Growing Cyber Talent Through Public Private Partnerships 2025

Common challenges for PPPs3 Challenges, including resistance to external assistance or a lack of mutual trust, can hinder collaboration between public and private actors. Despite the many benefits of public–private partnerships, they can be challenging to establish or sustain. Even with a 75% surge in global cyberattacks in the third quarter of 2024 compared to the same period in 2023, many decision-makers still underestimate the scale of cyberthreats and the urgent need for skilled cybersecurity professionals, leading to cybersecurity being deprioritized in policy. Moreover, challenges such as resistance to external assistance or a lack of mutual trust further hinder collaboration between public and private actors. In the context of cybersecurity talent development, the following barriers to public–private partnership are worth highlighting: Differences in working speeds: The private and public sectors often operate at different speeds, which can present challenges to effective collaboration on cybersecurity talent development. While private entities typically move quickly, the public sector, with its approval cycles, regulatory requirements and governance structures, tends to progress more slowly. Finding ways to align the pace of both sectors is essential for ensuring effective collaboration. Misperception of intent and resistance to external assistance: There is often scepticism about the motives of private-sector involvement in public programmes and initiatives. Questions may arise about whether private-sector actors are genuinely committed to creating positive change or are primarily motivated by marketing, corporate social-responsibility goals or profit. This mistrust can erode confidence in PPPs, making it harder to achieve effective collaborations. Limited access to public-sector stakeholders: Engaging with the public sector on cybersecurity talent development can be challenging due to restricted access, bureaucratic structures or unclear points of contact. Private-sector organizations may struggle to identify the right stakeholders to initiate collaboration. Additionally, some public institutions may be hesitant to engage with private entities due to concerns over differing priorities or objectives. Lack of awareness of local context and needs: Global cybersecurity initiatives often fail to account for the unique contexts and challenges faced by local communities. A one-size- fits-all approach that overlooks local economic, cultural and technological realities risks being ineffective or even counterproductive. For example, training programmes designed for developed countries may not be suitable in regions with limited internet access, outdated infrastructure or low levels of digital literacy, further hindering talent development in these areas. Growing Cyber Talent Through Public–Private Partnerships 8