The State of Education in Cybersecurity April 27, 2017 Stephen Miller Co-PI, CyberWatch West http://www.stephen.miller@enmu.edu http://www.cyberwatchwest.org/index.php

TOPIC COVERED Demand for cybersecurity personnel Overview of National Initiative in Cyber Education (NICE) Cybersecurity Workforce Framework Overview of National Centers of Academic Excellence in Cyber Defense (CD) Education (CAE-CDE)  How CyberWatch West can enable institutions, faculty, industry and students Q & A?

Demand for cybersecurity personnel

Demand for cybersecurity personnel

Cyber Employers – What Are We Looking For? UCCS Cyber Education Workshop 24 April 2017

First and Foremost – We Look for People With Strong Core Values Medical Professional Sports Banking/Finance “Any” Technology Foundational for business success – in any profession! Lapses in ethical behavior cannot be overcome by technical or business virtues

Next – The Cybersecurity Technical Skills and Smarts Fundamental IT Knowledge of governing standards, frameworks & practices Security+, CISSP, CIPP, CISM, CEH . . . Creativity, energy, team working skills Certifications, special skills, positive character

Security clearances often required – ethical behavior always required Joe’s Two Cyber Employment Classification Categories: National Security . . . Everything Else One industry’s purpose is to protect the nation – the other sustains the nation Some companies operate in both realms – they have tough stomachs Cybersecurity job objectives common to both groups Protect personal information Protect financial data and intellectual property Ensure secure and successful mission operations The one unique aspect of national security cyber activities Support Combat Operations – the objective is to kill people and break things (Only uniformed military do this, but contractors help) Keep your ethical reputation in good health so all job avenues remain open Security clearances often required – ethical behavior always required

. . . And Speaking of Cybersecurity Jobs Today’s climate – and the forecast, are beyond bright Demand far out-strips the supply Boecore has 20 current openings, a third of which are in Colorado Springs According to the CyberSeek.org heat map, as of 20 April, there were 3,133 openings in the greater Teller and El Paso County area 11,153 openings in Colorado 348,975 opportunities nation-wide Cybersecurity positions can pay up to 50% more than typical IT positions This is life-long work – if you’re good (skills) and trustworthy (character)

Demand for cybersecurity personnel

Demand for cybersecurity personnel http://cte.ed.gov/employabilityskills/

Overview of National Initiative in Cyber Education (NICE) NICE - led by the National Institute of Standards and Technology (NIST) Partnership between government, academia, and the private sector Focused on cybersecurity education, training, and workforce development. Mission - to energize and promote a robust network and an ecosystem of cybersecurity education, training, and workforce development. Coordinating with government, academic, and industry partners to build on existing successful programs facilitate change and innovation bring leadership and vision to increase the number of skilled cybersecurity professionals helping to keep our Nation secure.

Overview of National Initiative in Cyber Education (NICE) Strategic Plan Goals Goal #1: Accelerate Learning and Skills Development Goal #2: Nurture a Diverse Learning Community Objectives: 2.1 Improve education programs, co-curricular experiences, and training and certifications 2.2 Encourage tools and techniques that effectively measure and validate individual aptitude, knowledge, skills, and abilities Goal #3: Guide Career Development and Workforce Planning

Overview of National Initiative in Cyber Education (NICE) The NICE Cybersecurity Workforce Framework (NCWF), NIST Special Publication 800-181 National resource that categorizes and describes cybersecurity work Categories (7) – A high-level grouping of common cybersecurity functions Specialty Areas (33) – Distinct areas of cybersecurity work Work Roles (52) – The most detailed groupings cybersecurity work comprised of specific knowledge, skills, and abilities required to perform tasks in a work role Tasks – Specific work activities that could be assigned to a professional working in one of the NCWF’s Work Roles Knowledge, Skills, and Abilities (KSAs) – Attributes required to perform Tasks, generally demonstrated through relevant experience or performance-based education and training

Overview of National Centers of Academic Excellence in Cyber NSA and the Department of Homeland Security (DHS) jointly sponsor the following programs: National Centers of Academic Excellence in Cyber Defense (CD) Education (CAE-CDE), Two-Year Education (CAE-2Y) Research (CAE-R) Goal of these programs - reduce vulnerability in our national information infrastructure by promoting higher education and research in CD and producing a growing number of professionals with CD expertise in various disciplines. Students attending CAE schools are eligible to apply for scholarships and grants through the Department of Defense Information Assurance Scholarship Program and the Federal Cyber Service Scholarship for Service Program. Designation as a Center does not carry a commitment for funding from NSA or DHS.

Overview of National Centers of Academic Excellence in Cyber

Overview of National Centers of Academic Excellence in Cyber

Overview of National Centers of Academic Excellence in Cyber

CyberWatch West Overview CYBERWATCH WEST PROVIDES ITS EDUCATIONAL MEMBERS WITH FREE CURRICULUM RESOURCES: Course in Critical Infrastructure Cybersecurity, designed especially for community colleges Courses in Health IT Privacy and Security Girls Go Tech materials, for hosting a one-day workshop that helps middle school girls explore careers in technology fields Cybercamp course materials, designed for a weeklong experience for high school students CyberPatriot National Cyber League

CyberWatch West Overview HELPING FACULTY Keep their knowledge and skills current with rapidly evolving technology Providing tools and resources that enable them to teach cybersecurity more effectively. Educators at member schools enjoy a variety of professional development benefits: Priority registration for free online courses and workshops Monthly Member Meetings on topics including 2 + 2 pathways Using virtual labs in the classroom Applying for the CAE designation Access to our online library of more than 60 recordings available for free download travel stipends to attend cybersecurity-related conferences and events for faculty development.

CyberWatch West Overview INDUSTRY EVENTS Industry Night events to bring together educators, government representatives, and industry professionals to share information and conversation about the ever-changing cybersecurity landscape. TECH EVENTS Sponsors tech industry events like the 2014 Cyber Risk Summit and the Tech Trends 2016 conference for more than 200 participants organized by the Technology Alliance Group for Northwest Washington. Want to host an Industry Night on your campus? Know a tech industry event we should sponsor? INDUSTRY PARTNERS Our Industry Partners support the cause of cybersecurity education: Offering high-tech workplace tours to classes and student clubs Participating in hands-on technical demonstration projects Providing internships and work experiences for students Providing externships and work experiences for teachers Serving as guest lecturers in person and in webinars

CyberWatch West Overview CWW sponsors and supports: National Cyber League Western Regional Collegiate Cyber Defense Competition Pacific Rim Collegiate Cyber Defense Competition California’s Inaugural Cyber Innovation Challenge NICE Cybersecurity Challege For free resources, join CyberWatch West and visit our website at www.cyberwatchwest.org

Q & A? Resources: http://cyberseek.org/ http://csrc.nist.gov/nice/framework/ https://www.iad.gov/NIETP/index.cfm https://www.cyberwatchwest.org/ http://map.norsecorp.com/#/