US government contracts will now require specific cybersecurity skills, not just job titles
What happened
The US government will change how it describes cybersecurity work in its contracts. Instead of generic job titles, contracts will now list the exact knowledge and skills required for IT and cybersecurity support services.
Why it matters
For years, government agencies hired cybersecurity contractors based on broad job descriptions, which often led to mismatched skills and unclear expectations. This change means contractors will need to prove they have specific, measurable abilities, making it harder to staff projects with underqualified personnel. It also means that training programs and certifications will need to align more closely with these new, detailed skill requirements.
The signal
Watch for the first few major government cybersecurity contracts issued under these new rules to see if they specify skills in a consistent and measurable way, and whether the pool of eligible bidders changes.