GLOBAL ICT CAPACITY BUILDING SYMPOSIUM …...Digital Security Capacity Building: Role of the...
17
Digital Security Capacity Building: Role of the University Dr. Nizar Ben Neji Faculty of Sciences of Bizerte (FSB) University of Carthage [email protected] GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 18‐20 June 2018 Santo Domingo, Dominican Republic ITU CBS SANTO DOMINGO 2018
Transcript of GLOBAL ICT CAPACITY BUILDING SYMPOSIUM …...Digital Security Capacity Building: Role of the...
Digital Security Capacity Building: Role of the University
Dr. Nizar Ben NejiFaculty of Sciences of Bizerte (FSB)
University of [email protected]
GLOBAL ICT CAPACITY BUILDING SYMPOSIUM
18‐20 June 2018Santo Domingo, Dominican Republic
ITU CBSSANTO DOMINGO 2018
Outline Evolution of security Digital security domains Digital security needed competencies andcertifications Digital workforce shortage Role of the university Cybersecurity career pathway
Nizar Ben Neji 1GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Evolution of Security
Digital Security
Information Security
Cyber Security
Information Technology (IT)
Security
Physical and Environmental Security
Internet of Things (IoT) Security
Operational Technology (OT)
Security
Digital Security
Nizar Ben Neji 2GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Digital Security
Experts are predicting that digital crime will cost businesses 6 trillion dollarsannually by 2021 556 Million victims per year, 1.5 Million victims per day and 1.8 victims persecond Digital crime is going mobile: 2/3 of Internet users are using mobile devicesand 31% of victims are mobile users Digital crime is going social: 40% of social network users have fallen victim In 2020, 20.8 billion Internet connected things: Human will be moreexposed to digital criminality Digital economy and digital business environment are built on trust: Digitalethics and Digital security:
— Legal framework (Laws, decrees and regulation texts)— Institutional framework (National Digital Security Agencies, Government Certification Authorities, ..)— Technical framework (Last emerging technologies)
Organisations that are able to attract and retain digital security talent willbe muchmore successful in profiting from the digital opportunity and managingthe digital security risk
Cornerstone of the Digital Economy
Nizar Ben Neji 3GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Digital Security DomainsNine main domains
Digital Security
Nizar Ben Neji 4GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Digital Security ExpertiseTop Skills and Certifications
Nizar Ben Neji 5GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Information Security
System & Network Security
System & Network Administration
Linux / UNIX
Audit Planning
Audit Reporting
Risk Assessment
Computer Forensics
Malware Analysis
Project Management
TOP SKILLS TOP CERTIFICATIONS
CISA (Certified Information Systems Auditor)
CISM (Certified Information Security Manager)
GIAC (Global Information Assurance Certification)
CompTIA Security+ Certification
CCNA (Cisco Certified Network Associate)
CEH (Certified Ethical Hacker)
CHFI (Computer Hacking Forensic Investigator)
CISSP (Certified Information Systems Security Professional)
ISO 2700X
CIA (Certified Internal Auditor)
CRISC (Certified in Risk and Information Systems Control)
Digital Workforce Shortage
Digital security skills ranked first in both demand and talent gap Digital security workforce gap will reach 1.8 million in 2022 according to the
2017 Global Information Security Workforce Study of the InternationalInformation System Security Certification Consortium (ISC2)
Capgemini Digital Transformation Institute Survey (June‐July 2017)
High Demand
Nizar Ben Neji 6GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Top Reasons for Shortage
Reasons for shortage are various and vary mainly by region:― Problem in finding qualified persons with knowledge, skills and abilities― Hybrid job combining different skill sets that are not traditionally taught together― Certifications become prominent for the employers and candidates are filtered out of the
hiring process on the basis of certifications― Women not well involved and encouraged to practice this profession: Only make up 11%
of the cyber workforce― Leadership not understanding the requirements for digital security skills― Focus on senior professionals with years of experience and overlook recent grads― Distribution of the digital security resources (private/public, country/abroad, …)― Not well defined career path― Inability to retain cyber security employees― …
Global Information Security Workforce Study (2017)
UNIVER
ISTY
COMPA
NY
Nizar Ben Neji 7GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Role of the University
Universities have a big role to play in the solution to― Adapt the university programs to the digital security job market to have a
better aligned education and training pipelines― Provide students with the needed skills― Prepare for entry‐level certifications since IT digital security positions request
at least one of certifications (CISA, CEH, CISSP, …) and industry certificationincrease salaries
― Frequently update the content of the course materials to keep pace with thisfast evolving demand
― Career centres at universities should provide students with guidance andadvices regarding the job market needs to avoid unemployment andunderemployment
― Universities could support the growth of technology‐based new venturesespecially in digital security (create job opportunities for recent grads)
― Encourage female students to study and pursue degrees and careers in cyber‐security
― …
Apply possible solutions as early as possible better than recycling
Nizar Ben Neji 8GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Cybersecurity Career PathwayUniversity Entry‐Level Mid‐Level Advanced‐Level
CybersecuritySpecialist /Technician
CybersecurityAnalyst
CybersecurityConsultant
Penetration & Vulnerability
Tester
Incident Analyst / Responder
IT Auditor
Cybercrime Analyst /
Investigator
Cybersecurity Specialist / Technician
Information Security
System & Network Security
System & Network Administration
Linux / UNIX
Audit Planning
Audit Reporting
Risk Assessment
Computer Forensics
Malware Analysis
Project Management
TOP 5 SKILLS1
2
3
4
5
TOP 5
CISA
CISM
GIAC
Security+
CCNA
CEH
CHFI
CISSP
ISO2700X
CIA
CRISC
CybersecurityManager
Senior CybersecurityEngineer
CybersecurityArchitect
Nizar Ben Neji 9GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Cybersecurity Career PathwayUniversity Entry‐Level Mid‐Level Advanced‐Level
CybersecuritySpecialist /Technician
CybersecurityAnalyst
CybersecurityConsultant
Penetration & Vulnerability
Tester
Incident Analyst / Responder
IT Auditor
Cybercrime Analyst /
Investigator
Incident Analyst / Responder
Information Security
System & Network Security
System & Network Administration
Linux / UNIX
Audit Planning
Audit Reporting
Risk Assessment
Computer Forensics
Malware Analysis
Project Management
TOP 5 SKILLS1
2
3
4
5
TOP 5
CISA
CISM
GIAC
Security+
CCNA
CEH
CHFI
CISSP
ISO2700X
CIA
CRISC
CybersecurityManager
Senior CybersecurityEngineer
CybersecurityArchitect
Nizar Ben Neji 10GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Cybersecurity Career PathwayUniversity Entry‐Level Mid‐Level Advanced‐Level
CybersecuritySpecialist /Technician
CybersecurityAnalyst
CybersecurityConsultant
Penetration & Vulnerability
Tester
Incident Analyst / Responder
IT Auditor
Cybercrime Analyst /
Investigator
IT Auditor
Information Security
System & Network Security
System & Network Administration
Linux / UNIX
Audit Planning
Audit Reporting
Risk Assessment
Computer Forensics
Malware Analysis
Project Management
TOP 5 SKILLS TOP 5
CISA
CISM
GIAC
Security+
CCNA
CEH
CHFI
CISSP
ISO2700X
CIA
CRISC
1
2
3
4
5
CybersecurityManager
Senior CybersecurityEngineer
CybersecurityArchitect
Nizar Ben Neji 11GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Cybersecurity Career PathwayUniversity Entry‐Level Mid‐Level Advanced‐Level
CybersecuritySpecialist /Technician
CybersecurityAnalyst
CybersecurityConsultant
Penetration & Vulnerability
Tester
Incident Analyst / Responder
IT Auditor
Cybercrime Analyst /
Investigator
Cybercrime Analyst / Investigator
Information Security
System & Network Security
System & Network Administration
Linux / UNIX
Audit Planning
Audit Reporting
Risk Assessment
Computer Forensics
Malware Analysis
Project Management
TOP 5 SKILLS TOP 5
CISA
CISM
GIAC
Security+
CCNA
CEH
CHFI
CISSP
ISO2700X
CIA
CRISC
1
3
4
2
5
CybersecurityManager
Senior CybersecurityEngineer
CybersecurityArchitect
Nizar Ben Neji 12GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Cybersecurity Career PathwayUniversity Entry‐Level Mid‐Level Advanced‐Level
CybersecuritySpecialist /Technician
CybersecurityAnalyst
CybersecurityManager
CybersecurityConsultant
Senior CybersecurityEngineer
Penetration & Vulnerability
Tester
Incident Analyst / Responder
IT Auditor
Cybercrime Analyst /
Investigator
Cybersecurity Consultant
Information Security
Information Systems
Cryptography
Risk Management
Project Management
TOP 5 SKILLS TOP 5
CISA
CISM
GIAC
Security+
CCNA
CEH
CHFI
CISSP
ISO2700X
CIA
CRISC
1
3
4
2
5
Linux / UNIX
Business Process
Software Development
Scanners
Security Operations
CybersecurityArchitect
Nizar Ben Neji 13GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Cybersecurity Career PathwayUniversity Entry‐Level Mid‐Level Advanced‐Level
CybersecuritySpecialist /Technician
CybersecurityAnalyst
CybersecurityManager
CybersecurityConsultant
Senior CybersecurityEngineer
Penetration & Vulnerability
Tester
Incident Analyst / Responder
IT Auditor
Cybercrime Analyst /
Investigator
Cybersecurity Manager
Information Security
Information Systems
Cryptography
Risk Management
Project Management
TOP 5 SKILLS TOP 5
1
3
4
2
5
Linux / UNIX
Business Process
Software Development
Scanners
Security Operations
CISA
CISM
GIAC
Security+
CCNA
CEH
CHFI
CISSP
ISO2700X
CIA
CRISC
CybersecurityArchitect
Nizar Ben Neji 14GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Conclusion
Digital security is the cornerstone of the digital economy Evolution of security: new needs, constraints, trends and challenges Digital security domains, required skills and certifications Digital security workforce shortage and universities simply aren’t in aposition to fill the void Career pathway starts at the university Universities have a big role to play in the solution (update programs, includecertifications, university career centres, partnerships with firms, researchactivities, entrepreneurship, …) Make clear and concise cyber security path ways to save the cyber securityprofessions
Digital Security Capacity Building
Nizar Ben Neji 15GLOBAL ICT CAPACITY BUILDING SYMPOSIUM 2018
Dr. Eng. Nizar Ben NejiIT Security Trainer, Consultant and Researcher
PhD in Information and Communication [email protected] /(+216) 99 207 377
THANK YOU FOR YOUR ATTENTION
