{"id":22326,"date":"2022-09-21T11:14:39","date_gmt":"2022-09-21T16:14:39","guid":{"rendered":"https:\/\/fleishmanhillard.com\/?p=22326"},"modified":"2022-10-31T17:05:09","modified_gmt":"2022-10-31T22:05:09","slug":"tiktok-addressing-talent-gap-in-cybersecurity","status":"publish","type":"post","link":"https:\/\/fleishmanhillard.com\/2022\/09\/tiktok-addressing-talent-gap-in-cybersecurity\/","title":{"rendered":"TickTockTech: Addressing the talent gap crisis in cybersecurity"},"content":{"rendered":"<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p><strong>From Bletchley to Biden<\/strong><\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p>In 2021, the Biden administration <a href=\"https:\/\/www.protocol.com\/whitehouse-gov-html-source\" target=\"_blank\" rel=\"noreferrer noopener\">slipped<\/a> a digital <a href=\"https:\/\/www.pcmag.com\/encyclopedia\/term\/easter-egg#:~:text=An%20undocumented%20function%20hidden%20in,In%20Applications\" target=\"_blank\" rel=\"noreferrer noopener\">Easter Egg<\/a> into the software code for the newly updated White House website. Buried within the site\u2019s HTML was a message encouraging tech workers to apply for jobs within the U.S. Digital Service, an executive branch division whose staff builds and improves digital tools used by people interacting with the federal government online. The hidden message stated, \u201cIf you\u2019re reading this, we need your help building back better.\u201d &nbsp;<\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p>The effort was part of President Biden\u2019s $1.9T COVID-19 relief plan, which included $200M in funding for hiring support employees. It was also part of the administration\u2019s commitment to do more in response to the <a href=\"https:\/\/www.gao.gov\/products\/gao-22-104746#:~:text=What%20GAO%20Found,the%20Russian%20Foreign%20Intelligence%20Service.\" target=\"_blank\" rel=\"noreferrer noopener\">SolarWinds hack<\/a> that made private organizations and many government agencies victim to Russian nation-state security threats&nbsp;. And the cyber threats haven\u2019t stopped coming \u2013 more recently, the U.S. Justice Department <a href=\"https:\/\/www.politico.com\/news\/2022\/09\/14\/iranian-hackers-00056627\" target=\"_blank\" rel=\"noreferrer noopener\">indicted<\/a> Iranian hackers for attacks on our country\u2019s critical infrastructure. Two weeks ago, the U.S. government warned that ransomware attacks on schools are likely to <a href=\"https:\/\/www.cnn.com\/2022\/09\/06\/politics\/us-schools-ransomware-warning\/index.html\" target=\"_blank\" rel=\"noreferrer noopener\">increase<\/a>. Conservative estimates on the cost of cyberattacks on government agencies alone sits at around $13.7B per year. The costs \u2013 both financially and economically \u2013 will skyrocket if the talent gap remains unaddressed.<\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/fleishmanhillard.com\/wp-content\/uploads\/2022\/09\/image.png\" alt=\"\" class=\"wp-image-22329\" width=\"880\" height=\"242\" srcset=\"https:\/\/fleishmanhillard.com\/wp-content\/uploads\/2022\/09\/image.png 975w, https:\/\/fleishmanhillard.com\/wp-content\/uploads\/2022\/09\/image-300x83.png 300w, https:\/\/fleishmanhillard.com\/wp-content\/uploads\/2022\/09\/image-768x212.png 768w\" sizes=\"auto, (max-width: 880px) 100vw, 880px\" \/><figcaption><em>A screenshot from Reuters obtained in January of 2021 showing HTML code on the White House&#8217;s website containing an invitation to join the U.S. Digital Service, the White House\u2019s tech team.<\/em> <\/figcaption><\/figure>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p>This may have been the first time in modern history that the U.S. federal government laid an Easter Egg for recruiting purposes, but the recruitment tactic wasn\u2019t the first of its kind. During WWII, British intelligence agencies circulated crosswords and other puzzles in newspapers to recruit code breakers, hiring those candidates to work in top-secret locations such as Bletchley Park in the UK. Today, companies like <a href=\"https:\/\/www.techrepublic.com\/pictures\/looking-back-at-microsoft-access-easter-eggs\/\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft<\/a> regularly drop Easter Eggs into their products to attract the best talent and encourage recreational enthusiasts to engage with its products. Soon after the White House\u2019s revamped website went live, the U.S. Digital Service reported that it received a \u201clarge number of applications.\u201d<\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p><strong>Fast Forward to 2022\u2026<\/strong><\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p>But\u2026did it work? Did the large number of applications from the Easter Egg stunt of 2021 result in meaningful hires to help address the cybersecurity talent gap? And what are some of the other tactics the U.S. government (and companies partnering with it) is using to address this challenge?<\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p>The answer to those questions is not crystal clear, but it\u2019s apparent that the talent gap is a serious concern and has the Biden administration\u2019s attention. As of August, there were over <a href=\"https:\/\/www.cyberseek.org\/heatmap.html\" target=\"_blank\" rel=\"noreferrer noopener\">714,000 cybersecurity jobs open<\/a> in the U.S. and the president has characterized the talent gap as the country\u2019s \u201ccore<a href=\"https:\/\/www.whitehouse.gov\/briefing-room\/speeches-remarks\/2021\/08\/25\/remarks-by-president-biden-on-collectively-improving-the-nations-cybersecurity\/\" target=\"_blank\" rel=\"noreferrer noopener\"> national security challenge<\/a>.\u201d&nbsp;<\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p>In July, National Cyber Director Chris Inglis hosted the <a href=\"https:\/\/www.whitehouse.gov\/briefing-room\/statements-releases\/2022\/07\/21\/fact-sheet-national-cyber-workforce-and-education-summit\/\" target=\"_blank\" rel=\"noreferrer noopener\">National Cyber Workforce and Education Summit<\/a> at the White House, which included participation from top White House officials and executives from the private sector and the academic community. Attendees discussed solutions to several specific topics within the cybersecurity talent gap, including the need to create new skills-based pathways to cybersecurity jobs in schools and training programs; improve Diversity, Equity, Inclusion and Accessibility in the cyber field and use the talent shortage as an opportunity to build pipeline for historically untapped talent; bring together entities both public and private who employ, train and educate cyber professionals; and examine how to improve practices in cyber adjacent fields that are not focused solely on cyber but are still impacted by it, are related to it or benefit from it.<\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p>Most importantly, the White House shared significant programming coming out of the summit to close the talent gap, such as developing a National Cyber Workforce and Education Strategy, creating a 120-day Cybersecurity Apprenticeship Sprint and an effort to strengthen the K-12 system to prepare students more effectively for cybersecurity job opportunities. Additionally, 16 organizations made substantial announcements, commitments or pledges in connection with the summit, including Accenture, Cisco, The Cyber Readiness Institute (CRI), Girls Who Code, IBM and The Linux Foundation, among others.<\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p><strong>Why it matters + what to do about it<\/strong><\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p>This is an excellent start to addressing our country\u2019s critical cybersecurity talent shortage, but it\u2019s important to note one key \u2014 and missing \u2014 link: the value of communications in the effort to close the cybersecurity talent gap. Here\u2019s how organizations can help:<\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <ul class=\"wp-block-list\">\n<li>Leadership within organizations must not only identify the <em>size<\/em> of their cybersecurity talent gap, but also clearly communicate to internal and external stakeholders about how they will address it. This should be a clear missive with specific steps and performance metrics.<\/li>\n<li>Regularly report on progress toward those goals and cultivate an employer brand that attracts the top talent. This means not only reporting hard numbers, but clearly communicating about specific challenges the organization is seeing and what they are doing to adjust the strategy for recruiting talent as a result.<\/li>\n<li>Identify employee champions who can speak to cross-functional roles. For example, communications plays a key role for most cybersecurity actions a company may take. In many cases, these employees are already baked into the organizational structure around threat intelligence research, employee trainings, incident response and much, much more. So why aren\u2019t we also putting these individuals to work to try and help close the security talent gap? This will not only establish a new skills-based pathway to cybersecurity jobs in training programs but could also improve practices in cyber adjacent fields \u2013 hitting not one but two key suggestions for leaders coming out of the White House Summit.<\/li>\n<\/ul>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <p>With the start of Cybersecurity Awareness Month just over a week away, this looming talent gap remains top of mind and will certainly be a central conversation topic. There is still much work to be done but finding creative ways to inspire interest in the field is the first, most critical step.<\/p>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>\n\n<div class=\"container\">\n                                            <div class=\"row\">\n                                                <div class=\"col-md-10 col-lg-9 offset-lg-1\">\n                                                    <figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"512\" src=\"https:\/\/fleishmanhillard.com\/wp-content\/uploads\/2022\/09\/Bridging_cybersecurity_talent1-1024x512.png\" alt=\"\" class=\"wp-image-22327\" srcset=\"https:\/\/fleishmanhillard.com\/wp-content\/uploads\/2022\/09\/Bridging_cybersecurity_talent1-1024x512.png 1024w, https:\/\/fleishmanhillard.com\/wp-content\/uploads\/2022\/09\/Bridging_cybersecurity_talent1-300x150.png 300w, https:\/\/fleishmanhillard.com\/wp-content\/uploads\/2022\/09\/Bridging_cybersecurity_talent1-768x384.png 768w, https:\/\/fleishmanhillard.com\/wp-content\/uploads\/2022\/09\/Bridging_cybersecurity_talent1-1536x768.png 1536w, https:\/\/fleishmanhillard.com\/wp-content\/uploads\/2022\/09\/Bridging_cybersecurity_talent1-2048x1024.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n                                                <\/div>\n                                            <\/div>\n                                        <\/div>","protected":false},"excerpt":{"rendered":"<p>From Bletchley to Biden In 2021, the Biden administration slipped a digital Easter Egg into the software code for the newly updated White House website. Buried within the site\u2019s HTML was a message encouraging tech workers to apply for jobs within the U.S. Digital Service, an executive branch division whose staff builds and improves digital [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":22328,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[23,33],"tags":[],"class_list":["post-22326","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-expertise","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/fleishmanhillard.com\/wp-json\/wp\/v2\/posts\/22326","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fleishmanhillard.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fleishmanhillard.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fleishmanhillard.com\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/fleishmanhillard.com\/wp-json\/wp\/v2\/comments?post=22326"}],"version-history":[{"count":0,"href":"https:\/\/fleishmanhillard.com\/wp-json\/wp\/v2\/posts\/22326\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fleishmanhillard.com\/wp-json\/wp\/v2\/media\/22328"}],"wp:attachment":[{"href":"https:\/\/fleishmanhillard.com\/wp-json\/wp\/v2\/media?parent=22326"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fleishmanhillard.com\/wp-json\/wp\/v2\/categories?post=22326"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fleishmanhillard.com\/wp-json\/wp\/v2\/tags?post=22326"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}