Skip to main content
Email

The latest news in Healthcare IT – straight to your inbox.

Home
  • Main Menu
  • Subscribe
  • Topics
    • Video
    • Analytics
    • Artificial Intelligence
    • Cloud Computing
    • EHR
    • Government & Policy
    • Interoperability
    • Patient Engagement
    • Population Health
    • Precision Medicine
    • Privacy & Security
    • Telehealth
    • Women In Health IT

Regions

  • ANZ
  • ASIA
  • EMEA
  • Global Edition
Global Edition
Privacy & Security

Talent over certification: A new federal cyber workforce plan

The DoD's new cyber workforce strategy aims to address 30K unfilled cyber positions, and the agency is looking hard at "moving away from certifications," said Mark Gorak, cyber workforce policy and development integrator.
By Andrea Fox
May 05, 2023
10:59 AM

Photo: Anna Shvets/Pexels

At TechNet Cyber 2023 in Baltimore, Mark Gorak, principal director for resources and analysis for the Department of Defense's deputy chief information officer, talked about the Pentagon's massive cyber workforce shortage and its goal to implement a cultural shift in hiring for cybersecurity and infosec roles.

WHY IT MATTERS

With more than 30,000 cybersecurity and infosec positions, DoD is changing how it has historically hired for these roles.

"We've been at this about a decade trying to fix this problem, and it's only growing worse," he said. 

The agency is developing an implementation plan for a cyber workforce strategy released last month. That plan has a five-year horizon and is due this summer, Gorak told GovCIO's CyberCast at the Armed Forces Communications & Electronics Association International’s cyber conference on Tuesday. 

While the strategy is based on identifying workforce needs – for both its military and civilian cyber workforces – and recruiting, developing and retaining talent, DoD is looking more practically at what makes a candidate qualified to provide cybersecurity.

"If you can walk in and demonstrate that capability to perform the job, than you’re qualified. That’s where we should be, and that’s going to take some time to get there, but that is where we’re leaning forward," Gorak explained.

DoD will use its existing cyber workforce framework to classify employees by their work roles rather than occupational codes, which Gorak previously called "adaptive, flexible and responsive to the workforce," in its larger effort to apply enterprise-wide talent management to its cyber workforce.

For the implementation, Gorak said the agency will shift away from its focus on the infosec skills acquired prior to hiring, and pivot to evaluating critical candidate capabilities and fostering ongoing technical training on the job, as it does in other specialist fields, such as law and medicine.

"It’s not a new thing, but we’ve never done that in our technical workforce," he said. 

THE LARGER TREND

TechNet Cyber is a flagship event for whole-of-government efforts to advance the capabilities needed to meet global security challenges and successfully operate in a digital environment, and includes all sectors.

Infosec workforce challenges cut across numerous industries. Healthcare systems across the U.S. that are plagued with cyberattacks are challenged to get a reign on the sector's significant attack surfaces, because of the dearth of a cyber workforce.

"The battle for talent in healthcare today is broader than the shortage of physicians and nurses. Health IT teams are facing many of the same workforce challenges as others across the healthcare industry, including a shortage of talent in cybersecurity, digital, cloud and data," Brad Reimer, CIO at Sanford Health, told Healthcare IT News in January.

To deliver on a $350 million virtual care initiative and modern data ecosystem challenges facing the large health system serving the Dakotas, Iowa, Minnesota and Nebraska, Reimer noted the demand for all health IT roles is increasing at a pace faster than the rate of new college graduates entering the workforce, and there's competition for talent "with every other company that has a technology need."

Add to that the national call to improve improved critical infrastructure cybersecurity, and both the government and critical infrastructure sectors are competing for a talent supply that does not yet have enough to go around and must adapt the way they hire and retain talent.

ON THE RECORD

"The training pipeline -- we need to expand that, so we have more," Gorak said at the conference.

With the new implementation plan, "If you have passed a cyber range assessment instrument, you should be qualified for the job."

To keep the cyber workforce up-to-date, "We are looking at annual assessments on that." 

Andrea Fox is senior editor of Healthcare IT News.
Email: afox@himss.org

Healthcare IT News is a HIMSS Media publication.

Topics: 
Privacy & Security, Workforce

More regional news

Patient does a virtual care consult

Castlight Health intros virtual urgent care for members

By
Mike Miliard
April 18, 2025
HIMSSCast logo

HIMSSCast: Should every healthcare organization have an AI strategy?

By
Mike Miliard
April 18, 2025
Nurse checks tablet to communicate on shift

Zoom launches agentic AI-powered mobile comms for frontline staff

By
Andrea Fox
April 18, 2025
Want to get more stories like this one? Get daily news updates from Healthcare IT News.
Your subscription has been saved.
Something went wrong. Please try again.

Top Story

Nurse checks tablet to communicate on shift
Zoom launches agentic AI-powered mobile comms for frontline staff

Most Read

2025: AI enhances personalized care; caregiver experience in the spotlight
Roundup: AI and cloud tackle cyber risk and improve workflows
HIMSSCast: Fundamentals of data governance - lessons from UNC Health, part 1
Chinese health players begin integrating DeepSeek
Sheba Medical Center is using its data in new ways – and getting big wins
Lack of AI governance poses threat to data security, new HIMSS research shows

Research

White Papers

More Whitepapers

Telehealth
Create secure, connected omnichannel communications
Telehealth
Let us guide you to HIPAA compliance
Cloud Computing
How a cloud communications platform puts connection at the center of care

Webinars

More Webinars

Analytics
Standby Eligibility and Claims Solutions: Diversify Your Risk & Ensure Business Continuity
Interoperability
Nursing Leadership, Operational Innovation, and Emerging Technologies with AONL
Artificial Intelligence
Loving the AI Revolution: How Automation is Humanizing Healthcare and Improving Provider Well-Being

Video

Ilir Kullolli, Stanford Medicine Children's Health_Las Vegas skyline Photo by halbergman/E+/Getty Images
HIMSS-ACCE working together to advance digital health
Vik Bajaj, Foresite Labs_Medical research Photo by Edward Jenner/pexels.com
Healthcare research is being affected by federal budget cuts
Priyanka Jain, Evvy_Hand holding sample vial Photo courtesy of Evvy
How one women's health startup tests fertility outcomes
Keisuke Nakagawa, UC San Diego Health_Las Vegas skyline Photo by halbergman/E+/Getty Images
Can technology help bring the human touch back to medicine?

More Stories

Lee Kim, HIMSS_Las Vegas skyline Photo by halbergman/E+/Getty Images
Past year's data breaches often stemmed from remediable cybersecurity gaps
Cathy Menkiena, Health Catalyst_Las Vegas skyline Photo by halbergman/E+/Getty Images
Innovative – and useful – tech is key to empowering care teams
Sameer Sethi of Hackensack Meridian Health on AI
Hackensack Meridian Chief AI Officer on the intersection of business and technology
Doctor checking and tracking information on a computer
HHS updates regulatory guides for the safe use of EHRs
Sameer Sethi, Hackensack Meridian Health_Computer neural network concept Photo by dan/Moment/Getty Images
Chief AI Officer on becoming one and working with the C-suite
Businessperson signing piece of paper
White House releases guidance on federal AI use and procurement
Dr. Ateev Mehrotra of Brown University School of Public Health on telehealth policy
Brown University policy expert talks about the future of telehealth flexibilities
Micky Tripathi, former HHS acting chief AI officer
Former National Coordinator headed to Mayo Clinic, reports say
Home

More News

  • MobiHealthNews
  • Healthcare Finance News
  • Healthcare Payers News

Newsletter Signup

HIMSS25 European Health Conference & Exhibition
HIMSS25 European Health Conference & Exhibition
Get ready for knowledge-sharing, all the latest innovations, and in-depth demos with Europe's most influential healthcare community.
10 - 12 June, 2025 | Paris
Learn More
AI in Healthcare Forum
AI in Healthcare Forum
The HIMSS AI in Healthcare Forum cuts through the hype to showcase real-world examples illustrating the transformative potential, and realistic challenges of AI application across the care continuum.
10 - 11 July 2025 | New York
Learn More

Footer Menu

  • About
  • Advertise
  • Reprints
  • Contact
  • Privacy Policy

© 2025 Healthcare IT News is a publication of HIMSS Media

X

Topics

  • Video
  • Analytics
  • Artificial Intelligence
  • Cloud Computing
  • EHR
  • Government & Policy
  • Interoperability
  • Patient Engagement
  • Population Health
  • Precision Medicine
  • Privacy & Security
  • Telehealth
  • Women In Health IT

Career

  • Events
  • Jobs
  • Research Papers
  • Webinars

More

  • About
  • Advertise
  • Contact
  • Special Projects
  • Video

Regions

  • ANZ
  • ASIA
  • EMEA
  • Global Edition

The Daily Brief Newsletter

Get daily news updates from Healthcare IT News.

Search form

Top Stories

Nurse checks tablet to communicate on shift
Zoom launches agentic AI-powered mobile comms for frontline staff
HIMSSCast logo
HIMSSCast: Should every healthcare organization have an AI strategy?
Vik Bajaj, Foresite Labs_Medical research Photo by Edward Jenner/pexels.com
Healthcare research is being affected by federal budget cuts