Keeping her in cyber: Designing programs that motivate, include, and empower

The need to build a more diverse and inclusive cybersecurity workforce is well recognised, yet progress remains slow, particularly in increasing the participation of women. While many initiatives aimed at encouraging women into the field have gained visibility, their long-term effectiveness and impact remain unclear.

This session presents findings from a systematic review of outreach programs focused on increasing female representation in cybersecurity, both in Australia and globally. Our review examined program structures, engagement strategies, and evaluation methods, and identified several missed opportunities in current practice.

While some programs successfully generated short-term interest, few demonstrated continuity or inclusive design. Most leaned heavily on technical content, often overlooking the interdisciplinary, creative, and social impact aspects of cybersecurity that may appeal to a wider range of female students. Evaluation, where present, was typically limited to post-program surveys, with minimal analysis of what failed or why.

Despite these limitations, promising practices did emerge. Programs that incorporated:

- Mentoring and visible role models

- Hands-on, challenge-based learning

- Peer support and community building

- Real-world connections between cyber and social good

...tended to produce stronger engagement and sustained interest.

However, we found very few programs with longitudinal follow-up or evidence of continued student engagement in cyber-related study or careers. Co-designed initiatives, where students contribute to content and delivery, were also rare, pointing to an untapped opportunity for improving impact and relevance.

To further explore current barriers, we are conducting interviews with outreach facilitators and program leaders. These conversations aim to uncover recurring challenges such as limited funding, lack of inclusive design capabilities, weak collaboration across sectors, and a reliance on one-off events without long-term planning.

In this session, we will:

- Share early insights from our systematic review and planned interviews

- Highlight what’s working, where gaps remain, and opportunities for program enhancement

- Present a conceptual model for designing inclusive, engaging, and sustainable outreach initiatives

- Offer strategies for embedding identity, motivation, and real-world relevance into outreach design

Our model draws from education, behavioural science, and diversity and inclusion frameworks. It emphasises sustained engagement, meaningful impact measurement, and co-creation with students and communities.

Attendees will leave with a practical understanding of the current outreach landscape and actionable strategies to develop or improve programs that go beyond awareness, fostering belonging, pathways, and long-term inclusion in cybersecurity.

We invite collaboration from universities, industry, schools, government, and community organisations to help shape the next generation of diverse cyber professionals. If you're running, supporting, or interested in outreach programs, we welcome your insights and partnership. Together, we can reimagine what’s possible for women and underrepresented groups in the cybersecurity workforce.