1 Goal National Centers of Academic Excellence in Information Assurance/Cyber Defense for Two-Year Education (CAE2Y) Program Criteria for Measurement Jointly Sponsored by the National Security Agency (NSA) and the Department of Homeland Security (DHS) The goal of the CAE IA/CD for Two-Year Education program is to proactively increase our understanding of robust IA/CD technology, policy and practices that will enable our Nation to effectively prevent and respond to a catastrophic cyber event. This program will contribute significantly to the advancement of state-of-the-art IA/CD knowledge and practice. Vision The vision for the CAE2Y program is to: 1. Provide programs that commit to excellence in the field of Information Assurance and Cyber Defense education at community and technical college and government training institutions. 2. Provide innovative, comprehensive and multidisciplinary education and training in the IA/CD field. 3. Strengthen the cybersecurity workforce by providing IA/CD education and training through degree and certification programs at community and technical colleges and government training centers. 4. Build an effective education pipeline model with K 12 schools to encourage students at an early age to enter IA/CD fields of study. 5. Provide the Nation with a pipeline of qualified students poised to become the future skilled technical workforce. 6. Continuously improve the quality of IA/CD programs, curriculum, faculty, students and other institutions. CAE 2Y Program Eligibility and Summary The CAE2Y Program is open to current regionally accredited two-year community colleges, technical schools, state or federally endorsed IA/Cybersecurity training centers or U.S. Government IA/Cybersecurity training centers. All institutions must hold current regional accreditation as outlined by the Department of Education (http://ope.ed.gov/accreditation). Overall CAE2Y requirements are: Demonstration of program outreach, student development, IA/CD Center establishment and maintenance, IA/CD faculty, and student curriculum path. Successful mapping of the institution s curriculum to the two-year core Knowledge Units (KUs). Completion of these requirements will recognize the institution with designation at the institution level as a NSA/DHS National Center of Academic Excellence for Information Assurance/Cyber Defense for Two-Year Education (CAE2Y). Institutions shall demonstrate that students can successfully complete the CAE2Y course of study and receive recognition on a transcript, diploma, etc. CAE 2Y Criteria Page 1 September 2013
2 Focus Area (Optional): 2014 NSA/DHS National CAE 2Y Criteria All CAEs have the option to apply for one or more CAE IA/CD Focus Area designations. The criteria include: Successful mapping of the institution s curriculum to all of the KUs identified in the Focus Area. Demonstration that a student can reasonably complete the necessary course of study to include all KUs identified in the Focus Area. The institution must provide student certificates to those that complete the FA course of study. The certificates must clearly identify the specific Focus Area achieved. Knowledge Units: The KU mapping will require the institution to address how it meets each Core and chosen Optional KU. An institution has many ways to demonstrate how a program meets/fulfills a KU. Some examples include: course syllabus, course outline, student assignments, lab assignment, modules in a course/collection of courses, and certifications (CCNA, CISSP, etc.). Required information will include: course syllabi, course outlines and justifications showing where and how the KUs are addressed in the curriculum. One course may fulfill the requirements of multiple KUs, and multiple courses may fulfill the requirements of a single KU. Program Evaluation: Institutions will be evaluated by CAE Program staff with assistance from Subject Matter Experts. The last phase of the criteria may be an on-site evaluation focused on course content, course relevance, laboratory facilities, and faculty involvement. CAE2Y Designation: Successful institutions will be designated as a NSA/DHS National Center of Academic Excellence for Information Assurance/Cyber Defense for Two-Year Education (CAE2Y). Due to the requirement to have all institutions designated by 2014, designation periods granted during this designation cycle will range from three to six years from the institution s application. This will allow a more distributed range of re-applications in the future. Subsequent cycles will revert to a five-year cycle. The initial designation period will be dependent upon timing of the application, with allowances for changes by the program office. Future criteria (including KUs and FAs) will continue to be reviewed annually and strengthened as appropriate to keep pace with the evolving nature of IA/CD. Designation as a CAE2Y does not carry a commitment of funding from NSA or DHS. CAE 2Y Criteria Page 2 September 2013
3 CAE2Y Program requirements: 2014 NSA/DHS National CAE 2Y Criteria 1. Outreach/Collaboration. The institution must demonstrate how IA/CD is extended beyond the normal boundaries of the Institution. Overall Point value: 16 points minimum/32 points maximum a. Shared Curriculum (e.g., IA/Cybersecurity teaching materials provided to technical schools, universities, community colleges, K-12 schools, etc.) or shared faculty (e.g., Faculty on IA/Cybersecurity curriculum development committee for more than one institution) b. Evidence that the program is providing students with access to IA/Cybersecurity practitioners (e.g., Guest lecturers working in IA/Cybersecurity industry, government, faculty exchange program with industry and/or government, etc.) c. Evidence of Articulation/Transfer agreements with 4 year institutions offering a concentration or IA/Cybersecurity degrees/areas of study/track or certificates d. Evidence of agreements with high schools to facilitate awareness and training for faculty/administration/students Point Value: 2 points per school/6 points maximum e. Sponsorship/participation in Cybersecurity/IA competitions Point Value: 2 points each/6 points maximum f. Community Outreach. Sponsor community events such as cybersecurity education for K-12, adult education centers, senior groups, camps, summer programs, state homeland security, first responders and industry (e.g., Schools in a target region are encouraged to participate in cybersecurity education events, like community computer diagnostic check-ups and IA awareness days) CAE 2Y Criteria Page 3 September 2013
4 2014 NSA/DHS National CAE 2Y Criteria 2. Center for IA/CD Education. The institution must have a formal organization for use as a resource for faculty and students. The Center should provide program guidance, general IA/CD information and promote collaboration and interaction with other students, faculty, and programs. The Center and website must be operational, dynamic and current. (For the purpose of this document, the word Center is used in a general sense). Overall Point Value: 14 points minimum/20 points maximum a. Show formal documentation of the designation of the IA/CD/Cybersecurity Center and provide a hyperlink to the Center. Point Value: 5 points required b. Demonstrate the Center website is operational, dynamic and current: contains up-to-date links to key IA/CD resources such as other academic institutions, government sites, conferences, workshops, cyber competitions, IA/CD news, center POCs, IA/CD courses, etc. The website must be easy to find and easily accessible. Demonstrate how current and potential students are informed of the website. Point Value: 5 points required c. Provide evidence that subscription-based IA/CD journals are available for student and faculty use on the website. Demonstrate that hyperlinks to key IA/CD websites are provided in course syllabus and/or professors webpage or provided to students during class instruction. /2 points required d. Demonstrate that physical and/or virtual IA/CD labs and equipment are available and used for hands-on learning (provide examples of student lab projects/exercises/case studies syllabus, links to assignments, etc.). /2 points required CAE 2Y Criteria Page 4 September 2013
5 2014 NSA/DHS National CAE 2Y Criteria 3. IA/CD Student Development. The program provides development opportunities for students that lead to a two year associate s degree or a certificate in an IA/CD discipline. Overall Point Value: 12 points minimum /31 points maximum a. Provide evidence of IA/Cybersecurity degrees/areas of study/track or certificates (e.g., List of IA/Cybersecurity Associates degrees and/or certificates in IA/Cybersecurity curriculum as listed on the institution s website or catalog) b. Demonstrate how the institution provides applied training to students (e.g., Courses containing hands-on or lab training) Point Value: 2 points per course/6 points maximum c. Provide evidence that students who participate sufficiently in the IA/CD curriculum (i.e., take and pass courses that satisfy all of the mandatory KU requirements) will receive a certificate, or a reference to completing the CAE2Y course of study on their transcript and/or degree. Provide evidence in the form of a letter, transcript notation, and/or degree (may be redacted) Point Value: 10 points/students are taking the CAE2Y curriculum path 5 points/students have an opportunity to take the IA/CD path d. Provide evidence that students who participate sufficiently in the IA/CD curriculum for a Focus Area (i.e., take and pass courses that satisfy all of the mandatory KU requirements for that Focus Area) will receive certificate, or a reference to a focus area on their transcript and/or degree (may be redacted). Point Value: 10 points/students are taking the IA/CD curriculum path 5 points/students have the opportunity to take the IA/CD path 4. IA/CD as a Multidisciplinary Science. The institution demonstrates that IA/CD is not treated as a separate discipline, but as a multidisciplinary science with elements of IA/CD knowledge incorporated into various disciplines. Overall Point Value: 10 points minimum/15 points maximum a. Evidence that IA/CD is taught as modules in existing non-ia courses and that nontechnical/non-ia students are being introduced to IA/CD (e.g., business courses teaching Information Security modules, health courses incorporating HIPAA regulations, etc.) b. Evidence that IA/CD programs (certificate and/or degree programs) require non-technical courses of study (e.g., ethics, policy, and business) c. Availability of non-credit/credit professional development courses in IA/CD (e.g., First responders, K-12 teachers) CAE 2Y Criteria Page 5 September 2013
6 2014 NSA/DHS National CAE 2Y Criteria 5. Practice of IA/Cybersecurity Encouraged Throughout the Institution: The academic program must demonstrate how the institution encourages the practice of IA, not merely that it teaches IA. Overall Point Value: 8 points minimum/20 points maximum a. Provide a link to the institution s IA security plan and/or policies b. Provide evidence of institution designated Information System Security Officer or equivalent. Provide name, position and job description for person or persons responsible for information security. c. Provide evidence of the implementation of the institution IA security plan to encourage IA awareness throughout the campus (e.g., Students, faculty and staff are required to take computer based training or on-line tutorials; a security banner statement present on institution computers; security related help screens are available; institution-wide seminars are held on the importance of IA, etc - 2pts awarded per item). Point Value: 2 points minimum (required)/10 points maximum 6. IA/CD Faculty. Faculty assigned specifically to teach and/or develop IA/CD courses/curriculum/modules. Overall Point Value: 11 points minimum/15 points maximum a. Identify, by name, faculty member with overall responsibility for the IA/Cybersecurity instructional program. Provide evidence, i.e., verification letter and/or job description. Provide link to biography or CV. b. Identify, by name, additional IA/Cybersecurity faculty members teaching IA/Cybersecurity courses within the department that sponsors IA/Cybersecurity programs. Provide link to biography or CV. Point Value: 1 point per faculty/5 points maximum c. Provide evidence in the form of curriculum vitae supporting the faculty member s qualifications to teach IA/Cybersecurity. At least one IA/Cybersecurity faculty member will be expected to be professionally certified with at least one of the IA/Cybersecurity certifications listed under DOD Directive 8570, such as CISSP, CISA, CISM, CEH, etc. (see attached DoD 8570 list). A minimum of 15 hrs of graduate coursework and/or appropriate experience in a related field could be considered in lieu of a professional certification. Note: Can be same individual as 5a/b. CAE 2Y Criteria Page 6 September 2013
BOARD OF REGENTS SUMMARY OF ITEM FOR ACTION, INFORMATION, OR DISCUSSION TOPIC: University of Maryland Eastern Shore: Master of Science in Cybersecurity Engineering Technology COMMITTEE: Education Policy
Faculty of Education, Health and Sciences PROGRAMME SPECIFICATION Postgraduate Diploma / Master of Science Psychology Valid from September 2012 www.derby.ac.uk/ehs 1 CONTENTS SECTION ONE: GENERAL INFORMATION...
Criteria for the Accreditation of MBA Programmes 1 2 1 INTRODUCTION Framework & Eligibility 1.1 This document sets out the criteria for MBA programme accreditation. While setting the standards that accredited
110101001101101101010011000 11011010100110110101001100 11011010011011010100110000 10100110110101001100010010 Protecting Information The Role of Community Colleges in Cybersecurity Education A Report from
GUIDE TO EVALUATING INSTITUTIONS A Publication of the Accrediting Commission for Community and Junior Colleges Western Association of Schools and Colleges JULY 2013 Edition ACCJC/WASC 10 Commercial Blvd.
James Madison University Best Practices for Online Programs Updated December 2013 JMU Best Practices for Online Programs I. Introduction... 2 II. Institutional Context and Commitment... 2 III. Curriculum
Southern Association of Colleges and Schools Commission on Colleges 1866 Southern Lane Decatur, Georgia 30033-4097 DIRECT ASSESSMENT COMPETENCY-BASED EDUCATIONAL PROGRAMS Policy Statement Academic credit
Introduction 1 ACCREDITING COMMISSION FOR COMMUNITY AND JUNIOR COLLEGES Western Association of Schools and Colleges Accreditation Standards (Adopted June 2014) The primary purpose of an ACCJC accredited
Characteristics of EXCELLENCE in Higher Education Requirements of Affiliation and Standards for Accreditation Online Version - Revised March 2009 (pages xii and xiii) Middle States Commission on Higher
DISTANCE EDUCATION PROGRAMS Interregional Guidelines for the Evaluation of Distance Education (Online Learning) Middle States Commission on Higher Education DISTANCE EDUCATION PROGRAMS Interregional Guidelines
DETC Accreditation Handbook 2014 C.9. Policy on Degree Programs 9. Policy on Degree Programs The Policy on Degree Programs sets forth the Commission s policies for the accreditation of distance study institutions
Standards for Accreditation of Master s Programs in Library and Information Studies Adopted by approval of the Council of the American Library Association, February 2, 2015 Purpose of Accreditation Introduction
Resource Manual for the Principles of Accreditation: Foundations for Quality Enhancement Southern Association of Colleges and Schools Commission on Colleges 1866 Southern Lane Decatur, Georgia 30033-4097
NEW ENGLAND ASSOCIATION OF SCHOOLS AND COLLEGES COMMISSION ON INSTITUTIONS OF HIGHER EDUCATION 3 Burlington Woods, Suite 100, Burlington, MA 01803-4514 Voice: (781) 425 7785 Fax: (781) 425 1001 Web: http://cihe.neasc.org
Primary Years Programme Guide to school authorization: Primary Years Programme Primary Years Programme Guide to school authorization: Primary Years Programme Published October 2010 International Baccalaureate
Standards and Guidelines for Quality Assurance in the European Higher Education Area (ESG) Endorsed by the Bologna Follow-Up Group in September 2014 Subject to approval by the Ministerial Conference in
W. Cary Edwards School of Nursing RN-BSN/MSN Student Handbook 2015-2016 Michelle Mijares BSN 14 Gary Fassler BSN 08, MSN 11 Contents ~~~ 1 Message from the Dean 2 W. Cary Edwards School of Nursing 2 Mission
WASC Supplement for Schools with Online Learning as the Primary Delivery System Supplement to WASC Self-Study Documents 2008 Pilot Edition CONTENTS Introduction...1 Acknowledgements...1 Focus on Learning
Ministry of Education Cooperative Education and Other Forms of Experiential Learning POLICIES AND PROCEDURES FOR ONTARIO SECONDARY SCHOOLS 2000 Contents Preface...............................................................
Commission on Colleges Southern Association of Colleges and Schools Best Practices For Overview to the Best Practices These Best Practices are divided into five separate components, each of which addresses
Comprehensive Guidance Document for Program Registration Office of Higher Education New York State Education Department State Education Building 89 Washington Avenue Albany, New York 12234 firstname.lastname@example.org
Part 1: General Portfolio Instructions Part 1 provides the following key resources, guidelines, and support: How to Use the Portfolio Instructions outlines the content of these instructions and provides
East Carolina University College of Business Graduate Programs Information Packet Revised 7/15/2015 Contents About the College of Business...2 Master of Business Administration Program...3 MBA...3 MD/MBA...4
The University of Kansas 1 Doctor of Philosophy in Why study psychology? Because the understanding of mind, behavior, and the human experience is best achieved through the rigorous application of the scientific
Online Instruction Task Force Final Report and Recommendations: Guidelines and Standards of Practice for Online Programs and Courses at Wayne State University July 2012 Contents I. Introduction... 3 II.
TEXAS WOMAN'S UNIVERSITY School Psychology Program Approved by the National Association of School Psychologists and the Texas Higher Education Coordinating Board Doctoral Student Handbook School Psychology