NICE 2015 Conference

Transcription

1 NICE 2015 Conference Mission: Impossible? How to Advance the Skills of the Cyber Workforce When You ve Got Quality and Speed but Aren t Cheap November 4, 2015 Presenters: Allison Frankoski, Program Director Randy Trzeciak, Program Director and CERT Technical Staff

2 About Your Presenters Randy Trzeciak Randy currently holds a dual appointment between the Heinz College and the CERT Program at the Software Engineering Institute. He is the Technical Manager of CERT s Enterprise Threat and Vulnerability Management Team and the CERT Insider Threat Center. Randy is also adjunct faculty and director of the Master of Science in Information Security Policy & Management (MSISPM) program for Heinz College s School of Information Systems and Management. Allison Frankoski Allison is the director of the part time, online Master of Science in Information Technology (MSIT) program at Heinz College s School of Information Systems and Management. With over 25 years of experience at CMU in career services, computing services and program administration, Allison launched the online MSIT Information Security & Assurance program in She also serves on the Anita Borg Institute s Grace Hopper Conference Scholarship Committee.

3 What is the Software Engineering Institute / CERT Program? Software Engineering Institute Federally Funded Research and Development Center embedded at CMU CERT Program - established to coordinate response to internet security, currently has more than 150 cybersecurity professionals SEI Faculty (adjunct) teach Information Security, Project Management, Policy, Risk, and other courses

4 Mission: Impossible? How to Advance the Skills of the Cyber Workforce When You ve Got Quality and Speed but Aren t Cheap

5 What makes us GOOD HIGH QUALITY? o CMU is a CAEIAE (Center of Academic Excellence in Information Assurance Education) o Heinz College s interdisciplinary approach to graduate level education Information Security + Technology + Policy + Management Analytical, problem-solving and communication skills o Collaboration with Software Engineering Institute s CERT HEINZ / CERT joint appointment: Program Director (Randy Trzeciak) Technical staff teach information security classes Experiential learning through projects, internships STEPfwd cyber workforce development tool

6 What makes us HIGH QUALITY? o Suite of programs targeted at IS professionals in all stages of their career MSISPM aligned with NICE Framework MSIT part-time sister program to MSISPM CISO executive education for senior IS leaders o Cross-collaboration, mentoring amongst these programs o Students and Alumni are Leaders in Cyber, some examples: MSISPM student team won first round of the Deloitte Foundation Cyber Threat Competition MSISPM student team competing in the finals of the Cyber Analyst Challenge, sponsored by Temple & Lockheed Martin 1 MSIT and 2 MSISPM alumni are serving as researchers and teachers the Army s Cyber Institute at West Point MSIT grad is CISO of Georgia s Dept of HHS

7 How are we EFFICIENT? MSISPM: Full-time, on-campus, 3-4 semesters MSIT-Infosec: Part-time, online or evening, 2-3 years CISO Certificate: Executive education, online, 6 months Curriculum: We can update core classes within weeks (but should we?) 3-1-1: 5 year Bachelor and Master accelerated option Custom Training: Leverage available assets and can act quickly STEPfwd: CERT s cyber workforce development tool is available for students and industry

8 How can we be CHEAPER? Scholarships! American Security Professional Scholarship (we made our own award to increase number of U.S. Citizens in MSISPM to better meet employer demand.)

9 How can we be CHEAPER? Virtual Training Environments! STEPfwd (Simulation, Training, Exercise Platform) CERT instructors use this tool for hands-on in-class labs at no additional cost to students learning platform enables cybersecurity professionals to use knowledge, skills, and experience to individually make improvements and collectively move the organization forward. makes components from traditional classroom training, including lectures, slide presentations, hands-on labs, team cyber exercises, and quizzes, available from the convenience of a web browser. STEPfwd is a flexible, multi-media, e-learning environment that students can access anywhere, anytime.

10 How can we be CHEAPER? Distance Learning! MSIT tuition is the same for campus and distance the savings come from NOT having to leave your job and salary to earn your master s degree. CISO offers a discounted rate for government employees and alumni from Heinz College.

11 KEY TAKEAWAYS Is your education program as cheap as you think it is? If not, what will you do? Encourage talented people to pursue the education they dream of they just might get it for FREE!

12 NICE 2015 Conference Mission: Impossible? How to Advance the Skills of the Cyber Workforce When You ve Got Quality and Speed but Aren t Cheap QUESTIONS??? Presenters: Randy Trzeciak, Allison Frankoski, randallt@cmu.edu allison@cmu.edu