1. Working Group 7: Cybersecurity Workforce Status Update September 21, 2015 Bill Boni, Co-Chair T-Mobile Drew Morin, Co-Chair TeleCommunication Systems FCC Liaison: Erika Olsen

2. 2 WG7 Objectives Working Group Description: This working group will leverage existing work and best practices to enhance the volume and quality of the workforce. Deliverables: This working group will examine and develop recommendations for the CSRIC’s consideration regarding any actions that the FCC should take to improve the security of the nation’s critical communications infrastructure through actions to enhance the transparency, skill validation, and best practices relating to recruitment, training, retention, and job mobility of personnel within the cybersecurity field.

3. 3 WG7 Deliverables Demonstrate the application of the NICE Cybersecurity Workforce Framework (CWF) to the common and specialized work roles with in the communications sector; Identify any gaps or improvements in the CWF for evolving work roles or skill sets to be included in sector members’ workforce planning; and Identify, develop and recommend best practices and implementation thereof to mitigate insider threats, including through scalable means to enhance transparency, accountability and validation of skills, knowledge and abilities within the communications sector and particularly with respect to personnel having access to the most critical elements of the nation’s communications network assets; The working group should consider means to promote a common lexicon and roadmap that will promote more effective interface with academic institutions and other training environments.

4. 4 WG7 Members Bill Boni, Co-chair (T-Mobile) Chris Boyer (AT&T Services) Prentis Brooks (Time Warner Cable) Upendra Chivukula (State of New Jersey) Renato Delatorre (Verizon Wireless) Kevin Dottley (CenturyLink) Barbara Endicott-Popovsky (UW) Jay English (APCO International) Mike Geller (Cisco Systems) Kazuhiro Gomi (NTT America) Scott Haas (IID Security Central) Shinishi Hirata (NTT Corporation) Anna Jackson (FireEye) Kim Keever (Cox) Masato Kimura (NTT) Drew Morin, Co-chair (TCS) Steven Leese (APCO International) Steve Mace (NCTA) Jennifer Manner (EchoStar) Shawn Matthews (PacOpticNetworks, LLC) Bill Newhouse (NIST) Daishi Sakakibara (NTT) Quentin Sa’Lay (Comcast NBC Universal) David Stienour (GWU) Matthew Straeb (Alert FM) Nobumitsu Takeuchi (NTT) Zachary Tudor (SRI International) Erik Wallace (TCS) Kathy Whitbeck (Nsight) Shinichi Yokohama (NTT) FCC Liaison: Erika Olsen

5. 5 Background Traditional approaches to training are not working: According to a joint survey published by ISACA® and the RSA® Conference, 82% of corporations expect a cyberattack in 2015; and 35% are unable to fill their open positions with qualified cybersecurity personnel Furthermore, less than half of those surveyed believe that their current security teams have the ability to detect and respond to complex incidents

6. 6 Welcome Message sent to WG7 Members, 4 September – Questionnaires & Background Material Sent Kick off, 15/16 September – Review WG7 Objectives and Deliverables – Review WG7 Status Update Presentation – Action items assigned for next meeting CSRIC V WG7 Status Update Presentation complete, 16 September WG7 Status

7. 7 Bi-weekly conference calls with members Date TBD: Submission of Draft WGX Report 1 June 2016: Submission of Draft WGX Report 2 Date TBD: Submission of Final WGX Report 1 March 2017: Submission of Final WGX Report 2 WG7 Schedule

8. 8 Next Steps Finalize WG7 membership Develop a work plan to accomplish the CSRIC V charge taking advantage of WG7 members’ subject matter expertise Seek WG7 volunteers to lead aspects of the work plan Continue bi-weekly conference calls Provide periodic status updates to Steering Committee and Council