It is no secret that we face a significant global cybersecurity skills shortage, with 1.8 million open and unfilled positions expected by 2022. As global leader of academic outreach for IBM Security, I am often asked what steps we can take to address the shortage and accelerate skills.

My response is unwavering: There is no single answer, no silver bullet. We must act tirelessly, remain dedicated to the cause and engage in many different types of activities. One such activity involves corporate sponsorship of competitions such as the Collegiate Cyber Defense Competition (CCDC), which wrapped up this past weekend with the national finals taking place at the University of Texas at San Antonio.

What Is the CCDC?

The CCDC aims to provide an educational experience in which students can apply theory and practical skills in a controlled, competitive environment, all while fostering teamwork, ethical behavior and effective communication both within and across teams. Over the course of several months, teams from higher education institutes across the U.S. compete in virtual qualifiers, regional competitions and, ultimately, the national finals.

In a CCDC competition, student teams assume administrative and protective duties for a fictitious commercial network. Teams begin the competition with identical sets of hardware and software, and are scored on their ability to detect and respond to outside threats, react to business injects and maintain the needs of the business.

Read the IBM X-Force Report: Using gamification to enhance security skills

The Importance of Industry Sponsorship

According to Stephen Keim, principal architect and program manager at IBM Security, it’s important for industry sponsors to be involved with CCDCs. For one thing, it gives them access to a hotbed of talent, with over 1,000 highly skilled security and computer science students from top U.S. schools looking for employment. These competitions also offer students visibility into products and people.

While theory has its place, nothing beats hands-on skills when it comes to being employable upon graduation. In fact, aside from the shortage of talent itself, the most common complaint of hiring managers is the lack of hands-on skills demonstrated by applicants. Competitions like the CCDC provide a wonderful environment for hands-on learning.

“I enjoyed seeing the strong level of interest and enthusiasm the student competitors have toward IBM Security,” said John Wheeler, vice president of services strategy at IBM Security. “I believe students really find IBM Security attractive given the broad range of experiences we can offer given the vast range of our solutions, global presence and leading direction in cognition.”


Bob Kalka, vice president of IBM Security, networking at NCCDC in San Antonio.

Furthermore, volunteering at the CCDC presents an opportunity to speak with department heads and other faculty members to understand their needs. They provide perspective on what we, their industry partners, can do to help them teach the skills necessary to make the world a safer place.

Nurturing the Cybersecurity Talent of Tomorrow

This year, for the first time, IBM sponsored the CCDC regionals in the Northeast, Southeast and Western regions, as well as the national finals in San Antonio. IBM Security employees volunteered in various capacities, but they overwhelmingly favored white team membership.

White team members judge teams and monitor their performance, attitude and technical skills very closely throughout the competition. White team members also have the opportunity to provide feedback to the students, to share what went well and what could be improved upon next time. Overall, CCDC competitors remained calm and displayed incredible enthusiasm and professionalism, leaving quite an impression on the IBM team.

“As a white team member, you really get to see who is going to perform under pressure,” said Rhonda Childress, IBM Fellow. “By watching the teams, you really get a feel for how they will react to situations. I wish they had this competition around when I was going through university!”

In addition to monitoring and judging the teams, IBM volunteers had the opportunity to share their passion for IBM, explain what they do, and talk about the breadth and depth of IBM Security solutions. According to Nat Prakongpan, integration lab manager for IBM Security, students across the U.S. are now aware that IBM does cybersecurity, and does it well.


The IBM Booth, with Nat Prakongpan, at SECCDC.

Our IBM volunteers had such a wonderful time meeting and observing the young talent of the future in action that many are already asking if they can go back next year. Congratulations to all the teams who competed in the 2017 CCDC qualifiers, regionals and national finals. Competing in events such as the CCDC takes a special kind of passion and dedication. The IBM team sends a big shout out to the team from the University of Maryland, Baltimore County, which took the 2017 National CCDC championship title.

As they say in show business, that’s a wrap! See you at CCDC 2018!

Read the IBM X-Force Report to learn how gamification can enhance security skills

More from Intelligence & Analytics

X-Force Threat Intelligence Index 2024 reveals stolen credentials as top risk, with AI attacks on the horizon

4 min read - Every year, IBM X-Force analysts assess the data collected across all our security disciplines to create the IBM X-Force Threat Intelligence Index, our annual report that plots changes in the cyber threat landscape to reveal trends and help clients proactively put security measures in place. Among the many noteworthy findings in the 2024 edition of the X-Force report, three major trends stand out that we’re advising security professionals and CISOs to observe: A sharp increase in abuse of valid accounts…

Web injections are back on the rise: 40+ banks affected by new malware campaign

8 min read - Web injections, a favored technique employed by various banking trojans, have been a persistent threat in the realm of cyberattacks. These malicious injections enable cyber criminals to manipulate data exchanges between users and web browsers, potentially compromising sensitive information. In March 2023, security researchers at IBM Security Trusteer uncovered a new malware campaign using JavaScript web injections. This new campaign is widespread and particularly evasive, with historical indicators of compromise (IOCs) suggesting a possible connection to DanaBot — although we…

Accelerating security outcomes with a cloud-native SIEM

5 min read - As organizations modernize their IT infrastructure and increase adoption of cloud services, security teams face new challenges in terms of staffing, budgets and technologies. To keep pace, security programs must evolve to secure modern IT environments against fast-evolving threats with constrained resources. This will require rethinking traditional security strategies and focusing investments on capabilities like cloud security, AI-powered defense and skills development. The path forward calls on security teams to be agile, innovative and strategic amidst the changes in technology…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today