Digital Security Theater: Why the $1B Cyber RFQ Should Scare Every US Taxpayer

This past week, I held in my hands an active Request for Quotation (RFQ) from a primary U.S. federal agency—one of those familiar three-letter giants—preparing to deploy nearly $1 billion in cybersecurity training. And yet, as I read through the glossy language and broad claims, what struck me wasn’t ambition.

It was absence. Absent were the metrics. Absent was accountability. Absent was any mechanism to ensure this billion-dollar spend would yield tangible, measurable cybersecurity talent.

What’s being sold as national workforce transformation is, in reality, little more than theater—an elaborate performance of progress without the substance to secure it.

We’re on the brink of investing $1 billion into cybersecurity training without so much as a whisper about actual proficiency. No benchmarks. No outcomes. No accountability to Congress, the taxpayer, or national security.

We’ve dressed it up nicely, though. A shiny, inclusive promise to reskill the masses and inject thousands of new workers into the digital frontlines. TSA agents to cybersecurity analysts? Sure. Just sprinkle some PowerPoints and bootcamp badges on it and call it transformation.

Let’s be brutally honest: this isn’t workforce strategy—it’s workforce performance art!


🧠 Knowledge Alone Doesn’t Win Battles

Let’s make one thing unmistakably clear: training is not readiness. And mistaking the two isn’t just misguided—it’s reckless.

Completing a course doesn’t forge operational talent. Hanging a certificate on a wall doesn’t mean someone can protect the lifeblood of a nation’s infrastructure. Logging digital classroom hours is not a proxy for real-world execution.

But this RFQ? It’s built entirely on that illusion. It rewards participation over performance. Activity over achievement. It tracks time, not transformation.

And the most disconcerting truth? There’s no safeguard. No standard. No obligation to prove—beyond attendance—that a single participant can apply their “learning” in the chaos of a live-fire cybersecurity crisis.

This isn’t a strategy. It’s theater. Well-meaning, perhaps—but hollow.

It’s like handing out gym memberships and declaring we’ve trained Olympic champions. The optics may impress, but the foundation is brittle. What matters when the pressure’s on isn’t how many hours someone studied. It’s whether they can stand up and deliver when systems fail, when threats surge, and when every second counts.

And we’ve been here before. We’ve seen programs promise transformation and deliver paper.

But this time, it’s different—because the stakes are higher, and the tools are better. In this arena, performance isn’t optional. It’s everything!


🔎 The Skills Visibility Gap Is the Real National Threat

We don’t have a talent shortage—we have a full-spectrum visibility failure.

This isn’t about a lack of people. It’s about a lack of precision. We’re flying blind—allocating billions without a clear read on what capabilities exist within the workforce. Until the federal government mandates evidence-based workforce intelligence as a standard operating procedure, we’ll keep throwing dollars into the void, hoping impact emerges by accident. Spoiler: it won’t.

There is a better path. A smarter path. A governance-grade path. And it starts with the fundamental question every serious leader in national security, digital transformation, and public sector innovation should be asking:

“What skills do we have? What skills do we need? And where—exactly—are the gaps?”

This is not HR theater. This is mission-critical intelligence.

We call this systemic blind spot the Skills Assumption Conundrum—the all-too-common, high-risk belief that we understand workforce capability without ever validating it. And let’s be clear: this isn’t a theoretical concern. It’s an operational blindside. It compromises agility, bloats budgets, and renders strategy inert.

But here’s the unlock: we don’t need to guess anymore.

The SFIA framework—the Skills Framework for the Information Age—is the global standard for skills clarity. It’s vendor-agnostic, rigorously structured, and already embedded in the talent systems of the world’s most advanced economies. SFIA doesn’t measure attendance. It measures performance. It doesn’t matter how many courses were completed. It maps what someone can actually do in a role, in context, at scale.

Now picture the multiplier effect if this $1 billion federal investment was laser-focused on measurable capability uplift—not paper certifications, seat time, or legacy HR metrics that tell us nothing about real-world readiness.

This is how we shift from feel-good programs to force-multiplying systems. From training pipelines to transformation engines.

This isn’t a recommendation. It’s an imperative. And the playbook already exists. Let’s stop assuming. Let’s start assessing. Let’s get serious about workforce capability before we pretend we’re ready.


➡️ Dear DOGE: Here’s $1B of Waste You Can Cut Before Lunch

The Department of Government Efficiency says it’s hunting for $2 trillion in waste. Perfect. Let’s begin with the most obvious candidate: this $1 billion RFQ masquerading as a cybersecurity workforce solution.

What’s being proposed isn’t transformation—it’s inertia, rebranded. It’s a legacy procurement playbook dusted off, renamed, and reissued under the banner of progress.

It violates every principle this administration claims to stand for—accountability, operational excellence, and smarter spending in service of national security.

Let’s stop pretending otherwise!

This RFQ doesn’t build capacity. It builds cover. It’s a permission slip for mediocrity—funded at scale and shielded by patriotic language. There are no performance guarantees, skills validation, or operational accountability—just the illusion of readiness generated by activity reports and attendance records.

We’re fluent in the language of reform—“cyber resilience,” “talent acceleration,” “skills-first.” But if we’re honest, none of that is reflected in the deployed mechanism. We’re funding comfort: comfort for contractors, cover for leadership, and continuity for outdated systems that can’t withstand the pace of modern threats.

That’s not modernization. That’s bureaucracy in a new coat.

Department of Government Efficiency: If you’re serious about cutting waste, here’s your play: shut this down. Take the billion and invest it in systems that require proof of performance. In frameworks that distinguish learning from doing. In an infrastructure that demands evidence-based, objective verification before the celebration.

Because this isn’t a cybersecurity investment—it’s a $1B distraction.

And the truth is, we’re not short on money. We’re short on metrics. Short on standards. Short on the political will to say, “Show us what you can do—then we’ll pay.”

This isn’t low-hanging fruit. This is fruit on the ground, surrounded by cameras pretending it’s still in the tree.

Cut it. Reclaim it. Rebuild it into something worthy of the mission.


🛫 From TSA to SOC: The Pipeline Fallacy

How often have you landed in a training session that left you entirely out of your depth or bored senseless by content you mastered years ago? It’s a universal frustration—misplaced learners in misaligned programs, sentenced to hours of irrelevance. Time squandered. Momentum lost. Budgets burned. No one wins. Not the trainee. Not the team. Not the mission.

Now imagine that dysfunction at scale—applied to national cybersecurity infrastructure.

The headline sounds noble: reskill TSA agents and others with no technical foundation into cybersecurity operatives. The optics? Inspirational. The execution? Alarming.

Let’s be clear: not like this. Not without rigorous, evidence-driven capability assessments that ensure individuals are ready to begin the journey. Not without contextualized, role-specific development frameworks that evolve with the threat landscape. Not without persistent, embedded support systems to translate learning into mastery. Not without defensible proof that someone can perform when it counts.

Cyber isn’t a vocabulary lesson, it’s a zero-margin-for-error operating environment. It’s real-time triage of digital warfare, safeguarding critical infrastructure from adversaries who do not issue second chances.

This isn’t a “laptop and a dream” initiative. This is mission-critical national defense.

Reskilling is honorable. It should be applauded—but not confused with operational readiness. Conflating the two isn’t just misguided—it’s dangerous. It turns workforce strategy into feel-good theater while leaving systems exposed and frontline teams unsupported.

If we’re serious about transformation, let’s architect real pipelines built on clarity, competence, and continuity. Let’s stop selling inspiration and start delivering infrastructure because this isn’t about hopes. It’s about hardwired, high-stakes performance.

The question isn’t, “Can somoeone learn?” The question is, “Can they perform?” And when national defense is on the line, that distinction is everything.


🚨The U.S. Federal Digital Workforce Manifesto

We are not just entering a new era—we are standing at the helm of it.

The convergence of AI, Web3, quantum computing, and next-gen cybersecurity has created a once-in-a-generation inflection point. And while the world watches, the United States must do more than keep pace—we must define the pace.

This isn’t about programs. It’s about power. This isn’t about effort. It’s about evidence. This isn’t about presence. It’s about performance.


🔍 1. No Capability Assumed. All Capability Proven.

Every federally funded digital talent initiative must begin with a skills audit—non-negotiable, data-driven, and diagnostically precise. No more guesswork. No more generic qualifications.

Only verified, validated, real-world capability from day one.


🎯 2. Training Must Be Targeted, Tactical, and Tracked

Training is not a checkbox. It is a mission-critical investment—and must be treated with surgical intent:

🎯 Purposeful – Rooted in live-role requirements and emerging threat environments.

🎯 Personalized – Informed by individualized gap analysis, not blanket curricula.

🎯 Performance-validated – Measured not by presence but proficiency and readiness under pressure.


💰 3. No More Funding by Attendance—Only by Achievement

Let’s stop rewarding seat time. Let’s start funding outcomes.

💰 If you can’t measure what changed, don’t write the check.

💰 If you can’t show skill uplift, don’t invoice for progress.

💰 Tie every dollar to skills closed, capabilities proven, and mission readiness confirmed.


🛡️ 4. Every Dollar Must Strengthen National Digital Readiness

Cyber is not a sector—it is our operational backbone.

🛡️ Every program must align with national priorities, security imperatives, and the velocity of real-world transformation.

🛡️ Every initiative must move beyond “access” and deliver advantage—in speed, scale, and strategic capacity.

🛡️ Every outcome must serve the mission—not just the metric.


⚡ This Is the Evidence-Based Accountability Era

We call on every agency, every training vendor, every workforce architect, and every federal leader to adopt this manifesto—not as a suggestion, but as a standard.

America cannot afford another billion spent on busyness. We need precision. Proof. Performance. And we need it now.

This is how we move from training theater to transformation architecture. This is how we operationalize readiness. This is how we lead in Web3, AI, quantum—and everything beyond.

🛠️ Train with clarity. Measure with rigor. Fund with purpose.

📈 The future belongs to the capable.

🔥 Let’s build them.

AUTHOR NOTE: Reproduced with thanks to John Kleist III, Chief Growth and Alliances Officer for SkillsTX and author of Digital Talent Strategies, a popular newsletter on LinkedIn.  John is a LinkedIn “Top Voice” and a Talent Management Revolutionary, Spearheading Skills-Based Digital Talent Strategies with SkillsTX Talent eXperience Skills Intelligence and the #SFIA Framework | A.K.A. #ThatSFIAGuy | Let’s Unlock Your #PassionForPotential TOGETHER.