Webinar Series

The President’s Executive Order on Cybersecurity Workforce: 

Next Steps and How to Engage

June 5, 2017
Executive	Order	on	Strengthening	the	Cybersecurity	

of	Federal	Networks	and	Critical	Infrastructure

• Signed	by	the	President	on	May	11,	2017

• Four	Workstreams

• Thirteen	Deliverables

• Range	between	60-150	days

2
Four	Workstreams

• Cybersecurity	of	Federal	Government

• Cybersecurity	of	Critical	Infrastructure

• Deterrence	and	International	Cooperation

• Cybersecurity	Workforce

3
Cybersecurity	for	the	Nation:		Policy

To	ensure	that	the	internet	remains	valuable	for	future	

generations,	it	is	the	policy	of	the	executive	branch	to	

promote	an	open,	interoperable,	reliable,	and	secure	

internet	that	fosters	efficiency,	innovation,	

communication,	and	economic	prosperity,	while	

respecting	privacy	and	guarding	against	disruption,	

fraud,	and	theft.	 Further,	the	United	States	seeks	to	

support	the	growth	and	sustainment	of	a	workforce	

that	is	skilled	in	cybersecurity	and	related	fields	as	the	

foundation	for	achieving	our	objectives	in	cyberspace.

4
Workforce	Development	Provision

Purpose:		In	order	to	ensure	that	the	United	States	

maintains	a	long-term	cybersecurity	advantage	.	.	.

Three	Deliverables:

• Report	to	the	President	in	120	Days	with	Findings	

and	Recommendations	on	Growing	and	Sustaining	

the	Cybersecurity	Workforce

• International	Competiveness

• National	Security	Advantage

5
Deliverable	#1:		Public	and	Private	Sector	Workforce

• Assess	the	scope	and	sufficiency	of	efforts to	

educate	and	train	the	American	cybersecurity	

workforce	of	the	future,	including	cybersecurityrelated	education	curricula,	training,	and	

apprenticeship	programs,	from	primary	through	

higher	education

• Provide	a	report	to	the	President	within	120	days

with	findings	and	recommendations regarding	how	

to	support	the	growth	and	sustainment	of	the	

Nation's	cybersecurity	workforce	in	both	the	public	

and	private	sectors.	

6
Who

The	Secretary	of	Commerce	and	the	Secretary	of	

Homeland	Security,	in	consultation	with	the	Secretary	

of	Defense,	the	Secretary	of	Labor,	the	Secretary	of	

Education,	the	Director	of	the	Office	of	Personnel	

Management,	and	other	agencies	identified	jointly	by	

the	Secretary	of	Commerce	and	the	Secretary	of	

Homeland	Security

7
Consultation	with	Appropriate	Stakeholders

• State and	Local	Governments	and	Tribal	Territories

• Academia

– K-12	(Elementary,	Middle,	High)

– Collegiate	(2Y,	4Y,	R,	Prof)

• Training	and	Certification	Organizations

• Non-Profit	Organizations

• Private	Sector	Companies	(Small,	Medium,	Large)

• Trade	Associations	

• International	Organizations

8
Process	for	Addressing	Deliverable	

• Webinar

• Research	Study

• Request	for	Information

• Workshop	#1	– Synthesis	of	Research	and	RFI	Responses

• Workshop	#2	– Tentative	Findings	and	Recommendations

9
Research	Study

• Literature	Review

• Scope	of	Effort	~	Environmental	Scan

– Domains:

• K-12	Education

• Postsecondary	Education

• Apprenticeships

• Training

• Sufficiency	of	Effort	~	Evaluation	Criteria

– Based	on	Existing	Metrics

– Identification	of	Additional	Metrics	Desired

10
Request	for	Information	(RFI)

• Federal	Register	Notice

• Deadline:		30	days	after	RFI	is	Issued

• Broad	Set	of	Questions

– Scope	&	Sufficiency	of	Cybersecurity	Education	and	Training

– Findings	and	Recommendations

• Comments	Publicly	Available

• Results	Analyzed	and	Synthesized

• Results	Shared	at	First	Workshop

11
Workshop	#1

• Host:		Private	Sector	Organization

• Location:		To	Be	Determined

• Date:		Mid/Late	July

• Time:		1-5	p.m.	

• Format:		Plenary	Sessions	with	Speakers	and	Panels

• Focus:		Research	Study	and	RFI	Results

12
Workshop	#2

• Host:		Academic	Organization

• Location:		To	Be	Determined

• Date:		Late	July/Early	August

• Time:		1-5	p.m.	

• Format:		Plenary	Sessions	with	Speakers	and	Panels

• Focus:		Socializing	Findings	and	Recommendations

13
Timeline

• Report	Due:		September	8th

• Final	Draft	of	Report:		August	9th

• Webinar	#2:		Early	August

• Webinar	#1:		Late	July

• RFI	Closes:		July	TBD

• RFI	Opens:		June	TBD

• Webinar:		June	5th

• Research	Study	Begins:		May	12th

• Executive	Order	Signed:		May	11th

14
For	more	information:

• Website:		nist.gov/nice/cybersecurityworkforce

• Email:		cybersecurityworkforce@nist.gov

15
Question	and	Answer

16
Deliverable	#2:		International	Competitiveness

• Review	the	workforce	development	efforts	of	

potential	foreign	cyber	peers	in	order	to	help	identify	

foreign	workforce	development	practices	likely	to	

affect	long-term	United	States	cybersecurity	

competitiveness;	and

• Within	60	days	of	the	date	of	this	order,	provide	a	

report	to	the	President	through	the	Assistant	to	the	

President	for	Homeland	Security	and	

Counterterrorism	on	the	findings	of	the	review.

17
Who

The	Director	of	National	Intelligence,	in	consultation	

with	the	heads	of	other	agencies	identified	by	the	

Director	of	National	Intelligence

18
Deliverable	#3:		National	Security	Advantage

• Assess	the	scope	and	sufficiency	of	United	States	

efforts	to	ensure	that	the	United	States	maintains	or	

increases	its	advantage	in	national-security-related	

cyber	capabilities;	and

• Within	150	days	of	the	date	of	this	order,	provide	a	

report	to	the	President,	through	the	Assistant	to	the	

President	for	Homeland	Security	and	

Counterterrorism,	with	findings	and	

recommendations	on	the	assessment	carried	out.

19
Who

The	Secretary	of	Defense,	in	coordination	with	the	

Secretary	of	Commerce,	the	Secretary	of	Homeland	

Security,	and	the	Director	of	National	Intelligence

20
Classification	Status	of	Reports

The	reports	may	be	classified	in	full	or	in	part,	

as	appropriate.

21
Question	and	Answer

22
NICE Cybersecurity Workforce Framework – Draft NIST SP 800-181

• Specialty Areas (33) – Distinct areas of cybersecurity work;

• Work Roles (52) – The most detailed groupings of IT, cybersecurity or cyber-related work, which include 

specific knowledge, skills, and abilities required to perform a set of tasks.

• Tasks – Specific work activities that could be assigned to a professional working in one of the NCWF’s 

Work Roles; and,

• Knowledge, Skills, and Abilities (KSAs) – Attributes required to perform Tasks, generally demonstrated 

through relevant experience or performance-based education and training.

• Audience:

• Employers

• Current and Future Cybersecurity Workers

• Training and Certification Providers

• Education Providers

• Technology Providers

• Reference Resource for cybersecurity workforce development 

SECURELY

PROVISION

PROTECT

AND

DEFEND

OPERATE

AND

MAINTAIN

OVERSEE

AND	

GOVERN

COLLECT

AND

OPERATE

ANALYZE INVESTIGATE

Cybersecurity Work Categories (7)

23

nist.gov/nice/framework	
Cybersecurity	Education	and	Awareness	Portal

• Training	Catalog

• Workforce	and	

Development	Toolkit

• Sample	Curriculum

• Federal	Virtual	Training	

Environment	(FedVTE)

24

www.niccs.us-cert.gov
Advanced	Technological	Education	Centers

• Faculty	development	through	

online	courses

• Cybersecurity	Curricula

• Virtual	Teaching	and	Learning	

Environment

• Simulated	Environment	with	

content	aligned	to	industry	

certifications

25

• Sharing	expertise	through	collaboration	with	industry

www.atecenters.org/st
National	Centers	of	Academic	Excellence	(CAE)

in	CyberSecurity

Cyber	Defense:	200+

26

www.nsa.gov/resources/educators/centersacademic-excellence

Cyber	Offense:	16	
Scholarship	for	Service	(SFS)

• Scholarships

• Capacity	Building

27

www.sfs.opm.gov
GenCyber

28

www.gen-cyber.com
NICE	Engagement

Inform

NICE	Working	Groups	and	Interagency	council

Quarterly	e-Newsletter

Events:

§ Monthly	Webinars

§ NICE	Conference	&	Expo	– Nov.	7-8	in	Dayton,	OH

§ NICE	K-12	Cybersecurity	Education	Conference	– Dec.	4-5	in	Nashville,	TN

Influence

NICE	Workforce	Framework

Cybersecurity	Jobs	Heat	Map

RAMPS	Federal	Funding	Opportunity

Innovate

NICE	Challenge	Project

29 nist.gov/nice
Join	the	NICE	Working	Group

• K	12

• Collegiate

• Competitions

30

• Training	and	

Certifications

• Workforce	Management

nist.gov/nice/nicewg
Participate	in	our	events

• NICE	Conference	and	Expo

• NICE	K-12	Cybersecurity	Education	Conference

• NICE	Webinars

31
Subscribe	to	the	NICE	eNewsletter

nist.gov/nice/enewsletter

32
Question	and	Answer

33