Key Takeaways
- The Indiana Civilian Cyber Corps (ICCC) is a volunteer‑based organization housed within the Indiana Guard Reserve, created by state legislation after two years of planning.
- Maj. Christopher Myers, director of cybersecurity for the Indiana Air National Guard, serves as the program manager and envisions the corps growing to 400 members.
- Members serve either as certified volunteers who can be deployed to cyber incidents or as advisers who provide policy, legal, or educational support without deployment eligibility.
- The program draws on lessons from civilian cyber initiatives in Wisconsin, Michigan, and Ohio, incorporating their best practices while addressing identified challenges.
- Standard operating procedures, client agreements, and application materials have been formalized and posted online, guided by an advisory board that first met in late 2023.
- Employer support proved easier to obtain than anticipated; professionals gain hands‑on incident‑response experience, and employers benefit from staff with real‑world skills.
- Myers emphasizes that actual incident response provides far superior learning compared to tabletop exercises, reinforcing detection, containment, mitigation, and reporting competencies.
- Services will be offered to public‑sector entities, schools, and businesses across Indiana, with outreach aimed at building relationships with local cybersecurity officials and county CISOs.
- Short‑term goals include reaching 100 members within the next year; the long‑term vision is a statewide corps capable of regional response operations.
Introduction and Overview
Maj. Christopher Myers looks forward to a future where the Indiana Civilian Cyber Corps (ICCC) boasts 400 trained volunteers ready to bolster the state’s cyber resilience. As the director of cybersecurity for the Indiana Air National Guard and the program manager for the ICCC, Myers has overseen the transformation of a concept nurtured over two years into a formally recognized volunteer organization. The corps operates under the Indiana Guard Reserve, leveraging both military discipline and civilian expertise to address growing cyber threats facing Indiana’s public institutions, schools, and businesses.
Formation and Legislative Backing
The ICCC moved from idea to reality when state legislation officially sanctioned the program this year. The legislative action followed an extensive planning phase that began more than two years prior, during which Myers and stakeholders examined the needs of Indiana’s cybersecurity landscape and evaluated models from neighboring states. Formal recognition through state law provides the corps with a legal framework, access to certain resources, and the credibility needed to attract participants and partners.
Program Structure: Volunteers and Advisers
Membership in the ICCC is divided into two distinct roles: certified volunteers and advisers. Certified volunteers undergo qualification processes that enable them to be deployed to active cyber incidents, where they deliver hands‑on assistance such as network quarantine, password resets, forensic analysis, and remediation efforts. Advisers, by contrast, are not deployable; they contribute expertise in areas like policy development, legal compliance, public outreach, or academic instruction. This tiered structure allows individuals with varying levels of experience and availability to support the corps’ mission while maintaining clear operational boundaries.
Research and Development Phase
Before launching the ICCC, Myers conducted a comparative study of civilian cyber programs in Wisconsin, Michigan, and Ohio. He interviewed program leaders to identify what had worked well—such as effective recruitment strategies, training curricula, and incident‑response protocols—as well as the obstacles they had encountered, including funding instability and employer reluctance. The insights gathered from these states informed the early design of the ICCC, helping Myers avoid common pitfalls while adopting proven practices tailored to Indiana’s unique context.
Standard Operating Procedures and Advisory Board
An early draft of the corps’ standard operating procedures (SOPs) was presented to the Civilian Cyber Corps Program Advisory Board, which convened for the first time in late 2023. The board, composed of cybersecurity professionals, government officials, and academic representatives, reviewed and refined the SOPs, ensuring they aligned with industry standards and state requirements. After iterative feedback, the procedures were finalized and published on the ICCC website, accompanied by client agreements, application forms, and instructional materials that guide prospective members and partner organizations through the onboarding process.
Employer Engagement and Incentives
One of Myers’ key research areas involved understanding how to persuade cybersecurity professionals and their employers to participate in incident‑response activities. Contrary to his initial expectations, he found that securing employer support was relatively straightforward. Professionals are motivated by the chance to sharpen their technical skills through real‑world challenges, to contribute to community safety, and to experience the satisfaction of protecting critical infrastructure. Employers, in turn, value the practical experience their staff gain—particularly in handling live incidents—which enhances the employees’ effectiveness in their primary roles and reduces the organization’s vulnerability to future attacks.
Value of Real Incident Experience vs Tabletop Exercises
Myers stresses that while tabletop exercises are essential for planning and communication, they cannot substitute the learning derived from an actual cyber event. “The best experience is going through an actual event,” he explains. In a live scenario, participants practice quarantining networks, resetting credentials, identifying attack vectors, verifying that detection phases are complete, and transitioning to mitigation and remediation. They also learn to navigate reporting procedures and coordinate with stakeholders under pressure. This immersive experience builds confidence and competence that theoretical drills alone cannot achieve, making volunteers far more effective when they return to their home organizations.
Service Scope: Training and Incident Response Targets
The ICCC’s services are designed to benefit a broad range of entities across Indiana. Certified volunteers will deliver training sessions focused on cyber hygiene, threat awareness, and basic incident‑response techniques for public‑sector agencies, school districts, and private businesses. In addition, the corps will be available to deploy volunteers to assist with active cyber incidents, providing immediate technical support and helping organizations contain and recover from attacks. By covering both preventive education and reactive assistance, the ICCC aims to raise the overall cyber maturity of the state’s critical infrastructure.
Outreach and Relationship Building with CISOs
To expand its reach and embed itself within Indiana’s cybersecurity ecosystem, Myers plans to conduct outreach meetings throughout the state. A pivotal upcoming event will bring together Chief Information Security Officers (CISOs) from all 92 Indiana counties to discuss the state’s cyber incident‑response process and explore collaboration opportunities with the ICCC. These gatherings serve multiple purposes: they raise awareness of the corps’ capabilities, gather feedback on local needs, and foster partnerships that can streamline information sharing and joint response efforts when incidents occur.
Vision for Growth and Future Goals
Myers envisions the ICCC evolving from a nascent volunteer group into a robust, statewide force capable of regional operations. In the near term, he hopes to recruit at least 100 members within the next year, establishing a solid foundation of trained volunteers and advisers. Over the longer term, the goal is to scale the corps to 400 members, enabling it to provide simultaneous support across multiple regions during large‑scale cyber events. This growth would not only increase Indiana’s defensive capacity but also create a sustainable pipeline of cyber‑talent that benefits both the public and private sectors.
Closing Remarks and Personal Reflection
Reflecting on the journey thus far, Myers expresses genuine excitement about the potential impact of the ICCC on Indiana’s cybersecurity posture. He looks forward to observing the corps’ development, continuing to network with professionals across the state, and witnessing a community of individuals united by a shared desire to protect their families, friends, and homeland from cyber threats. The blend of military discipline, volunteer passion, and private‑sector expertise embodied by the Indiana Civilian Cyber Corps promises to become a vital asset in safeguarding the state’s digital future.