This document discusses various options for information systems security education and training, including self-study programs, instructor-led programs, certificate programs, continuing education programs, and postsecondary degree programs ranging from associate's to doctoral degrees. It also covers security awareness programs and training programs focused on hands-on skills preparation.

1. © 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Fundamentals of Information
Systems Security
Lesson 13
Information Systems Security
Education and Training

2. Page 2Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 2Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Learning Objective(s)
 Describe information systems security
educational opportunities and professional
certifications.

3. Page 3Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 3Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Key Concepts
 Self-study education programs in information
systems security
 Continuing education programs in information
systems security
 Postsecondary higher education degree
programs in information systems security
 Organizations that offer information systems
security education programs
 Security awareness programs

4. Page 4Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 4Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Advantages of Self-Study
Programs
Self-motivation
Low cost
Flexible
materials
Flexible
schedule
Supplemental
materials

5. Page 5Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 5Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Disadvantages of Self-Study
Programs
Procrastination
Resource
selection
Lack of
interaction
Quality
Validated
outcome

6. Page 6Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 6Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Guidelines for Self-Study
Materials
Reputable
sources
Material
reviews
Multiple
products
Hands-on
skill-set
labs

7. Page 7Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 7Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Instructor-Led Programs
 Alternative to self-study learning
 Continuing education group can be part of the
school or a closely related educational unit
 Provide formal training courses that lead to a
certificate or professional certification and not
a degree
 Courses can range from very general to highly
specific and technical

8. Page 8Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 8Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Certificate Programs
 Certificate of completion:
• A document that is given to a student upon
completion of the program and signed by the
instructor
• Attests that the person has completed the
course and made a sufficient score on an
assessment
 Specific to an educational institution
 Many programs available online

9. Page 9Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 9Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Continuing Education Programs
Keep practitioners current and informed
• Continuing professional education (CPE)
• Continuing professional development (CPD)
Credit for courses measured in continuing
professional education (CPE) units
• Typically, 50 minutes of classroom
instruction per CPE

10. Page 10Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 10Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Postsecondary Degree Programs
 Offered through colleges and universities
 Programs available for information systems
security, cybersecurity, and information assurance
 Includes not-for-profit schools and for-profit schools
 May be classroom-delivered, online-delivered, or
blended-delivered for associate level up to PhD
 Consider what career opportunities and
employment you seek first

11. Page 11Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 11Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Postsecondary Degree Programs
 NSA- and DHS-sponsored programs:
• CAE/IAE
• CAE/R
 Obtaining these designations means the curriculum and
research institutions meet or exceed the standards
defined by the NSA
 Approval process requires a rigorous mapping of
curriculum learning objectives to NSA’s various
information systems security and information assurance
standards for cybersecurity job roles

12. Page 12Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 12Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Associate’s Degree
Represents a two-year program (some institutions offer
accelerated programs)
Basic education for people who want to enter the
information security field without spending four or more
years in school
Prepares you for a wide range of entry-level positions in IT
and information security

13. Page 13Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 13Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Bachelor’s Degree
 A four-year degree program (some institutions offer
accelerated programs)
 Often a requirement for any information security
position other than entry-level positions
 Includes
• Bachelor of science (BS or BSc)
• Bachelor of science in information technology
(BScIT)
• Bachelor of applied science (BASc)
• Bachelor of technology (B.Tech)

14. Page 14Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 14Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Master of Science Degree
 Consists of two years of study beyond a
bachelor’s degree
 Is usually specific to a field of study
 Focuses more on depth of knowledge than on
breadth of knowledge
 Includes:
• Master of science (MS or MSc)
• Master of science in information technology
(MScIT)
• Master of business administration (MBA)

15. Page 15Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 15Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Master of Business
Administration (MBA)
Focuses on
managing the
process of securing
information
systems
Prepares students
to manage and
maintain the people
and environment of
information security

16. Page 16Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 16Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Doctoral Degree
 Represents the most respected academic honor
and is the most difficult to obtain
 Requires rigorous coursework and extensive
research
 Takes from three to five years (but varies)
 Includes
• Doctor of science (DSc)
• Doctor of information technology (DIT)
• Doctor of technology (DTech)
• Doctor of philosophy (PhD)

17. Page 17Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 17Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Information Security Training
Programs
 Differ from security education programs in their
focus on hands-on skills and in their duration
 Meet for intensive sessions lasting from a few
hours to several days
 Rapidly train students in one or more skills or to
cover essential knowledge in one or more specific
areas
 Many specifically prepare students for certification
exams

18. Page 18Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 18Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Security Training Requirements
 NIST 800 Series publications contain procedures
necessary to keep IT environments secure
 U.S. OPM requires that federal agencies provide training
suggested by the NIST guidelines
 Requires agencies to train current employees and new
employees within 60 days of hire date. Also when:
• There is a significant change in the agency’s IT security
environment
• There is a significant change in the agency’s security
procedures
• An employee enters a new position that deals with sensitive
information

19. Page 19Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 19Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Security Training Requirements
(cont.)
 HIPAA includes directives that require security
awareness and training
• Establishing a security awareness program
• Providing training in malicious software
• Providing training on logon monitoring procedures
• Providing training on password management

20. Page 20Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 20Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Security Training Requirements
(cont.)
 NIST Special Publication 800-16 contains guidelines
on computer security awareness and training
 NIST Special Publication 800-50, four main areas:
• Awareness
• Training
• Education
• Professional development

21. Page 21Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 21Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Security Training Organizations
SANS
Institute
ITPG
InfoSec
Institute
ISACA
Phoenix
TS
SEI

22. Page 22Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 22Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Security Awareness Training
All organizations must have security awareness
training that’s part of a security awareness
campaign, which includes:
• Training
• Periodic newsletters or memos
• “Lunch and learn” training sessions
• Security incidents that are opened as a result of
a security policy violation

23. Page 23Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 23Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Security Awareness Training
(cont.)
Topics reinforced in the AUP and the
organization’s annual security awareness
training, include:
• Compliance with regulatory requirements and laws
• Password behaviors
• Clean desk policies
• Personally owned devices
• New threats, new security trends/alerts, viruses
• Phishing attacks
• Use of social networking

24. Page 24Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 24Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Summary
 Self-study education programs in information
systems security
 Continuing education programs in
information systems security
 Postsecondary higher education degree
programs in information systems security
 Organizations that offer information systems
security education programs
 Security awareness programs