The government's personnel shop has devised a five-part strategy for planning, hiring and retaining cybersecurity people. But not everyone follows the strategy.