Cybersecurity Industry Brief

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 1 Cybersecurity Industry Brief

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 1 About the Montgomery County Investment Board e mission of the Montgomery Workforce Investment Board (WIB) is to help businesses succeed through workforce services. e WIB is a public-private partnership that assists the County in connecting business with job seekers. e WIB oversees MontgomeryWorks and provides liaison to the County Executive and Council. e 30-member board is appointed by the County Executive in accordance with the Workforce Investment Act (WIA) of 1998 and Montgomery County Executive Order No. 159-02. e members are specified in law and by an executive order are largely business owners, community based organizations, educational institutions, labor unions, and others. MontgomeryWorks served over 12,000 adult and youth residents in FY12. Montgomery- Works provides core services, intensive counseling services and occupational skills training to both businesses and individuals. Business services include: Assistance in recruitment including specialized recruitments, job fairs and access to local candidates through unlimited job postings using the Maryland Workforce Exchange Interview and recruitment event space Local labor market information and research Active jobb openings in a searchable statewide database Assistance in identifying trainers and expert speakers e WIB s Strategic Plan calls for aligning all service delivery to industry needs. e Workforce Investment Board has selected three industry sectors, of which Cybersecurity is one, in support of the Strategic Plan. e industries were selected based on the following criteria: Industries that were either high growth and high demand or high wage. Examined initial industry sectors for alignment with Economic Development targets. Examined policy implications for vendor selection process; for diversity of occupations. Details are available at the MontgomeryWorks website www.montgomeryworks.com

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 2 Cybersecurity Industry Brief Key Findings Cyber security is the body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access. It is a branch of computer technology known as information security as applied to computers and networks. Cybersecurity is a county and state priority. ere are close to 38,000 cybersecurty jobs in Montgomery County. Cybersecurity sub-sector makes up 5.87% of total employment in Montgomery County. For comparison, in Maryland the percentage of cybersecurity jobs in the state economy is 3.9%; in Howard County, 6.8%; and in Frederick County, 3.7%. ere are over 70 employers, some of which are the largest employers in the county, with operations related to cybersecurity. Cybersecurity sub-sector has outperformed the overall economy in terms of historic job growth over the past five years. Seven out of eleven occupations in the subsector have grown at 1%-12% rate. Location Quotients, which describe the concentration of jobs in a particular industry or occupation relative to the national average, for all occupations in the sub-sector are above the national average. Projected employment growth over the next ten years is positive for all, but two occupations. In 2012 there were approximately 1200 openings in the sub-sector from entry level jobs that require an associate s to high level jobs requiring bachelors s and above. e median hourly earnings for employees in the Cybersecurity sub-sector is $41, while the overall median hourly earnings are $26. What is Cyber Security Industry? Cyber security is the body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access. It is a branch of computer technology known as information security as applied to computers and networks. Ensuring cyber security requires coordinated efforts throughout an information system. Elements of cyber security include: Application security - encompasses measures taken throughout the application's life-cycle to prevent exceptions in the security policy of an application or the underlying system vulnerabilities through flaws in the design, development, deployment, upgrade, or maintenance of the application. Information security - (sometimes shortened to InfoSec) is the practice of defending information from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction. It is a general term that can be used regardless of the form the data may take (electronic, physical, etc.) Network security - provisions and policies adopted by a network administrator to prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources. Disaster recovery / business continuity planning - Disaster recovery (DR) is the process, policies and procedures that are related to preparing for recovery or continuation of technology infrastructure which are vital to an organization after a natural or human-induced disaster.[1] Disaster recovery is a subset of business continuity.[2] While business continuity involves planning for keeping all aspects of a business functioning in the midst of disruptive events, disaster recovery focuses on the IT or technology systems that support business functions End-user education - e integrity of company's critical resources and confidential data can be significantly affected by end-users. Educating them about the signs of malware and phishing attacks can increase overall security and make employees a vital part of a successful defense strategy. County Priority e National Institute of Standards and Technology (NIST) located in Gaithersburg announced a new partnership to establish the National Cybersecurity Center of Excellence, a public-private collaboration for accelerating the widespread Page 2

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 3 adoption of integrated cybersecurity tools and technologies. e State of Maryland and Montgomery County, Md., are co-sponsoring the center with NIST, which will work to strengthen U.S. economic growth by supporting automated and trustworthy e-government and e-commerce. NIST s fiscal year 2012 appropriations provided $10 million to establish the public-private partnership to operate the center. It will provide a state-of-the-art computing facility near NIST s Gaithersburg, Md., campus, where researchers from NIST will work collaboratively with both the users and vendors of cybersecurity products and services. e center will host multi-institutional, collaborative efforts that build on expertise from industry and government. Federal and State Activity Maryland has a critical mass of federal agencies and information technology companies that place it as a national epicenter of federal cybersecurity activities. Federal cybersecurity facilities include NSA, Defense Information Systems Agency (DISA), Intelligence Advanced Research Projects Activity, the National Institute of Standards and Technology, and 12 major military installations (including Fort Meade in Anne Arundel County which is home to the U.S. Cyber Command). e State of Maryland has been very active in cybersecurity including a cybersecurity summit in 2010. Current Employment in Major Industry Sectors Cybersecurity is part of the Professional, Scientific, and Technical Services sector. Overall number of jobs in the Professional, Scientific, and Technical Services sector is over 98,000. Cybersecurity related jobs constitute estimated 40% of the sector. Distribution of Employment by Industry Sector e Pathways to Cybersecurity Careers Consortium received a $4.9 million grant over three years from the U.S. Department of Labor to increase the pipeline of skilled cybersecurity professionals with appropriate industry certifications. Consortium members include workforce agencies, community colleges, businesses, industry experts, government agencies, educational institutions, and community organizations. Figure 1. Source: EMSI 2013.1 Complete Employment. Page 3

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 4 Employment in Cybersecurity Sub-Sector Cyber security specialists may be described as workers who protect the data and systems in networks that are connected to the Internet. Main occupational categories for cyber security specialists are: Computer Programmers Computer Support Specialists Computer and Information Scientists Computer Software Engineers Computer Systems Analysts Database Administrators Network and Computer Systems Administrators Network Systems and Data Analysts. Overview Jobs (2013) % Change (2007-2012) Median Earnings 38,851 2.60% $41.06/hr County Location Quotient: 2.23 Nation: 3.8% Nation: $35.89/hr Maryland Location Quotient: 1.51 Maryland: 7.9% Maryland: $38.83/hr Occupation Details SOC Description 2007 Jobs 2012 Jobs Change % Change 11-3021 2012 Location Quotient 2013 Annual Openings Median Hourly Earnings Avg. Hourly Earnings Computer and Information Systems Managers 2,615 2,649 34 1% 2.14 677 $62.95 $64.52 13-1111 Management Analysts 11,310 12,030 720 6% 2.81 115 $37.41 $38.62 Computer and Information Research 15-1111 Scientists 761 852 91 12% 7.75 55 $55.16 $52.19 Education Level or higher, plus work experience or higher, plus work experience Doctoral 15-1131 Computer Programmers 2,542 2,316 (226) (9%) 1.58 52 $37.39 $38.56 15-1132 Software Developers, Applications 4,057 4,155 98 2% 1.88 51 $45.18 $48.19 15-1133 Software Developers, Systems Software 3,648 3,906 258 7% 2.47 41 $44.88 $44.48 15-1141 Database Administrators 827 893 66 8% 1.95 53 $44.31 $43.92 15-1142 Network and Computer Systems Administrators 2,553 2,500 (53) (2%) 1.83 54 $40.44 $41.82 15-1159 Computer Support Specialists 4,368 4,349 (19) 0% 1.69 23 $28.14 $30.22 Associate's 15-1179 17-2061 Information Security Analysts, Web Developers, and Computer Network Architects 3,392 3,416 24 1% 2.38 26 $40.40 $40.90 Computer Hardware Engineers 1,014 994 (20) (2%) 3.43 24 $49.22 $49.68 Total 37,087 38,059 972 3% 1,171 $41.06 $42.22 Source: EMSI 2013.2. EMSI's proprietary employment data, combined with occupation-specific percentages from the U.S. Bureau of Labor Statistics Employment Projections program. Page 4

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 5 Distribution of Employment by Occupation Montgomery County, 2012-2017 Source: EMSI 2013.2. EMSI's proprietary employment data, combined with occupation-specific percentages from the U.S. Bureau of Labor Statistics Employment Projections program. Here Annual Openings is an estimated employment change and turnover for an occupation for a given year. is is EMSI's estimate of labor market demand for an occupation, and when combined with Related Completions (see Table 6) gives a picture of the supply and demand of the occupation in the region. e majority of openings (948) require Bachelor s or higher, plus work experience, 55 openings require Doctoral and 23 openings require Associate s. Page 5

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 6 Company Name Employers Employment 2012 NAICS NAICS Lockheed Martin-Information Systems & Global Services (IS&GS) 5000 541712 International Business Machines (IBM) 1500 423430 Research and Developmetn in the Physical, Engineering, and Life Sceinces (except Biotechnology) Computer and Computer Peripheral Equipment and Software Merchant Wholesalers Booz Allen Hamilton, Inc. 1000 541611 Administrative Management and General Management Consulting Services Terrapin Systems, Inc. 500 541519 Administrative Management and General Management Consulting Services Research and Development in the Physical, Engineering, BAE Systems Support Solutions 400 and Life Sciences (except Biotechnology) 541712 URS Corporation 400 541330 Engineering Services Energy Enterprise Solutions LLC 300 541512 Computer Systems Design Services Opnet Technologies, Inc. 300 541511 Custom Computer Programming Services EMC Corporation-Rockville 300 541512 Computer Systems Design Services DRS Signal Solutions Inc 300 334290 Other Communications Equipment Manufacturing Client Network Services Inc 200 541512 Computer Systems Design Services Hewlett Packard 200 Computer and Computer Peripheral Equipment 42430 and Software Merchant Wholesalers Digital Management, Inc. 200 541512 Computer Systems Design Services Dataprise Inc. 140 541512 Computer Systems Design Services ViaSat 100 541611 Administrative Management and General Management Consulting Services Infozen, Inc. 90 541512 Computer Systems Design Services Comtech Mobile Datacom Corporation 80 541511 Custom Computer Programming Services Infozen, Inc. 80 541512 Computer Systems Design Services Catapult Technology, Ltd 80 541512 Computer Systems Design Services Abacus Technologies Corporation 70 541512 Computer Systems Design Services 3eTi Technologies 60 517210 Wireless Telecommunications Carriers (except Satel- FCN Technology Solutions 60 Not available Page 6

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:49 AM Page 7 Employers Company Name Communications Supply Corporation 60 517210 Employment 2012 NAICS NAICS Wireless Telecommunications Carriers (except Satellite) Digital Infuzion, Inc. 50 541511 Custom Computer Programming Services TISTA Science and Technology Corporation 50 541512 Computer Systems Design Services Attronica Computers, Inc. 50 423430 Computer and Computer Peripheral Equipment and Software Merchant Corporate Network Services, Inc. 40 541512 Computer Systems Design Services DRS Defense Solutions Headquarters 40 334290 Other Communications Equipment Manufacturing Fidelis Security Systems, Inc. 30 511210 Software Publishers GMV Space Systems, Inc. 30 541690 Other Scientific and Technical Consulting Services JackBe Corporation 30 541511 Custom Computer Programming Services Systalex Corporation 30 541512 Computer Systems Design Services Ipx International Systems, Inc. 30 Not available Not available KoolSpan 20 Computer and Computer Peripheral Equipment 423430 and Software Merchant Sonatype, Inc. 10 Not available Caelum Research Corporation 10 541511 Custom Computer Programming Services Fedstore Corporation 10 Computer and Computer Peripheral Equipment 423430 and Software Merchant SafeNet 10 Not available VariQ 10 541519 Other Computer Related Services Alion Science and Technologly Corp. 10 541711 Other Computer Related Services Arxan Technologies 10 541519 Other Computer Related Services Banyan Technology Solutions, In. 10 541512 Computer Systems Design Services Advanced Digital Forensic 1 511210 Software Publishers Federal IT Consultants (FEDITC) 1 541512 Computer Systems Design Services Longview International Technology Solutions, Inc. 1 Not available Page 7

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:50 AM Page 8 Employers Company Name Employment 2012 NAICS NAICS LORE Systems 1 517110 Wired Telecommunications Carriers Aster Engineering, Inc. 1 541512 Computer Systems Design Services Triumfant, Inc. 1 Not available Westerly Enterprises Onmicrosoft 1 541512 Computer Systems Design Services Montgomery County Growth Projected Employment Growth 2012 Jobs 38,059 2015 Jobs 39,767 Change (2012-2015) 1,708 % Change (2012-2015) 4.5% Jobs (2013) 31,851 National Location Quotient: 2.23 % Change (2012-2015) 4.5 Nation: 7.9% Median Earnings $41.06/hr. Nation: $35.89/hr. Page 8

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:50 AM Page 9 Occupation 2012 Jobs 2015 Jobs Change % Change Computer and Information Systems 2,649 2,675 26 1% Managers (11-3021) Management Analysts (13-1111) 12,030 13,337 1,307 11% Computer and Information Research 852 869 17 2% Scientists (15-1111) Computer Programmers (15-1131) 2,316 2,312-4 0% Software Developers, Applications (15-1132) 4,155 4,271 116 3% Software Developers, Systems Software (15-3,906 4,030 124 3% 1133) Database Administrators (15-893 933 40 4% 1141) Network and Computer Systems Administrators 2,500 2,562 62 2% (15-1142) Computer Support Specialists (15-1159) 4,349 4,350 1 0% Information Security Analysts, Web Developers, and 3,416 3,452 36 1% Computer Network Architects (15-1179) Computer Hardware Engineers (17-2061) 994 976-18 -2% Page 9

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:50 AM Page 10 Educational programs Four institutions in Montgomery County offer programs for occupations in cybersecurity CIP Code Institution Title Award Level 11.1002 American Career Institute- Wheaton System, Networking, and LAN/WAN Management/Manager 2011 Completions Award of less than 1 academic year 38 52.0201 DeVry University-Maryland 11.0901 52.1201 Computer Systems Networking and Telecommunications Masters 1 Management Information Systems, General Masters 1 11.0101 Montgomery College 11.0201 11.0801 11.0801 11.0901 Computer and Information Sciences, General Associates 33 Computer Programming/Programmer, General Web Page, Digital/Multimedia and Information Resources Design Award of at least 1 but less than 2 academic years 11 Award of at least 1 but less than 2 academic years 2 Web Page, Digital/Multimedia and Information Resources Design Associates 15 Computer Systems Networking and Telecommunications Computer and Information Systems Security/Information Award of at least 1 but less than 2 academic years 3 11.1003 Assurance Associates 6 Washington Adventist Information 11.0401 University Science/Studies Bachelors 4 11.0701 Computer Science Bachelors 3 Source: EMSI 2013.2. Workforce Module. ere are 51 institutions in Maryland, 13 institutions in the District of Columbia and 17 institutions of higher education in Northern Virginia that offer cybersecurity related training programs. Page 10

13 Cybersecurity Industry Sector Trends report_layout 1 7/23/13 11:50 AM Page 11