Developing Cloud-Based Cyber Capacity Building Platforms

Authors

  • David Tileston Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States https://orcid.org/0000-0002-0441-0192
  • Adam Welle Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States https://orcid.org/0009-0004-3106-9753
  • Nuria Pacheco-Casanova Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States
  • Matt Kaar Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States https://orcid.org/0009-0008-3750-8293
  • Toby Meyer Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States https://orcid.org/0009-0002-5268-0389
  • Rick Luz Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States

DOI:

https://doi.org/10.34190/eccws.24.1.3632

Keywords:

cyber capacity building, workforce development, competency frameworks, cyber exercises, virtualization

Abstract

Creating and maintaining an effective cybersecurity workforce is a significant challenge for organizations due to the complexity of the cyberspace domain. Military organizations especially have problems due to the transitory nature of personnel and retention challenges. The Integrated Multinational Cyber Information Sharing and Training Environment (IMCITE) is a system that facilitates organizational development using a learning management system, organic and government-off-the-shelf training materials, hands-on cyber training labs, large-scale cyber exercises, and information sharing with other organizations. Additionally, IMCITE incorporates learning plans and competency frameworks to track training effectiveness and ensure alignment with training goals, enabling targeted and measurable training initiatives to help identify skill gaps, streamline career progression, and improve workforce readiness. In this paper, we will discuss the technical and other challenges involved with developing, deploying, maintaining, and training in the use of such a system.

Author Biographies

David Tileston, Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States

David Tileston is a cyber security engineer and exercise developer at Carnegie Mellon University's Software Engineering Institute. He has worked in cybersecurity with the Department of Defense for the past ten years with a focus on virtual exercises and cyber workforce development platforms.

Adam Welle, Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States

Adam is a Team Lead at the Carnegie Mellon University Software Engineering Institute and an adjunct instructor at the Information Networking Institute. Adam's team develops cyber exercise solutions for the Department of Defense that enable training and evaluation of the skills needed for cyber professionals to defend against today’s threats. 

Nuria Pacheco-Casanova, Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States

Nuria Pacheco is an Associate Cybersecurity Engineer at Carnegie Mellon University’s Software Engineering Institute. She designs cybersecurity exercises and manages cloud-based platforms that integrate learning management, information sharing, and cyber ranges. Nuria develops Moodle plugins that streamline deployments and align competencies with training content, enabling efficient evaluation of cybersecurity skills.

Matt Kaar, Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States

Matt Kaar, a team lead and senior engineer at CMU/SEI, designs systems to strengthen the cyber workforce of the United States and its allies. He also serves as an adjunct instructor for CMU’s Information Networking Institute, preparing the next generation of cybersecurity professionals through hands-on experiences inside virtual environments.

Toby Meyer, Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States

Toby Meyer is a Senior Engineer at the Software Engineering Institute and an adjunct instructor at Carnegie Mellon University’s Heinz College. He leads a cross-functional team to improve cyber mission readiness by developing innovative courseware, assessments, work role validation tools, and tests leveraging learner data and integrating with open-source applications.

Rick Luz, Carnegie Mellon University, Software Engineering Institute, Pittsburgh, United States

Rick Luz is a Technical Manager at Carnegie Mellon University Software Engineering Institute and a retired Marine Corps Officer. He leads multiple teams that assist the DoD and international partners in workforce development, with an emphasis on safeguarding critical capabilities necessary for executing mission-essential tasks.

Downloads

Published

2025-06-25