The paper assesses the current state of the system of training specialists in cybersecurity and information protection in Ukraine. A set of factors of an international, national, and technological nature that confirm the need for a radical restructuring of the system of training specialists in information protection and cybersecurity is substantiated. A ranking of higher education institutions in Ukraine is compiled based on the total number of students enrolled in specialty 125 "Cybersecurity and Information Protection". The ways to adapting the national system of training cybersecurity and information protection specialists to the challenges of hybrid warfare are determined.
global risks of the next decade [1] (Table 1). The International Information System Security Certification Consortium (ISC)² Cybersecurity Workforce Study records a 4.76 million specialists global shortage of cybersecurity professionals, which undermines the ability of both national security systems and business structures to adequately respond to the evolution of cyber threats and provide an adequate level of cyber protection [2]. The Cybersecurity Capacity Maturity Model for Nations, developed by the Global Cyber Security Capacity Centre at Oxford University, confirms the direct correlation between the level of training (development of knowledge and capabilities) in the field of cybersecurity and the cybersecurity capability of the state [3].
Widespread Widespread cybercrime and cybercrime and cyber insecurity cyber insecurity
crises
The national legislation of Ukraine forms the legal basis for strengthening cybersecurity training. The Cybersecurity Strategy of Ukraine (for 2021-2025) identifies human resources as one of the strategic priorities [4]. The Law of Ukraine “On Amendments to Certain Laws of Ukraine on Information Protection and Cybersecurity of State Information Resources and Critical Information Infrastructure Objects” (No. 4336-IX of March 27, 2025) [5], which is currently one of the key laws in the field of cybersecurity, also affects to a certain extent the requirements for professional training of specialists. The law provides for the following: the introduction of full-time positions for cyber protection specialists in government agencies and critical infrastructure facilities – this is a direct requirement for the availability of qualified specialists; the creation and operation of a national cyber incident response system – this requires specialists not only to have knowledge in the field of defense, but also skills in investigating cyberattacks, restoring systems, and exchanging information about threats. Thus, Law No. 4336-IX actually establishes specific, albeit general, requirements for the staff and functionality of specialists, which in turn stimulates the development of their professional training.
Technological challenges cause a radical change in professional competencies. Technological developments and accelerating digital transformation create new challenges for ensuring cyber security. Cybersecurity breaches in modern conditions can take the following forms: identity fraud, data theft, ransomware attacks, cyberattacks on critical infrastructure, or phishing campaigns, etc. [6, 7]. According to the research by Cyber Management Alliance Ltd.: IoT malware attacks grew by 107% by the end of 2024; ransomware affected 59% of respondents; phishing attacks have increased dramatically by 4151% since the public release of ChatGPT (late 2022); about 8 million DDoS attacks were recorded in the first half of 2024; the average total cost of data breaches in 2024 was $4.88 million [8]. The most common consequences of cyber incidents and cybersecurity breaches in business are: loss of trust in technology, disruption of operations (including supply chain or partner ecosystem), loss of reputation, negative impact on talent recruitment and retention, loss of revenue, loss of customer trust and negative impact on brand, theft of intellectual property, regulatory fines, falling stock prices, termination of funding for a strategic initiative, deterioration of competitive positions [6, 9]. The emergence of new types of threats, including AI-driven attacks and potential threats from quantum computing, requires fundamentally new approaches to training specialists.
As of September 6, 2025, 58 higher education institutions in Ukraine provide training for cybersecurity and information protection specialists (specialty 125 "Cybersecurity and Information Protection" and 125 "Cybersecurity") at various educational levels (bachelor's, master's and postgraduate studies). This number indicates a significant development of the education system in this field and an increase in its relevance in modern conditions. Table2 shows the rating of higher education institutions in Ukraine (Top 10) that have the largest number of students (totally at all the education levels and forms of study). According to the results of the analysis of data from the Register of Educational Activity Subjects of the Unified State Electronic Database on Education of Ukraine [10], it was found that the total number of higher education applicants in the analyzed specialty in Ukrainian higher education institutions as of September 6, 2025 is 10,214 people, including 8,672 people at the first (bachelor's) level, 1,285 at the second (master's) level, and 257 at the third (educational and scientific, PhD) level.
To assess the quality of specialist training, it is advisable to use a comprehensive approach that
includes academic indicators, professional training results, and evaluation of the educational
program and environment [
Communication Technology
University «Kyiv Aviation Institute»
Sikorsky Kyiv Polytechnic Institute»
5 Kharkiv National University of Radio Electronics 258 / 11
According to the State Service for Special Communications and Information Protection (State Special Communications), another important stage of reforming the specialized education and
Master
training system in the field of cybersecurity in Ukraine was completed in 2024. The reform of
specialized education was based on the creation of the National Cybersecurity Qualification
Framework, the introduction of a system of professional standards, and the creation of a network of
independent qualification centers in Ukraine. This approach takes into account the best global
practices, is based on the experience of the European Qualifications Framework and the American
Strategic Educational Initiative in the field of cybersecurity (in general, as of the end of 2024,
specialists from the State Service for Special Communications developed, and the National
Qualifications Agency approved changes to the State Classifier of Professions, which allowed adding
27 new professions in the field of cybersecurity and information security) [
Adapting the system of training cybersecurity specialists to the challenges of hybrid warfare
requires a comprehensive approach that includes the modernization of educational programs, the
development of infrastructure, and the formation of new mechanisms for interaction with the
practical field.The primary task is to revise educational standards taking into account the specifics
of hybrid threats. This involves including modules in the curriculum on analyzing wartime
cyberattacks, protecting critical infrastructure, countering disinformation campaigns, and ensuring
system resilience under stressful conditions. Particular attention should be paid to studying the
experience of countering russian cyberattacks and analyzing the best global practices for ensuring
cyber resilience in conflict situations. The training system requires a radical strengthening of the
practical component and the development of practice-oriented training. This approach includes the
creation of cyber training grounds to simulate real attack scenarios, conducting regular cyber
training with the participation of students, developing cyber incident simulators, and introducing
mandatory internships in key government institutions and private companies. Close integration of
military and civilian components of specialist training is important in the context of hybrid warfare.
This involves the creation of joint educational programs between civilian higher education
institutions and military educational institutions, the development of courses on the basics of
military cybersecurity for civilian specialists and, conversely, in-depth study of civilian aspects of
cyber defense for military specialists. Adaptation also requires bringing the Ukrainian training
system into line with NATO and EU standards. This includes the implementation of international
educational standards, the development of academic mobility programs, the involvement of
international experts in teaching, and the creation of joint educational programs with universities in
partner countries. The system requires the creation of a modern digital training infrastructure and
educational ecosystem, including cloud cybersecurity laboratories, virtual simulators for practicing
incident response skills, and online platforms for distance learning with a high level of security. The
development of distance learning opportunities to ensure the continuity of the educational process
under martial law is particularly relevant. Hybrid warfare requires the formation of a system of
continuous professional development and constant adaptation of the knowledge and skills of
specialists to new realities. This necessitates the creation of a lifelong learning system that includes
advanced training programs, certificationcourses, professional conferences and workshops. Effective
training of specialists is impossible without a powerful scientific base, which involves the creation
of specialized scientific centers for the study of cyber threats, the development of grant programs for
young researchers, and the formation of consortiums of universities and businesses for joint R&D
projects in the field of cybersecurity [
The modern challenges of hybrid warfare are radically changing the requirements for professional training of cybersecurity specialists, which necessitates the need for a comprehensive reform of the existing system of training specialists in the field of cybersecurity and information protection. Traditional approaches to training do not meet the dynamics of cyberthreats and the specificsof countering hybrid attacks.
The scale of cybersecurity training in Ukraine is significant: 58 higher education institutions train over 10,000 specialists at all educational levels. This demonstrates that the state and educational community are aware of the critical importance of staffing national cybersecurity.
Effective response to modern challenges in the field of cybersecurity in Ukraine requires a comprehensive transformation of the system of training specialists, which should be based on a practical orientation, constant adaptation to threats, and close cooperation between the state, education, and business. This will not only overcome the personnel shortage, but also ensure the country's stability in the conditions of hybrid warfare.
During the preparation of this work, the authors used ChatGPT to: translate certain text fragments into English, perform grammar and spelling checks, and paraphrase or reword content. After using these tools, the authors carefully reviewed and edited the content as needed and take full responsibility for the publication’s content. [1] World Economic Forum. The Global Risks https://www.weforum.org/publications/global-risks-report-2025/
[3] Cybersecurity Capacity Maturity Model for Nations Global Cyber Security Capacity Centre.
URL: https://gcscc.ox.ac.uk/the-cmm [4] Decree of the President of Ukraine No. 447/2021 of August 26, 2021. On the decision of the National Security and Defense Council of Ukraine of May 14, 2021 "On the Cybersecurity Strategy of Ukraine." URL: https://zakon.rada.gov.ua/laws/show/447/2021#Text [5] Law of Ukraine No. 4336-IX of March 27, 2025. On amendments to certain laws of Ukraine regarding information protection and cyber protection of state information resources and critical information infrastructure facilities. URL: https://zakon.rada.gov.ua/laws/show/433620#Text [6] Statista/ Cyber Crime & Security. https://www.statista.com/markets/424/topic/1065/cyber-crime-security/#overview URL: [7] Savchuk, S. O. State policy on combating cybercrime : thesis. ... PhD (public administration): 25.00.05. Zhytomyr, 2024. 160 p. [8] Top 10 Biggest Cyber Attacks of 2024 & 25 Other Attacks to Know About! URL: https://www.cm-alliance.com/cybersecurity-blog/top-10-biggest-cyber-attacks-of-2024-25other-attacks-to-know-about [9] Deloitte. Global Future of Cyber Survey, 4th Edition. 2024. https://www.deloitte.com/content/dam/assets-shared/docs/services/risk-advisory/2024/ deloitte-global-future-of-cyber-survey-4th-edition-the-promise-of-cyber.pdf URL: [10] Unified state electronic database on education of Ukraine. Register of educational activity subjects. URL: https://registry.edbo.gov.ua/search/