Working Together for Real-World Threats: Higher Ed & State and Local Government on One Cyber Range

When ransomware knocks a city offline or a county hospital goes dark, state and local responders and nearby universities often mobilize separately—each with its own tools, labs, and training standards. A shared cyber range brings them together. By training on one platform, they can rehearse real attacks, measure response time, and build a unified talent pipeline that strengthens both public defense and academic outcomes.

That’s the premise behind a growing number of state–university partnerships: train together on one range and measure what matters.

Confronting Growing Threats with a Shrinking Workforce

Ransomware continues to pressure the public sector. Between April 2023 and April 2025, attacks on government organizations more than tripled. State and local government networks, county hospitals, and universities all sit in the same blast radius, yet most still train in isolation.

At the same time, the cybersecurity talent pipeline is running dry, with 514,000 open cybersecurity roles in the US (a 12% year-over-year increase) and a 74% supply-to-demand ratio. Those numbers show why government and higher-education systems need tighter, practice-based partnerships.

A shared cyber range gives state and local governments and higher ed a single environment to simulate realistic incidents, validate defenses, and develop the next generation of cybersecurity professionals.

What Cyber Florida Demonstrates—and Why Others Are Following

The Florida Center for Cybersecurity at the University of South Florida (aka Cyber Florida) partnered with SimSpace to deliver city, county, and state personnel both individual training through asynchronous and live modules, and team training exercises that continuously evolve to reflect current cyber threats. Program leaders called it:

“A transformative step for cybersecurity preparedness [that] will undoubtedly pay dividends in strengthening our state’s resilience against cyber threats.”

The model highlights three things any state can replicate:

• Faster coordination. By using one configurable range, Cyber Florida enabled government agencies and higher-ed institutions to train against the same ransomware and data-exfiltration scenarios rather than building separate labs or contracting multiple vendors.

   

• Alignment with state training mandates. The program’s content overlaps with Florida’s Local Government Cybersecurity Training Requirements Guide, giving agencies a measurable way to meet annual obligations.

   

• Continuous measurement. Range analytics track metrics such as mean time to detect and respond (MTTD/MTTR) and playbook adherence, allowing state CISOs and university leaders to make data-driven decisions.

In short, the initiative replaced a patchwork of small, disconnected programs with a single, statewide range—reducing duplicated software licenses, inconsistent labs, and redundant vendor contracts while improving visibility into results.

Educating the Workforce, Securing the Public Sector

When schools and agencies train on the same range, classroom lessons turn into real-world skills—and every exercise builds both talent and resilience.

For higher-education leaders, the cyber range provides a curriculum-ready environment mapped to NICE and NIST frameworks, complete with prebuilt labs and real-time scoring. Students practice with industry-standard tools—such as Splunk, Palo Alto Networks, Wireshark—inside a safe, enterprise-scale simulation. The result is a program that not only improves coursework efficiency but also prepares graduates to step directly into real-world cybersecurity roles in government or private industry.

For state and local security leaders, joint exercises let teams rehearse real incidents—from election systems to emergency-service networks—using the same production-grade tools they already rely on. Results translate directly into reports for boards, councils, and grant programs that demand measurable progress.

How to Get Started

Every state will design its own model, but a common starting point looks like this:

1. Shared governance: Designate a state program lead and a university counterpart to coordinate exercises and reporting.

    

2. Blended training: Combine short individual labs for skill building with periodic team events that stress-test coordination under realistic attack conditions.

    

3. Unified metrics: Baseline performance by role, track detection and response times, and use range analytics to brief policymakers, academic boards, and funding institutions.

Explore How SimSpace Connects Education and Government

SimSpace’s cyber range helps states and schools train together on realistic infrastructure, measure readiness, and prepare their workforce for tomorrow’s security challenges.

To see your shared government and higher education cyber range in action, schedule a demo with a state and local government and higher education cyber range expert.