quick solutions may be elusive, industry experts believe that the strategy, if implemented as intended, could go a long way in providing long-term solutions to the skills scarcity while also preparing future workers for cybersecurity careers.

The strategy, a 60-page document, expands on the National Cybersecurity Strategy that was announced in May. It emphasizes the need for greater collaboration among public and private sector entities in workforce development and cyber education. The goal is to foster basic digital literacy, foundational cyber skills, and ensure easy access to materials for continuous learning.

The Challenge of Implementing the Strategy

However, experts have raised concerns about the practicality and feasibility of the strategy. Karen Walsh, a cybersecurity compliance expert, points out that the strategy requires a significant investment at the K-12 level, which already faces challenges in terms of the shortage of teachers, let alone those with expertise in complex cybersecurity skills.

The strategy calls for federal agencies and departments to work with industry and academia to make more training materials available for upskilling and reskilling workers for cybersecurity careers. It also advocates for increased use of skills-based hiring practices and highlights the role of community colleges in providing entry-level workers as well as those familiar with industry-specific technologies and requirements.

One notable aspect of the strategy is its emphasis on increasing diversity and inclusion in hiring practices. Efforts are encouraged to reach underrepresented and underserved communities by partnering with organizations focused on enhancing the talent pipeline in these communities.

Key Elements of the Strategy

Candy Alexander, president of the Information Systems Security Association (ISSA), points out three noteworthy elements in the strategy: the emphasis on educating the general public, the incorporation of cybersecurity into the K-12 curriculum, and the call for a true public-private partnership with educators, industry, and government.

The strategy proposes approaches for bolstering cyber education from K-12 through college and advanced degree programs. It encourages active participation from employers, industry groups, chambers of commerce, and others in the creation and delivery of cyber education and training programs. Competency-based education opportunities are highlighted, allowing learners to acquire knowledge and demonstrate mastery at their own pace.

Community colleges are seen as a significant resource for both the cybersecurity industry and students seeking non-traditional advanced education. They provide financially accessible education, but their value is often overlooked. To leverage the potential of community colleges, the industry needs to recognize the practical skills they can provide, moving away from expensive certifications that focus on theory and prioritizing hands-on experience.

The Significance of the Strategy

Clar Rosso, CEO of (ISC)2, applauds the creation of the National Cyber Workforce and Education Strategy as a significant step forward. By acknowledging the cyber workforce shortfall, which currently stands at more than 410,000 professionals in the United States, the strategy highlights the critical risk it poses to national, economic, and societal security.

Rosso highlights several significant components of the strategy, including greater federal collaboration, shared hiring practices, accessible talent management tools, increased scholarship programs, and the removal of entry barriers such as security clearances for certain jobs.

Editorial: A Comprehensive Approach to Tackling the Cyber Skills Crisis

The National Cyber Workforce and Education Strategy presents a comprehensive approach to addressing the nation’s cyber skills crisis. While it may be seen as ambitious and aspirational, it acknowledges the magnitude of the issue and puts forth practical steps to bridge the gap.

One of the key factors in the success of this strategy will be the collaboration among government, industry, academia, and other stakeholders. A true public-private partnership is crucial to ensure that the necessary resources and expertise are utilized effectively and efficiently.

In addition to improving education and training programs, efforts to increase diversity and inclusion in the cybersecurity workforce are commendable. By reaching out to underrepresented communities and promoting inclusivity, the strategy takes a step towards building a workforce that reflects the diversity of our society.

Furthermore, recognizing the value of community colleges in providing practical skills-based education is essential. By leveraging these institutions, the industry can tap into a talent pool that may have been overlooked in the past.

In implementing the strategy, it is crucial for organizations to reassess their hiring practices. Moving away from purely academic credentials-based hiring towards skills-based practices will help identify talent with the right capabilities and potential for growth in the cybersecurity field.

However, implementing the strategy requires significant investment and commitment from all stakeholders. The government, industry, and educational institutions must prioritize cybersecurity education and workforce development to ensure long-term success.

Advice: Nurturing Cyber Skills for a Secure Future

For individuals aspiring to enter the cybersecurity field or develop their existing skills, it is crucial to pursue educational opportunities that align with the evolving industry demands. Emphasize practical skills and hands-on experience, as these are highly valued by employers.

Stay up to date with the latest advancements in cybersecurity by engaging in continuous learning. Take advantage of the resources made available through the strategy, such as training materials and competency-based education programs. Participate in work-based learning opportunities to gain valuable experience and establish a strong foundation for career advancement.

To organizations looking to build a skilled cybersecurity workforce, consider partnering with educational institutions and community colleges. These partnerships can provide access to a diverse pool of talent and help bridge the skills gap.

Prioritize diversity and inclusion in your hiring practices. Encourage underrepresented communities to pursue careers in cybersecurity by engaging with organizations focused on enhancing the talent pipeline in these communities.

Invest in talent management tools and scholarship programs to attract and retain top talent. Remove unnecessary barriers to entry, such as security clearances, where possible.

To address the cyber skills shortage effectively, collaboration and investment are key. By working together, we can shape a secure future and mitigate the risks posed by an evolving threat landscape. Let us embrace the National Cyber Workforce and Education Strategy as a stepping stone towards building a robust and resilient cybersecurity workforce.