CISA will ramp up hiring in 2026 to recover from staffing losses under the Trump administration and address national security threats, particularly from China. The agency aims to fill key vacancies and improve its workforce strategy, including hiring state cybersecurity coordinators and enhancing partnerships with educational institutions.

The ISC2's 2025 Cybersecurity Workforce Study highlights a growing skills gap in cybersecurity, with 88% of professionals experiencing significant events due to these shortages. As AI adoption accelerates, organizations must focus on developing expertise rather than just increasing staff numbers to enhance security.

The session, led by Brian Correia, discusses how AI is transforming the workforce and the challenges organizations face in adopting AI technologies. It will provide attendees with strategies to enhance AI readiness and practical solutions to overcome barriers such as tool overload and cultural resistance. Participants will gain insights and frameworks to lead effectively in an AI-driven environment.

SANS offers tailored cybersecurity training programs that enhance employee knowledge and engagement in recognizing and responding to security threats. Their expert-led courses focus on real-world applications, compliance, and measurable behavior change, ensuring that organizations can effectively manage cyber risks. By integrating training into daily workflows, SANS aims to foster a security-conscious culture within organizations.

SANS Institute is focused on developing a secure, AI-capable workforce through training and resources tailored for cybersecurity professionals. Their initiatives include frameworks for securing AI systems, enhancing defensive strategies against AI-driven threats, and addressing the evolving roles within cybersecurity as AI technology advances. The organization emphasizes the importance of integrating AI into security practices responsibly and ethically.

SANS offers specialized training for professionals in industrial control systems (ICS) to enhance their cybersecurity skills and protect critical infrastructure from cyber threats. The training addresses the specific risks faced in ICS environments and emphasizes the importance of mitigating human vulnerabilities through tailored educational modules for various roles within the organization.

The Government Accountability Office (GAO) revealed significant issues with the accuracy and completeness of the US federal government's cybersecurity workforce data, indicating a lack of standard practices and quality assurance across agencies. Despite employing tens of thousands of cybersecurity professionals at a substantial cost, many agencies struggle to accurately determine their workforce size and effectiveness, with concerns raised about the impact on national cybersecurity. The Office of the National Cyber Director has been criticized for inadequate guidance and a lack of action to rectify these issues.