The Biden-Harris administration has released the four-pillared National Cyber Workforce and Education Strategy to cultivate the United States’ cyber workforce.

Intended to provide pathways for Americans pursuing a career in cyber, the plan is informed by three guiding imperatives: leverage adaptable ecosystems to effect change at scale, enable the lifelong development of cyber skills and grow and enhance the cyber workforce through improving diversity and inclusion, the White House shared on Monday.

To lay the foundation for success in an increasingly cyber-dominant world, the first pillar of the strategy aims to provide cyber-related educational opportunities for any interested individual while encouraging cyber skills development and cyber careers.

In preparation for the long-term, the plan also intends to create stronger ecosystems for cyber education across an array of educational levels and focus areas, including K-12 education, colleges and universities and technical schools. In doing so, the Biden-Harris administration plans to invest in educators and cyber education systems while making cyber education and training more accessible and affordable.

Expanding and improving the national cyber workforce is a top priority, and to achieve this goal, the White House will work with various stakeholders, implement a skills-based recruitment and development approach and boost the accessibility of cyber jobs for all Americans, including underserved and underrepresented groups.

Federal workers are a major part of the U.S. cyber ecosystem, and strengthening this segment of the cyber workforce represents the fourth pillar of the strategy. To bolster public sector cyber talent, the Biden-Harris administration intends to promote the benefits of public sector careers, minimize hiring and onboarding barriers, facilitate government collaboration and foster a diverse cyber workforce.

National security contractor Peraton, which has been heavily involved in workforce development on the industry side of the cyber ecosystem, endorsed this strategy.

In a statement released on Monday, Peraton Chief Communications and Engagement Officer Matt McQueen cited the company’s CybHER program, a summer camp for middle school girls with an interest in STEM, as one of Peraton’s efforts to expand the cyber workforce.

“These strategic investments are approaching maturity at a time when national security is faced with a zenith of challenges,” he said.

“We look forward to working with the federal government, industry partners, academia and other stakeholders to close the workforce gap and maintain the United States’ dominance in cybersecurity,” added Scott Cooper, vice president of strategic advocacy at Peraton.

The National Security Agency, Cybersecurity and Infrastructure Security Agency and the Australian Signals Directorate’s Australian Cyber Security Center have released a joint cybersecurity advisory warning web application developers and vendors against insecure direct object reference vulnerabilities.

The advisory, titled “Preventing Web Application Access Control Abuse,” describes IDOR vulnerabilities as access control vulnerabilities enabling malicious actors to bypass access control in web applications deployed on-premises or in the cloud to modify, delete or access sensitive data, NSA said Thursday.

“These vulnerabilities are frequently exploited by malicious actors in data breach incidents because they are common, hard to prevent outside the development process, and can be abused at scale,” according to the advisory.

To prevent malicious actors from exploiting IDOR, the guidelines suggest web application developers implement secure by design and default principles, adhere to secure coding practices, use automated code analysis and testing tools for conducting code reviews and testing and train personnel on secure software development.

End-user organizations ought to also apply software patches for web applications, configure applications to log and alert on tampering attempts and perform regular vulnerability scanning and penetration testing.