A cybersecurity training programme designed to widen access to the profession for women has continued expanding after its EU grant period closed, with organisations in Poland and North Macedonia adopting it independently and without central funding.
SHE@CYBER, co-developed by ISACA, formally ended its Erasmus+ funded phase in November 2025. Since then, more than 70 women in Poland have completed the training and more than 40 educators in North Macedonia have been certified to deliver it. The voluntary adoption after grant money stopped is the clearest indicator that the model is self-sustaining.
Train-the-trainer model
The programme’s structure is central to its portability. It uses a train-the-trainer model that certifies educators to deliver the methodology independently, creating a multiplier effect without requiring central resource. The curriculum maps to the European Cybersecurity Skills Framework (ECSF), so participants build industry-recognised capabilities from the outset.
During the funded period, which began in 2024, the programme upskilled 45 trainers across Cyprus, Spain, Italy, Greece and Ireland, reaching 193 registered users through its open-access platform. An independent assessment by the Cyprus National Agency under the European Commission scored it 90 out of 100, earning a designation of Excellent Quality and recognition as a European Good Practice.
Women are underrepresented in cybersecurity not due to a lack of ability, but often because of how the profession defines itself and communicates its entry pathway. By combining technical foundations with confidence-building, professional skills and accessible learning, SHE@CYBER creates a more realistic and inclusive route into the field.
The context matters. According to BCS’s 2025 gender diversity report, women account for just 22% of IT specialist roles in the UK. The SHE@CYBER platform and learning materials will remain freely accessible until at least November 2028.
