CISA secures funds to boost cyber workforce in underserved communities

TLDR

• A new bill proposes $20 million per year for CISA to conduct cyber workforce outreach to underserved communities
• The Diverse Cybersecurity Workforce Act aims to address diversity gaps in the cybersecurity industry

Summary

A new bill introduced by Reps. Haley Stevens and Shontel Brown, would allocate $20 million per year to the Cybersecurity and Infrastructure Security Agency (CISA) to conduct cyber workforce opportunity outreach to underprivileged communities. The Diverse Cybersecurity Workforce Act highlights the need for more diversity in the cybersecurity workforce to strengthen U.S. cyber defenses. The bill, with 32 cosponsors, directs CISA to engage with disadvantaged groups such as veterans, racial or ethnic minorities, people with disabilities, and formerly incarcerated individuals. The initiative would be housed under CISA’s existing Cybersecurity Education and Training Assistance Program. The bill also requires CISA to provide annual updates to Congress on the progress of these efforts.

The cybersecurity industry currently faces workforce diversity gaps, with only 26% of the workforce comprising women, according to the White House’s Office of the National Cyber Director. The bill aims to address these gaps by ensuring that the cybersecurity workforce reflects the diversity of the nation. Over 448,000 cybersecurity jobs were listed between February 2023 and January 2024, emphasizing the need for a more diverse and inclusive workforce. The lack of diversity in the cybersecurity field not only hinders the industry’s growth but also poses risks to national security.

The bill’s proponents believe that a diverse cybersecurity workforce can bring new perspectives, ideas, and experiences to the table, ultimately enhancing U.S. cybersecurity posture. The annual funding of $20 million through 2030 aims to kickstart cybersecurity outreach efforts to underrepresented communities, helping to bridge the diversity gap in the industry. With workforce shortages posing risks to cybersecurity, the Diverse Cybersecurity Workforce Act seeks to strengthen U.S. cyber defenses by creating a more inclusive and diverse cybersecurity workforce.