Case studies

Total number of case studies

299

Sectors

21

Locations

59

Topics

9

To close the gender gap in technology, Girls Who Code is leading a movement to inspire, educate and equip students who identify as girls or nonbinary individuals with the computing skills needed to pursue 21st-century opportunities. Since launching in 2012, Girls Who Code has reached 580,000 students. 

In 2021, Girls Who Code piloted Work Prep, an experiential, virtual programme for college students designed to build career skills and confidence and expose students to partner company culture, opportunities and role models. The three-week programme is designed to be flexible for busy college students, featuring a combination of asynchronous activities (i.e. students working independently according to their own schedule) and synchronous work (i.e. students engaging simultaneously in realtime work). As part of the cybersecurity Work Prep, students are introduced to multiple cybersecurity roles and work together to complete the mitigation, response and recovery phases of an incidentresponse plan framework while also meeting cyber leaders at the partner company. 

As a result of the programme, the overwhelming majority of students said they were more likely to pursue a career in technology and that they felt more prepared to apply for and be interviewed for technical internships and jobs.
USA | Civil society
Work Prep
Girls Who Code
To educate schools on how to navigate the digital landscape securely, Fortinet has extended its commercial security awareness and training service at no cost to schools in countries around the world.

Recognizing the unique educational context, the company tailored staff training to the academic sector and hired teachers to develop a security awareness curriculum that addressed the learning needs of all students aged four to 18. The education edition was initially developed in alignment with the US’s White House Cyber Education and Workforce Initiatives in 2022. The following year, the initiative expanded to include Canada, the UK, Australia and Brazil and is now available to 11.8 million education staff and 64 million students, with further plans for global outreach. 

In addition to its collaboration with educational institutions worldwide, in 2020, at the outset of the COVID-19 pandemic, Fortinet amplified its existing efforts by offering all self-paced technical certification training at no cost, in response to the escalating threat landscape. The response was staggering, with course registrations peaking at one every seven seconds during the initial weeks.
USA, Brazil, Australia, United Kingdom, Canada | IT and Communications (ICT)
Security Awareness and Training Service
Fortinet
Inclusive Cyber, an initiative of the World Economic Forum Global Shapers Community, aims to build a cyber talent pipeline as diverse as the challenges that will be faced. The initiative spans Montreal, Kigali and London and mobilizes atypical and under-represented non-STEM talent to jumpstart their cyber interest and careers. Inclusive Cyber does this through: 1) leading skills workshops and using a transferable skills toolkit built on the National Institute of Standards and Technology (NIST)’s National Initiative for Cyber Education (NICE) framework; and 2) representing the youth voice on cyber capacity-building and with leading policymakers, such as the UK Cyber Security Council and Quebec’s CyberEco. 

At the heart of the initiative is the transferable skills toolkit, which helps individuals from disciplines including literature, fine arts and political sciences reframe and translate the value of their existing skills to best-match cybersecurity roles. Over five years, Inclusive Cyber has run 27 workshops and directly coached some 1,315 students on breaking into cybersecurity. These workshops took place in non- STEM faculties across leading universities, including McGill University, University of Toronto, London School of Economics, Queen Mary University of London, Royal Holloway and University College London. In Kigali, Inclusive Cyber built a new curriculum to equip young underprivileged professionals with competitive cybersecurity and transferable skills.
Canada, United Kingdom, Rwanda | IT and Communications (ICT)
Inclusive Cyber
Global Shapers Community
In collaboration with the eurobits women academy (ewa), the Institute for Security and Safety aims to inspire women to pursue a career in cybersecurity. At 11%, the proportion of women in cybersecurity in Germany is far below the international average. 

As part of a three-year project, the objective is to create a platform for female career changers to: 
– Provide orientation and guidance on the career opportunities available in cybersecurity using their existing strengths. 
– Offer an in-service, modular training programme that can run alongside their current job to help them acquire the most important knowledge in the field of cybersecurity over several months and give insights into various areas of expertise. 
– Facilitate access to a cybersecurity network with contacts in the industry for internship placements and job offers. 

The aim is to make it easier for women to enter cybersecurity and support them in achieving their career goals.
Germany | IT and Communications (ICT)
eurobits women academy
Institute for Security and Safety (ISS)
In response to the high demand for cybersecurity talent, Siemens has created the CyberMinds Academy to attract and nurture new talent with no prior experience in cybersecurity into cybersecurity specialist roles.

Running in two locations, in Portugal and Spain, the academy delivers a one-year training programme combining learning and practical on-the-job training. Participants also have the opportunity to work closely with cybersecurity experts and participate in a diverse cultural environment. The CyberMinds Academy not only contributes to the development and training of professionals who can bring fresh perspectives and ideas to cybersecurity but also promotes diversity and inclusion in the workforce. 

So far, the two CyberMinds Academies have trained 26 participants from different backgrounds. Eight of those individuals have been hired to work in cybersecurity for Siemens.
Spain, Portugal | IT and Communications (ICT)
CyberMinds Academy
Siemens
As a cybersecurity company, Trellix aims to bringing awareness to the purposeful work of cybersecurity and create pathways for under-represented groups to fill the talent gap. Spearheading Soulful Work, Trellix fosters diversity and inclusion through partnerships and initiatives aimed at combating unconscious bias and expanding opportunities for all.

In collaboration with Gotara, Trellix launched a programme focused on empowering women to navigate and advance their careers, addressing the challenges of gender inequality in the industry. Trellix joined forces with the Hispanic Alliance for Career Enhancement (HACE) to create a cybersecurity accelerator programme that includes a mentorship and development initiative tailored specifically to Latinos, equipping them with the necessary skills to thrive in cybersecurity roles. Trellix also collaborated with the National Cybersecurity Alliance to create the Historically Black Colleges and Universities (HBCU) Cybersecurity Career Program, which actively engages in mentoring projects with the aim of raising awareness of cybersecurity careers among students and providing them with the support needed to successfully navigate the job search process. Through these efforts, Trellix is working towards creating a more diverse and inclusive cybersecurity workforce.
USA | IT and Communications (ICT)
Soulful Work
Trellix
In 2020, the Cyber Security Agency of Singapore (CSA) established the SG Cyber Talent initiative to nurture cybersecurity enthusiasts from a young age and help professionals deepen their skills. Since its inception, the initiative has helped more than 22,000 individuals through cybersecurity bootcamps, mentoring, career conversion programmes and leadership education. The main programmes under SG Cyber Talent include SG Cyber Leaders, SG Cyber Women, SG Cyber Youth and SG Cyber Olympians. 

To illustrate the impact, as part of SG Cyber Youth, the Youth Cyber Exploration Programme (YCEP) was started in 2018 and has since trained more than 1,500 secondary-school students in basic cybersecurity knowledge through a series of bootcamps and capture-the-flag competitions organized by CSA and the five local polytechnics, in collaboration with industry partners. As a step-up, the advanced YCEP is also available to students with some existing cybersecurity knowledge. 

The Cybersecurity Strategic Leadership Programme (CSLP), organized by CSA, in collaboration with academic partners, as part of SG Cyber Leaders, aims to equip current and future generations of local cybersecurity leaders with a deep level of understanding on the key global drivers shaping cybersecurity strategies and innovation and to lead their organizations’ cybersecurity functions effectively. About 50 senior cybersecurity leaders participated in the first two runs of the CSLP in 2022 and 2023, covering themes such as growing a C-suite Mindset, leading the organization and leading the ecosystem. The participants also embarked on an overseas immersion trip to the US and the UK to engage in deeper discussions with local cybersecurity leaders and organizations.
Singapore | Government
SG Cyber Talent
Cyber Security Agency of Singapore (CSA)
The Cybersecurity Learning Hub is an initiative designed to tackle the globally cybersecurity skills shortage and democratize access to cybersecurity career paths. Led by Salesforce with support from Fortinet, the Global Cyber Alliance and the World Economic Forum, the Cybersecurity Learning Hub features training modules on numerous topics such as cyber resilience, artificial intelligence (AI) cybersecurity and cybersecurity table-top exercises. In addition to the training modules, it also includes a growing library of career-oriented information and expert interviews intended to help learners map their own career path through a variety of in-demand cybersecurity roles. Since its launch in 2019, the Cybersecurity Learning Hub has trained more than 290,000 individuals spread across all continents.
Civil society, IT and Communications (ICT)
Cybersecurity Learning Hub
Salesforce, Fortinet, World Economic Forum, Global Cyber Alliance
Metabase Q established the Council of Experts in Regulation and Cybersecurity (CERC), a pioneering, multidisciplinary council comprising cybersecurity practitioners with a recognized trajectory from the private sector, academia and civil society.

The CERC serves as a catalyst to position Mexico as a leader and benchmark in Latin America in the development of cybersecurity. 

Within the CERC, the education committee specifically targets United Nations Sustainable Development Goal 4, ensuring inclusive access to education and promoting learning opportunities in cybersecurity for all. For example, the Digital Distance Education programme is designed to provide educational resources for children and young adults. The Digital Cyber Academy (DCA) aims to both attract skilled individuals and bridge the expertise gap in Latin America. The DCA allows students to enrol at no cost and serves as a hub for acquiring technical knowledge and practical skills. The DCA has graduated five generations of students, marking a crucial milestone in preparing the next generation of cybersecurity professionals.
Mexico | IT and Communications (ICT)
Council of Experts in Regulation and Cybersecurity
Batuta
Between 2017 and 2023, the Cybersecurity Program of the Inter-American Committee against Terrorism (CICTE) of the Organization of American States (OAS) – with the financial support of Citi Foundation – implemented a multiphased project entitled Creating a Career Path in Cybersecurity with the purpose of addressing the shortage of skilled cybersecurity professionals. The main goal was to equip young people with essential skills to access entry-level positions in cybersecurity, offering technical training, soft skills development and professional growth opportunities. 

Over six years, the project successfully trained more than 1,200 individuals across a number of countries, including Argentina, Brazil, Colombia, Costa Rica, Guatemala, Mexico, Panama, Peru, Dominican Republic and Trinidad and Tobago. Its beneficiaries not only acquired technical expertise and certification but also developed crucial soft skills and secured initial job placements in both public and private institutions. 

Building on the lessons learned from the implementation of this programme and considering the persistent shortage of professionals in this field, the Cybersecurity Program plans to launch a new workforce development programme in one OAS member state in 2024. This project aims to provide a systemic approach to cyber education, with the long-term goal of increasing the supply of qualified cybersecurity professionals, offering training and employment opportunities while assisting the beneficiary country in developing a national cybersecurity education framework. The goal is to create a sustainable and robust pipeline of skilled professionals, contributing to the country’s cyber resilience.
Argentina, Trinidad and Tobago, Dominican Republic, Peru, Panama, Costa Rica, Mexico, Guatemala, Colombia, Brazil | IT and Communications (ICT)
Creating a Career Path in Cybersecurity
Organization of American States (OAS)
Saudi Arabia’s Vision 2030 emphasizes human capital development, including in cybersecurity, as a core pillar of its coherent development strategy. Central to these efforts, the Saudi Arabia National Cybersecurity Authority (NCA) has introduced the Saudi Cybersecurity Higher Education Framework (SCyber-Edu). This framework aims to elevate cybersecurity education, aligning it with market demands and the objectives of Vision 2030. SCyber- Edu sets standards for cybersecurity education across Saudi universities, ensuring courses meet market-relevant skills and knowledge domains. 

The framework involves several critical components, including developing a recognition process for cybersecurity degree programmes, creating incentives for universities to align their courses with SCyber-Edu standards, and establishing a database of recognized degrees to guide student selection. 

In 2023, SCyber-Edu had a significant impact on Saudi Arabia’s educational landscape. It has been adopted by 45 prestigious institutes, influencing 82 cybersecurity higher education programmes nationwide. The NCA has observed a significant increase in use of the framework by these institutions, further enhancing the quality and relevance of cybersecurity education in the country.
Saudi Arabia | Government
Saudi Cybersecurity Higher Education Framework
Saudi National Cybersecurity Authority
The CyberGirls Fellowship, an initiative by Cybersafe Foundation, confronts Africa’s cybersecurity gender disparity. While women represent half of Africa’s population, they account for a mere 9% of its cybersecurity workforce. The fellowship aims to change this by empowering young African women aged 18–28 with cybersecurity skills and thereby promote socioeconomic growth. 

The fellowship programme is built on three pillars – training, mentorship and placement – and provides a cutting-edge training curriculum that is updated annually to meet industry demands. This curriculum offers free, high-quality cybersecurity education that combines technical and soft skills over an eightmonth period. Additionally, a global mentorship pillar features a five-to-one ratio of female mentors to fellows, enhancing support and representation. The initiative’s placement arm then assists fellows in securing their first cybersecurity roles, ensuring a smooth transition from learning to employment. 

Beyond technical training, the programme employs mindset-shifting tools, such as the CyberGirls mantra consisting of affirmations and positive selftalk, to overcome stereotypes and boost confidence among fellows. 

CyberGirls alumni, spread across 22 countries, often see their income increase by more than 400% within six months of landing a cybersecurity role after completing the programme.
Nigeria | Civil society
CyberGirls Fellowship
Cybersafe Foundation
The Hewlett Packard Enterprise (HPE) Cybersecurity Career Reboot Program, launched in 2022, is rooted in the belief that the greatest gift is to give someone an opportunity. The programme recognizes that talent can come from non-traditional paths, and that formal degrees or prior cybersecurity experience are not always prerequisites. 

The programme is an immersive nine-month experience that offers a blend of mentorship, hands-on experience and formal training to equip participants with the skills required in the cybersecurity domain. Participants are placed in a team aligned with their interests and aspirations and with the business needs of HPE. They are dedicated to specific projects but also spend time attaining cybersecurity certifications and building their network both inside and outside of the company. 

HPE’s Cybersecurity Career Reboot Program seeks to create new cybersecurity talent rather than taking it from other organizations. Those who have passed through the programme include a school bus driver, a restaurant owner, a respiratory therapist and a nurse. While there are inherent challenges in career transitions, HPE has found many parallels between the skills acquired in candidates’ former careers and the ones essential for success in cybersecurity. 

Some 93% of graduates have secured full-time positions at HPE or other companies.
USA | IT and Communications (ICT)
Cybersecurity Career Reboot Program
Hewlett Packard Enterprise
NIST published the NICE Workforce Framework for Cybersecurity (NICE Framework) to aid the development, recruitment and retention of the cybersecurity workforce. 

The NICE Framework provides a standard approach for describing the tasks, knowledge and skills needed to perform cybersecurity work, enabling a better understanding of talent needs and expectations. Jobseekers use the NICE Framework through tools, such as those provided by CyberSeek.org,76 to chart pathways for future learning and career advancement. Educators and trainers, in courses offered by, for instance, Temple University, use it to describe and map the curriculum to current marketplace demand, while employers use it to conduct workforce assessments and identify staffing gaps or to craft more accurate position descriptions and improve recruitment. For example, the NICE Framework Mapping Tool from the Cybersecurity and Infrastructure Security Agency (CISA) measures alignment of job descriptions.

The use of common terms and language helps to organize and communicate cybersecurity work. In this way, the NICE Framework has helped to simplify communications and provide improved clarity and consistency at all organizational levels – from an individual to a programme, organization and more.
USA | Government
NICE Workforce Framework for Cybersecurity
National Institute of Standards and Technology (NIST)
As an energy organization, Siemens Energy has identified a need to grow the pool of workers who can understand both the physical and cyber aspects of operational technologies. 

With fewer than 10 colleges in the United States offering cybersecurity classes focused on operational technologies in 2020, Siemens Energy partnered with ICS Village, the Regional Economic Development for for Eastern Idaho (REDI), MISI Academy, Capitol Technology University, SANS Technology Institute and Idaho State University (ISU) to design and implement the Industrial Cybersecurity Apprenticeship Program (CIISAp). CIISAp is an academically rigorous programme that places apprentices in real-world job rotations designed to immediately apply their skills as they learn. It enables people with moderate computer skills to gain the hands-on experience and knowledge needed to competently fill cybersecurity vacancies that currently pay above $90,000 per year.
USA | Energy & utilities, Oil & Gas
Cybersecurity and Industrial Infrastructure Security Apprenticeship Program
Siemens Energy
Telefónica’s Campus 42 is dedicated to attracting, educating and recruiting skilled cybersecurity professionals and experts. Campus 42 – characterized by free access to education with no classes or textbooks, available 24/7 and focusing on practical, project-based learning in a collaborative environment – aims to develop highly skilled technology experts in disciplines such as cybersecurity. The programme emphasizes the development of industry-relevant skills, and admission is based on logical thinking and problemsolving abilities rather than academic prerequisites. 

Telefónica, a key partner of Campus 42, provides essential support, including financial assistance and resources such as Telefónica office space. The company extends further support by offering employment opportunities and internships to Campus 42 students, enabling them to gain valuable work experience in the telecommunications and technology sectors. This collaboration has helped create a talent pool of highly skilled professionals available for recruitment, and Telefónica’s internal cybersecurity unit actively filters and collaborates with these individuals on internal projects, thereby promoting and refreshing internal cyber skills.
Spain | IT and Communications (ICT)
Campus 42
Telefónica
The UK government recognizes that there need to be clear pathways into and through the cybersecurity profession. Knowledge, skills and experience in cybersecurity should be defined and acknowledged in a way that is similar to more established professions, such as law and engineering. 

To do this, the UK Cyber Security Council was launched in March 2021 and represents a world first for the cybersecurity profession. Its mission is to be the voice of the profession, bringing clarity and structure to the growing cyber workforce and the range of qualifications, certifications and degrees that exist across the field. It was awarded a royal charter, which enables it to bestow chartership on individuals – a national recognition of excellence and expertise – as is done in the engineering profession. This is a vital step towards bringing cohesion and consistency to the cyber workforce and, through the development of professional standards across numerous specialisms, practitioners are being recognized for their abilities as well as engaging in a more defined career pathway. 

The council has now awarded more than 100 cyber professionals with this accreditation across four specialist areas, including Cyber Security Governance and Risk, Secure Systems Architecture, Cyber Security Audit and Assurance and Security Testing (Penetration Testing).
United Kingdom | Government
The UK Cyber Security Council
Department for Science, Innovation and Technology of the United Kingdom
To improve the architecture and security of systems within the organization, EDP has launched the Global Black Belt Program. The programme aims to enhance employees’ technical skills and knowledge, enabling them to design and implement secure and robust systems. To meet its objectives, the programme covers topics such as security best practices, threat modelling and secure coding techniques. 

To participate in the programme, employees are asked to fill out a questionnaire to assess their level of expertise and provide suggestions for further development. The programme offers various expertise paths, such as Azure Cloud Architect Expert, AWS Cloud Architect Expert, Google Cloud Architect Expert, Human Behaviour Expert, Security Architect Expert, Governance, Risk and Compliance Expert and more. 

Each path is structured around three levels of expertise: Global White Belt, Global Green Belt and Global Black Belt. Every level has specific requirements regarding skills, experience, certifications and recommended conferences and learning paths to help participants advance their knowledge and skills.
Portugal | Energy & utilities
Global Black Belt Program
EDP
Schneider Electric (SE) sees employees as vital to the safe and secure delivery of its products and services, strengthening critical global infrastructure and fuelling the digital economy. SE’s Cybersecurity Talent Development initiative is a comprehensive programme that defines the cybersecurity talent needs of the company, then identifies, attracts and upskills cybersecurity talent in an inclusive way. 

In preparation for the future, SE implemented a people-centric approach and completed the following milestones: 

– Community identification: Through careful assessment and mapping, SE has successfully identified cyber employees within the organization. 
– Key roles definition: SE outlined the current and future top cybersecurity mandates and domains from digital practices and functions to business and operational units. Following this exercise, SE completed career path mapping to common roles. 
– Career path development: To support the growth of cyber roles, SE established individual role descriptions and recommended training programmes and certifications to facilitate professional development. Learning and rotation are central to developing the company’s talent pool. 
– Community meetings: These monthly calls are designed to create synergies and networking opportunities by sharing initiatives from different teams. 

The benefits for employees have been equal career development opportunities and diversity of career paths. The SE benefits are a stronger pipeline of cyber talent and a future-ready cybersecurity community.
France | IT and Communications (ICT)
Cybersecurity Talent Development
Schneider Electric
To stay ahead of the curve in an intensely competitive market, pharmaceutical supplier ACG Capsules prioritized manufacturing superior-quality products, improving responsiveness, increasing production yields and enhancing workforce productivity. To achieve this, ACG Capsules implemented 25+ Fourth Industrial Revolution use cases powered by the industrial internet of things (IIoT), machine learning (ML), deep learning (DL), digital twins, extended reality and generative AI. Effective adoption of these use cases has resulted in a reduction in critical defects of 98%, a shortening of production lead times of 39%, a drop in total losses of 51% and a 44% rise in workforce productivity.
India | Health
ACG - Pithampur