Colloquium for Information Systems Security Education

Abstract:

Founded in 1997, the National Colloquium for Information Systems Security Education is one of the leading proponents for implementing courses of instruction in INFOSEC into American higher education. In December 1998 the NCISSE was incorporated in the Commonwealth of Virginia by the James Madison University Center for Research in Information Systems Security Education (CRISSE). The CRISSE manages the Colloquium as the chairmanship rotates yearly from academia, industry and government. Members of the CRISSE serve on the board of directors of the Colloquium and as the Executive Secretary and Treasurer. The Colloquium provides a forum for academia, government and industry INFOSEC experts to discuss and form needed direction in (1) INFOSEC undergraduate and graduate curricula, (2) common requirements, (3) specific knowledge, skills and abilities, (4) certification requirements, and (5) establishment of professional certification boards.

Introduction:

The security and assurance of our information and communications infrastructure is a national priority. To address this, our nation needs an information-literate work force that is aware of its vulnerability, as well as a cadre of information professionals who are knowledgeable of the recognized "best practices" available in information security and information assurance, as called for in Presidential Decision Directive 63, May 22, 1998. It is the task of American higher education to provide that information-literate work force and to prepare information professionals. To meet this priority, higher education must be informed of the knowledge, skills and attitudes to be taught in the general curricula and in the information curricula of its colleges and universities. Industry and government must understand their role in supporting higher education, not simply expecting higher education to be responsive and informed about information security and assurance. The National Colloquium for Information Systems Security Education (the Colloquium) is established to serve as a living body to bring government, industry, and academia together to meet those challenges.

Objectives:

The Colloquium is a forum for dialogue among leading figures in government, industry and academia to work in partnership to define current and emerging requirements for information security education, and to influence and encourage the development and expansion of information security curricula especially at the graduate and undergraduate levels.

The Colloquium creates an environment for exchange and dialogue among leaders in government, industry and academia concerning the need for and utility of information security and information assurance education.

The Colloquium strives to foster the development of academic curricula which recognizes the need expressed by government and industry, and is based on the recognized "best practices" available in the field.

The Colloquium will assist educational institutions by fostering the continued development and sharing of information security education resources.

The Colloquium will encourage educational institutions to teach appropriate information systems security courses in various curricula to meet the needs of 21st Century consumers and to offer courses to meet the growing demand for information system security professionals.

History of Conferences:

The first National Information Systems Security Education Colloquium Conference was held April 23-24, 1997, in Linthicum, Md., and was chaired by NSA. The profile of participants included some 45 percent from business and industry, 30 percent from academia, and 25 percent from government. The outcome of the first Colloquium Conference was the development of working partnerships; a commitment to promote more effective communications and to share information security resources; an agreement to continue the living body of the Colloquium and the annual conference; and to further enhance its role as a forum for dialogue and collaboration among the three distinct constituencies represented.

The second National Information Systems Security Education Colloquium Conference was chaired by James Madison University and held June 16-18, 1998, on the campus in Harrisonburg, Va. The profile of participants was divided equally among academia, industry and government. Primary issues discussed included the President's Commission on Critical Infrastructure Protection report and its conclusions; the needs of the corporate world in information security education; current trends in information security tools and techniques; federal standards of information security training; the roles and requirements for information security education for law enforcement; and, how can K-12 curricula be influenced to include information security awareness. Working partnerships continued to be strengthened among the participants with a commitment to expand more effective communications and to share information security resources; an agreement to continue the living body of the Colloquium and the annual conference and to further enhance its role as a forum for dialogue and collaboration among the three distinct constituencies represented. The Board of Directors determined that a preliminary review/study would be initiated on K-12 education and the manner in which information security education could best be implemented. The results of the study were presented at the third Colloquium in 1999. Presentations at the Colloquium can be viewed at http://www.infosec.jmu.edu/ncisse/conference98/website/SPEAKERS.HTM

The third National Information Systems Security Education Colloquium Conference was chaired by IBM on May 25-27, 1999, at the IBM Advanced Business Institute Conference Center in Palisades, NY. For the first time since its existence the Colloquium was expanded to include international representation from Ireland, Great Britain and Australia. As in the two previous years the profile of participants was divided equally among academia, industry and government. Primary issues included the outlook for information security from an industry perspective and the educational requirements for the year 2000 plus; the need for and the identification of Centers of Excellence in Information Assurance Education and the educational requirements that academia, government and industry perceive as an educational necessity. Working partnerships also continued to be strengthened among the participants with a commitment to expand more effective communications and to share information security resources; an agreement to continue the living body of the Colloquium and the annual conference; and, to further enhance its role as a forum for dialogue and collaboration among the three distinct constituencies represented. The results of a study undertaken at the request of the Board of Directors at the previous Colloquium on K-12 education, and the manner in which information security education could best be implemented, was presented. The Board of Directors and the attendees at the colloquium requested that the study be continued and expanded to include that the Colloquium become an advocate for the inclusion of K-12 national technology standards with information security components. The next report will be delivered at the Colloquium 2000 chaired by the former Director of the Critical Information Assurance Office who currently serves as the Senior Director for Critical Infrastructure Protection at the National Security Council. Presentations at the Colloquium can be viewed at http://www.infosec.jmu.edu/ncisse/conference99/website/presentations.htm

The fourth National Information Systems Security Education Colloquium Conference was chaired by the Critical Infrastructure Assurance Office on May 23-25, 2000, in Washington, DC. Dr. Jeffrey Hunker proffered a White House welcome to the colloquium attendees and was followed by Mr. Richard Clarke from the National Security Council who was the government keynote speaker. Mr. Clarke focused his remarks on the National Plan for Information Systems Protection and issued a challenge to academia to meet the training and education needs of the government. He announced a bi-partisan effort to establish a national Scholarship for Service in Information Assurance. This announcement has taken the form of a Federal Cyber Service program under the auspices of the national Science Foundation. Other speakers included presidents of four universities who spoke of the shortage of faculty and research focus in information assurance and voiced their support for the scholarship plan . Additionally, representatives from State governments and the Congress also responded positively to the plan. Mr. Michael Jacobs from the National Security Agency announced the selection of seven additional schools as National Centers of Excellence in Information Assurance Education (COE), bringing the total to 14 universities. Academic papers were presented, and a panel of elementary school children were invited to discuss their perception of the Internet. They impressed the audience with their understanding of the dangers of the net.

Individuals from seven states' Attorney General offices spoke on the need for training and education in law enforcement. Other keynote speakers included the Honorable (Congressman) Robert Goodlatte, Mr. William Murray, and Dr. Matt Bishop. A special presentation was delivered by a representative from Greece whose presentation focused on the efforts by the European community on information assurance education. Also, presentations were delivered on the national need for information assurance professionals through professional certification programs. The Colloquium concluded with the White House hosting a reception for the 14 recognized CAE/ISE universities. Presentations at the colloquium can be viewed at www.infosec.jmu.edu/ncisse/conference2000 (included in agenda listings)

Home

Updated: 05/12/2003