SOC It to 'Em: Bringing a Security Operations Center onto a University Campus

Autor/in	Marquardson, Jim
Titel	SOC It to 'Em: Bringing a Security Operations Center onto a University Campus
Quelle	In: Journal of Information Systems Education, 33 (2022) 3, S.300-305 (8 Seiten) PDF als Volltext Verfügbarkeit
Sprache	englisch
Dokumenttyp	gedruckt; online; Zeitschriftenaufsatz
ISSN	1055-3096
Schlagwörter	Information Science Education; Information Security; Campuses; Computer Security; Universities; Student Employment; School Business Relationship; Outsourcing; Computer Networks; Student Attitudes; Undergraduate Students; Administrator Attitudes; Risk Management; Work Environment; Majors (Students); Career Development; Internship Programs; Work Experience; Program Descriptions + Suchen Sie Ihr Suchwort? Informationstechnologische Bildung; Computervirus; Computersicherheit; University; Universität; Studentenarbeit; Computernetz; Computernetze; Kommunikationsnetz; Schülerverhalten; Risikomanagement; Arbeitsmilieu; Berufsentwicklung; Berufspraktische Ausbildung; Employment experience; Job experience; Occupational experience; Berufserfahrung
Abstract	Employers want applicants with experience, even for entry-level cybersecurity roles. Universities traditionally help students gain cybersecurity experience by hiring them for on-campus jobs or by matching job seekers to employers for off-campus work. A third option is described in this paper in which universities bring external companies on campus. Recently, our institution partnered with Novacoast to open a security operations center on campus that employed university students as analysts. Novacoast develops NovaSOC--a security information and event management platform that captures and analyzes information gathered from server and client devices. Interns in our campus security operations center used NovaSOC to monitor security events for Novacoast customers who chose to outsource monitoring to Novacoast. While the security operations center has been a success, establishing it required that the institution address technical issues such as network connectivity and organizational changes like requiring background checks for student employees. Students reported that they would choose to work in the security operations center again but were generally underworked. Administrators reported that the security operations center was aligned with the university's mission but felt that few people at the university truly understood the work conducted in the security operations center. Institutions looking to bring external entities on campus for similar partnerships should engage risk management early, ensure that student staffing matches the expected workload, and develop plans for financial sustainability. This paper delves into the details of bringing a security operations center onto our campus and gives actionable advice for institutions seeking to establish similar partnerships. (As Provided).
Anmerkungen	Journal of Information Systems Education. e-mail: editor@jise.org; Web site: http://www.jise.org
Erfasst von	ERIC (Education Resources Information Center), Washington, DC
Update	2024/1/01