The Federal Cybersecurity Awareness Workforce: Professional Backgrounds, Knowledge, Skills, and Development Activities

Published

March 25, 2022

Author(s)

Julie Haney, Jody Jacobs, Susanne M. Furman

Abstract

Organizational security awareness programs may experience a number of challenges, including lack of funding and staff with the appropriate knowledge and skills to manage an effective program. While prior surveys and research have examined programs in the private sector, there is little understanding of whether these findings also apply within the U.S. government. To address this gap and better understand the needs, challenges, practices, and necessary competencies of federal security awareness teams and programs, NIST conducted a comprehensive, two-phase research study that leveraged both qualitative and quantitative methodologies. This companion document to NISTIR XXXX "Federal Cybersecurity Awareness Programs: A Mixed Methods Research Study" reports on a subset of study results focused on identifying the current job classifications, work roles, and desired knowledge and skills for security awareness professionals within the federal government. Insights gained from these results are informing guidance and other initiatives to aid federal organizations in building security awareness teams with the appropriate competencies. While focused on the U.S. government, findings may also have implications for organizational security awareness professionals in other sectors.

Citation

NIST Interagency/Internal Report (NISTIR) - 8420B

Report Number

8420B

NIST Pub Series

NIST Interagency/Internal Report (NISTIR)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.IR.8420B

Local Download

Keywords

cybersecurity, cybersecurity awareness, focus groups, knowledge, mixed methods, professional development, security professionals, skills, survey, training, usable cybersecurity, work roles

Citation

Haney, J. , Jacobs, J. and Furman, S. (2022), The Federal Cybersecurity Awareness Workforce: Professional Backgrounds, Knowledge, Skills, and Development Activities, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8420B, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=934346 (Accessed March 27, 2025)