Governors grapple with worker shortage on Web security

Demand is high and supply low for key cybersecurity positions nationwide, leaving states vulnerable, the National Governors Association (NGA) said Monday.

“The most direct challenge to governors is to make sure that their states’ systems are cyber secure,” concluded an NGA paper assessing the cybersecurity workforce.

{mosads}A robust cybersecurity workforce is “critical” to keeping states’ infrastructure safe, said Michigan Gov. Rick Snyder (D). 

Snyder sad he sees the cybersecurity “mission” as “two-fold.”

“Not only is it vitally important that we are able to protect our residents, businesses and communities from these growing cyber challenges, but also that we are ensuring top notch training that develops the most skilled workforce to combat this threat while providing meaningful career opportunities.”

In the short term, states should consider contracting out for some “higher-order tasks,” the NGA said.

“A state might want flexibility to buy only relatively small amounts of expert services as needed. Contractors typically bring more specialized, up-to-date, and varied expertise than full-time staff.”

In-house expertise is needed primarily for “high-level assessments” such as overall cybersecurity budget allocations.

The governors said states should work with the public education system to try and address the shortfalls in the workforce, and suggested that computer science should be added to the basic K-12 requirements of science, technology, engineering and mathematics (STEM).

“People are the keystone of cybersecurity,” said Maryland Gov. Martin O’Malley (D).

The NGA also said the National Guard is an untapped resource. Although the Guard can’t assist in “normal day-to-day cybersecurity operations,” the reserve forces have valuable cyber expertise.

In Michigan, the National Guard conducts penetration testing to try and expose the state’s cybersecurity vulnerabilities.

Used correctly, the NGA said, the National Guard can be “an essential asset.”