Most States Have Successful Programs to Recruit and Utilize Cybersecurity Volunteers
In an effort to bolster their cybersecurity capabilities, most states have established programs to recruit and utilize volunteers with expertise in cyber defense. These programs typically operate under state-level organizations, with each state having no more than two full-time personnel to manage the process and purchase equipment and technology for the volunteers. The budgets for these programs range from an estimated $250,000 to $750,000 per year, according to 2022 to 2023 levels.
The coordinators of these state-level programs have deemed them successful, citing an increase in personnel and various successful initiatives. In Ohio, for example, the Cyber Reserve program has seen an increase from a little under 50 personnel to 144, with more individuals in the process of joining. The program has also conducted three-hour seminars for school districts on strengthening their networks and assisted local governments in conducting audits based on NIST 800-53 to assess their security and privacy controls.
One of the primary challenges faced by these programs is finding qualified cybersecurity personnel to volunteer. In Ohio, volunteers are required to have five years of relevant experience, undergo a background check, and pass a SANS test. However, no educational degree or certifications are necessary. According to Craig Baker, the program administrator for the Ohio Cyber Reserve, the volunteers come from diverse backgrounds, including those with significant experience in international incident response, academic experts, and professionals from various industries with cybersecurity knowledge.
Despite the success of the program, Ohio faces challenges in attracting and retaining qualified cybersecurity volunteers. Baker acknowledges the difficulty of finding experienced individuals who are willing to provide volunteer time due to family and professional commitments.
Overall, the success of these state-level cybersecurity volunteer programs highlights the potential for leveraging the expertise of volunteers to enhance cybersecurity capabilities at the state level. As cyber threats continue to evolve, the recruitment and utilization of volunteers with cybersecurity expertise is a valuable strategy for bolstering defenses against malicious cyber activities. The continued success of these programs will depend on the ability to attract and retain qualified individuals willing to volunteer their time and expertise for the greater security of their states.