The MACE Act — formally known as the “Modernizing the Acquisition of Cybersecurity Experts Act” — was authored by Rep. Nancy Mace to address workforce shortages in federal cybersecurity roles.
The law eliminates unnecessary four-year degree requirements for federal cybersecurity positions, allowing people with proven cybersecurity skills or relevant certifications to qualify for these jobs instead of requiring traditional academic credentials.
Most of us have heard of, or perhaps know ourselves, young people who developed considerable technical, computer-based skills on their own – without attending college. This bill gets rid of past requirements to allow the US to take advantage of the skills of these gifted people.
It is a true merit-based policy, aligning with Republican principles.
Purpose and Provisions
- Shifts hiring practices for federal cybersecurity jobs from degree-based to skills-based, enabling a larger and more diverse talent pool to fill critical roles
- Directs the Office of Personnel Management (OPM) to revise hiring standards, track new hires’ educational backgrounds, and publish annual progress reports to ensure the policy’s effectiveness and transparency.
Status of the Law
The MACE Act was passed by Congress and signed into law in late 2023. It is now fully in effect, with agencies updating their hiring practices to prioritize actual skills and relevant experience in cybersecurity over formal four-year degrees.
This legislation was highlighted as a major recent bipartisan achievement to modernize federal hiring for a crucial national security field. South Carolinians should be proud that one of our own both wrote and sponsored this very sensible bill.
Kudos to Congresswoman Mace!


