In the US, we have a significant problem with over 200,000 unfilled cybersecurity jobs. Estimates range, but this number could top 1 million job openings in 10 years. The only way to address this shortage is to leverage training in a cyber range.
The Cyber workforce shortage has national attention and schools, companies, government agencies, and individuals are scrambling to fill the gap. We faced similar issues with aviation and medicine in the first half of the last Century. At the time, both areas were nascent industries with exciting technology and engineering developments and an ever-increasing job shortage. This lead to some well-trained professionals, and even more under-trained, or ill-trained pilots and doctors. The ad-hoc nature of training and certification lead to lost lives. Eventually, both aviation and medicine developed a new model for training, new standards for operational experience, and in the case of flight training, significant simulation systems to give pilots opportunities to practice safely.
In cybersecurity, we are in a similar period where conventional training models are insufficient to fill the cyber skills gap. As with flight training – and medicine to some extent – the enabling technology is simulation/emulation. The essence of this report is correct simulation/emulation gives us the power of Predictive Operational Performance (POP) for cybersecurity professionals. It instills confidence in cyber workforce seekers and cyber workforce employers that training will predict job success.