A 4.8 million cybersecurity worker shortage does not begin with a job posting. It begins with a classroom that was never built, and a decision made quietly over decades about whose education counted as an investment.
Walk into a high school in a well-resourced suburb and the question of whether students have exposure to computer science isn't really a question. They have AP CS. They have robotics. They have instructors who came out of industry, or who at minimum understand what the work looks like. Some of those students will go on to fill the professional and technical roles the economy needs filled.
Walk into a school in a lower-income urban neighborhood or a small rural district, and the picture is different. Forty percent of U.S. public high schools offer no foundational computer science at all, according to the 2024 State of Computer Science Education report. In the schools that do offer it, the course may be taught by a teacher covering the content alongside two other subjects after attending a summer professional development session. The curriculum may not have been updated in years. There may be no clear connection drawn between what students are doing in that classroom and what a career in technology, security, or data actually requires of someone at age 22.
That difference, replicated across thousands of schools, is where the workforce gap originates.
ISC2's 2024 Cybersecurity Workforce Study measured the global shortage at 4.76 million professionals, a 19 percent increase from the prior year, at a time when the active workforce grew by essentially zero. The gap between supply and demand is not narrowing. The standard response is to recruit more aggressively, offer bootcamps, and expand certifications. That addresses the problem at the point where students are already in their mid-twenties with no technology background and limited runway for foundational learning.
It is not, primarily, a recruitment problem. Ninety percent of organizations surveyed by ISC2 reported skills shortages, and 64 percent said skills gaps were a greater challenge than headcount shortages alone. Organizations are not just looking for more people. They are looking for people with a particular kind of preparation: technical grounding, practical reasoning, the capacity to learn new tools. That preparation doesn't materialize reliably from a twelve-week course if it wasn't started earlier.
The Code.org data makes the structural issue visible. Sixty percent of U.S. high schools now offer foundational CS, up from 57.5 percent the year before. Progress, but the schools in that remaining 40 percent are not randomly distributed. Rural schools, smaller schools, and urban schools serving predominantly low-income communities are all overrepresented in the group without access. Black, Hispanic/Latino, and Native American students are, by the report's own analysis, less likely than their white peers to attend a school that offers foundational computer science. Women represent only 33 percent of CS enrollment nationally, a figure that has changed less than two percentage points over several years of focused attention.
A University of Maryland study cited in the same report found that even a single high school CS course increases a student's earnings by at least 8 percent by age 24. The economic return was most significant for students from low-income households, Black students, and female students. The course with the greatest individual impact is precisely the one those students are least likely to have.
The teacher problem is worth sitting with, because it doesn't resolve easily.
The kind of person who can teach this subject well understands networking, can make security concepts tangible, and can connect programming to real decisions rather than abstract exercises. That person can earn far more than a teacher's salary almost anywhere in the country. The ones who do go into teaching tend to go where the working conditions and compensation are most competitive, which concentrates experienced CS instruction in schools that already have advantages.
Research published in the Journal of Computer Science Integration found that placement in underserved communities was negatively associated with prospective teachers' preference to teach CS, a result shaped by salary gaps and by the institutional conditions that make the work harder in under-resourced settings. This is not a criticism of individual choices. It is a description of a structural incentive problem: the profession doesn't reward going where the need is greatest.
Districts have tried to address this by retraining teachers from adjacent subjects. The logic is practical and the intent is right, but teaching CS well requires more than content knowledge. It requires being able to connect the material to students' actual lives, to show a student from a particular neighborhood what a career in IT infrastructure or cybersecurity or data analysis could realistically look like for someone with their background, their resources, and their starting point. A history teacher who covered Python syntax in a summer program cannot necessarily do that work, and asking them to is something different from building a pipeline of capable CS educators into the communities that need them.
Chicago offers a concrete data point. Programs funded by the CME Group Foundation, targeting students in underserved areas of the city through out-of-school computer science offerings, found that 90 percent of participating students increased proficiency in CS or STEM, and 70 percent expressed interest in STEM careers. These weren't students who lacked ability. They were students who lacked structured engagement with the subject, delivered by people who understood both the content and the context. When that combination existed, the outcomes followed. The programs didn't replicate at scale because out-of-school funding is finite and inconsistent, but they demonstrated clearly that the ceiling was not where many assumed it was.
There's a version of this conversation that tends to end with devices. Schools distribute laptops, communities receive hotspot access, and the assumption, stated or implicit, is that access to hardware closes something.
The pandemic tested this at scale, faster than any deliberate policy could have. Millions of students who hadn't previously had home computers received them. The infrastructure gap narrowed in months. And the research that followed told a more complicated story.
Digital Promise published findings in 2024 showing that students from historically excluded communities used digital tools differently than their higher-achieving peers. Not because of aptitude, but because of what they had been taught to do with them. Students without strong prior instruction gravitated toward passive features: text-to-speech, basic navigation. Students with more robust educational backgrounds used tools actively and productively. The device was in both students' hands. The gap was in how they understood the device as something you use to accomplish something, rather than something that does things for you.
Pierce and Cleary's 2024 study in PLOS ONE made the broader argument: without equitable access to skilled instruction in purposeful technology use, the societal benefits of digital integration are not uniformly distributed. Communities that receive hardware without the pedagogical infrastructure to make it meaningful get less from it. In some cases the gap between them and better-resourced communities actually grows, because the better-resourced communities are receiving the hardware and the instruction together.
Providing connectivity is not providing education. These are related problems and they require different solutions.
The Stanford Center for Racial Justice's 2024 analysis found that underserved populations face elevated risk of falling behind as AI becomes more central to economic participation. The phrase "falling behind" understates what's at stake in a labor market where AI is not just a tool but a dividing line between roles that command a premium and roles that don't.
Students who receive strong foundational technology and cybersecurity education enter that labor market with options. They can pursue roles directly in security, infrastructure, or data. They can enter non-technical fields with a level of technology fluency that makes them more valuable and more adaptable. They understand systems in a way that allows them to interrogate and question them, not just use them. The NIST NICE Workforce Framework for Cybersecurity identifies dozens of distinct professional roles, many accessible without a four-year degree, that are reachable from a strong high school and community college foundation. Reachable, if the foundation was built.
For students who received a laptop and a computer literacy course, those pathways are open in theory and effectively closed in practice.
The 2024 National Educational Technology Plan, released by the U.S. Department of Education, named three divides worth closing: access, design, and use. The access divide gets the attention and the budget. The design divide and the use divide have received considerably less. The design question is whether technology is integrated into instruction in ways that produce actual learning rather than surface engagement. The use question is whether students develop genuine competency with digital tools rather than functional familiarity. Both require skilled teachers, meaningful curriculum, and institutional seriousness about what the subject is for.
Closing the design and use divides in underserved communities requires specific things. Curriculum connected to reachable careers, not abstract computing concepts. Instructors with real-world grounding in what they teach. Assessment that measures what students can actually do, not whether they completed a module. Institutional commitment from school systems, workforce boards, and community organizations to treat technology education as central rather than supplemental.
Those requirements are more expensive and more complicated than a device procurement or a one-day professional development session. They demand sustained attention in places where sustained attention is hard to maintain, partly because funding is project-based and grant cycles end, and partly because the organizations best positioned to do this work are often the most stretched.
Continuing to discuss the skills gap as a hiring and certification problem, while the pipeline deficit compounds, doesn't get less expensive over time. It gets more expensive, in the form of organizations that cannot fill critical roles, communities whose graduates enter a technology economy without the preparation to participate in its upper tiers, and a workforce gap that the ISC2 data shows is already growing faster than the workforce itself.
The classroom that was never built has a cost. We are paying it now, and the payment will be higher if the structural problem stays where it is.
AshTechWisdom supports schools, nonprofits, and workforce programs with IT, cybersecurity, and EdTech built for the organizations that need it most.
Explore ATW Schools →RELATED ARTICLES