President Donald Trump recently signed an executive order, which will provide incentives and new guidance for hiring and retaining more security leaders at the federal level.

The order creates new programs to identify and retain federal workers with cybersecurity aptitude. According to the release, the hope is shore up some of the gaps in the federal government’s cybersecurity workforce.

Within 180 days, the Director of the Office of Personnel Management, the Secretary of Commerce, Secretary of Homeland Security, and other appropriate agency heads will create a list identifying cybersecurity aptitude assessments that will be used to determine the current employees with the potential to learn cybersecurity skills for future placement in reskilling programs.

Further, the order mandates that one or more of these assessments must be implemented into current personnel programs where appropriate, as well. The order also asserted that the heads of executive departments will continue to be held accountable for managing cyber risk to their agency, including the effectiveness of their cybersecurity team.

“The US Government must enhance the workforce mobility of America’s cybersecurity practitioners to improve America’s national cybersecurity,” officials wrote. “During their careers, America’s cybersecurity practitioners will serve in various roles for multiple and diverse entities.”

“Government policy must facilitate the seamless movement of cybersecurity practitioners between the public and private sectors, maximizing the contributions made by their diverse skills, experiences, and talents to our Nation,” they added.

The order also establishes the “expansion of learning experiences to develop participants’ skill levels,” as well as the use of peer mentoring.

In addition, agency leadership will incorporate the National Initiative for Cybersecurity Education Cybersecurity Workforce Framework (NICE) standards into workforce training and the skill requirements for contracting IT and cybersecurity services.

All IT and cybersecurity contracts must also include reporting requirements that will determine if personnel have the necessary knowledge and skills to perform the tasks outlined in those contracts.

“Agencies shall ensure that existing awards and decorations for the uniformed services and civilian personnel recognize performance and achievements in the areas of cybersecurity and cyber-operations,” officials wrote.

“The Assistant to the President for National Security Affairs may recommend to agencies that any cyber unified coordination group or similar ad hoc interagency group that has addressed a significant cybersecurity or cyber-operations-related national security crisis, incident, or effort be recognized for appropriate awards and decorations,” they added.

The order also establishes a “President Cup Cybersecurity Competition,” which will reward high performing cybersecurity leaders. The annual competition for federal and military employees will identify, challenge, and reward the top federal cybersecurity teams and leadership.

Lastly, the order aims to strengthen the cybersecurity workforce as a whole in coordination with the Department of Education. The hope is to create a consultative process across both the federal and private sectors to address national cybersecurity workforce needs.

The effort will include a call to action utilizing resources to address cyber workforce needs, align training and education, improve coordination, prepare individuals for lifelong careers, and improve the cybersecurity learning environment.

The order also seeks to close identified skills gaps in the federal workforce and steps the government can take to close those gaps, such as developing education criteria or training providers.

“The nation is experiencing a shortage of cybersecurity talent and capability, and innovative approaches are required to improve access to training that maximizes individuals’ cybersecurity knowledge, skills, and abilities,” officials wrote.

“Training opportunities, such as work-based learning, apprenticeships, and blended learning approaches, must be enhanced for both new workforce entrants and those who are advanced in their careers,” they continued.

The order comes on the heels of a national effort to improve the workforce channel and fill the hundreds of thousands of cybersecurity employment vacancies around the country.

Led by 11 federal agencies including the Department of Health and Human Services and the CIA, the Cybersecurity Talent Initiative will let graduating or recently graduating individuals to apply for a two-year placement at a federal agency with a focus on cybersecurity.


SOURCE: https://healthitsecurity.com/news/trump-executive-order-takes-aim-at-cybersecurity-staffing-shortage