- CommunitiesMay increase recruitment, training, and entry into cybersecurity roles for underrepresented groups (older workers, raci…
- EmployersCould strengthen national cyber resilience by enlarging the pool of qualified professionals available to government and…
- Local governmentsProvides federal coordination and targeted outreach (to educators, unions, workforce offices, community colleges, etc.)…
Expanding Cybersecurity Workforce Act of 2025
Referred to the House Committee on Homeland Security.
This bill directs the Director of the Cybersecurity and Infrastructure Security Agency (CISA) to establish, within CISA’s Cybersecurity Education and Training Assistance Program, a program to promote cybersecurity careers to specified disadvantaged and underrepresented groups.
It requires targeted outreach (to educators, unions, chambers of commerce, workforce offices, community colleges, parents, private sector entities, and others), regional tailoring, and annual reports to the House and Senate homeland security committees on program efficacy.
The bill authorizes $20,000,000 per year from FY2026 through FY2031 for the program and defines several key terms (including specific meanings of “disability,” “geographically diverse,” “nontraditional educational path,” “older,” “racial and ethnic minority,” and “socioeconomically diverse”).
On content alone, this is a narrowly tailored, low-controversy workforce development bill with modest budgetary impact and built-in oversight. Those characteristics increase its chances relative to sweeping or costly reforms. However, authorization does not guarantee appropriations, and procedural barriers (especially in the Senate) or prioritization against other legislative items create meaningful uncertainty.
How solid the drafting looks.
Scope and role of federal government: liberals and centrists accept a federal program to address workforce gaps; conservatives worry about federal overreach.
Who stands to gain, and who may push back.
- Targeted stakeholdersThe authorized funding level ($20 million/year) may be modest relative to nationwide cybersecurity workforce gaps and c…
- Federal agenciesImplementation will create administrative and reporting burdens for CISA and partner institutions (community colleges,…
- Federal agenciesOutcomes are uncertain because the bill sets program goals and reporting requirements but leaves key design details (pa…
Why the argument around this bill splits.
Scope and role of federal government: liberals and centrists accept a federal program to address workforce gaps; conservatives worry about federal overreach.
A mainstream progressive is likely to view the bill positively as a targeted federal effort to expand opportunity in a high-demand, high-wage sector for historically excluded groups.
They will appreciate the explicit inclusion of multiple underrepresented groups, the emphasis on regional tailoring, and the required annual reporting to Congress.
They may note the funding authorization as a useful, ongoing investment in workforce development but also want stronger language on inclusivity (e.g., broader disability definitions) and coordination with labor and community organizations.
A pragmatic centrist is likely to view the bill as a relatively modest, targeted federal workforce initiative addressing an acknowledged skills gap in cybersecurity, with reasonable accountability through annual reports.
They will appreciate the emphasis on regional tailoring and partnership with a range of institutions, but will seek clarity on cost-effectiveness, metrics of success, and how this program complements (rather than duplicates) existing workforce efforts.
Centrists will generally support the goal but want stronger implementation details, measurable outcomes, and fiscal transparency.
A mainstream conservative is likely to be skeptical of a new federal program that expands CISA’s role in workforce development and that explicitly targets demographic groups for recruitment.
They may acknowledge the importance of cybersecurity skills but question the need for a federally run outreach program, prefer state/local or private-sector solutions, and worry about mission creep, ideological content in outreach, and ongoing federal spending.
Because the authorized funding is not large compared with federal budgets, some conservatives may view the bill as low-cost but still object to targeted group criteria and potential federal overreach.
The path through Congress.
Reached or meaningfully advanced
Reached or meaningfully advanced
Still ahead
Still ahead
Still ahead
On content alone, this is a narrowly tailored, low-controversy workforce development bill with modest budgetary impact and built-in oversight. Those characteristics increase its chances relative to sweeping or costly reforms. However, authorization does not guarantee appropriations, and procedural barriers (especially in the Senate) or prioritization against other legislative items create meaningful uncertainty.
- Whether and when Congress would appropriate the authorized $20 million annually—authorization does not ensure funding.
- Potential overlap with existing CISA or federal cybersecurity workforce initiatives and whether Congress or the agency would consolidate/adjust programs rather than create a new stand-alone effort.
Recent votes on the bill.
No vote history yet
The bill has not accumulated any surfaced votes yet.
Go deeper than the headline read.
Scope and role of federal government: liberals and centrists accept a federal program to address workforce gaps; conservatives worry about…
On content alone, this is a narrowly tailored, low-controversy workforce development bill with modest budgetary impact and built-in oversig…
Pro readers get the full perspective split, passage barriers, legislative design review, stakeholder impact map, and lens-based policy tradeoff analysis for Expanding Cybersecurity Workforce Act of 2025.
Go beyond the headline summary with full stakeholder mapping, legislative design analysis, passage barriers, and lens-by-lens tradeoff breakdowns.