Been

Hacked Yet?

What Virginia is Doing to Fill the Cyber Security Careers

Pipeline

Facilitated by Judith Sams

Virginia Department of Education
National K-12 Cybersecurity Education
Conference
October 6, 2016

0
What is Cybersecurity?

• Science fiction author William Gibson coined

the term “cyberspace” because it seemed like
an effective buzzword and was essentially
meaningless.
• “Cyberspace was suggestive of something, but
had no real semantic meaning, even for me, as
I saw it emerge on the page,” Gibson says with
some chagrin in the 2000 documentary “No
Maps for These Territories.”
• Now cyberspace and cybersecurity have taken
on a whole new life of their own.
1
Definition of cybersecurity,
referring to ITU-T X.1205

• Cybersecurity is the collection of tools, policies, security concepts,

security safeguards, guidelines, risk management approaches, actions,
training, best practices, assurance and technologies that can be used to
protect the cyber environment and organization and user’s assets.
Organization and user’s assets include connected computing devices,
personnel, infrastructure, applications, services, telecommunications
systems, and the totality of transmitted and/or stored information in
the cyber environment. Cybersecurity strives to ensure the
attainment and maintenance of the security properties of the
organization and user’s assets against relevant security risks in the
cyber environment.

• The general security objectives comprise the following:

– Availability
– Integrity, which may include authenticity and non-repudiation
– Confidentiality
2
The Internet of Things
(IoT)
• From 2015 to 2020, number of wireless
connected devices is growing from 16 billion to
40 billion
• This produces a $19 Trillion Global Market
• From 2000 to 2020, cybersecurity market will
grow from $3.5 billion employing a few
thousand to $175 billion providing critical
infrastructure to every kind of business
• Increase means more cybersecurity threats,
more cyber jobs available, and more cyber jobs
unfilled
3
Examining Needs of the
Work Force

According to a 2015 report by the Bureau

of Labor Statistics, Virginia has the highest
employment rate for information security
analysts and is on the top five list of top
paying states for info security analysts,
with an average annual wage of $106,320.
And according to Burning Glass
Technologies, Virginia was the second
highest state for job postings, second only
to California.
4
Examining Needs of the
Work Force
• According to a January 2016 article in Forbes
magazine, there will be more than a million
cybersecurity job openings in 2016. More than
200,000 of those jobs remained unfilled, with
job postings up nearly 75 percent over five
years. The industry itself is projected to grow
from $75 billion in 2015 to $170 billion by
2020.
• According to Gov. McAuliffe, Virginia annually
has over 37,000 cybersecurity-related unfilled
opportunities starting at $80,000 per year.
5
Cybersecurity Careers
Pipeline

• It has finally come to fruition—we have to

prepare students today for jobs that we
don’t even know about today.

• The jobs with the highest demand did not

even exist fifteen years ago.

6
Challenges

• The lack of a highly skilled cybersecurity

workforce not only poses a great risk to our
economy, but also to our personal security and
our country’s national security.
• Students must develop both hard and soft skills
to ensure success.
• Classrooms for technology savvy students must
allow teachers to transform classrooms into
experiential learning sites!
• Cyber risks are widespread!
7
Cybersecurity Industry Model

Source: Competency Model Clearinghouse, http://www.careeronestop.org/competencymodel/competency-models/cybersecurity.aspx . 8

Executive Order No. 8 (2014)

Governor McAuliffe
established Cyber Virginia
and the Virginia Cyber
Security Commission
through Executive Order 8.
9
But Virginia and VDOE
were already working on
recommendations to:
• Foster an improved cybersecurity workforce
pipeline
• Identify stakeholders to develop a plan for
cybersecurity education.
• Create a collaboration with Virginia’s
community colleges and universities.
• Develop one or more career pathways for
cybersecurity careers.
• Secure instructional resources for a world-class
cybersecurity initiative.
10
But Virginia and VDOE were
already working on those
recommendations:

•In 2013, Virginia governor Bob McDonnell opened a security-

focused start up Mach37. The start-up, located in Virginia’s
Center for Innovative Technology, is an effort to fund and
develop more cybersecurity firms in the state, training them in
the most advanced technology.

•In 2014, Virginia governor Terry McAuliffe created the Virginia

Cyber Security Commission in order to oversee and identify
cybersecurity risks threatening state offices and networks.

•In 2015, Virginia governor Terry McAuliffe spearheaded an

initiative to partner the public and private sectors in order to
protect public safety agencies from cybersecurity attacks,
especially those targeting cars.

•In 2016, the work and rewards became even more evident. 11
Cybersecurity Infusion
Units

12
Alignment of
Cybersecurity Infusion
Units with IT Courses
Course Code and Title
6613/6615 Computer Inf Systems, Adv
6614/6612 Computer Inf Systems
IB6113 IB Inf Tech in Global Society
8621 Computer Maintenance
6650 Comp Network Software Op
6651 Comp Network Software Op, Adv
8542, 8543, 8544, 8545 Comp Network
Hardware Operations I, II, III, IV
6609/6610 Computer Solutions
8622, 8623, 8624 Comp Sys Tech I, II, III
6660 DBDM (Oracle)
Course Code and Title
6661 DBDM, Advanced (Oracle)
6662 DBDM with Pl/SQL (Oracle)
6630/6632 Design, Multimedia and
Web Technologies
6631/6633 Design, Multimedia and
Web Technologies, Advanced
6161/6160 Digital Input Technologies
6670 Information Technology Fund.
6735/6736 Legal Systems Adm
6731/6730 Medical Systems Adm
6640 Programming
13
6641 Programming, Advanced
 But it Isn’t Just IT--Can you
Name Some Cyber Risks in
Each Career Cluster?

Agriculture, Food & Natural Resources Health Sciences

Architecture & Construction; Hospitality & Tourism; Marketing

Manufacturing
Arts, A/V Technology & Communications Human Services

Business Management & Administration Information Technology

Education & Training Law, Public Safety, Corrections &

Security
Finance Science, Technology, Engineering &
Mathematics
Government & Public Administration Transportation, Distribution & Logistics
14
Research Report

15
Curriculum Development

• Infusion Units—March 2013

• Virginia’s 21st Century Career Pathway:
Cybersecurity research document—October 2015-
January 2016
• Business and Industry Panel-November 2015
• Teacher Panel for Framework Development—March
2016 and October 18 & 19, 2016
• Curriculum will adhere to the National Initiative for
Cybersecurity Education (NICE) Workforce
Framework
• Course Code and Teacher Endorsements established
in time for 2017 release
16
Continued Support From
the Governor’s Office,
August 10, 2016
• Governor McAuliffe Announces $1 Million in Cybersecurity Scholarships
• ~The Cybersecurity Public Service Scholarship Program is now accepting applications from students in Virginia~
•
• RICHMOND – Governor Terry McAuliffe announced today that applications are now being accepted for a $1 million state scholarship fund for
students studying cybersecurity. The Virginia Cybersecurity Public Service Scholarship Program will award $20,000 a year
to eligible Virginia students who are studying how to safeguard computer networks, data and electronic resources.
In return, the students must commit to public service by working at a Virginia state agency or institution for as many
years as they receive the scholarship.
“As we work to build a new Virginia economy, we must ensure that our electronic infrastructure is secured against cyberattacks,” Governor
Terry McAuliffe said. “That is why I launched ‘Meet the Threat: States Confront the Cyber Challenge’ at the National Governors Association in
July. It is imperative that states promote programs to help students tackle the cybersecurity challenges of the 21st century. The Cybersecurity
Public Service Scholarship Program is an excellent approach to building our cyber workforce as we continue to enhance the Commonwealth’s
reputation as an international leader in cyber innovation and security.”

The Governor included $500,000 a year for the scholarships in the 2016-18 biennial budget and is making
cybersecurity the central theme of his tenure as chair of the National Governors Association.
“Cybersecurity programs and training are essential to the long-term economic and technological stability of the Commonwealth,” said
Secretary of Technology Karen Jackson. “These funds will help ensure that the next generation of cyber professionals receives the cutting-
edge training they need to be successful in this vital industry.”
About 25 scholarships will be awarded on a first-come, first-served basis, depending on available funding. Recipients can receive the
scholarship for up to two years. They must be enrolled full-time as in-state students in a cybersecurity program at a Virginia nonprofit private
or public college or university; be within two years of graduation from an undergraduate or graduate program; and have a GPA of at least 3.0.
“The only way we can produce the kinds of students who are eager to take on the demands of the new Virginia economy is by making sure we
are providing them with the skills they need,” said Secretary of Education Dietra Trent. “Expanding opportunities in cybersecurity through this
scholarship program will be a key component in preparing students for rewarding and impactful careers.”
The scholarships will be administered by the State Council of Higher Education for Virginia (SCHEV). Applications for the coming school year
will be accepted until Sept. 15, 2016. For details about the scholarship program, please visit SCHEV’s website here.
• - See more at: https://governor.virginia.gov/newsroom/newsarticle?articleId=16192#sthash.ledVh1U0.dpuf

17
 Centers for Academic Excellence
designated by NSA and DHS as of
May, 2016

• George Mason University—Fairfax

Masters in Information Security and Assurance
Master of Science in Computer Engineering—Network and System Security
Master of Science in Management of Secure Information Systems
• Hampton University—Hampton
Information Systems Security Professionals Certificate
Master of Science degree in Information Assurance
• James Madison University—Harrisonburg
Master of Science in Computer Science Information Security
Certificate in Network/Information Security
• Marymount University—Arlington
Master of Science in Information Technology/Computer Security
• Norfolk State University—Norfolk
Master of Science in Cybersecurity
Master of Science in Computer Science—Information Assurance
Northern Virginia Community College—Annandale
Cybersecurity Career Studies Certificate
• Virginia Tech—Blacksburg
Graduate Certificate in Information Assurance
18
CyberCamps 2016

• History of Initiative
• Partnership with Cyber Innovation Center
• Professional Development of Camp Teams
• Implementation of Camps

19
 CyberCamps 2016
Summary Report

 296 educators participated in pre-camp training in all 8

Superintendents Regions
 Total of 743 students participated in 32 camps
 Camps provided minimum of 70 instructional hours
 Visits by legislators, local officials, VDOE staff, DHS Deputy Under
Secretary for Cybersecurity visited site
 Students provided opportunity to take the IC3 examination to
measure growth and possibly earn the IC3 certification
 1700 pre-tests were taken
 1142 single exams attempted
 308 single exams passed
 43 IC3 certifications earned (student passed 3 tests)
 Testing may continue through school year

20
VDOE Webpage for
Cybersecurity

• http://www.doe.virginia.gov/instruction/career_tech
nical/cybersecurity/index.shtml

• Data on current Virginia employment

• CyberCamp2016 hot map
• Emerging Careers
• Resources
– Scholarships and Grants
– Cybersecurity in Career Clusters
– General Resources
21
•
• Celebrate TechTober by joining in on a Microsoft Office Specialist TestFest!
•
Virginia is kicking off the fall season and TechTober with an exciting promotion starting in October and
continuing (at your request) hroughout the month of November. Because of the continuing success of
Virginia’s students and teachers in earning industry certifications, Virginia Department of Education and
Certiport are excited to announce a Microsoft Office Specialist (MOS) "TechTober TestFest"!
How does it work? It's simple. Teach IT and Test IT! Certify your students on MOS during October and
November to participate in the TestFest!
Each student that certifies during the months of October or November will receive a ribbon, and the classes
that have the highest percentage of success in passing exams taken in each of the 2010, 2013, and 2016
exams will win a PIZZA PARTY for their entire class!
Certify students on any of the Microsoft Office 2010, 2013, or 2016 applications, and each exam taken
increases the chances of winning. All certifications taken up to this point in the school year will be also
factored into the TestFest.
Take this wonderful opportunity to get students excited about earning a high value credential. Winners will
be announced in early December The last day to certify for an opportunity to win the pizza party is
November 30!
Good luck, happy testing—and happy pizza eating!

22
 NEXT STEPS…

• Professional Development for Teachers

– Watch the listserv and Supts. Memo each week for
announcements
– PD being planned for summer professional association
conferences by Cyber Innovation Center (NICERC) using
a Homeland Securities grant
• Approval of Cybersecurity Fundamentals Curriculum
Framework; course code and teacher endorsements
• Utilization of Cyber Infusion Units into middle school
exploratory courses being developed
• Development of Program Specific Courses in
Pathway
23
 Thank You!

Judith P. Sams, Specialist

Business and Information Technology and
Related Clusters
Judith.Sams@doe.virginia.gov
804-371-0196
Or for General CTE Questions or Information
CTE@doe.virginia.gov
804-225-2051
24