Making a difference across the Sunshine State
The 2024 2025 Annual
Impact Report
2025 USF Brick-by-Brick Camp
The USF CyberHerd at the SECCDC
Sunshine Cyber Con 2025
What did Cyber Florida do last year?
beep boop beep boop
You Know we’re all about Research, Education & Outreach!
Step inside & I’ll tell you all about it!
beep boop You da
Going Big!
The Cyber Florida team is proud of everything we accomplished in Fiscal Year 2024-2025 - but don’t worry, we’re not letting it go to our heads (well... maybe I am). For the rest of the team, it’s just another day of building Florida’s cyber future.
Executive Summary
What did we do during Fiscal Year 2024-2025? Cyber Florida at USF continued to expand its statewide, national, and global impact through innovative programs and strategic partnerships. The Sunshine Cyber Conference brought together experts, educators, and practitioners from across the cybersecurity ecosystem. The second annual CyberLaunch competition engaged high school students statewide, sparking early interest in cybersecurity careers. Our Security Operations Center Apprentice Program (SOCAP) deepened collaboration with both internal teams and external partners, creating valuable real-world training opportunities for students. The Aligned Realistic Cyberattack Simulation (ARCS) Range served as a cutting-edge network defense training resource for Florida’s public-sector workforce. Cyber Florida hosted the Red Dragon Rising II symposium, fostering global dialogue on emerging cyber threats and cooperation. These details and more inside.
FUN Facts FUN Facts
• Sunshine Cyber Conference gathered more than 600 registrants
• The second annual CyberLaunch competition attracted more than 1,000 students from over 50 school districts
• The ARCS Range reached more than 1,000 users
• Tens of thousands of Florida students used Operation K12 resources
• The No Password Required podcast surpassed 20,000 downloads!
Dear Cyber Florida Community,
I am pleased to share the 2024–2025 Annual Impact Report, which reflects another year of meaningful progress towards making Florida the leading state in cybersecurity. Over the past year, we continued to drive innovation, expand opportunity, and strengthen resilience across the state, furthering our mission to position Florida as a national leader in cybersecurity education, research, and workforce development.
Our focus continues to be on building and preparing the Cyber Workforce. CyberLaunch and the Security Operations Center Apprentice Program (SOCAP) continue bridging classroom learning with real-world experience. At the same time, our expanded Operation K12 curriculum empowers Florida’s youth with foundational cybersecurity awareness by providing K-12 teachers with access to and training on the tools and materials to establish and run cybersecurity programs. Through targeted programs like CyberWorks, we are helping career changers fill the workforce shortage gap by creating access to education and careers in cybersecurity.
Cyber Florida’s resilience efforts have grown deeper and more strategic, aligning resources and building communities to address cybersecurity’s most pressing challenges. Events like the Sunshine Cyber Conference and Red Dragon Rising II symposium are vital convenings for industry, government, and academia. Our public-sector and critical infrastructure preparation initiatives—FirstLine and the Critical Infrastructure Program—continue to expand and impact all 67 counties in Florida.
This year also marked significant advancements in faculty research and collaboration. Through structured support and dedicated engagement, we helped secure prestigious awards, enabling cutting-edge research that addresses today’s most urgent cybersecurity opportunities. Our workshops and research development efforts continue to catalyze high-impact proposals shaping the national cyber resilience dialogue.
Through continued support from the State Legislature, the State University System Board of Governors, and the University of South Florida, our financial resources remain strong. This year, investments secured include federal grants to support expanded services and no-cost resources for Florida’s public-sector organizations.
Looking to the future, I am excited by the opportunities and challenges ahead. As Artificial Intelligence continues to increase its impact, I am confident that Cyber Florida will continue at the forefront of planning, preparing, and responding to threats via cyberspace. Fiscal Year 2025–2026 promises continued innovation, collaboration, and impact, particularly through our partnership with USF’s Bellini College of AI, Cybersecurity, and Computing. Thank you for your continued support and partnership as we work together to secure Florida’s digital future.
Sincerely,
Ernest Ferraresso Senior Director
I approve this message and not just because he approved my purchase request...
Ernie Ferraresso Senior Director
Cyber Florida
About Us
The Florida Center for Cybersecurity at the University of South Florida, also known as Cyber Florida at USF, experienced significant growth and accomplishments during Fiscal Year 2024-2025 while focusing on its core pillars of research, education, and outreach. The following report highlights the center’s major initiatives and outcomes for FY2024-2025, including detailed information on the following projects and programs:
• The Sunshine Cyber Conference returned with an outstanding speaker line up, sponsor support, and exhibitor participation for nearly 600 registrants.
• The 2nd annual CyberLaunch high school cyber competition attracted excellent sponsor support, more than 1,000 participants, and 200 educators.
The nation’s first statewide critical infrastructure cybersecurity risk assessment program for public and private-sector organizations reached more than 700 users.
• Operation K12 reached tens of thousands of students through innovative new programming and events for students and teachers.
• The Security Operations Center Apprentice Program enhanced degree programs by providing real-world, hands-on cybersecurity experience through engagement with internal and external organizations.
• The CyberWorks rapid career training program helped veterans, first responders, and others retrain for new careers in cybersecurity.
• Cyber Florida’s FirstLine statewide training programs reached government employees in all 67 counties. Logging more than 20,300 non-mandatory course registrations represents the beginning of a cultural shift toward cyber resilience in every layer of government.
• The Aligned Realistic Cyberattack Simulation (ARCS) Range surpassed 1,000 users.
• An evening symposium, Red Dragon Rising II, brought military and academic scholars together for a candid discussion of China’s rise to power in cyberspace with leading global experts.
• Various outreach initiatives, from podcasts to workshops, supported these and other projects and the overall Cyber Florida mission.
Second-place winner in the Advanced Division of CyberLaunch, Bi Trinh of East River High School, shows off his creative costume-making skills while navigating the T-shirt area.
This one is a real Renaissance Man!
RESEARCH & INNOVATION:
LEADING CYBERSECURITY COLLABORATION
Collaborative Momentum in Research and Innovation
In 2024-2025, Cyber Florida continued its formal process for USF faculty to solicit support for high-impact research proposals, meaning proposals from principal investigators (PIs) that are either (a) collaborative and large-scale (> $2M) or (b) CAREER and YIP proposals from junior faculty. Cyber Florida funding supported:
• Grant writers to work on proposal preparation
• Peer review by established experts
Travel support for face-to-face meetings toward team build-up and project planning
• Travel support to visit federal funding agencies and meet with program managers
• Hiring mentors to work with junior faculty for CAREER and YIP proposal development
These services were leveraged to support the following proposals on behalf of USF:
• CAREER: Creating Augmented Reality Headset Experiences for Children (CARE4C) – NSF CAREER proposal from Dr. Julia Woodward – Cyber Florida provided external reviewers for this proposal – Not funded but will be resubmitted.
• NSF CAREER: New Cryptographic Primitives for Rank-Metric Code Based Cryptography using Semifields – Lukas Koelsch (CAS) – Mentor support for proposal – under submission.
• Leveraging Research-Practitioner Partnerships to support High School Computer Science Teachers’ Professional Development and the Number of Students with CS industry Certifications – NSF Proposal – Ruthmae Sears (EDU) – Cyber Florida provided grant writing services – Not funded.
• CAREER: Incorporating Novel Contextual Domain-Knowledge Inference to Enable Interpretable Pathogenesis Modeling – Trung Le (ENG) – Cyber Florida provided peer review services – Not funded but will be resubmitted.
• SMART-AI: Smart Manufacturing Automation Resilience Through Artificial Intelligence – Nancy El-Sayed (ENG) – Cyber Forida will partner on this NIST proposal that is under review.
• Social Network Websites, Kremlin Propaganda, and Internet Usage Patterns against Russians – DoD funded project is supported by Cyber Florida for additional data collection.
AI Chatbot against Cybercrimes – Seed funding provided to PIs (George Burruss, Loni Hagen, Ly Dinh, and Lingyao Li) from CAS and the School of Information for computing hardware for data analysis for a future larger-scale federal proposal.
In collaboration with the USF Research & Innovation office, Cyber Florida is planning another cybersecurity R&D think tank in Fall 2025 for focused discussions on proposal development support, partnerships, and outreach efforts for our faculty.
Cyber Florida is executing its two-year $200,000 NIST project titled “Sustainable, Hands-on and Multi-disciplinary Cybersecurity Skills Training to Meet Workforce Needs of Critical Infrastructure Sectors in Florida.” The broad overarching goal of the project is to understand entry-level cybersecurity workforce gaps in critical infrastructure sectors in Florida and close them via a focused, hands-on 15-week/ semester-long internship program focusing on critical infrastructure/industrial control systems security. The students coming out of this program are expected to be better equipped to fill entry-level workforce positions. classrooms to control rooms, Cyber Florida is training tomorrow’s defenders of Florida’s critical infrastructure.
The Deputy Director of Solutions & Technology, Ryan Irving, works with Cyber Florida’s SOCAP students on the NIST RAMPS curriculum.
To support this initiative, Cyber Florida first held multiple interviews/engagements with cybersecurity professionals at four Florida local entities, all centered on critical infrastructure: Seminole-Electric, Talquin Electric Cooperative, Tampa Airport, and Tampa General Hospital. These interviews helped the team identify critical workforce gaps at entry-level cybersecurity professions in critical infrastructure sectors (including lack of ICS skills, lack of knowledge of ICS protocols, inexperience in cybersecurity awareness, and need for certifications to identify better candidates).
From there, Cyber Florida partnered with several industry education and training leaders to implement a focused and hands-on cybersecurity internship program covering blue-team training, industrial control systems security training, and SCADA training. Students earn certifications through this program, such as a Global Industrial Cyber Security Professional Certification (GICSP) certificate granted by the SANS Institute.
The local entities have engaged with students, getting to know their skills and answering their questions regarding the entry-level cybersecurity skills needed (to create job opportunities). Additionally, students have engaged in live incident response experiments and the creation of threat advisory reports during their internship program. The first student cohort finished in the spring of 2025.
Finally, Cyber Florida is developing strategies to make the outcomes of these student projects—such as survey results, identified knowledge gaps, and training materials—available to the project’s faculty leaders, enabling them to leverage these resources in crafting larger-scale federal proposals.
Cyber Florida is preparing to submit more proposals soon, with an active working group engaged to lead these efforts. Current proposals that are under review include the following:
• US Army STEM Consortium, in partnership with the USF Insitute of Applied Engineering, from the US ARMY
• Research and Development on Evaluating and Adapting Information Technology (IT) Cyber Tools to OT Environments, in partnership with the McCrary Institute at Auburn University, for the US Department of Energy
• Tensor Memory-augmented Neural Networks for AI Safety Systems from the AI Safety Fund
Cyber Florida helps startups turn sparks into realworld solutions.
Accelerating Innovation with phaseZERO
Cyber Florida at USF launched the phaseZERO Innovation Incubator to empower Florida-based cybersecurity startups with the resources they need to move from concept to market. Modeled after federal SBIR/STTR programs and aligned with state initiatives like the Florida High-Tech Corridor and I-Corps, phaseZERO provides early-stage companies with $60,000 in seed funding, strategic mentorship, and access to commercialization resources.
In its 2024–2025 cycle, four startups were selected: AI-Guardian Lab, CyberMirage, Stablein Solutions, and TrustConnect. These ventures are advancing breakthrough solutions across the cybersecurity landscape—from real-time AI systems that protect teens from online trafficking to next-gen anti-web scraping technologies, secure AI process automation, and personalized cybersecurity training platforms. Three of the four awardees have strong ties to the University of South Florida, further demonstrating the university’s role as a hub for cybersecurity innovation.
By reducing barriers to commercialization and supporting visionary entrepreneurs, phaseZERO plays a vital role in strengthening Florida’s cybersecurity ecosystem and contributing to the state’s growing reputation as a technology and innovation leader.
Phase:ZERO Impact Testimonial
How a Pilot Program Awardee Created Impact — StudySpaces
Receiving a seed fund grant from Cyber Florida at USF “has been a game-changer for StudySpaces,” says co-founder Axhens “Jesse” Mara. Along with co-founder Jamshidbek “Jam” Mirzakhalov, Mara launched StudySpaces with the goal of improving cybersecurity education through innovative, hands-on learning tools. The two met while studying at the University of South Florida, where they both earned their degrees and developed a shared passion for advancing cybersecurity training.
The funding has accelerated StudySpaces’ development, refined its platform, and brought its vision to life. This support has been transformative for a growing startup, allowing them to compete with larger industry players and expand their reach.
Looking ahead, the StudySpaces team plans to enhance its platform’s AI capabilities and expand its content engine to support more learning materials. They aim to equip more individuals with the cybersecurity skills needed to succeed by continually improving testing and training features.
For those looking to make an impact in cybersecurity education and research, the StudySpaces team emphasizes adaptability. “Focus on building tools that address real-world needs,” said Mara. “Listen to feedback, test your ideas continuously, and embrace new approaches. Practical, hands-on learning makes the biggest difference.”
Reflecting on the effect of Cyber Florida’s support, Mara shared, “The grant turned our vision into reality. StudySpaces is already helping people learn and gain skills more effectively by combining adaptive curriculum generation, testing, and tutoring. We are proud of what we’ve built and excited for the future as we continue to evolve and make a real impact.”
This is just the beginning for StudySpaces. With ongoing innovation and the support of programs like phaseZERO, the team is excited to refine their platform further and expand their influence on cybersecurity education.
From Risk to Readiness: Cyber Florida’s Critical Infrastructure Program
Over the past three years, Florida has led the nation in establishing a pioneering Critical Infrastructure Program (CIP) , grounded in findings from the 2023 Florida Critical Infrastructure Risk Assessment (CIRA) Report. This initiative, supported by Cyber Florida, delivered more than 700 no-cost risk assessments across 15 of 16 critical infrastructure sectors, covering all Florida counties.
The program introduced a custom Florida Cyber Risk Assessment tool, developed in collaboration with Idaho National Lab, which has saved sectors significant cost and time by eliminating reliance on third-party vendors. Key advancements include the adoption of the NIST Cybersecurity Framework (CSF) 2.0 in alignment with Florida Statute 282 and the integration of the MS-ISAC’s Nationwide Cybersecurity Review maturity index.
Additional statewide support tools include no-cost incident response templates, decision-making matrices, an exercise situation manual, and joint training with Florida’s Division of Emergency Management and the Florida Digital Service.
In tandem, a series of statewide policy documents and intelligence reports were produced to guide strategic planning and risk management. These include a Statewide CIRA Report with legislative recommendations, a Florida CI Visualization Dashboard tracking sector trends, a CI Workforce Development Report, and a Maturity Model Policy Report. Intelligence products such as the Florida Critical Infrastructure Intelligence Report, Election Cybersecurity Report, Ransomware Intelligence Reports, and the 2025 Artificial Intelligence Report offer sector-specific insights and enhance situational awareness.
With over 40,000 critical infrastructure contacts compiled statewide, Florida now has a robust risk mitigation and consequence management system, further reinforced by weekly CI situational awareness bulletins and a dynamic framework for allocating resources based on assessed risk.
CIP Testimonials
“The After-Action Review form will definitely be beneficial to keep track of what happened. Having one checklist that can work for all types of events is a nice touch.”
— City of North Port CISO
Look!
They really said these nice things about us...
We really appreciate that...
“Cyber Florida and the Florida Association of Counties work tirelessly to support our community partners with critical cybersecurity resources, workshops, and enhancements. We appreciate their leadership and support, and we look forward to continued collaboration to strengthen our community sectors.”
— Virginia “Ginger” Delegal Executive Director Florida Association of Counties
Cyber Bulls-i
A powerful new addition is being incorporated into the CIP program. The Cyber Bulls-i Mapping Tool supports organizations that complete the FCRA by providing:
• A tailored report aligned with NIST CSF and ransomware readiness
• A customized roadmap to free resources from trusted partners like USF and state agencies
Ongoing support to close security gaps and strengthen resilience
Together, these efforts position Florida as a national model for proactive, data-driven cyber risk management and critical infrastructure protection.
Cyber Florida Launches Training Program to Strengthen Florida’s Critical Infrastructure Cyber Workforce
This spring, Cyber Florida launched an ambitious two-year initiative to tackle cybersecurity workforce shortages across Florida’s critical infrastructure sectors, thanks to a $200,000 grant from the National Institute of Standards and Technology’s RAMPS Program. Informed by statewide industry input and guided by NIST’s updated NICE Framework, the project has already trained its first student cohort through a 14-week, hands-on curriculum that blends foundational knowledge with real-world cyber defense skills.
Summer TTX Series Builds Local Cyber Resilience
With support from a Fortifying Florida grant provided by the Florida Division of Emergency Management and FEMA, Cyber Florida conducted a six-city Election Infrastructure Cybersecurity Tabletop Exercise (TTX) “Road Trip” as part of its FirstLine program. Held throughout summer 2025, the workshops brought together election officials, IT teams, and law enforcement to strengthen real-world response capabilities through collaborative scenario-based training.
Critical Work
Critical Work Critical Work
With innovative tools, statewide training, and actionable insights, Cyber Florida is raising the bar on cybersecurity awareness helping to make Florida’s vital systems safer, smarter, and more resilient.
hang in there
EDUCATION
EXPANDING CYBERSECURITY TRAINING AND OPPORTUNITIES
Florida Focused, Future Ready: Operation K12 in Action
Cyber Florida’s effort to infuse cybersecurity awareness and career education throughout Florida’s public school system, known as Operation K12 or OpK12, continued to expand throughout the state, providing inspiration and access for Florida’s future cyber professionals.
OpK12 offers free teacher training, curriculum resources, activities, and a yearlong high school career preparation course, encouraging students to learn about good cybersecurity practices and consider cybersecurity a potential career path.
Additionally, the program provides resources such as a monthly newsletter to support teachers, monthly webinars for students and teachers, and a Cyber Florida Cisco Network Academy, which engaged 72 teachers and 1,500 students in a rigorous cybersecurity curriculum and activities. OpK12 supports 100% of Florida school districts through a tiered support system.
Notable successes include the Putts and PD event, which provided valuable professional development to teachers from over 20 school districts, along with a fun outing to Top Golf.
Additionally, OpK12 hosted a Leadership Skills Training, which also welcomed 13 students from Tampa Bay Tech High School. During this session, the students partnered with USF CyberHerd members to develop teamwork strategies for CTF competitions, learn how to leverage each other’s strengths, and build resourcefulness.
OpK12 continued to engage both teachers and students by leading professional study day sessions for Hillsborough County Public Schools (HCPS), hosting a teacher CTF, and participating in community events such as STEMTOBER Family Fest and Spring STEM Family Night.
In addition, OpK12 launched the Cyber Careers Revealed docuseries, spotlighting a range of cybersecurity roles across sectors—including Tampa International Airport, Tampa General Hospital, the Tampa Port Authority, Carlton Fields law firm, and the Lakeland Police Department Cybercrime Lab.
Operation K12 is turning curiosity into cyber confidence!
Thanks to OpK12’s partnership with Teaching Digital Natives, all Florida students can now access a free digital citizenship and cyber hygiene course, designed for grades 4-8.
The OpK12 team continued impactful initiatives like the Congressional App Challenge CTF Event, where more than 120 students competed and connected with industry professionals. Through partnerships with organizations such as USF Youth Experiences (YXP), OpK12 empowered young learners with essential cybersecurity skills, helping to build a more diverse and inclusive future workforce. Events like STEMapalooza, which welcomed more than 1,800 scouts and family members, and Bulls Family Fest, which showcased cybersecurity to over 7,000 attendees, exemplify the reach of this work.
This summer, YXP camps saw record enrollment, with more than 1,000 students participating. The offerings included specialized cybersecurity camps for elementary, middle, and high school students and additional camps focused on coding, drones, and robotics.
Operation K12: In Their Words
“When I first started teaching, it was very difficult for me to give my students hands on exercises. And thankfully, because of Cyber Florida, we were able to have the cyber range. So every student, every lesson that we have, they’re able to go in and actually practice those same skills using a Cyber Florida cyber range.”
Cyber Florida’s got a passion for education and it shows! Operation K12 is helping Florida’s students level up their cyber skills!
— Jason Felt
Cybersecurity Teacher Countryside High School in Pinellas County
“Cyber Florida’s Operation K12 program has expanded cybersecurity programs and helped increase enrollment throughout Florida through innovative approaches and collaborative efforts. The program has strengthened cybersecurity educators through professional learning, cultivated digitally resilient citizens, and helped lay the foundation for a more secure cyber future.”
— Dr. Candi Ring Assistant Director K12 Cybersecurity Education
Collaborative Effort Nets Successful High School Competition
Cyber Florida and the Florida Center for Instructional Technology proudly hosted the second annual CyberLaunch Competition in Orlando, Florida. The event marked a resounding success, with more than 900 students from over 100 schools and over 50 districts uniting to test their cybersecurity skills, overcome new challenges, and network with potential employers in the cyber industry.
CyberLaunch aimed to introduce high school students to the universe of cybersecurity careers through the fun of a statewide competition. The event provided a safe, cost-effective, and low-pressure environment for students to showcase their abilities, collaborate as teams, and gain valuable experience in the thrilling world of cybersecurity competitions.
The event benefited from significant private and public-sector support. Nearly 20 organizations provided financial support and/or exhibited at the event to talk with students about cyber career paths. The organizations represented were AFCEA Central Florida, Bluum, Certification Partners, CompTIA, EC-Council, Knowledge Pillars, Prodigy Learning, SOCOM, Teaching Digital Natives, and USF Youth Experiences.
CyberLaunch Student Testimonials
“I’m considering doing red team hacking in the future. Hopefully, connecting with these companies here. I see HP and all these wonderful companies here. I hope to work in government, like the CIA or the FBI, hacking.”
“This is really fun!”
“I definitely learned some strategies and how to get better in the industry...I feel like the hands-on is so important.”
The FirstLine Approach to Cybersecurity Public Sector Training and Education
In just over a year, Cyber Florida’s FirstLine Program has transformed how Florida’s public-sector workforce approaches cybersecurity. Backed by legislation (HB5001, Section 2944B) and powered through a network of dedicated partners and educators, FirstLine has reached all 67 counties, logging more than 20,300 non-mandatory course registrations from state and local government employees across Florida. This milestone is more than a number—it represents the beginning of a cultural shift toward cyber resilience in every layer of government.
FirstLine’s vision has always been clear: cybersecurity isn’t just a technical issue—it’s a people issue. That’s why the program was intentionally built to serve everyone from frontline clerks to IT professionals, and from emergency managers to city leaders. The goal is to make meaningful training accessible, practical, and impactful—at no cost to the agencies or the individuals who serve them.
Florida’s universities aren’t just keeping pace with cyber change, they’re setting the standard.
At the core of FirstLine’s delivery are Florida’s public universities, which have stepped up to meet the need:
• The University of South Florida (USF) continues to lead with the Cybersecurity Awareness Certificate. This foundational offering has become a trusted resource for municipalities working to meet state guidance and raise baseline awareness among their teams.
The University of West Florida (UWF) has taken technical training to new levels, delivering CompTIA, CISSP, and other high-demand certifications through bootcamps that consistently fill to capacity.
• At the leadership level, Florida International University (FIU) is equipping Florida’s public-sector managers and decision-makers through its Cyber Leadership and Strategy Program, with over 450 executives trained to date.
Beyond coursework, FirstLine has also tackled one of the most critical fronts in public-sector cyber readiness: certification. By bundling hands-on instruction, materials, and testing costs, the program has removed common barriers to advancement. Participants in certifications like GSLC, ISC2-CC, and
Pinellas County Tabletop Exercise
ISACA AI Fundamentals have achieved pass rates exceeding 80%, confirming that the investment is delivering measurable returns in workforce development.
But FirstLine is not just about education, it’s about preparedness. That’s why the program hosts hands-on election infrastructure cybersecurity tabletop exercises (TTXs) in partnership with Norwich University Applied Research Institutes (NUARI). These full-day events simulate high-stakes cyber incidents, bringing together participants from IT, law enforcement, elections, and emergency management to test their response coordination. More than 190 personnel from 34 counties have participated in these collaborative exercises, strengthening local readiness in the face of evolving threats.
The team’s outreach has taken them from conference halls to county commission meetings, including high-impact appearances at FLGISA, Pasco County’s Cyber Seminar, FAC’s Legislative Conference, and the MDCLC Best Practices Summit. Through these events, the FirstLine team has heard directly from local leaders and IT directors about what’s working and where gaps remain.
As the program enters its second year, its mission remains focused on deepening engagement, increasing access, and helping Florida’s public agencies lead by example in cybersecurity preparedness.
FirstLine Testimonials
“We’ve built a model that adapts to Florida’s diverse public workforce. FirstLine isn’t just about courses—it’s about collaboration, practical impact, and long-term resilience in every corner of the state.”
— Joshua Wethington Assistant Program Manager Cyber Florida
“It’s not just about meeting the requirements of the legislation. It’s about making sure that our tacticians, our practitioners, our managers, and our leaders understand the risks that we face in this new cyber world. As these risks continue to evolve, as they continue to use new tactics, we’ve got to have the resources, both from a technical and from a leadership perspective, to be able to prepare for, address, and respond to those risks. Cyber Florida is where that comes from.”
— Mike Andrews 2nd Vice President
Florida Local Government Information Systems Association (FLGISA)
“Our partnership with Cyber Florida is the next level for us. We’ve performed many tabletop exercises internally. With Cyber Florida, we’re able to have a third party come in and help us perform an exercise that’s providing a lot more value, bringing different scenarios and different points of view to the exercise.”
— Jeff Rohrs Pinellas County Chief Information Officer, Business Technology Services
From local governments to state agencies, FirstLine is helping Florida’s cyber defenders grow stronger together.
ARCS Range: Advancing Cybersecurity Readiness Across Florida
Cyber Florida continues to advance the development and delivery of the Aligned Realistic Cyberattack Simulation (ARCS) Range. This cutting-edge virtual environment supports increasingly sophisticated cybersecurity training exercises, strengthening Florida’s cyber defense capabilities. The ARCS team increased range capabilities this past year by adding new software to support a wider range of teams.
This state-of-the-art virtual training program has already served more than 1,030 users across 45 counties in Florida, providing comprehensive training for individuals and teams. Access to the ARCS Range is free to cyber incident response, law enforcement, IT, and cybersecurity personnel statewide.
Highlights of the year for the ARCS Range team include participation in the following activities:
• Led the Monroe County Cyber Wars event in the Florida Keys with several South Florida agencies
• Provided hands-on experiences at IITSEC and FLGISA conferences
Hosted range events for SOCAP students
• Provided range access for USF classes
CyberWorks Program Prepares 70 for High-Demand Cyber Roles
CyberWorks helps address our nation’s critical cyber workforce shortage by preparing career-changers for new roles as cyber defense analysts. This intensive 22-week program prepares learners to enter the cybersecurity workforce as Tier 1 Security Operations Center (SOC) Analysts through expert online instruction and hands-on learning.
Funding provided by the National Security Agency National Centers of Academic Excellence in Cybersecurity (NCAE-C) Workforce Development Program allows Cyber Florida to provide scholarships to learners to participate at no cost, making CyberWorks a life-changing opportunity for many participants.
In 2024-2025, Cyber Florida provided training and mentorship to two cohorts of 70 adult learners: 70 adult learners completed the Networking Fundamentals and Cyber Defense Fundamentals courses and received vouchers for their CompTIA Network+ and CompTIA Security+ certifications.
• Learners received one-on-one mentoring on career readiness topics, such as job interview preparation, resume writing and using AI to enhance one’s job search.
• Learners attended 20 professional development sessions featuring cybersecurity professionals and CyberWorks program alumni from a variety of roles and agencies, including ReliaQuest, JPMorgan Chase, GuidePoint Security, Rapid7, The Home Depot, Cyber Florida, FBI, and Tampa Police Department.
• CyberWorks learners attended Cyber Florida’s Sunshine Cyber Conference in February 2025 to facilitate networking as they pursue cybersecurity roles.
Sunshine Cyber Con 2025
Bob King’s Journey with CyberWorks: From Boots to Bytes
Robert “Bob” King, is a technical project manager for Northrop Grumman in Tampa, Florida, develops cyber and space capabilities supporting the Department of Defense. Before this role, he delivered data and intelligence solutions for Special Operations Command (SOCOM) at MacDill Air Force Base.
After serving as a U.S. Army officer, King sought a way to transition into cybersecurity. Through his professional network, he discovered Cyber Florida’s CyberWorks training program.
My friend Bob King is proof that CyberWorks is changing lives and shaping Florida’s future. After serving in the Army, Bob found his next mission through CyberWorks, gaining the hands-on skills that launched his cybersecurity career with Northrop Grumman.
“Cyber Florida stood out immediately as a perfect opportunity to combine my previous experience with relevant industry training to launch a new career,” King said.
He enrolled in the 12-week CyberWorks program—formerly New Skills for a New Fight—which provided hands-on experience in cybersecurity fundamentals. The curriculum covered the OSI model, cyber kill chain, malware analysis using virtual machines, and advanced persistent threat (APT) identification, along with practical labs that simulated real-world scenarios.
“The program delivers practical, job-ready training and bridges the gap between classroom theory and real-world application,” King noted.
The knowledge he gained has been instrumental in his role at Northrop Grumman. “I apply what I learned when planning projects, decomposing requirements, and conducting security impact analyses,” he said.
For those considering CyberWorks, King’s advice is simple: ask questions. “The staff is engaging, experienced, and dedicated to your success,” he said. “They keep the program current with industry trends and technologies to maximize student outcomes.”
He also encourages professionals to stay engaged in the cybersecurity community by joining organizations like ISC2 and AFCEA. “Networking and continued education are critical in this field,” he added. “The connections I’ve made through CyberWorks and professional associations have helped me stay current with emerging threats and technologies while continuing to grow as a leader.”
Cyber Florida’s CyberWorks program remains a launchpad for those seeking to build meaningful, future-ready careers in cybersecurity—offering not just technical skills but a strong sense of purpose and belonging in an evolving digital world.
Security Operations Center Apprentice Program (SOCAP): Building Tomorrow’s Cyber Workforce
Cyber Florida’s Security Operations Center Apprentice Program (SOCAP) continues to be a hands-on training ground for the next generation of cybersecurity professionals. This year, the SOCAP team included 20 student analysts—13 permanent and seven grant-funded—who managed 1,293 cybersecurity tickets. In addition to handling real-world threats, the team developed 13 threat advisories, with several more in the pipeline for release.
Demonstrating their growing expertise, the student analysts collectively earned 10 industry-recognized certifications, including:
• Security Blue Team Level 1 SOC Analyst – 8 students
• SANS GIAC Threat Intelligence – 1 student
• Microsoft SC-900 Security, Compliance, and Identity Fundamentals – 1 student
These certifications are critical stepping stones into cybersecurity, validating students’ knowledge and increasing their competitiveness in the job market.
SOCAP served as a powerful launchpad for careers. In 2024–2025:
Five students secured high-value internships at:
• Bank of America (Charlotte, NC)
• AWS (Houston, TX)
ReliaQuest (Tampa, FL)
• Tampa Electric Company (Tampa, FL)
Six students transitioned into full-time cybersecurity roles at:
• Rapid 7 (Tampa, FL)
• Cyber Florida (Tampa, FL)
Tampa General Hospital (Tampa, FL)
• Tampa Electric Company (Tampa, FL)
• Bank of America (Charlotte, NC)
• Google (Mandiant) (New York, NY)
SOCAP expanded its network by formalizing partnerships with Pinellas County and the Orange County Comptroller through new memoranda of understanding (MOUs). These collaborations extend the reach and impact of our cybersecurity services.
Additionally, Cyber Florida facilitated a unique partnership between Microsoft and USF, launching the Microsoft SOC Onboarding Program. Through this initiative, 12 students gained access to Microsoft’s cybersecurity learning platform, hands-on training, and opportunities to earn the SC-900 and SC-200 certifications.
The SOCAP’s reach extended through the CyberHub platform, which supported over 1,850 users from 20 K–12 schools and districts and five higher education institutions. This technology-enabled platform continues to serve as a vital resource for cybersecurity awareness and collaboration statewide. Congratulations are in order!
“SOCAP continues to be a hands-on training ground for the next generation of cybersecurity professionals.”
— Ryan Irving Security Operations Center Manager Cyber Florida
SOCAP leaders and students shared their knowledge and expertise at prominent events and forums throughout the year:
• Ryan Irving and Alessandro Lovadina presented at BSides Tampa 2025 on “How to Develop Cyber Personnel.”
• Ryan Irving traveled to Microsoft’s headquarters in NYC in March 2025 to preview emerging AI technology and participate in a cybersecurity roundtable.
• On March 20, 2025, Irving and Timothy Kircher were interviewed by Tech & Learning for an article on student-led SOCs, published on April 7, 2025.
Irving also delivered a presentation to a foreign delegation from Oman at CENTCOM/USF, covering SOC operations and digital forensics and incident response (DFIR).
• The SOCAP team conducted nine simulated incident response exercises on Cyber Florida’s ARCS range, drawing interest from universities, Women in Cybersecurity (WiCyS), and both public and private sector stakeholders.
Cyber Florida student analysts are also contributing to civic cybersecurity. In 2025:
• One student analyst and one SOC staff member supported a Pinellas County tabletop exercise focused on cyber investigations.
• Three student analysts and another staff member took part in a Miami-based election cybersecurity exercise, helping simulate and respond to potential threats to election infrastructure.
our SOCAP students crushed it this year! They tackled real-world cyber threats, earned certifications, and even landed some great internships and full-time jobs.
Erika Delvalle: From Apprentice to Advisor
After Erika Delvalle graduated from the University of South Florida in December, she quickly found employment working full-time as a cybersecurity advisor at Rapid7. Her path to this role was shaped in large part by Cyber Florida’s Security Operations Center Apprenticeship Program (SOCAP).
SOCAP gave Erika real-world experience, including writing monthly threat hunting reports for government agencies and working with tools like Splunk, CrowdStrike, and Recorded Future. “That experience gave me the confidence to write full reports and share them with external partners,” she said. “It showed me I could handle the technical side and clearly explain what I found.”
Now at Rapid7, Erika supports clients using tools like InsightIDR and InsightVM, while staying up to date with rapid product changes. “There’s a lot of learning involved. I watch videos, ask coworkers, and follow my curiosity to stay current.”
She credits SOCAP’s emphasis on foundational cybersecurity skills for making the transition smoother. “Most challenges I see are about getting the basics right,” she noted, highlighting issues like phishing, multi-factor authentication, and user awareness.
To aspiring professionals, Erika’s advice is to stay curious, take on new opportunities, and remember the human side of cybersecurity. “Building personal connections goes a long way, especially when solving technical problems.”
Today, Erika is focused on growing her skills in defense and incident response, while working toward certifications from CISA and SANS. And when she’s off the clock? You might find her exploring Florida on her motorcycle, scouting out the best food spots along the way.
Erika’s journey from SOCAP apprentice to trusted advisor reflects the impact of Cyber Florida’s investment in real-world training and career readiness.
Yousef Blassy: From SOCAP to Google
When Yousef Blassy walks into Google’s NYC offices each morning as an Offensive Security Consultant, he’s living out a dream sparked by curiosity, grit, and Cyber Florida’s Security Operations Center Apprentice Program (SOCAP).
A recent graduate of SOCAP, Yousef now works on Google’s internal consulting team, testing environments for vulnerabilities, identifying security gaps, and staying ahead of potential threats. Outside of client engagements, he focuses on team collaboration, research, and ongoing technical development.
Yousef credits SOCAP with helping him build critical skills, especially in technical writing. “Penetration test reports can be long and time-consuming,” he said. “Writing detailed documentation in SOCAP directly prepared me for the communication required in my current role.”
Drawn early to offensive security, Yousef found strong support in SOCAP for pursuing his red teaming interests, including a voucher for the Practical Junior Penetration Tester (PJPT) certification. Earning that credential played a key role in his successful interview with Google.
Transitioning to full-time consulting came with new demands. “There’s less handholding,” he said. “You must deliver results, even if the findings are minimal.” He learned to thrive under pressure and sharpened his ability to solve problems independently.
His advice for current SOCAP students? “Don’t be shy. Go after work that makes you uncomfortable— it’s where real growth happens.”
Now focused on advancing in cloud security, Yousef is preparing for the Offensive Security Certified Professional (OSCP) certification and continues to share his journey with others online. From SOCAP to Google, Yousef’s path shows how opportunity, support, and self-belief can launch meaningful careers in cybersecurity—and he’s just getting started. Florida’s SOCAP Helped
Florida’s SOCAP Helped
Cyber Careers!
Cyber Careers!
Career Launch Series Career Launch Series
OUTREACH
ENGAGING COMMUNITIES TO EMPOWER ALL
I know unicorns...some of my best friends are unicorns...and Bryson Bort, the Sunshine Cyber Con speaker? He’s absolutely one of the great unicorns.
Sunshine Cyber Conference: A Catalyst for Connection
Sunshine Cyber Conference brought together nearly 600 cybersecurity professionals, educators, students, and government leaders across the state for two days of knowledge-sharing, collaboration, and innovation. Held in Tampa at the JW Marriott Water Street, the conference featured keynote speakers from national security agencies, panel discussions on emerging cyber threats, and breakout sessions focused on workforce development, cyber policy, and critical infrastructure protection. The event highlighted Florida’s growing leadership in cybersecurity and served as a platform to strengthen connections among the state’s cyber stakeholders.
Attendees had the opportunity to engage with hands-on demonstrations, explore cutting-edge technologies in the exhibit hall, and connect with potential employers and collaborators. As part of Cyber Florida’s mission to foster statewide engagement and build cyber resilience, the conference lays the groundwork for future convenings. It solidifies its role as a key annual event in Florida’s cybersecurity ecosystem.
“We continue to engage students, professionals, and communities through dynamic programs and forward-thinking initiatives. We’re strengthening Florida’s cyber ecosystem by expanding awareness and building resilience. Our commitment to growing this community remains unwavering as we work to empower and equip the next generation of cybersecurity leaders.”
— Ernie Ferraresso Senior Director Cyber Florida
Check out my favorite SUNSHINE POST-EVENT SURVEY RESULTS!
Q: What was the single most valuable takeaway from this conference?
“The single most valuable takeaway from the conference was the critical importance of staying ahead of emerging threats and evolving cybersecurity strategies. The conference highlighted how rapid advancements in AI and increasingly sophisticated cyber threats are reshaping the cybersecurity landscape.”
“Being able to talk with other people in the field. It was my first event that I’ve attended and now I have a better idea of what’s next.”
“The tools that FDLE made us aware of for Incident Response.”
“There are a lot of learning, training opportunities and resources readily available.”
“I found comfort in finding out that this community is so accepting and open to new learners.”
96%
rated the networking opportunities as extremely, very, or somewhat valuable.
96%
said they are extremely, very, or somewhat likely to attend Sunshine Cyber Con again.
Cyber Florida Executive Director Gen. (Ret.) Frank McKenzie and cybersecurity expert Winn Schwartau close the 2025 Sunshine Cyber Conference with a fireside chat on the evolving state of global cybersecurity.
USF CyberHerd: A Year of Excellence in Cybersecurity Competition
The 2024–2025 academic year was a landmark period for the University of South Florida’s CyberHerd team, with record-breaking achievements at regional, national, and global cybersecurity competitions. These victories reflect the team’s exceptional talent and dedication and underscore the crucial support provided by Cyber Florida in empowering student success.
Highlights from the year:
DEFCON 32 Adversarial Village CTF: CyberHerd members Waseem Albaba and Jack Trigg took 2nd place at one of the world’s most prestigious hacker conferences (August 2024).
• Aviation-ISAC Cybersecurity Summit: The team captured both 2nd and 3rd place finishes (September 2024).
Raymond James CTF: CyberHerd dominated with a 1st place win (October 2024).
U.S. Navy Cyber Resiliency Challenge (CRAM): Secured 2nd place and earned a $40,000 award (October 2024).
SHPE National Convention CTF: Sanaan Wani achieved 1st place individually (October–November 2024).
EC-Council CTF at the 28th Colloquium: 1st place finish (Fall 2024).
VIVID Competition: Took 1st place with a standout virtual cybersecurity demonstration (November 2024).
• Southeastern Collegiate Penetration Testing Competition (SECPTC): 1st place win earned the team a historic invitation to the Global CPTC finals—USF’s first time advancing to this stage since the competition began in 2016 (November 2024).
• Palo Alto | Secure the Future Competition: Placed 3rd overall (October–December 2024).
• Collegiate Penetration Testing Competition (CPTC) Globals: Placed 4 th overall, earning the only perfect technical score and special recognition as the sole team to bypass Windows Defender (January 2025).
• Temple University Social Engineering Challenge Competition: Took 1st place in the undergraduate category (February–April 2025).
These victories not only brought national recognition to the University of South Florida but also spotlighted the depth of talent being cultivated in Florida’s cybersecurity education pipeline.
Cyber Florida’s continued support was instrumental in these accomplishments, providing vital resources, mentorship, and platforms for student-led innovation and excellence. The ongoing partnership reflects our shared mission to advance cybersecurity education and workforce readiness across the state.
The USF CyberHerd claimed first place at DEF CON 33’s “Adversary Wars”
Voices in Cyber: Making the Complex Understandable
In support of our mission to improve community engagement and expand awareness of the opportunities in cybersecurity, Cyber Florida currently produces two podcasts to that end: No Password Required and chat:CYBR.
The No Password Required podcast features monthly guests who are at the top of the cybersecurity field. The show highlights their personalities and how they reached their current career status. It incorporates a light, humor-driven style that invites people of any background to listen and learn about what it is like to be a part of the cyber world.
No Password Required is currently in its sixth season and has achieved more than 20,000 downloads to date. Hosted by Carlton Fields P.A. Jack Clabby and Cognitive Security Institute
Reality Pentester Kayley Melton, the podcast featured leading cybersecurity practitioners from across the world, including the following:
• Rob Allen, ThreatLocker
• Mariana Padilla, HACKERverse.AI
Trevor Hilligoss, SpyCloud Labs
• Anmol Agarwal, Nokia
• Maretta Morovitz, MITRE
Tamiko Fletcher, NASA
The chat:CYBR podcast is Cyber Florida’s policy discussion platform. Episodes center around thought-provoking policy discussions with subject matter experts, government leaders, and cyber luminaries. This podcast aims to help listeners gain valuable insights on emerging issues and trending topics facing our state and nation in cyberspace.
A variety of guests included:
June Teufel Dreyer, University of Miami
• Frank Cilluffo, McCrary Institute for Cyber & Critical Infrastructure Security at Auburn University
• Joan Woodward, Travelers Institute
• Brian Fonseca, Jack D. Gordon Public Policy Institute at Florida International University
SECCDC Collegiate Cyber Competition Hosted at USF
On March 21–23, 2025, Cyber Florida at USF hosted the Southeast Cyber Collegiate Defense Competition (SECCDC) on the University of South Florida’s Tampa campus at the university’s prestigious Judy Genshaft Honors College building. The SECCDC is a regional qualifying event for the National Cyber Collegiate Defense Competition, one of the most competitive and prestigious collegiate cyber events in the nation. Ten teams—about 120 of the most elite cybersecurity students from across the Southeast—traveled to Tampa for an exciting, hands-on weekend of red-versus-blue competition.
Funded by donors and organized by volunteers from the cybersecurity community, the program is designed to foster excellence in technical skills, teamwork, and confidence in a friendly and welcoming environment.
“It was inspiring to watch these dedicated students use their skills, intellect, and teamwork to take on some truly devious Red Teamers,” said Kate Whitaker, Cyber Florida’s Director of Outreach and Co-Organizer for the event. “It’s a real test of not just technical skills, but also crisis management, communication, and planning.”
Cyber Florida is proud to continue helping students nationwide build real-world cybersecurity skills through educational competitions like this one.
“It was inspiring to watch these dedicated students use their skills, intellect, and teamwork to take on some truly devious Red Teamers.”
— Kate Whitaker Director of Cyber Outreach Cyber Florida
This is not where the story ends...
As we look to the future, Cyber Florida remains steadfast in our mission to advance cybersecurity through cutting-edge research, impactful education, and meaningful community engagement. Our focus on building a safer, more resilient digital landscape continues to guide every initiative. We invite you to stay connected with us through our website and social media to follow our latest projects, partnerships, and opportunities. Together, we can shape a stronger, more secure cyber future for all.
PIXEL PIXEL PIXEL
The Florida Center for Cybersecurity was established by an act of the Florida Legislature in 2014 and created with the passage of Florida Statute 1004.444.
1. The Florida Center for Cybersecurity, which may also be referred to as “Cyber Florida,” is established within the University of South Florida, under the direction of the president of the university or the president’s designee.
2. The mission and goals of the center are to:
a. Position Florida as the national leader in cybersecurity and its related workforce primarily through advancing and funding education and research and development initiatives in cybersecurity and related fields, with a secondary emphasis on community engagement and cybersecurity awareness.
b. Assist in the creation of jobs in the state’s cybersecurity industry and enhance the existing cybersecurity workforce through education, research, applied science, and engagements and partnerships with the private and military sectors.
c. Act as a cooperative facilitator for state business and higher education communities to share cybersecurity knowledge, resources, and training.
d. Seek out research and development agreements and other partnerships with major military installations and affiliated contractors to assist, when possible, in homeland cybersecurity defense initiatives.
e. Attract cybersecurity companies and jobs to this state, with an emphasis on the defense, finance, health care, transportation, and utility sectors.
f. Conduct, fund, and facilitate research and applied science that leads to the creation of new technologies and software packages that have military and civilian applications and that can be transferred for military and homeland defense purposes or for sale or use in the private sector.