Jeff Recor IAC 2003 FISSEA IA Community Outreach March 2005 Jeff Recor Director, IAC

Jeff Recor IAC 2003 Discussion Points Enhancing the Educational Experience Nuts and Bolts Example Clients

Jeff Recor IAC 2003 A Little Knowledge … Symantec, 2004

Jeff Recor IAC 2003 Private Sector Viewpoint: Needs include: –Practitioners (technical) –Analysts (non-technical) –Management Method to properly evaluate experience and credentials Certifications not representative of need Experience, experience, experience

Jeff Recor IAC 2003 Academia Viewpoint: Need to create content that is current (valuable) Need to enable students to compete for jobs in marketplace Lack of instructors Lack of textbooks Lack of standards Don’t want to compete with “boot camps”

Jeff Recor IAC 2003 The “Gap” Employers do not see academia producing security practitioners –Knowledge is still “theoretical” –Additional training needed to make student “functional” after hiring –Perception is that we produce “analysts” Academia not getting clear signals about needs from employers –No “connection point” –Market data tough to come by

Jeff Recor IAC 2003 Enhancing Educational Experience Walsh College addressed this “gap” by creating the IAC: Information Assurance Center Model is based on “pay” for services approach Leverage students desire for “hands-on” with employers need for “bodies” Managed like a profit center Reporting structure supports mission

Jeff Recor IAC 2003 IAC Focus Information Assurance Center –Directs all efforts for IA at College –Works by subscription model –Offers faculty expertise, student projects and general assistance for subscribers –Knowledge repository for all IA topics –Lab facilities will be utilized for forensic and specialized client requests in conjunction with student needs

Jeff Recor IAC 2003 Nuts and Bolts What does the IAC do: –Connects students with employers: Projects Research Direct employment –Connects students with the community: Work with non-profits Help solve problems for citizens Support local professional organizations (ISSA, ISACA, etc) Presentations to K-12

Jeff Recor IAC 2003 Nuts and Bolts Main goal is to share knowledge !

Jeff Recor IAC 2003 Nuts and Bolts How does the IAC do it? –Support Structure Director, Assistant Director reports to President Separate financials Additional sales support (corporate services structure) Shared infrastructure (servers, web site, etc) Marketing –Students create & maintain support infrastructure Created IAC knowledge repository Create client content Managed by professors

Jeff Recor IAC 2003 Nuts and Bolts Financials –Revenue generation Three tiers of support Marketing support also allowed Can pay from $500 to $25,000 to “join” Marketing sponsorships cost $7,500 –Costs: Marketing Salaries –Break-even model

Jeff Recor IAC 2003 Nuts and Bolts Knowledge Repository –Information is tiered for sharing Non-members (everyone) Access depends on subscription level –Clients consent… –Students consent… –Information collected from all sources Projects Capstones Individual assignments

Jeff Recor IAC 2003 Colleges & Universities Industry Government Certifying Bodies Membership Alliances Articulation Appointment

Jeff Recor IAC 2003 Infrastructure Support Newsletter Global Threat Alert System Knowledge repository Security Job Portal IAC Member Help Desk ( ) IAC member Chat FBI Infragard Listserv State of Michigan ISAC

Jeff Recor IAC 2003 Types of Activities Connecting Students with Employers: –Typical stuff Requests for research Requests for short term projects Requests for long term projects –Not so typical stuff Work with FBI Help the Army with DITSCAP Private sector projects

Jeff Recor IAC 2003 Examples of IAC Work Risk Assessment for Valassis State of Michigan Employee training THAW Fund Posture Review Route One executive training Budd Co Policy development GM Hacking video K-12 Cyber Awareness

Jeff Recor IAC 2003 Question and Answer 18