I agree with this statement 100%. CFNOC is a good example of how you to weave commercial courses into the fold. Cyber security moves much to quickly for the military training system to keep up. I don't know how many job reviews, TP reviews and whatever else they do to get CST / IST where it needs to be (how many has there been already?!). What I do know is that we're reaching the point where the legacy LCIS techs are no longer in the Cpl/MCpl positions which served as a buffer with regards to the lack of knowledge the incoming CST & IST have. CFIOG (SIGINT) is another good example of how the military training system doesn't serve the purpose and external courses are required in order to employ techs efficiently due to the speed at which technology evolves.
So many of the techs I worked with over the years which I would consider "switched on" and "highly effective" were only so due to I.T. being a passion/hobby of theirs. These were the guys that built server farms in their houses, wired their house like a comms closet, used linux at home, actively worked on their whitehat hacking skills, etc. I don't think any other Army tech trades relies so heavily on these types of people.