Cybersecurity Industry Brief

Transcription

1 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 1 Cybersecurity Industry Brief

2 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 1 About the Montgomery County Investment Board e mission of the Montgomery Workforce Investment Board (WIB) is to help businesses succeed through workforce services. e WIB is a public-private partnership that assists the County in connecting business with job seekers. e WIB oversees MontgomeryWorks and provides liaison to the County Executive and Council. e 30-member board is appointed by the County Executive in accordance with the Workforce Investment Act (WIA) of 1998 and Montgomery County Executive Order No e members are specified in law and by an executive order are largely business owners, community based organizations, educational institutions, labor unions, and others. MontgomeryWorks served over 12,000 adult and youth residents in FY12. Montgomery- Works provides core services, intensive counseling services and occupational skills training to both businesses and individuals. Business services include: Assistance in recruitment including specialized recruitments, job fairs and access to local candidates through unlimited job postings using the Maryland Workforce Exchange Interview and recruitment event space Local labor market information and research Active jobb openings in a searchable statewide database Assistance in identifying trainers and expert speakers e WIB s Strategic Plan calls for aligning all service delivery to industry needs. e Workforce Investment Board has selected three industry sectors, of which Cybersecurity is one, in support of the Strategic Plan. e industries were selected based on the following criteria: Industries that were either high growth and high demand or high wage. Examined initial industry sectors for alignment with Economic Development targets. Examined policy implications for vendor selection process; for diversity of occupations. Details are available at the MontgomeryWorks website

3 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 2 Cybersecurity Industry Brief Key Findings Cyber security is the body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access. It is a branch of computer technology known as information security as applied to computers and networks. Cybersecurity is a county and state priority. ere are close to 38,000 cybersecurty jobs in Montgomery County. Cybersecurity sub-sector makes up 5.87% of total employment in Montgomery County. For comparison, in Maryland the percentage of cybersecurity jobs in the state economy is 3.9%; in Howard County, 6.8%; and in Frederick County, 3.7%. ere are over 70 employers, some of which are the largest employers in the county, with operations related to cybersecurity. Cybersecurity sub-sector has outperformed the overall economy in terms of historic job growth over the past five years. Seven out of eleven occupations in the subsector have grown at 1%-12% rate. Location Quotients, which describe the concentration of jobs in a particular industry or occupation relative to the national average, for all occupations in the sub-sector are above the national average. Projected employment growth over the next ten years is positive for all, but two occupations. In 2012 there were approximately 1200 openings in the sub-sector from entry level jobs that require an associate s to high level jobs requiring bachelors s and above. e median hourly earnings for employees in the Cybersecurity sub-sector is $41, while the overall median hourly earnings are $26. What is Cyber Security Industry? Cyber security is the body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access. It is a branch of computer technology known as information security as applied to computers and networks. Ensuring cyber security requires coordinated efforts throughout an information system. Elements of cyber security include: Application security - encompasses measures taken throughout the application's life-cycle to prevent exceptions in the security policy of an application or the underlying system vulnerabilities through flaws in the design, development, deployment, upgrade, or maintenance of the application. Information security - (sometimes shortened to InfoSec) is the practice of defending information from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction. It is a general term that can be used regardless of the form the data may take (electronic, physical, etc.) Network security - provisions and policies adopted by a network administrator to prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources. Disaster recovery / business continuity planning - Disaster recovery (DR) is the process, policies and procedures that are related to preparing for recovery or continuation of technology infrastructure which are vital to an organization after a natural or human-induced disaster.[1] Disaster recovery is a subset of business continuity.[2] While business continuity involves planning for keeping all aspects of a business functioning in the midst of disruptive events, disaster recovery focuses on the IT or technology systems that support business functions End-user education - e integrity of company's critical resources and confidential data can be significantly affected by end-users. Educating them about the signs of malware and phishing attacks can increase overall security and make employees a vital part of a successful defense strategy. County Priority e National Institute of Standards and Technology (NIST) located in Gaithersburg announced a new partnership to establish the National Cybersecurity Center of Excellence, a public-private collaboration for accelerating the widespread Page 2

4 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 3 adoption of integrated cybersecurity tools and technologies. e State of Maryland and Montgomery County, Md., are co-sponsoring the center with NIST, which will work to strengthen U.S. economic growth by supporting automated and trustworthy e-government and e-commerce. NIST s fiscal year 2012 appropriations provided $10 million to establish the public-private partnership to operate the center. It will provide a state-of-the-art computing facility near NIST s Gaithersburg, Md., campus, where researchers from NIST will work collaboratively with both the users and vendors of cybersecurity products and services. e center will host multi-institutional, collaborative efforts that build on expertise from industry and government. Federal and State Activity Maryland has a critical mass of federal agencies and information technology companies that place it as a national epicenter of federal cybersecurity activities. Federal cybersecurity facilities include NSA, Defense Information Systems Agency (DISA), Intelligence Advanced Research Projects Activity, the National Institute of Standards and Technology, and 12 major military installations (including Fort Meade in Anne Arundel County which is home to the U.S. Cyber Command). e State of Maryland has been very active in cybersecurity including a cybersecurity summit in Current Employment in Major Industry Sectors Cybersecurity is part of the Professional, Scientific, and Technical Services sector. Overall number of jobs in the Professional, Scientific, and Technical Services sector is over 98,000. Cybersecurity related jobs constitute estimated 40% of the sector. Distribution of Employment by Industry Sector e Pathways to Cybersecurity Careers Consortium received a $4.9 million grant over three years from the U.S. Department of Labor to increase the pipeline of skilled cybersecurity professionals with appropriate industry certifications. Consortium members include workforce agencies, community colleges, businesses, industry experts, government agencies, educational institutions, and community organizations. Figure 1. Source: EMSI Complete Employment. Page 3

5 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 4 Employment in Cybersecurity Sub-Sector Cyber security specialists may be described as workers who protect the data and systems in networks that are connected to the Internet. Main occupational categories for cyber security specialists are: Computer Programmers Computer Support Specialists Computer and Information Scientists Computer Software Engineers Computer Systems Analysts Database Administrators Network and Computer Systems Administrators Network Systems and Data Analysts. Overview Jobs (2013) % Change ( ) Median Earnings 38, % $41.06/hr County Location Quotient: 2.23 Nation: 3.8% Nation: $35.89/hr Maryland Location Quotient: 1.51 Maryland: 7.9% Maryland: $38.83/hr Occupation Details SOC Description 2007 Jobs 2012 Jobs Change % Change Location Quotient 2013 Annual Openings Median Hourly Earnings Avg. Hourly Earnings Computer and Information Systems Managers 2,615 2, % $62.95 $ Management Analysts 11,310 12, % $37.41 $38.62 Computer and Information Research Scientists % $55.16 $52.19 Education Level or higher, plus work experience or higher, plus work experience Doctoral Computer Programmers 2,542 2,316 (226) (9%) $37.39 $ Software Developers, Applications 4,057 4, % $45.18 $ Software Developers, Systems Software 3,648 3, % $44.88 $ Database Administrators % $44.31 $ Network and Computer Systems Administrators 2,553 2,500 (53) (2%) $40.44 $ Computer Support Specialists 4,368 4,349 (19) 0% $28.14 $30.22 Associate's Information Security Analysts, Web Developers, and Computer Network Architects 3,392 3, % $40.40 $40.90 Computer Hardware Engineers 1, (20) (2%) $49.22 $49.68 Total 37,087 38, % 1,171 $41.06 $42.22 Source: EMSI EMSI's proprietary employment data, combined with occupation-specific percentages from the U.S. Bureau of Labor Statistics Employment Projections program. Page 4

6 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 5 Distribution of Employment by Occupation Montgomery County, Source: EMSI EMSI's proprietary employment data, combined with occupation-specific percentages from the U.S. Bureau of Labor Statistics Employment Projections program. Here Annual Openings is an estimated employment change and turnover for an occupation for a given year. is is EMSI's estimate of labor market demand for an occupation, and when combined with Related Completions (see Table 6) gives a picture of the supply and demand of the occupation in the region. e majority of openings (948) require Bachelor s or higher, plus work experience, 55 openings require Doctoral and 23 openings require Associate s. Page 5

7 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 6 Company Name Employers Employment 2012 NAICS NAICS Lockheed Martin-Information Systems & Global Services (IS&GS) International Business Machines (IBM) Research and Developmetn in the Physical, Engineering, and Life Sceinces (except Biotechnology) Computer and Computer Peripheral Equipment and Software Merchant Wholesalers Booz Allen Hamilton, Inc Administrative Management and General Management Consulting Services Terrapin Systems, Inc Administrative Management and General Management Consulting Services Research and Development in the Physical, Engineering, BAE Systems Support Solutions 400 and Life Sciences (except Biotechnology) URS Corporation Engineering Services Energy Enterprise Solutions LLC Computer Systems Design Services Opnet Technologies, Inc Custom Computer Programming Services EMC Corporation-Rockville Computer Systems Design Services DRS Signal Solutions Inc Other Communications Equipment Manufacturing Client Network Services Inc Computer Systems Design Services Hewlett Packard 200 Computer and Computer Peripheral Equipment and Software Merchant Wholesalers Digital Management, Inc Computer Systems Design Services Dataprise Inc Computer Systems Design Services ViaSat Administrative Management and General Management Consulting Services Infozen, Inc Computer Systems Design Services Comtech Mobile Datacom Corporation Custom Computer Programming Services Infozen, Inc Computer Systems Design Services Catapult Technology, Ltd Computer Systems Design Services Abacus Technologies Corporation Computer Systems Design Services 3eTi Technologies Wireless Telecommunications Carriers (except Satel- FCN Technology Solutions 60 Not available Page 6

8 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 7 Employers Company Name Communications Supply Corporation Employment 2012 NAICS NAICS Wireless Telecommunications Carriers (except Satellite) Digital Infuzion, Inc Custom Computer Programming Services TISTA Science and Technology Corporation Computer Systems Design Services Attronica Computers, Inc Computer and Computer Peripheral Equipment and Software Merchant Corporate Network Services, Inc Computer Systems Design Services DRS Defense Solutions Headquarters Other Communications Equipment Manufacturing Fidelis Security Systems, Inc Software Publishers GMV Space Systems, Inc Other Scientific and Technical Consulting Services JackBe Corporation Custom Computer Programming Services Systalex Corporation Computer Systems Design Services Ipx International Systems, Inc. 30 Not available Not available KoolSpan 20 Computer and Computer Peripheral Equipment and Software Merchant Sonatype, Inc. 10 Not available Caelum Research Corporation Custom Computer Programming Services Fedstore Corporation 10 Computer and Computer Peripheral Equipment and Software Merchant SafeNet 10 Not available VariQ Other Computer Related Services Alion Science and Technologly Corp Other Computer Related Services Arxan Technologies Other Computer Related Services Banyan Technology Solutions, In Computer Systems Design Services Advanced Digital Forensic Software Publishers Federal IT Consultants (FEDITC) Computer Systems Design Services Longview International Technology Solutions, Inc. 1 Not available Page 7

9 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:50 AM Page 8 Employers Company Name Employment 2012 NAICS NAICS LORE Systems Wired Telecommunications Carriers Aster Engineering, Inc Computer Systems Design Services Triumfant, Inc. 1 Not available Westerly Enterprises Onmicrosoft Computer Systems Design Services Montgomery County Growth Projected Employment Growth 2012 Jobs 38, Jobs 39,767 Change ( ) 1,708 % Change ( ) 4.5% Jobs (2013) 31,851 National Location Quotient: 2.23 % Change ( ) 4.5 Nation: 7.9% Median Earnings $41.06/hr. Nation: $35.89/hr. Page 8

10 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:50 AM Page 9 Occupation 2012 Jobs 2015 Jobs Change % Change Computer and Information Systems 2,649 2, % Managers ( ) Management Analysts ( ) 12,030 13,337 1,307 11% Computer and Information Research % Scientists ( ) Computer Programmers ( ) 2,316 2, % Software Developers, Applications ( ) 4,155 4, % Software Developers, Systems Software (15-3,906 4, % 1133) Database Administrators ( % 1141) Network and Computer Systems Administrators 2,500 2, % ( ) Computer Support Specialists ( ) 4,349 4, % Information Security Analysts, Web Developers, and 3,416 3, % Computer Network Architects ( ) Computer Hardware Engineers ( ) % Page 9

11 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:50 AM Page 10 Educational programs Four institutions in Montgomery County offer programs for occupations in cybersecurity CIP Code Institution Title Award Level American Career Institute- Wheaton System, Networking, and LAN/WAN Management/Manager 2011 Completions Award of less than 1 academic year DeVry University-Maryland Computer Systems Networking and Telecommunications Masters 1 Management Information Systems, General Masters Montgomery College Computer and Information Sciences, General Associates 33 Computer Programming/Programmer, General Web Page, Digital/Multimedia and Information Resources Design Award of at least 1 but less than 2 academic years 11 Award of at least 1 but less than 2 academic years 2 Web Page, Digital/Multimedia and Information Resources Design Associates 15 Computer Systems Networking and Telecommunications Computer and Information Systems Security/Information Award of at least 1 but less than 2 academic years Assurance Associates 6 Washington Adventist Information University Science/Studies Bachelors Computer Science Bachelors 3 Source: EMSI Workforce Module. ere are 51 institutions in Maryland, 13 institutions in the District of Columbia and 17 institutions of higher education in Northern Virginia that offer cybersecurity related training programs. Page 10

12 13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:50 AM Page 11