Case Studies

Explore case studies of how our partners apply our insights to improve their processes, and get inspired by success stories of cybersecurity leaders dedicated to strengthening their resilience.

A finger pointing at a glowing node in a network of connected human figures, representing collaborative cybersecurity partnerships.
Dubai Cyber Innovation Park (DCIPark), as the research and knowledge division of the Dubai Electronic Security Center (DESC), aims to create a world-class integrated cybersecurity ecosystem, empowering the next generation of experts in cybersecurity from the public and private sectors along with academic institutions. 

To that end, it runs projects such as the Cyber Security Competency Framework (Qudraat), which, among other things, maps all cybersecurity employees in the city to the framework, linking employee assessment and evaluation with training and development. Qudraat also ensures that capacity-building extends to academic institutions and maintains a balance between the city’s demand and the supply of skills. The training and upskilling initiatives are delivered through the CyberNode programme, a partnership between the government, private sector and academia, to empower cybersecurity capabilities in the city and beyond. Another DCIPark project is Emirati Capture The Flag, which aims to promote cybersecurity skills among Emirati students and youth as well as invest in their cybersecurity innovations. DCIPark also runs 100-day cybersecurity challenges during which participants are required to address a given challenge by developing a working solution. At the end of the period, contestants submit their solutions to DESC. 

DESC has achieved a 50% reduction in time-to-fill critical cybersecurity roles and recorded a 95% increase in employee satisfaction and retention, attributed to ongoing learning opportunities. 

Through practical skills development, the nurturing of cybersecurity talent and the creation of a pipeline for future experts, the initiatives align seamlessly with DCIPark as a scalable model, collectively contributing to the cultivation of a skilled and resilient cybersecurity workforce for Dubai’s digital future through internal training, external partnerships and a robust competency framework.
United Arab Emirates | Government
Dubai Cyber Innovation Park
Dubai Electronic Security Center (DESC)
To close the gender gap in technology, Girls Who Code is leading a movement to inspire, educate and equip students who identify as girls or nonbinary individuals with the computing skills needed to pursue 21st-century opportunities. Since launching in 2012, Girls Who Code has reached 580,000 students. 

In 2021, Girls Who Code piloted Work Prep, an experiential, virtual programme for college students designed to build career skills and confidence and expose students to partner company culture, opportunities and role models. The three-week programme is designed to be flexible for busy college students, featuring a combination of asynchronous activities (i.e. students working independently according to their own schedule) and synchronous work (i.e. students engaging simultaneously in realtime work). As part of the cybersecurity Work Prep, students are introduced to multiple cybersecurity roles and work together to complete the mitigation, response and recovery phases of an incidentresponse plan framework while also meeting cyber leaders at the partner company. 

As a result of the programme, the overwhelming majority of students said they were more likely to pursue a career in technology and that they felt more prepared to apply for and be interviewed for technical internships and jobs.
USA | Civil society
Work Prep
Girls Who Code
To educate schools on how to navigate the digital landscape securely, Fortinet has extended its commercial security awareness and training service at no cost to schools in countries around the world.

Recognizing the unique educational context, the company tailored staff training to the academic sector and hired teachers to develop a security awareness curriculum that addressed the learning needs of all students aged four to 18. The education edition was initially developed in alignment with the US’s White House Cyber Education and Workforce Initiatives in 2022. The following year, the initiative expanded to include Canada, the UK, Australia and Brazil and is now available to 11.8 million education staff and 64 million students, with further plans for global outreach. 

In addition to its collaboration with educational institutions worldwide, in 2020, at the outset of the COVID-19 pandemic, Fortinet amplified its existing efforts by offering all self-paced technical certification training at no cost, in response to the escalating threat landscape. The response was staggering, with course registrations peaking at one every seven seconds during the initial weeks.
USA, Brazil, Australia, United Kingdom, Canada | IT and Communications (ICT)
Security Awareness and Training Service
Fortinet
Inclusive Cyber, an initiative of the World Economic Forum Global Shapers Community, aims to build a cyber talent pipeline as diverse as the challenges that will be faced. The initiative spans Montreal, Kigali and London and mobilizes atypical and under-represented non-STEM talent to jumpstart their cyber interest and careers. Inclusive Cyber does this through: 1) leading skills workshops and using a transferable skills toolkit built on the National Institute of Standards and Technology (NIST)’s National Initiative for Cyber Education (NICE) framework; and 2) representing the youth voice on cyber capacity-building and with leading policymakers, such as the UK Cyber Security Council and Quebec’s CyberEco. 

At the heart of the initiative is the transferable skills toolkit, which helps individuals from disciplines including literature, fine arts and political sciences reframe and translate the value of their existing skills to best-match cybersecurity roles. Over five years, Inclusive Cyber has run 27 workshops and directly coached some 1,315 students on breaking into cybersecurity. These workshops took place in non- STEM faculties across leading universities, including McGill University, University of Toronto, London School of Economics, Queen Mary University of London, Royal Holloway and University College London. In Kigali, Inclusive Cyber built a new curriculum to equip young underprivileged professionals with competitive cybersecurity and transferable skills.
Canada, United Kingdom, Rwanda | IT and Communications (ICT)
Inclusive Cyber
Global Shapers Community
In collaboration with the eurobits women academy (ewa), the Institute for Security and Safety aims to inspire women to pursue a career in cybersecurity. At 11%, the proportion of women in cybersecurity in Germany is far below the international average. 

As part of a three-year project, the objective is to create a platform for female career changers to: 
– Provide orientation and guidance on the career opportunities available in cybersecurity using their existing strengths. 
– Offer an in-service, modular training programme that can run alongside their current job to help them acquire the most important knowledge in the field of cybersecurity over several months and give insights into various areas of expertise. 
– Facilitate access to a cybersecurity network with contacts in the industry for internship placements and job offers. 

The aim is to make it easier for women to enter cybersecurity and support them in achieving their career goals.
Germany | IT and Communications (ICT)
eurobits women academy
Institute for Security and Safety (ISS)
To develop a common, shared model for learning cyber citizen skills across the European Union, the Finnish Ministry of Transport and Communications, with the financial support of the EU, is leading the Cyber Citizen project.

The project features a Cyber Citizen hub, comprising a dynamic web portal with online tutorials, a cybersecurity game, quick guides and instructions, to raise awareness about the constantly evolving cyberthreat landscape. In addition to the resources, the Cyber Citizen project forges a community dedicated to cybersecurity training and awareness across all EU countries. Governments, NGOs, businesses and individuals, including researchers, are all invited to contribute.
Finland | Government
The Cyber Citizen Project
Ministry of Transport and Communications of Finland
In response to the high demand for cybersecurity talent, Siemens has created the CyberMinds Academy to attract and nurture new talent with no prior experience in cybersecurity into cybersecurity specialist roles.

Running in two locations, in Portugal and Spain, the academy delivers a one-year training programme combining learning and practical on-the-job training. Participants also have the opportunity to work closely with cybersecurity experts and participate in a diverse cultural environment. The CyberMinds Academy not only contributes to the development and training of professionals who can bring fresh perspectives and ideas to cybersecurity but also promotes diversity and inclusion in the workforce. 

So far, the two CyberMinds Academies have trained 26 participants from different backgrounds. Eight of those individuals have been hired to work in cybersecurity for Siemens.
Spain, Portugal | IT and Communications (ICT)
CyberMinds Academy
Siemens
As a cybersecurity company, Trellix aims to bringing awareness to the purposeful work of cybersecurity and create pathways for under-represented groups to fill the talent gap. Spearheading Soulful Work, Trellix fosters diversity and inclusion through partnerships and initiatives aimed at combating unconscious bias and expanding opportunities for all.

In collaboration with Gotara, Trellix launched a programme focused on empowering women to navigate and advance their careers, addressing the challenges of gender inequality in the industry. Trellix joined forces with the Hispanic Alliance for Career Enhancement (HACE) to create a cybersecurity accelerator programme that includes a mentorship and development initiative tailored specifically to Latinos, equipping them with the necessary skills to thrive in cybersecurity roles. Trellix also collaborated with the National Cybersecurity Alliance to create the Historically Black Colleges and Universities (HBCU) Cybersecurity Career Program, which actively engages in mentoring projects with the aim of raising awareness of cybersecurity careers among students and providing them with the support needed to successfully navigate the job search process. Through these efforts, Trellix is working towards creating a more diverse and inclusive cybersecurity workforce.
USA | IT and Communications (ICT)
Soulful Work
Trellix
Women4Cyber, a non-profit European private foundation, aims to promote, encourage and support the participation of women in cybersecurity. It currently represents a community of 28 national chapters and over 60,000 followers from across Europe. 

To attract women to a career in cybersecurity and address the expected skills shortage in technical, operational, managerial and leadership positions, Women4Cyber focuses primarily on facilitating access to education, providing discounts and scholarships, supporting job seekers and HR departments to increase the number of women in cybersecurity, and uses local experts to amplify its reach and develop on-the-ground activities through the national chapters. 

Its successful mentorship programme has helped more than 400 women so far, while scholarships and strategic partnerships are facilitating women’s access to cybersecurity education and certification, and the Women4Cyber job corner and network is increasing the number of female applicants for open positions across Europe.
Europe | Civil society
Supporting the participation of women in cybersecurity
Women4Cyber
Absa in South Africa established a cybersecurity academy in 2019 to address the cybersecurity skills shortage while creating job opportunities for previously disadvantaged and visually impaired learners.

To address the high youth unemployment rate in South Africa, Absa partnered with the Maharishi Invincibility Institute and the Hein Wagner Academy for the Visually Impaired to develop cybersecurity skills for the academy’s students. Completion of the three-year programmes accredits these students with 17 international certificates, equipping them for employment in the cybersecurity job market. 

So far, through collaboration with the Maharishi Invincibility Institute, 19 students, who also completed a one-year internship, have been given permanent positions at Absa. A second cohort of 20 students is currently enrolled in the year-long internship in Absa’s Information and Technology Office. 

In 2024, the first cohort of students will graduate from the Hein Wagner Academy for the Visually Impaired. The graduation will be a first of its kind for the industry, proving that visually impaired people are well suited for the technology and cybersecurity job market and charting a course for others to follow.
South Africa | Financial services
Absa Cybersecurity Academy
Absa Group
To reduce poverty and stimulate inclusive economic growth in South Africa, in March 2023 the UK Foreign, Commonwealth and Development Office (FCDO), in partnership with KnowBe4 and MiDO Technologies, established the MiDO Cyber Academy.

Partly inspired by the Absa Security Academy in South Africa and aimed at underserved communities within the Western Cape, the MiDO Cyber Academy focuses on cybersecurity, critical thinking, soft skills, innovation, collaboration and personal resilience. The academy aims to bridge the digital and cyber skills divide that exists between job seekers and internships or junior positions available in the IT and cybersecurity market. 

The academy offers a blended-learning approach, combining e-learning with in-person facilitation, personal-resilience training, life skills, industry exposure and mentorship. The programme lasts 10 months, targeting youths aged 18 to 24 and facilitating cohorts of up to 21 candidates, emphasizing real-world projects, candidate placement and integration into the workforce. 

Through industry involvement and support, such as masterclasses and hands-on project work, students are exposed to real-life challenges faced by security-industry professionals with the extra benefit of building up a network of senior members in the community and potential future employers.
South Africa | Government, IT and Communications (ICT)
MiDO Cyber Academy
KnowBe4, Foreign and Commonwealth Office of the United Kingdom
The Cisco Networking Academy equips students with essential and in-demand cybersecurity, networking and digital skills.

Since its establishment in 1997, it has trained more than 20.5 million individuals across 190 countries and continues to build on its impact with courses ranging from an introduction to cybersecurity and ethical hacking to professional skills, which are designed to meet industry demands. 

The Cisco Networking Academy aims to train an additional 25 million people by the end of 2032 through its new Skills for All platform, featuring mobile-first gamified learning experiences and an unmatched network of 11,700 educational institutions and organizations offering its courses. 

The Cisco Networking Academy also collaborates with governments worldwide to develop cybersecurity skills and talent. In alignment with the efforts of the US White House and the European Commission to increase the size of the cyber workforce, Cisco aims to train 200,000 people in cybersecurity skills in the US and 250,000 individuals in the EU by 2025. In the first year following the announcement, Cisco has trained 51,000 individuals in the US and 87,000 individuals in the EU. Remarkably, 95% of students who have completed certification-aligned courses attribute new job and/or educational opportunities to their participation in the programme.
North America, Latin America, Europe, India & South Asia, Middle East & North Africa, Africa, Korea & North Asia | Technology
Cisco Networking Academy
Cisco
In 2020, the Cyber Security Agency of Singapore (CSA) established the SG Cyber Talent initiative to nurture cybersecurity enthusiasts from a young age and help professionals deepen their skills. Since its inception, the initiative has helped more than 22,000 individuals through cybersecurity bootcamps, mentoring, career conversion programmes and leadership education. The main programmes under SG Cyber Talent include SG Cyber Leaders, SG Cyber Women, SG Cyber Youth and SG Cyber Olympians. 

To illustrate the impact, as part of SG Cyber Youth, the Youth Cyber Exploration Programme (YCEP) was started in 2018 and has since trained more than 1,500 secondary-school students in basic cybersecurity knowledge through a series of bootcamps and capture-the-flag competitions organized by CSA and the five local polytechnics, in collaboration with industry partners. As a step-up, the advanced YCEP is also available to students with some existing cybersecurity knowledge. 

The Cybersecurity Strategic Leadership Programme (CSLP), organized by CSA, in collaboration with academic partners, as part of SG Cyber Leaders, aims to equip current and future generations of local cybersecurity leaders with a deep level of understanding on the key global drivers shaping cybersecurity strategies and innovation and to lead their organizations’ cybersecurity functions effectively. About 50 senior cybersecurity leaders participated in the first two runs of the CSLP in 2022 and 2023, covering themes such as growing a C-suite Mindset, leading the organization and leading the ecosystem. The participants also embarked on an overseas immersion trip to the US and the UK to engage in deeper discussions with local cybersecurity leaders and organizations.
Singapore | Government
SG Cyber Talent
Cyber Security Agency of Singapore (CSA)
The Cybersecurity Learning Hub is an initiative designed to tackle the globally cybersecurity skills shortage and democratize access to cybersecurity career paths. Led by Salesforce with support from Fortinet, the Global Cyber Alliance and the World Economic Forum, the Cybersecurity Learning Hub features training modules on numerous topics such as cyber resilience, artificial intelligence (AI) cybersecurity and cybersecurity table-top exercises. In addition to the training modules, it also includes a growing library of career-oriented information and expert interviews intended to help learners map their own career path through a variety of in-demand cybersecurity roles. Since its launch in 2019, the Cybersecurity Learning Hub has trained more than 290,000 individuals spread across all continents.
Civil society, IT and Communications (ICT)
Cybersecurity Learning Hub
Salesforce, Fortinet, World Economic Forum, Global Cyber Alliance
Metabase Q established the Council of Experts in Regulation and Cybersecurity (CERC), a pioneering, multidisciplinary council comprising cybersecurity practitioners with a recognized trajectory from the private sector, academia and civil society.

The CERC serves as a catalyst to position Mexico as a leader and benchmark in Latin America in the development of cybersecurity. 

Within the CERC, the education committee specifically targets United Nations Sustainable Development Goal 4, ensuring inclusive access to education and promoting learning opportunities in cybersecurity for all. For example, the Digital Distance Education programme is designed to provide educational resources for children and young adults. The Digital Cyber Academy (DCA) aims to both attract skilled individuals and bridge the expertise gap in Latin America. The DCA allows students to enrol at no cost and serves as a hub for acquiring technical knowledge and practical skills. The DCA has graduated five generations of students, marking a crucial milestone in preparing the next generation of cybersecurity professionals.
Mexico | IT and Communications (ICT)
Council of Experts in Regulation and Cybersecurity
Batuta
Between 2017 and 2023, the Cybersecurity Program of the Inter-American Committee against Terrorism (CICTE) of the Organization of American States (OAS) – with the financial support of Citi Foundation – implemented a multiphased project entitled Creating a Career Path in Cybersecurity with the purpose of addressing the shortage of skilled cybersecurity professionals. The main goal was to equip young people with essential skills to access entry-level positions in cybersecurity, offering technical training, soft skills development and professional growth opportunities. 

Over six years, the project successfully trained more than 1,200 individuals across a number of countries, including Argentina, Brazil, Colombia, Costa Rica, Guatemala, Mexico, Panama, Peru, Dominican Republic and Trinidad and Tobago. Its beneficiaries not only acquired technical expertise and certification but also developed crucial soft skills and secured initial job placements in both public and private institutions. 

Building on the lessons learned from the implementation of this programme and considering the persistent shortage of professionals in this field, the Cybersecurity Program plans to launch a new workforce development programme in one OAS member state in 2024. This project aims to provide a systemic approach to cyber education, with the long-term goal of increasing the supply of qualified cybersecurity professionals, offering training and employment opportunities while assisting the beneficiary country in developing a national cybersecurity education framework. The goal is to create a sustainable and robust pipeline of skilled professionals, contributing to the country’s cyber resilience.
Argentina, Trinidad and Tobago, Dominican Republic, Peru, Panama, Costa Rica, Mexico, Guatemala, Colombia, Brazil | IT and Communications (ICT)
Creating a Career Path in Cybersecurity
Organization of American States (OAS)
Saudi Arabia’s Vision 2030 emphasizes human capital development, including in cybersecurity, as a core pillar of its coherent development strategy. Central to these efforts, the Saudi Arabia National Cybersecurity Authority (NCA) has introduced the Saudi Cybersecurity Higher Education Framework (SCyber-Edu). This framework aims to elevate cybersecurity education, aligning it with market demands and the objectives of Vision 2030. SCyber- Edu sets standards for cybersecurity education across Saudi universities, ensuring courses meet market-relevant skills and knowledge domains. 

The framework involves several critical components, including developing a recognition process for cybersecurity degree programmes, creating incentives for universities to align their courses with SCyber-Edu standards, and establishing a database of recognized degrees to guide student selection. 

In 2023, SCyber-Edu had a significant impact on Saudi Arabia’s educational landscape. It has been adopted by 45 prestigious institutes, influencing 82 cybersecurity higher education programmes nationwide. The NCA has observed a significant increase in use of the framework by these institutions, further enhancing the quality and relevance of cybersecurity education in the country.
Saudi Arabia | Government
Saudi Cybersecurity Higher Education Framework
Saudi National Cybersecurity Authority
The CyberGirls Fellowship, an initiative by Cybersafe Foundation, confronts Africa’s cybersecurity gender disparity. While women represent half of Africa’s population, they account for a mere 9% of its cybersecurity workforce. The fellowship aims to change this by empowering young African women aged 18–28 with cybersecurity skills and thereby promote socioeconomic growth. 

The fellowship programme is built on three pillars – training, mentorship and placement – and provides a cutting-edge training curriculum that is updated annually to meet industry demands. This curriculum offers free, high-quality cybersecurity education that combines technical and soft skills over an eightmonth period. Additionally, a global mentorship pillar features a five-to-one ratio of female mentors to fellows, enhancing support and representation. The initiative’s placement arm then assists fellows in securing their first cybersecurity roles, ensuring a smooth transition from learning to employment. 

Beyond technical training, the programme employs mindset-shifting tools, such as the CyberGirls mantra consisting of affirmations and positive selftalk, to overcome stereotypes and boost confidence among fellows. 

CyberGirls alumni, spread across 22 countries, often see their income increase by more than 400% within six months of landing a cybersecurity role after completing the programme.
Nigeria | Civil society
CyberGirls Fellowship
Cybersafe Foundation
The Hewlett Packard Enterprise (HPE) Cybersecurity Career Reboot Program, launched in 2022, is rooted in the belief that the greatest gift is to give someone an opportunity. The programme recognizes that talent can come from non-traditional paths, and that formal degrees or prior cybersecurity experience are not always prerequisites. 

The programme is an immersive nine-month experience that offers a blend of mentorship, hands-on experience and formal training to equip participants with the skills required in the cybersecurity domain. Participants are placed in a team aligned with their interests and aspirations and with the business needs of HPE. They are dedicated to specific projects but also spend time attaining cybersecurity certifications and building their network both inside and outside of the company. 

HPE’s Cybersecurity Career Reboot Program seeks to create new cybersecurity talent rather than taking it from other organizations. Those who have passed through the programme include a school bus driver, a restaurant owner, a respiratory therapist and a nurse. While there are inherent challenges in career transitions, HPE has found many parallels between the skills acquired in candidates’ former careers and the ones essential for success in cybersecurity. 

Some 93% of graduates have secured full-time positions at HPE or other companies.
USA | IT and Communications (ICT)
Cybersecurity Career Reboot Program
Hewlett Packard Enterprise
NIST published the NICE Workforce Framework for Cybersecurity (NICE Framework) to aid the development, recruitment and retention of the cybersecurity workforce. 

The NICE Framework provides a standard approach for describing the tasks, knowledge and skills needed to perform cybersecurity work, enabling a better understanding of talent needs and expectations. Jobseekers use the NICE Framework through tools, such as those provided by CyberSeek.org,76 to chart pathways for future learning and career advancement. Educators and trainers, in courses offered by, for instance, Temple University, use it to describe and map the curriculum to current marketplace demand, while employers use it to conduct workforce assessments and identify staffing gaps or to craft more accurate position descriptions and improve recruitment. For example, the NICE Framework Mapping Tool from the Cybersecurity and Infrastructure Security Agency (CISA) measures alignment of job descriptions.

The use of common terms and language helps to organize and communicate cybersecurity work. In this way, the NICE Framework has helped to simplify communications and provide improved clarity and consistency at all organizational levels – from an individual to a programme, organization and more.
USA | Government
NICE Workforce Framework for Cybersecurity
National Institute of Standards and Technology (NIST)