New here? Read Why Students Need TechStep → first — the case for why this is worth your time.

You've done the coursework. You've completed assignments. You may have earned certifications. Yet many students encounter the same challenge when they begin applying for jobs: employers want experience before they hire.

The challenge isn't a lack of talent. The challenge is a lack of opportunities to demonstrate that talent in real-world environments.

TechStep Foundation was created to help close that gap.

Today's employers are looking for more than academic achievement. They want evidence that you can solve real problems, work on a team, communicate professionally, analyze risk, document your work, and apply technical knowledge in practical situations. TechStep participants work on projects that support nonprofits and community organizations facing cybersecurity, data governance, compliance, and AI-related challenges. This isn't a simulation.

You will be assigned to a team working with a real community partner. Under close supervision from experienced practitioners, you will conduct interviews, analyze risk, draft documentation, and present findings. Work product is reviewed before it goes to the client. Engagements typically run 6–10 weeks.

GRC Vendor Risk Data Governance AI Governance Policy Writing Risk Assessment Client Communication Stakeholder Interviews

Time & commitment

—5–8 hours per week during active engagements
—Participation in team meetings and check-ins
—Timely completion of assigned tasks
—Professional conduct in all client interactions
—Commitment to confidentiality

Mentorship & support

—Direct mentorship from experienced security professionals
—Documented work product for your portfolio
—Supervised client exposure in a structured setting
—Exposure to multiple industries and organization types
—References and professional network connections

Everything you produce in an engagement is reviewed, recorded, and yours to keep. Current and accepted participants track their work and portfolio in Stepping Stone, our talent pipeline platform: Participant Login →

TechStep is not just about helping you get your first opportunity. It's about helping you develop the confidence, practical skills, and professional habits needed to build a long-term career — more than a line on your resume.

Faculty or academic advisor? See For Universities → for the referral process and bulk-referral form.

You do not need a certification to join TechStep — but these free resources will help you build confidence, speak the language, and hit the ground running from day one.

Organized by the skill tracks used in TechStep clinic engagements. All resources listed are free or freely accessible. Start anywhere — there is no required order.

GRC & Risk Assessment

—NIST Cybersecurity Framework
The exact framework TechStep uses in every clinic engagement.
—CISA Free Training Library
Free GRC, risk, and infrastructure security courses.
—ISC2 Certified in Cybersecurity (CC)
A free entry-level certification with free study materials.

Policy & Compliance

—SANS Security Policy Templates
Free, ready-to-adapt policy templates.
—NIST SP 800 Series
The authoritative source for security and privacy controls.
—SANS Cyber Aces
Free foundational cybersecurity courses.

AI & Data Governance

—NIST AI Risk Management Framework
The federal framework for AI governance.
—FTC Business Privacy & Security
Plain-language guidance on data privacy and breach response.
—Stanford AI Index Report
Annual free report on AI trends and governance.

Career & Portfolio Building

—LinkedIn Learning
Free access available through many university libraries.
—CompTIA Security+ Overview
The most recognized entry-level security certification.
—ISACA Cybersecurity Credentials
Respected GRC-aligned certifications.

A note from TechStep: You do not need to complete any of these before applying. What matters is your commitment to doing real work, communicating professionally, and growing through the engagement.

"Your degree proves what you learned. Your experience proves what you can do."

Tell us about yourself and your goals. We review applications on a rolling basis.

✓ Received — we will be in touch with next steps.
Something went wrong. Please try again.