Exciting expansion on the horizon for girls' cyber security competition
Originally launched in 2017, the hugely popular competition has gone from strength to strength


The NCSC's popular CyberFirst Girls Competition will be expanding, adding an additional regional semi-final stage between online qualifiers and the grand final.
Since launching in 2017, the scheme aimed at attracting young women into the field of cyber security has seen 24,000 keen registrants taking part in the competition.
For the first time in the competition's history, those who pass the initial online qualification round can then compete on a regional level before being pitted against the best in the country.
Previously, only the top ten teams from the online qualifying rounds would get to compete for the grand prize but the additional stage will afford more girls the chance to compete on a wider scale.
The semi-finals will take place simultaneously at venues across the UK and the winner of each region will then go to the final which will be hosted in Wales, taking place over two days in March.
"While the competition continues to grow in popularity, we want to make sure we're drawing on talent from all parts of the UK, and the introduction of regional semi-finals will help us do that," said Chris Ensor, NCSC deputy director for growth.
"I hope this new format will encourage more schools than ever to get involved and to help us build the diverse workforce so crucial to the nation's future cyber security."
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
According to personal accounts of last year's participants, the scheme was an overwhelming success, with 98% of competitors saying they wanted to learn more about cyber security.
12,000 girls competed last year, where their knowledge of topics such as cryptography, logic, networking and online safety was tested. The Edinburgh-based final gave the girls a realistic scenario involving a social media company which suffered a data breach.
The CyberFirst Girls competition was originally created as part of the 2016 National Cyber Security Strategy which aimed to tackle the widening skills gap in the UK by encouraging more young people to pursue careers in IT.
Registration for the upcoming 2020 competition opens on Monday 2 December for all girls from Year 8 (England and Wales), Year 9 (Northern Ireland) and S2 (Scotland).

Connor Jones has been at the forefront of global cyber security news coverage for the past few years, breaking developments on major stories such as LockBit’s ransomware attack on Royal Mail International, and many others. He has also made sporadic appearances on the ITPro Podcast discussing topics from home desk setups all the way to hacking systems using prosthetic limbs. He has a master’s degree in Magazine Journalism from the University of Sheffield, and has previously written for the likes of Red Bull Esports and UNILAD tech during his career that started in 2015.
-
Should AI PCs be part of your next hardware refresh?
AI PCs are fast becoming a business staple and a surefire way to future-proof your business
By Bobby Hellard
-
Westcon-Comstor and Vectra AI launch brace of new channel initiatives
News Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
By Daniel Todd
-
ASUS, Cisco, Netgear devices exploited in ongoing Chinese hacking campaign
News Critical national infrastructure is the target of sustained attempts from state-sponsored hackers, according to Five Eyes advisories
By Ross Kelly
-
PyPI attack: Targeting of repository 'shows no sign of stopping'
News Greater collaboration and understanding of attackers’ tactics is key to mitigating open source security threats
By Ross Kelly
-
Capita's handling of cyber attack shows companies still fail at breach reporting
Analysis Capita initially told customers there was “no evidence” of data having been compromised in the March cyber attack
By Ross Kelly
-
Malware being pushed to businesses by search engines remains a pervasive threat
News High-profile malvertising campaigns in recent months have surged
By Ross Kelly
-
There's only one way to avoid credential stuffing attacks
Opinion PayPal accounts were breached last year due to a credential stuffing attack, but can PayPal avoid taking responsibility?
By Davey Winder
-
Five things to consider before choosing an MFA solution
In-depth Because we all should move on from using “password” as a password
By Rene Millman
-
Off-the-shelf ransomware is spurring a new era in the Ukraine war
News Experts agreed Russian forces could be overwhelmed, forced to use less sophisticated tools to meet the regime's demands
By Connor Jones
-
NCSC: “New class” of Russian cyber attackers seek to destroy critical infrastructure
News The cyber threat has been raised due to the heightened risk of ideologically driven cyber attacks from Russia-aligned adversaries
By Connor Jones