A Few Thoughts on the National Cyber Workforce and Education Strategy

Let me begin by acknowledging a key issue with the following observation: The statement from the actual strategy, "Foundational cyber skills must become as universal as reading and math" (pg. 08), reflects a priority for the National Cyber Workforce and Education Strategy. However, the U.S.'s ranking of 26th in math achievement in the PROGRAM FOR INTERNATIONAL STUDENT ASSESSMENT (PISA) indicates significant gaps in foundational education, especially compared to global peers. This raises an important question: if the U.S. still struggles to elevate math competency, a traditional foundational skill, how prepared are we to integrate cybersecurity as an equally universal skill successfully?????

A 2019 study of 15-year-olds in China and the United States revealed that Chinese students outperformed their American counterparts in nearly every educational category, with a particularly significant gap in math. This is simply unacceptable! America can and must do better, given our vast resources and opportunities. In a world increasingly shaped by cognitive, software, and hardware conflicts, math is the universal language that drives cyber capabilities.

An intelligent observation here is that efforts to elevate cyber skills must address the root challenges already present in foundational education. Strong mathematical abilities are critical for logical problem-solving, but foundational cyber skills also require similar cognitive abilities. Thus, the national strategy must include substantial education reforms to raise math and cyber proficiencies concurrently. Without improving fundamental competencies, the goal of universal cyber literacy may remain out of reach. This calls for a holistic approach where math and cyber education are developed in tandem, leveraging their interconnectedness.

The good news is that the strategic pillars outlined in the?National Cyber Workforce and Education Strategy?already provide a framework that could help the U.S. overcome the dilemma of lagging math achievement while striving to make foundational cyber skills as universal as reading and math. Here's how each pillar contributes:

Pillar One: Equip Every American with Foundational Cyber Skills

This pillar aims to ensure that digital literacy, computational thinking, and digital resilience become widespread. It addresses the current gaps in foundational education by broadening access to these skills, especially through early education and low-cost programs. Importantly, computational thinking often overlaps with mathematical reasoning, which means efforts to improve cyber literacy could simultaneously reinforce math skills. For example, problem-solving in cybersecurity, such as algorithms and logic, has direct applications in improving mathematical competencies.

Pillar Two: Transform Cyber Education

This pillar focuses on integrating cybersecurity education into existing curricula across disciplines, from K-12 to postsecondary education. Embedding cybersecurity concepts in various subjects, particularly in STEM courses, could help elevate the overall quality of education, including math. Competency-based and interdisciplinary approaches can link abstract math concepts to real-world applications in cybersecurity, making math more engaging and relevant for students. Additionally, the emphasis on teacher training and capacity-building ensures that educators are better equipped to teach math and cyber skills effectively. All kids should learn Python in school! I learned BASIC as a kid in the 80s through an extracurricular program my mom signed me up for.????

Pillar Three: Expand and Enhance America’s Cyber Workforce

This pillar advocates for skills-based hiring rather than traditional degree requirements, opening pathways for individuals with strong foundational skills, even if they lack advanced credentials. This approach provides alternative routes into the cybersecurity workforce for students who may struggle with traditional academic paths, especially in subjects like math. By promoting hands-on experience, internships, and apprenticeships, this pillar helps create an environment where students can develop math and cyber proficiencies through practical application, more flexibly addressing the foundational gaps.

Pillar Four: Strengthen the Federal Cyber Workforce

The federal government can lead by example in improving foundational cyber education and workforce development. Creating federal training programs emphasizing mathematical and cybersecurity skills sets a standard for education and workforce readiness that can be replicated across public and private sectors. Federal leadership in developing innovative educational tools and practices can trickle down into broader educational reforms that simultaneously address math and cyber skill gaps.

I have always advocated for developing cyber skills through hands-on tasks, echoing the focus of the?National Cyber Workforce and Education Strategy?on practical, experience-driven learning. You can only maneuver effectively in an environment with a deep, practical understanding. As a cyber educator, mentor, and university professor of cyber threat intelligence, I still see many schools and universities downplaying the need for technical, hands-on cyber-education capabilities. Nothing could be further from the truth.

The Strategy’s?Pillar Two, which emphasizes transforming cyber education through competency-based approaches, speaks directly to this. It highlights the need for applied learning and the importance of aligning educational programs with learners' cognitive and technical needs. If you encounter institutions that neglect this hands-on focus, do yourself a favor and find a different school that embraces experiential learning, as recommended in the Strategy.

Cyber skills are earned through real-world experience. I highly recommend internships and volunteer work, as emphasized in Strategy’s Pillar Three, which pushes for hands-on training like apprenticeships. I spent years troubleshooting routers, firewalls, switches, and proxy servers, running pentests, and conducting vulnerability assessments. My ?Security Operations Center (SOC) experience was priceless, sharpening my skills exactly how the Strategy envisions—by getting learners directly into practical environments. Colleges and universities are catching on, and building SOCs for training and cyber ranges is another invaluable resource!

Page 29 of the?National Cyber Workforce and Education Strategy?states:

"Integrated education and training models that include work-based learning, paid internships, externships, pre-apprenticeships, or registered apprenticeships have proven to be effective. Through these and other work-based learning opportunities, cyber workers can earn a wage as they gain hands-on experience and develop their skills.”????

FACT: Paid internships are more competitive and challenging to secure than unpaid ones, especially cybersecurity. Several sources say paid opportunities are typically available with larger, well-funded companies, while unpaid internships are more common in smaller firms or government sectors. This is also true for the Cyber Security Forum Initiative (CSFI), where most internships and volunteer opportunities are unpaid. However, do not let this fool you; CSFI's cyber programs, when followed diligently, equip our volunteers with the skills and experience needed to secure full-time positions in industry and government.????

???? ??????????????????????????????????????????????????????????????????????CSFI’s training and volunteer programs align directly with the?National Cyber Workforce and Education Strategy?(NCWES), advancing America's cyber workforce goals across all four strategic pillars:

1. Pillar One: Equip with Foundational Cyber Skills

CSFI develops critical skills through hands-on programs like the Lab Validation and Cyber Threat Intelligence (CTI) Reporting Team, providing practical experience with VMs and threat scenarios to build digital and computational literacy.

1. Pillar Two: Transform Cyber Education

CSFI fosters competency-based learning, mirroring NCWES’s emphasis on real-world, applied education. Volunteers in CSFI gain valuable technical skills and intelligence analysis experience, bridging the gap between education and workforce demands.

1. Pillar Three: Expand the Cyber Workforce

CSFI acts as a career pathway, providing practical experience that transitions volunteers into full-time roles in both government and industry. Programs like the CTI Reporting Team prepare volunteers for high-demand roles, such as CTI analysts, without requiring formal degrees.

1. Pillar Four: Strengthen the Federal Workforce

CSFI helps prepare volunteers for cyber roles in federal agencies, supporting NCWES’s call for a diverse, skilled federal workforce. Its programs offer direct access to real-world experience, positioning volunteers for national security and intelligence roles.

I highly recommend reading this article—it offers a reality check for anyone looking to enter the cyber ranks. Don't miss it!?

ARTICLE HERE:?https://www.dhirubhai.net/pulse/reality-check-getting-started-cybersecurity-paul-de-souza/?trackingId=9hP8Jh6IRaebkohB75P0tg%3D%3D

I would like to compare Bloom's Taxonomy with the Foundational Cyber Skills framework from the National Cyber Workforce and Education Strategy. I will highlight their similarities and how they mutually support cognitive development and skill-building.

Mutual Support:

• Cognitive Development: Both frameworks emphasize deeper cognitive engagement. Foundational cyber skills closely align with Bloom’s structure, starting with basic knowledge (Remember) and advancing to higher-order thinking skills like analysis and creation.
• Problem Solving and Innovation: Bloom’s highest levels (Evaluate and Create) are essential in cybersecurity for addressing complex problems and adapting to new digital challenges. These levels directly support digital resilience and upskilling in cyber contexts.
• Skill Application: Both models prioritize applied learning, ensuring learners practically absorb and apply information. This is critical for academic growth and cyber operations.

These frameworks complement each other by providing a clear progression from foundational knowledge acquisition to advanced analysis and creation, contributing to comprehensive cognitive and skill development in cybersecurity.

I firmly believe that the?National Cyber Workforce and Education Strategy?is precisely what America needs to secure its future. This strategy lays a clear path for building a skilled, diverse cyber workforce to tackle the ever-evolving challenges we face in the digital age. It’s about more than just jobs—it’s about ensuring our national security, economic strength, and global leadership in technology.

I want to express my deep appreciation to all those involved in this critical national effort. Leaders like Director Harry Coker , Dr. Joe Billingsley, PhD , Daniel "Rags" Ragsdale , Harry Wingo , and many others at The White House have dedicated themselves to making this vision a reality. Your leadership and commitment drive the transformation needed to equip our nation with the cyber talent we need. Thank you for your hard work and setting the course for a stronger, more secure America!

Outstanding testimonials about our CSFI programs here:

Abby Dykes : ?https://www.dhirubhai.net/pulse/interview-testimonial-benefits-working-csfi-paul-de-souza/?trackingId=qlgt%2Fh7jT124q5QWKlLxVA%3D%3D

Daria-Romana P. : ?https://www.dhirubhai.net/pulse/interview-daria-romana-popthe-benefits-working-csfi-paul-de-souza/

“I had the opportunity to meet Paul while working on a CSFI project focused around air traffic control system vulnerabilities. While working with Paul and the rest of my CSFI colleagues, I was amazed by the grasp of understanding that Paul had, especially in how security needs to evolve in the current environment as well as the wide range of individuals, resources and capabilities CSFI has at its disposal. As a result, our team was able to create a detailed report around current [Air Traffic Control] ATC vulnerabilities and recommendations to enhance the current security posture.

Additionally, outside of the ATC project, Paul has been of significant help to me throughout my career in the cyber security space. Through his network, I was able to be introduced to several current and retired military officers that are on the CSFI board of directors as well as many more extremely talented individuals. Additionally, Paul has been of significant help to me while I was pursuing a commission in the US Navy Reserves. I could not have done it without his help, guidance and wisdom. Working with Paul itself is a great privilege and I would be honored to work with him again as well as with the many members of the Cyber Security Forum Initiative.”

-?Arvin Verma, Officer in the US Navy Reserves (Cryptologic Warfare Officer)

?Volunteer with the Cybersecurity Forum Initiative (CSFI) – Lead and be led. Learn and grow.

How to Apply to a CSFI internship/volunteering opportunity: 1. Applicants should be ready to sign an NDA and code of conduct and undergo other checks. 2. Only US citizens, NATO members, and approved American allies can apply. 3. Priority is given to U.S. veterans and military spouses. 4. CSFI promotes diversity and inclusion.

Send your resume to: [email protected]. Support our CSFI mission:?"To provide Cyber Warfare awareness, guidance, and security solutions through collaboration, education, volunteer work, and training to assist the US Government, US Military, Commercial Interests, and International Partners." These programs can only be available because our Gold Sponsors make it possible!

DISCLAIMER: CSFI Volunteer Legal Notice CSFI Volunteer Terms: All participants engaged with the Cyber Security Forum Initiative ("CSFI"), whether as members, volunteers, Fellows, or Advisory Directors, shall act in a singular capacity as autonomous volunteers. No aspect of such voluntary association shall be interpreted or inferred as constituting any form of proprietary interest, partnership, employment, agency, fiduciary, or other legally binding relationship with CSFI. All volunteers affiliated with CSFI in any capacity are bound to adhere to all CSFI stipulations, mandates, and pertinent laws and statutes. CSFI retains the unequivocal right to dismiss and/or reassign volunteers from any role at its sole discretion. CSFI maintains no affiliation with the U.S. Government or any other sovereign authority.