2. Bill Newhouse Two Government Cybersecurity Initiatives NIST

3. Agenda 1. An overview of the National Initiative for Cybersecurity Education (NICE) including - What is your role in it? 2. An overview of the soon-to-released "Trustworthy Cyberspace: Strategic Plan for the Federal Cybersecurity Research and Development Program" - Why it matters to you?

4. Interagency Process led by NIST Component 1: Cybersecurity Awareness Component 2: Formal Cybersecurity Education Component 3: Cybersecurity Workforce Structure Component 4: Cybersecurity Workforce Training and Development

5. National Initiative for Cybersecurity Education (NICE) NICE Accomplishments Completed the public review period on October 3 rd for the draft Strategic Plan which identifies goals and objectives of the initiative. Introduced the NICE Cybersecurity Workforce Framework for public comment until December 2011. The framework can be overlaid onto any organization’s existing occupational structure and is designed to baseline capabilities, identify skill gaps, develop cybersecurity talent in the workforce, and prepare the pipeline of future talent. Hosted 2 nd Annual NICE Workshop, “Shaping the Future of Cybersecurity Education – Engaging Americans in Securing Cyberspace”, with over 300 attendees from academia, government and industry.

6. National Initiative for Cybersecurity Education Draft Strategic Plan 1. Raise awareness among the American public about the risks of online activities. 2. Broaden the pool of skilled workers capable of supporting a cyber-secure nation. 3. Develop and maintain an unrivaled, globally competitive cybersecurity workforce http://csrc.nist.gov/nice/documents/nicestratplan/Draft_NICE-Strategic-Plan_Aug2011.pdf

7. National Initiative for Cybersecurity Education Future Plans Promote the NICE Cybersecurity Workforce Framework Seven high-level categories, each comprising several specialty areas. Organizing structure is based on extensive job analyses and groups together work and workers that share common major functions, regardless of actual job titles or other occupational terms. As the job analysis information regarding these specialty areas is extensive, only the framework is published here. Additional details regarding each specialty area, as well as more information about the framework in general, is available online. http://csrc.nist.gov/nice/framework/

8. Trustworthy Cyberspace: Strategic Plan for the Federal Cybersecurity Research and Development Program As a research and development strategy, this plan defines four thrusts: Inducing Change: utilizing game-changing themes to understand the underlying root causes of existing cybersecurity deficiencies with the goal of disrupting the status quo Developing Scientific Foundations: minimizing future cybersecurity problems by developing the science of security Maximizing Research Impact: catalyzing coordination, collaboration, and integration of research activities across Federal agencies for maximum effectiveness Accelerating Transition to Practice: expediting improvements in cyberspace from research findings through focused transition programs

9. Trustworthy Cyberspace: Strategic Plan for the Federal Cybersecurity Research and Development Program Themes for Inducing Change: Tailored Trustworthy Spaces Supporting context specific trust decisions Moving Target Providing resilience through agility Cyber Economic Incentives Providing incentives to good security Designed-in Security Developing and evolving secure software systems