Bipartisan Senate bill would promote cybersecurity apprenticeship programs

The legislation aims to grow the cyber workforce under a Department of Labor-managed grants program for apprentices.

Cybersecurity apprenticeship programs would get a major boost under a new bipartisan Senate bill, continuing a congressional push to address the workforce shortages plaguing the industry.

The Cyber Ready Workforce Act from Sens. Jacky Rosen, D-Nev., and Marsha Blackburn, R-Tenn., calls on the Department of Labor to award competitive grants that support the creation, implementation and expansion of registered apprenticeship programs in the cybersecurity field.

“As the cybersecurity industry grows and cyber threats become more common, we need to ensure we have the workforce with the training and skills necessary to fill jobs in this critical sector,” Rosen said in a press release. This legislation will “open the door to more good-paying, cutting-edge jobs for Nevadans and all Americans, including for those without a college degree.”

The apprenticeships, per the legislation, would provide participants with technical instruction, training in the workplace and certifications recognized by the industry, including multiple CompTIA and Microsoft programs as well as Certified Network Defender, Certified Ethical Hacker and others. 

Apprenticeships would prepare participants for careers as computer support specialists, cybersecurity support technicians, cloud computing architects, computer programmers, computer systems analysts or security specialists, according to the bill. 

“Strengthening our cyber workforce is imperative to the national security of our nation,” Blackburn said. “The Cyber Ready Workforce Act would expand apprenticeship programs to provide workers the skills they need to succeed and help ensure the United States remains a world leader in cybersecurity.”

The Labor Department would oversee the registration process with participating employers, and be available to troubleshoot logistical or technical issues, per the bill. DOL would also assist employers with costs associated with offsite trainings and course materials, in addition to connecting those companies with the appropriate education and training providers for complementary “on-the-job learning.” A special National Initiative for Cybersecurity Education Workforce Framework for Cybersecurity Skills publication would serve as a reference point.

At least 85% of the grant money should be used by employers on program management, while the remaining 15% could be allocated to “a workforce intermediary” for marketing and outreach efforts, the bill states.

The legislation from Rosen and Blackburn follows a flurry of Senate and House activity that seeks to fill a cybersecurity workforce gap that some estimates put at half a million jobs. Congressional efforts over the past year to address that shortfall include bills to bolster the cyber talent pool at community colleges and minority-serving institutions, promote cyber jobs in disadvantaged communities and provide cybersecurity training to veterans. 

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure