This post originally appeared in an EDUCAUSE article and was authored by Marketing Manager Tom Humbarger. This article was one of a series of twelve Security Awareness blogs featuring ready-made content designed to enhance security awareness as part of the Campus Security Awareness Campaign 2019 for colleges and universities.
Campus information security professionals have a unique opportunity to help prepare students who are contemplating a career in cybersecurity. This blog posts shares some ways to help spread the word about potential cybersecurity career paths, scholarships, additional courses, conferences, and internship opportunities that can provide vital hands-on experience as these students get ready to join the workforce.
Get the Word Out with Newsletter or Website Content
Behind every new report of a data breach, data leak, or computer hack is a company scrambling to put out the fire, which is great news for job seekers or soon-to-graduate students with cybersecurity skills. Unfortunately, this is bad news for most companies because there is currently an imbalance between the supply and demand of skilled professionals to address these vulnerabilities.
The 2018 (ISC)2 Cybersecurity Workforce Study estimates a global shortage of cybersecurity professionals of around three million workers. This shortage of skilled job seekers is having a real-world impact on companies and the people responsible for cybersecurity at those companies. The study also points out that Gen X and Baby Boomer workers make up about half of the current cybersecurity workforce, leaving many entry-level opportunities for new college graduates and pathways for growth as these more experienced workers approach retirement age.
The need for trained cybersecurity professionals is not going to go away. The US Bureau of Labor Statistics projects a 28% growth in US employment for cybersecurity consultants between 2016 and 2026. How can we help our students go beyond the theoretical concepts taught in computer science or cybersecurity classes and make themselves more attractive to future employers? We need to take the lead to encourage students to take the initiative to learn more about current issues in cybersecurity and take advantage of the many cybersecurity resources available.
Help Students Narrow Cybersecurity Skills Gap
Here are some ways you can help your students and contribute to narrowing the cybersecurity skills gap:
Hold informational sessions on cybersecurity
Help spread the word on your campus about the cybersecurity skills gap and job opportunities. You could ask your CISO or information security team to conduct a cybersecurity seminar or invite local experts to share their knowledge and expertise with your students. The Enterprise Security Team at The Ohio State University has already implemented this idea, and they sponsor an annual and free on-campus Cybersecurity Days event to expand knowledge of security and data protection for their entire college community.
Sponsor or encourage membership in student associations
There are two student cybersecurity organizations for your students to explore—National Cybersecurity Student Association and Women in CyberSecurity (WiCyS). The National Cybersecurity Student Association has a number of resources on their website, and you can sign up for their newsletter or follow their Snapchat account to view a day in the life of a cyber student or industry professional. The WiCyS is dedicated to bringing together women in cybersecurity from academia, research, and industry to share knowledge, experience, networking, and mentoring. You can also explore setting up a local WiCyS student chapter on your campus.
Offer campus internships
In addition to knowledge of advanced cybersecurity concepts, the most important qualification for cybersecurity employment is relevant work experience. You can help your students by hiring them as interns in your institution’s information security department. This offers students real-world experience while providing supplemental staffing for your department. For suggested qualifications and responsibilities, use the Information Security Intern Job Description Template on the EDUCAUSE website as a starting point.
Identify scholarship opportunities
The CyberCorps: Scholarship for Services, funded by the NSF, provides up to $22,500 per year for undergraduates and $34,000 per year for graduate students. In return, students commit to work in a for a federal, state, or local agency for a period matching the length of their scholarship. The Cyber Security Degree website provides a comprehensive list of additional cybersecurity scholarships and other career resources.
Encourage students to deepen their knowledge
The NICCS Education and Training Catalog is a central location where cybersecurity professionals across the nation can find more than 3,000 cybersecurity-related courses. Anyone can use the interactive map and filters to search for courses offered in their local area to add to their skill set, increase their level of expertise, or earn a certification. You could also direct your students to take advantage of the free online courses offered through edX, US Department of Homeland Security, Cybrary, or SANS Cyber Aces Online.
Attend cyber competitions
Institutions with an information assurance or computer security curriculum can give their students an additional way to hone their skills and have fun by participating in regional events hosted by the National Collegiate Cyber Defense Competition (NCCDC). The top regional teams can then go on to the National Championship, which was won by University of Virginia in 2018. Another cybersecurity competition for high school and college students is the National Cyber League (NCL), is a defensive and offensive puzzle-based, capture-the-flag style competition. All participants play the games simultaneously and are tested with real cybersecurity challenges they will likely face in the workforce.
Participate in cybersecurity conferences
Students may be interested the educational and networking opportunities from attending the annual conferences for the National Cybersecurity Student Association or Women in CyberSecurity. For additional conferences in your area, InfoSec publishes a comprehensive list with hundreds of cybersecurity events in the United States, Europe, and Asia.
Share or Embed Cyber Career Videos on Your Website
Check out the Links to these Cybersecurity Resources
Share these resources with end users or use them to inform your awareness strategy.
- Use the free National Cyber Security Alliance Cyber Career Paths infographic
- Read the EDUCAUSE Review guest blog, “Building the Next Generation of Cyber Professionals, One at a Time” and the NCSA guest blog “Creating the Cybersecurity Workforce We Need.”
- View and download the NCSA’s Securing Our Future: Closing the Cyber Talent Gap infographic.
- Find out how you can participate in the Collegiate Cyber Defense Competition (CCDC) or the National Cyber League (NCL).
- Learn about the CyberCorps: Scholarship For Service.
- Explore the Department of Homeland Security (DHS) Cybersecurity Workforce Development Toolkit and Cybersecurity Workforce Portal.
- Read the (ISC)2 article on How to Get into Information Security.
- Check out the National Cybersecurity Workforce Framework (a.k.a., the NICE Framework).
- Browse the National Initiative for Cybersecurity Careers and Studies (NICCS) Training Catalog or view the NICCS informational video.
- Attend the Women in CyberSecurity annual conference.
- Check out the National Cybersecurity Student Association.