White House releases federal cybersecurity workforce strategy

The White House announced new measures Tuesday to strengthen the federal cybersecurity workforce, including policies that will help agencies retain, as well as recruit, highly skilled information security professionals.

The White House announced new measures Tuesday to strengthen the federal cybersecurity workforce, including policies that will help agencies retain, as well as recruit, highly skilled information security professionals.

The federal government’s four-part cyber workforce strategy aims to create a path for cybersecurity professionals to take a ‘tour of duty’ in the public sector over their career arc, according to a blog post attributed to Office of Management and Budget Director Shaun Donovan, Office of Personnel Management acting Director Beth Cobert, Special Assistant to the President and Cybersecurity Coordinator Michael Daniel, and U.S. Chief Information Officer Tony Scott.

Over the coming months, the White House plans to partner with agencies to streamline hiring practices to quickly bring in new talent, as well as create a ‘cybersecurity cadre’ within the Presidential Management Fellows program to attract top cybersecurity talent from the private sector.

Additionally, OPM will build cybersecurity career paths for current information security professional working in government, including badging and credentialing programs, rotational assignments, and efforts to make current cyber employees subject matter experts in their field.

The strategy also will lean on the National Institute of Standards and Technology’s National Initiative for Cybersecurity Education with plans to hire 3,500 more IT security professionals before the year ends. According the blog post, the government has hired 3,000 people for cybersecurity jobs in the first half of the current fiscal year.

The strategy comes as part of the Obama administration’s Cybersecurity National Action Plan, which among other things, calls for $62 million in the 2017 budget to expand cybersecurity education across the country. That money would fund competitive scholarships or full tuition for students through the CyberCorps: Scholarship for Service program or grants to to hire or retain professors, adopt a cybersecurity core curriculum and strengthen overall cybersecurity education programs.

‘We must recognize that these changes will take time to implement, and the workforce strategy’s long-term success will depend on the attention, innovation, and resources from all levels of government,’ the blog post reads. ‘The initiatives discussed in this Strategy represent a meaningful first step toward engaging Federal and non-Federal stakeholders and provide the resources necessary to establish, strengthen, and grow a pipeline of cybersecurity talent well into the future.’

Federal agencies have been clamoring for more security professionals among their ranks. In one such instance, IRS commissioner John Koskinen asked Congress earlier this year reinstate streamlined critical pay, a provision that authorizes the agency to hire up to 40 individuals at any one time into positions it deems vital to the agency in an administrative, technical or professional field. The IRS had been using that authority to hire IT security professionals, but the provision expired in 2013.

‘Every day, federal departments and agencies face sophisticated and persistent cyber threats that pose strategic, economic, and security challenges to our nation. Addressing these cyber threats has required a bold reassessment of the way we approach security in the digital age and a significant investment in critical security tools and our cybersecurity workforce,’ the blog post reads. ‘While we have made significant progress, we must do more.’

‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

The six-month program will be overseen by the Office of the National Cyber Director and Texas Cyber Command to “find out what works.”

Supply chain challenges loom large in quantum race, White House official says

White House details ‘Gold Eagle’ clearinghouse for AI cyber threats

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

• Election official says Tina Peters would be consultant, won’t have access to election systems