There is a workforce crisis hiding inside the cybersecurity industry that does not get nearly enough attention in the right places. The conversation about the talent shortage tends to happen at the enterprise level CISOs talking to CISOs about hiring pipelines, HR teams competing for the same shrinking pool of credentialed professionals, compensation packages escalating as demand outpaces supply.

What gets discussed less is where that pipeline actually starts. Or more accurately, where it currently fails to start for most students. Indiana has more than 20,000 cybersecurity job openings right now. It has 69 public high schools teaching cybersecurity. The distance between those two numbers is not a policy nuance or a funding timing issue. It is a structural gap that has been building for years while the demand side of the equation kept accelerating.

As the cybersecurity workforce shortage continues to widen, organizations are also facing a parallel challenge: preparing future professionals to defend against increasingly sophisticated identity-driven attacks powered by AI, deepfakes, phishing, and credential compromise. The Deepfake to Breach: SMB Playbook for Identity Attacks explores how modern threat actors are compressing the path from impersonation to breach into minutes, targeting human trust instead of technical vulnerabilities. Through real-world attack patterns and a structured six-step response framework, the report provides practical guidance for improving operational readiness, reducing identity exposure, and strengthening security execution across education, enterprise, and public sector environments.

Project Lead The Way and the Indiana Department of Education just announced a partnership that takes that gap seriously. Not with a pilot program. Not with a study or a task force or a working group. With a statewide initiative that connects high schools, two- and four-year colleges, the National Guard, and employers into a single, coherent cybersecurity talent pathway the first of its kind in the country.

Why the Talent Pipeline Problem Starts in High School

It is tempting to treat the cybersecurity workforce shortage as a higher education problem. Universities need to graduate more security professionals. Community colleges need better technical programs. Certification pathways need to be more accessible. All of that is true and all of it matters.

But the students who arrive at those institutions with zero exposure to cybersecurity concepts, no sense of whether the field connects to their interests, and no foundational skills to build on are starting from a significant disadvantage. And the students who never make it to those institutions at all who exit formal education after high school and move directly into the workforce represent a pool of potential talent that the industry currently does almost nothing to cultivate.

High school is where career trajectories begin forming in practice, not in theory. It is where a student decides whether computer science feels like something for people like them, whether security work sounds interesting or impenetrable, and whether there is a visible path from where they are today to a job that pays well and matters.

Indiana currently reaches approximately 69 public high schools with any cybersecurity instruction. The initiative announced with PLTW will expand that to 200 schools and approximately 4,000 students. That is not a marginal improvement. It is a tripling of the addressable student population at the exact point in the education pipeline where interest either gets ignited or never develops at all.

What PLTW Actually Brings to This And Why Curriculum Quality Matters Here

Not all cybersecurity education is created equal, and the distinction matters enormously for whether students emerge from a program with skills that transfer to real environments or with a surface-level familiarity that does not hold up under pressure.

PLTW’s Cybersecurity curriculum is a full 180-day program built around an activity-, project-, and problem-based instructional model. That description is worth unpacking because it reflects a deliberate pedagogical choice with real consequences for learning outcomes.

Students do not sit through lectures about how security works. They work through it. They role-play as cybersecurity professionals facing realistic scenarios. They examine their own digital footprints before they learn to defend anyone else’s. They learn to identify suspicious network data, improve firewall configurations, and secure e-commerce environments through hands-on engagement rather than theoretical exposure.

The curriculum progresses through four substantive areas. Personal security establishes the foundation understanding digital footprints, defending personal devices, managing social media exposure in ways that connect immediately to students’ existing experience. System and network security builds toward the technical skills that professional environments actually require. Applied cybersecurity introduces students to cyber range labs, cryptography, digital forensics, and criminal justice frameworks that reflect where the field actually operates. And throughout, the curriculum is explicitly aligned to the National Cybersecurity Workforce Framework the NICE Framework that industry and government use to define and communicate cybersecurity roles and competencies.

That NICE Framework alignment is not a cosmetic credential. It means that what students learn in an Indiana high school classroom maps directly to the language, competencies, and role definitions that employers in the field use when they hire. The gap between what a student knows and what an employer needs is measurably smaller when the curriculum was designed against the same framework the employer uses to structure their workforce.

The Military Connection Nobody Is Talking About Enough

Most coverage of education-workforce pipeline initiatives focuses on the employer side companies that need talent, schools that produce it, internships and work-based learning programs that connect them. The Indiana initiative includes all of that. But it adds a dimension that makes it genuinely distinctive and that deserves more attention than it typically receives in this conversation.

The pathway connects explicitly to the National Guard.

That connection transforms this from an education-to-employment pipeline into something more comprehensive: an education-to-service pathway that gives students visibility into military cybersecurity careers alongside civilian ones. For students in parts of Indiana where the National Guard represents a real and respected career option and where the combination of service commitment and technical skill development is an attractive proposition that visibility matters.

It also matters for the National Guard itself, which faces its own version of the cybersecurity talent challenge. Guard units with cyber missions need technically credentialed personnel. Building a pipeline that introduces students to both the technical foundation and the military career pathway simultaneously serves both sides of that equation.

David Dimmett, PLTW’s president and CEO, framed the ambition directly: Indiana is preparing students not just for college and career but for military service and the essential work of protecting economic and national security interests. That framing is not rhetorical. It reflects a deliberate design choice to make military cybersecurity service a visible and accessible option for students who might not have considered it without a structured pathway connecting their high school experience to that possibility.

Removing the Barriers That Usually Kill These Initiatives

The history of education technology and workforce development initiatives is full of programs that made sense on paper and failed in practice because implementation barriers cost, professional development, resource requirements proved insurmountable for the schools that needed them most.

PLTW and the Indiana Department of Education have built barrier removal directly into the structure of this initiative rather than treating it as an afterthought.

The AP Cybersecurity course running alongside PLTW’s curriculum gives students the opportunity to earn college credit while still in high school. That dual-credit pathway matters both for individual students reducing the time and cost of post-secondary education and for the overall pipeline efficiency, since students who arrive at college or community college with foundational cybersecurity credit already completed are more likely to persist through advanced programs.

The grant funding secured to provide no-cost professional development for Indiana educators is the provision that will most directly determine whether the expansion from 69 to 200 schools actually holds up in practice. Teachers who are asked to deliver a new, technically demanding curriculum without adequate preparation and ongoing support tend to deliver it poorly or not at all. The professional development component addresses that risk at the source.

Work-based learning opportunities built into the initiative create the employer connection that prevents the program from becoming purely academic. Students who can connect classroom learning to real workplace contexts internships, job shadows, project collaborations with industry partners develop a grounded understanding of what cybersecurity work actually involves that no curriculum alone can fully deliver.

What Indiana Is Actually Building And Why Other States Should Pay Attention

Step back from the individual components and the architecture of what Indiana is assembling becomes visible in a way that matters beyond this single state’s workforce needs.

Most workforce development initiatives address one layer of the pipeline. They improve higher education programs, or they create employer-education partnerships, or they expand high school course offerings, or they develop military-to-civilian transition pathways. Rarely do they attempt to connect all of those layers into a single coherent system with aligned credentials, shared frameworks, and explicit pathways between each stage.

Indiana is attempting to build all of it simultaneously, which is ambitious to the point of being genuinely difficult to execute. But the ambition reflects an accurate understanding of where the pipeline actually breaks down. It does not break down in one place. It breaks down at every transition point from high school to post-secondary, from post-secondary to employment, from civilian to military service and back. Patching one transition while leaving the others unaddressed produces marginal gains. Addressing the whole system produces something that can actually scale.

The national cybersecurity workforce gap is not an Indiana problem. ISC2’s 2024 Cybersecurity Workforce Study estimated a global shortage of approximately 4.8 million cybersecurity professionals, with the United States accounting for a significant portion of that deficit. The structural causes of that shortage insufficient talent development at the educational pipeline level, misalignment between curriculum and employer needs, limited visibility into cybersecurity careers for students from non-traditional backgrounds are consistent across states.

What Indiana is building is a replicable model. The PLTW curriculum is already deployed in schools across the country. The NICE Framework alignment is nationally applicable. The structure of connecting high schools, community colleges, four-year institutions, the National Guard, and employers through a shared credential and pathway framework is one that any state facing a similar workforce gap could adapt.

The 4,000 students this initiative reaches directly in Indiana are the proof of concept. If those students move through the pathway and emerge with skills, credentials, and career connections that actually close the gap between education and employment, the case for replication in other states becomes difficult to argue against.

The Window Is Narrowing For States and for Students

The cybersecurity threat environment is not stabilizing while states work through the political and budgetary processes required to expand education pipelines. State and local government systems, school networks, critical infrastructure, and defense supply chains are being targeted with increasing frequency and sophistication by adversaries who have no interest in waiting for workforce development timelines to catch up.

Indiana’s 20,000 open cybersecurity positions represent real unfilled roles in real organizations government agencies, financial institutions, healthcare systems, defense contractors, and technology companies that are operating with security gaps because the talent to fill those positions is not available. Every year that gap persists, the exposure it represents compounds.

The students who will fill those roles in five years are sitting in Indiana high schools right now. A significant number of them have no idea that cybersecurity is a career pathway that is open to them, no exposure to the technical foundation that would let them evaluate whether it connects to their interests, and no visibility into the range of roles from civilian employment to National Guard service that the field encompasses.

This initiative changes that for 4,000 of them. If Indiana executes well and the model holds, it changes the calculation for states watching from the outside and there will be states watching, because the workforce math is not unique to Indiana.

Research and Intelligence Sources: Project Lead The Way

To participate in our interviews, please write to our CyberTech Media Room at info@intentamplify.com



🔒 Login or Register to continue reading