By: Elise Hauser, Senior Product Marketing Manager, Public Sector at Pluralsight
Among federal agencies, AI budgets are exploding and cyber modernization is a top-line priority across civilian and defense missions alike. But innovation and readiness are two different things, and right now, there’s a gap between them.
Agencies can buy tools, but they can’t scale them without people who know how to manage them. The skills shortage is throttling AI and delaying cyber readiness. Improving your team’s readiness is what turns AI pilots into production and compliance mandates into mission capability. Cross-skilling is the key to getting there.
3 trends impacting tech readiness in federal agencies
Three key trends are making the tech skills gap in federal agencies even more apparent: the move from AI pilots to production, AI and cybersecurity overlap, and DoD mandates.
AI: The move from pilots to production
Federal AI adoption has grown rapidly. Obligated federal AI spending grew from $675 million to $7.2 billion between 2024 and 2026 (a 966% increase), while potential contract value climbed even faster. Agencies reported thousands of individual AI use cases. And the policy backdrop reinforced the pace, from the 2025 AI Action Plan to the Department of Defense’s AI Acceleration Strategy.
It’s clear that agencies have adopted AI in isolated pilots. The challenge now is scaling those capabilities into production across complex mission environments and embedding AI into core systems and workflows.
But the AI talent shortage, workforce capacity constraints, a risk-averse culture, and low public trust impede progress. In other words, the constraint on federal AI isn’t the technology or the budget. It’s having a workforce that’s ready to deploy, govern, and sustain it.
AI and cybersecurity are converging
AI and security have merged into a single discipline, and it’s affecting both sides of the fight at once.
AI strengthens cyber defense
On defense, agencies are turning to AI to do what human analysts can’t do at scale. AI-driven monitoring and automated response let agencies analyze behavioral patterns continuously, flag anomalies in real time, and execute containment actions faster than humans alone could.
By shifting from reactive defense to anticipatory risk management, agencies can identify and neutralize threats before they escalate. This is the difference between a security posture that responds to breaches and one that prevents them.
AI enhances threat actors’ capabilities
The same capability that strengthens defense also arms adversaries. Threat actors are using AI to accelerate reconnaissance, generate convincing phishing and social-engineering content at scale, probe for vulnerabilities, and adapt their tactics faster than traditional defenses can keep up.
The result is an escalating speed contest between the defender’s AI and the attacker’s. Falling behind on AI capability is no longer just an efficiency problem—it’s a direct security exposure.
AI systems create new attack surfaces
As agencies rush to deploy AI into core workflows, they introduce risks that legacy security models were never designed to address. This includes sensitive data flowing into and out of models without adequate visibility, model inputs that can be manipulated, and misleading outputs.
If agencies adopt AI without proper governance, they create new risks while trying to modernize. Securing AI has become as important as securing with AI.
DoD 8140: Turning mandates into readiness
Under DoD Manual 8140.03, every military, civilian, and contractor role performing cyber work in a covered position must be qualified against a specific DoD Cyber Workforce Framework (DCWF) work role—a mapped set of knowledge, skills, and abilities (KSAs) at a defined proficiency level.
The DCWF categorizes cyber work into seven workforce elements spanning 73 work roles, each with its own required KSAs. Personnel must reach foundational qualification within nine months of assignment and residential qualification within twelve, with continuous professional development required to stay qualified.
The critical shift in 8140 is the move from certified to qualified. Contract solicitations now reference DCWF work roles and proficiency tiers rather than legacy certification levels, and organizations must demonstrate documented learning pathways, assessed proficiency, and auditable workforce data. A one-time certification sprint doesn’t satisfy that. A durable, role-mapped upskilling capability does.
Build readiness with cross-skilling
Whether it’s pushing AI to production, handling AI security, or maintaining DoD 8140 compliance, one common theme emerges: There aren’t enough qualified people. (The Pentagon alone faces a shortage of roughly 20,000 cyber professionals).
External hiring alone can’t close a gap this large. And while some agencies are shifting to internal upskilling and cross-skilling to develop qualified talent from the workforce they already have, not enough are taking advantage of this opportunity yet.
But here’s the thing: upskilling and cross-skilling works.
According to GovCon, targeted upskilling in cloud security and AI defense has been shown to cut time-to-fill for cybersecurity roles by 40% while improving retention by 30% within a single year. It’s not a stopgap for the talent shortage—it’s the most durable answer to it.
It develops qualified cybersecurity professionals from the people agencies already have, moves faster than a hiring cycle, helps institutional knowledge, and improves retention by giving employees a path forward.
Perhaps most importantly, it improves your agency’s ability to address new developments like AI initiatives and DoD 8140 requirements. That’s the readiness layer: continuously updated, role-aligned upskilling that sits beneath every federal tech initiative and determines whether it actually reaches production.
It’s what turns AI pilots into deployed systems, threat intelligence into anticipatory defense, and 8140 mandates into mission capability. Tools and budgets are necessary, but they don’t act on their own. A qualified workforce is what converts investment into outcomes.
Build your agency’s tech readiness
Closing the readiness gap takes the ability to see where skills stand today, map them to the roles the mission requires, and build proficiency in a measurable way.
Pluralsight pairs curated learning paths across AI, cloud, and security with Skill IQ assessments and hands-on labs that develop and validate real capability, unlike static certifications. Our platform also gives leaders the analytics to track workforce readiness as skills and requirements evolve.
Whether your goal is DoD 8140 qualification (our partnership with Cyberstar brings the full readiness lifecycle into a single workflow) or cross-skilling your people ahead of the next wave of technology, Pluralsight can help you innovate faster while meeting regulatory demands.
The agencies that will lead aren’t the ones with the biggest AI budgets or the fastest modernization. They’re the ones building the readiness layer that makes all of it work.
Interested in how a readiness-first approach can accelerate your agency’s AI, cybersecurity, and 8140 goals? Explore Pluralsight’s public sector solutions.