Jeff Recor IAC 2003 FISSEA IA Community Outreach March 2005 Jeff Recor Director, IAC.
-
Upload
dennis-owen -
Category
Documents
-
view
214 -
download
0
Transcript of Jeff Recor IAC 2003 FISSEA IA Community Outreach March 2005 Jeff Recor Director, IAC.
Jeff Recor IAC 2003
Discussion Points
• Enhancing the Educational Experience
• Nuts and Bolts
• Example Clients
Jeff Recor IAC 2003
Private Sector Viewpoint:
• Needs include:– Practitioners (technical)– Analysts (non-technical)– Management
• Method to properly evaluate experience and credentials
• Certifications not representative of need
• Experience, experience, experience
Jeff Recor IAC 2003
Academia Viewpoint:
• Need to create content that is current (valuable)
• Need to enable students to compete for jobs in marketplace
• Lack of instructors
• Lack of textbooks
• Lack of standards
• Don’t want to compete with “boot camps”
Jeff Recor IAC 2003
The “Gap”
• Employers do not see academia producing security practitioners– Knowledge is still “theoretical”– Additional training needed to make student
“functional” after hiring– Perception is that we produce “analysts”
• Academia not getting clear signals about needs from employers– No “connection point”– Market data tough to come by
Jeff Recor IAC 2003
Enhancing Educational Experience
• Walsh College addressed this “gap” by creating the IAC: Information Assurance Center
• Model is based on “pay” for services approach
• Leverage students desire for “hands-on” with employers need for “bodies”
• Managed like a profit center
• Reporting structure supports mission
Jeff Recor IAC 2003
IAC Focus
• Information Assurance Center– Directs all efforts for IA at College– Works by subscription model– Offers faculty expertise, student projects and
general assistance for subscribers– Knowledge repository for all IA topics– Lab facilities will be utilized for forensic and
specialized client requests in conjunction with student needs
Jeff Recor IAC 2003
Nuts and Bolts
• What does the IAC do:– Connects students with employers:
• Projects• Research• Direct employment
– Connects students with the community:• Work with non-profits• Help solve problems for citizens• Support local professional organizations (ISSA, ISACA,
etc)• Presentations to K-12
Jeff Recor IAC 2003
Nuts and Bolts
• Main goal is to share knowledge !
http://www.walshcollege.edu/pages/846.asp
Jeff Recor IAC 2003
Nuts and Bolts
• How does the IAC do it?– Support Structure
• Director, Assistant Director reports to President• Separate financials • Additional sales support (corporate services structure)• Shared infrastructure (servers, web site, etc)• Marketing
– Students create & maintain support infrastructure• Created IAC knowledge repository• Create client content• Managed by professors
Jeff Recor IAC 2003
Nuts and Bolts
• Financials– Revenue generation
• Three tiers of support• Marketing support also allowed• Can pay from $500 to $25,000 to “join”• Marketing sponsorships cost $7,500
– Costs:• Marketing • Salaries
– Break-even model
Jeff Recor IAC 2003
Nuts and Bolts
• Knowledge Repository– Information is tiered for sharing
• Non-members (everyone)• Access depends on subscription level
– Clients consent…– Students consent…– Information collected from all sources
• Projects• Capstones• Individual assignments
Jeff Recor IAC 2003
Colleges & Universities
Industry
Government
Certifying Bodies
MembershipAlliancesArticulationAppointment
Jeff Recor IAC 2003
Infrastructure Support
• Newsletter
• Global Threat Alert System
• Knowledge repository
• Security Job Portal
• IAC Member Help Desk (email)
• IAC member Chat
• FBI Infragard Listserv
• State of Michigan ISAC
Jeff Recor IAC 2003
Types of Activities
• Connecting Students with Employers:– Typical stuff
• Requests for research• Requests for short term projects• Requests for long term projects
– Not so typical stuff• Work with FBI• Help the Army with DITSCAP• Private sector projects
Jeff Recor IAC 2003
Examples of IAC Work
• Risk Assessment for Valassis
• State of Michigan Employee training
• THAW Fund Posture Review
• Route One executive training
• Budd Co Policy development
• GM Hacking video
• K-12 Cyber Awareness