Cyber threats are evolving rapidly. In 2024 alone, the U.S. reported over $50.5 billion in losses and 4.2 million cybercrime complaints. Florida ranked third nationwide – behind only California (1st) and Texas (2nd) – in both complaints and financial losses (FBI, 2024). These threats impact not only the government but also businesses, nonprofits, families, and individuals across communities.

Today’s risks include social engineering, phishing/spoofing, ransomware, extortion, data breaches, and increasingly Artificial Intelligence (AI) attacks, such as deepfakes and automated intrusions. These tactics threaten not just infrastructure, but also public trust and operational continuity. Yet many local, state, and federal employees still lack
access to effective cybersecurity education and awareness training. Existing initiatives often measure success through certificates, digital badges, or job placement, but rarely assess real-world performance, behavior change, or mission readiness. As a result, public-sector agencies remain vulnerable.

This report identifies key challenges in cybersecurity education and awareness programs for state and local government employees and presents strategies to help build cyber-literate and resilient communities across Florida – at work, in public service, and beyond.