The Cybersecurity Workforce Data Initiative (CWDI), mandated by Public Law (P.L.) 117-167 and led by the National Center for Science and Engineering Statistics within the U.S. National Science Foundation, is assessing the feasibility of producing national estimates on the U.S. cybersecurity workforce. As part of this effort, the CWDI held three workshops in 2024. Through these workshops, 321 participants provided input for shaping a possible future federal data collection on the U.S. cybersecurity workforce. Each workshop included the following:

Below are details on and the materials from each workshop.

The cybersecurity workforce is characterized by a combination of knowledge, skills, and roles, with various industry leaders defining the workforce differently depending on the context. Although multiple entities within and outside the federal government have used a range of definitions to identify cybersecurity professionals, no universal definition is suitable for collecting nationally representative data on this workforce. Additionally, instead of a single categorization, some individuals may be core cybersecurity professionals, whereas others may be adjacent to the field. This workshop helped inform how the cybersecurity workforce will be defined in potential future national statistics describing the U.S. cybersecurity workforce. 

This workshop featured a panel discussion with

The United States needs better data on the cybersecurity workforce. However, there is much debate about what types of information would be the most useful. Understanding the professional pathways of cybersecurity workers and the skills they hold in various roles is a priority. Having a better understanding of the on-ramps and advancements in cybersecurity careers may help additional workers transition into the field. Stakeholders are also seeking data that will help them in understanding cybersecurity workforce needs from the employer perspective, better identifying what skills and qualifications U.S. employers want and understanding how employers are currently filling those roles. This workshop provided multiple perspectives on these knowledge gaps, alongside discussions about how the CWDI may prioritize and address these data needs.

This workshop featured a panel discussion with

As the cybersecurity workforce grows quickly and job demands evolve, the gap persists between experienced cybersecurity professionals and the workforce pipeline. Several important challenges exist in better aligning the supply and demand of the U.S. cybersecurity workforce. First, many employers are unwilling to hire workers without relevant experience, making it challenging for those new to the field to find positions. Second, data and industry leaders note a lack of on-ramps into the profession, and the various combinations of training and experience needed to be successful in the field are not always clear to workers or hiring managers. Identifying the specific needs of U.S. companies will allow workers to get the qualifications to better fill those gaps. Third, there is a concern that stereotypes about professionals in the field harm recruitment, and this challenge needs to be addressed to strengthen the supply of workers. Lastly, the complex and opaque landscape of degrees, certificates, and prior work experience further complicate the workforce pipeline. This workshop focused on these supply-and-demand mismatch challenges, including discussions about how knowledge gaps affect the way the field understands that mismatch, and provided input into how to address these concerns.

This workshop featured a panel discussion with

CWDI
ncsesweb@nsf.gov