NICCS does not endorse specific organizations. The following resources and links are included for your information and convenience.

Cybersecurity Workforce Challenges

Below are a collection of three white papers sponsored by the Cybersecurity and Infrastructure Security Agency (CISA) and authored by Carnegie Mellon University (CMU) Software Engineering Institute (SEI) that explore critical challenges facing our nation’s cybersecurity workforce.

Executive Summary

  • Cybersecurity Careers of the Future
    Provides a list of key cybersecurity skills needed to close the workforce gap, based off workforce survey analysis, threat reports, service offerings, open job postings, applicable regulations, and emerging technologies to identify the required Knowledge, Skills, and Abilities (KSAs) and Work Roles.
  • Cybersecurity Talent Identification and Assessment
    Explores how cybersecurity talent is identified, highlights current and future assessment capabilities, and provides recommendations on candidate recruitment and talent evaluation.
  • Cybersecurity Career Paths and Progression
    Explores the current state of cybersecurity careers from the importance of early exposure, to methods of entry into the field, to career progression.

CISA Workforce Resources and Tools

  • Workforce Framework for Cybersecurity (NICE Framework)
    The NICE Framework establishes at taxonomy and common lexicon that describes cybersecurity work and workers regardless of where or for whom the work is performed.  It is a nationally-focused and applies across public, private, and academic sectors.
  • Cybersecurity Workforce Development Toolkit
    The Cybersecurity Workforce Development Toolkit provides organizations with information, tools and templates to plan, build, and advance their cybersecurity workforce.
  • DHS PushButtonPD™ Tool
    This Human Resources and Manager tool was developed to help quickly draft Federal employee cyber position description(s). It is a no cost Microsoft Excel workbook file which makes drafting of the position description easier without any prior knowledge of the cyber position.
  • NICE Framework Mapping Tool
    The Mapping Tool allow Human Resources offices and Managers to input positions required knowledge skills, and abilities to build cybersecurity profiles that are mapped to the NICE Framework.  This tool ensures that your organization is on the same page as hundreds of other organizations when it comes to talking about cybersecurity work in the same way.
  • Cybersecurity Capability Maturity Model
    Enables organizations to evaluate their cybersecurity workforce planning readiness.
  • Cybersecurity Workforce Planning Diagnostic PDF
    Helps organizations make decisions about resource allocation and human capital investments based on their willingness to take on risk.
  • Best Practices for Planning a Cybersecurity Workforce White Paper
    As the nation seeks to build a skilled cybersecurity workforce, this paper serves as a starting point to highlight best practices for cybersecurity workforce planning and ultimately identifying an approach to address significant cybersecurity workforce gaps nationwide.

Education Resources

Cybersecurity Training Resources

  • The Federal Virtual Training Environment (FedVTE)
    FedVTE is a free online, on-demand cybersecurity training system providing cybersecurity training courses for government personnel and U.S. Veterans.
  • NICCS Education and Training Catalog
    The NICCS Education and Training Catalog is the place to start for anyone interested in advancing their cybersecurity education including current cybersecurity employees looking to build skills, career changers seeking to forge a new path, or Veterans hoping to retrain for the next phase in life.

Community College Training Resources

External Cybersecurity Resources

  • Workforce Management Guidebook - Cybersecurity is Everyone's Job
    A publication that talks about cybersecurity from every business function and aspect of an organization’s operation. It is written for a general audience who may not be knowledgeable about cybersecurity and can be read as a complete guide or by each business function as standalone guides.
  • CyberSeek
    To help close the cybersecurity skills gap, CyberSeek provides detailed, actionable data around supply and demand in the cybersecurity job market.
    Campaign is a national public awareness campaign aimed at increasing the understanding of cyber threats and empowering the American public to be safer and more secure online.