NCJ Number
199412
Date Published
2002
Length
141 pages
Annotation
This report presents the key findings and recommendations of a workshop, held in June 2002, entitled "The Role of Community Colleges in Cybersecurity Education" which focused on how community college resources could be used and further developed to help educate a cybersecurity workforce.
Abstract
The workshop was attended by over 90 experts in computer, network, and information security from community colleges, 4-year institutions, business, industry, and government. Issues addressed in the workshop were skill standards and certification; cybersecurity programs at community colleges; specification of topics, courses, curricula, and programs; preparation for cybersecurity positions; and advancing the role of community colleges in cybersecurity education. Discussions clarified the issues and shaped the five position papers presented in this report. Skills standards recommend foundational elements for programs and provide a set of core competencies. They can help define the field, provide uniformity across institutions, map programs to specific jobs, and provide guidelines that assist educational programs in evolving and adapting to changes in the field and in job requirements. Certification can be an assessment of an applicant's qualifications as measured by performance on a standardized test. Establishing and maintaining a cybersecurity program at a community college will require initial and ongoing investment in high-quality educational materials and curricula, dedicated and state-of-the-art facilities, access to educational and training opportunities through diverse modes of instructional delivery systems, continuous opportunities for professional development and enhancement, and student recruitment and support systems. The workshop participants developed a framework of six core areas for specifying topics, courses, curricula, and programs, as well as linking them to hands-on, real-world activities. The six core areas are security issues; business and economic issues and security policies; law, ethics, and standards; general knowledge and skills; Internet and cybersecurity skills and knowledge; and knowledge of industry hiring practices in cybersecurity. Participants agreed that many existing jobs in cybersecurity can be filled by people with 2-year degrees. Further, participants agreed that all stakeholders have a responsibility for advancing the role of community colleges in cybersecurity education and training. These stakeholders include community colleges, 4-year colleges and universities; business and industry; professional and trade associations; and local, State, and Federal Government entities. Workshop recommendations are outlined for all the areas discussed. Numerous cybersecurity education resources are listed, including Web sites.