Bridging the Cybersecurity Leadership Gap: Assessment, Competencies and Capacity Building

该项目正在培养首席信息安全官(CISO)的核心能力，作为制定多学科网络安全领导力教育、学习目标和课程指导方针的基础。该项目正在利用这些指导方针开发在线网络安全领导力教育模块、证书和混合的在线网络安全领导力硕士学位，以便与其他大学合作在全国范围内提供。其目标是解决美国的网络安全领导力缺口，因为网络安全领导力的专业知识仅限于少数大学研究生级别的网络安全领导力课程，这些课程连接了网络安全领导力所需的技术和管理技能。从形式上讲，我们正在探讨以下问题：网络安全领导者的核心能力对网络安全领导的有效性至关重要；网络安全领导成功的组织维度是什么？该项目将私营部门、政府和学术界的网络安全、信息技术和其他行政人员聚集在重点小组、讲习班、论坛和在线协作中，以发展核心能力、学习目标和课程指导方针。该方法建立在美国政府与学术界和私营部门在发展CIO核心能力方面的成功合作的基础上。最后，该项目正在开发一个网络安全领导力教育论坛和相关委员会，其目标是实现持续的项目可持续性，并不断更新核心能力、学习目标和课程指南。作为该项目的直接结果，大学与政府组织和私营部门合作，在开发网络安全领导力课程方面有一套最佳实践，并有可衡量的结果可供比较。

This project is developing Chief Information Security Officer (CISO) Core Competencies as a foundation for developing multidisciplinary cybersecurity leadership education learning objectives and curricula guidelines. The project is leveraging these guidelines towards the development of online cybersecurity leadership education modules, certificates and a blended online cybersecurity leadership master's degree for delivery nationwide in partnership with other universities. The goal is to address the cybersecurity leadership gap in the U.S. as cybersecurity leadership expertise is limited to a small number of university graduate level cybersecurity leadership programs that bridge the technical and management skills required for cybersecurity leadership. Formally, we are exploring the following questions: What cybersecurity leader core competencies are critical to cybersecurity leadership effectiveness?; and what organizational dimensions are factors in cybersecurity leadership success? The project is bringing together private sector, government and academic cybersecurity, IT and other executives in focus groups, workshops, forums, and online collaboration for the development of the Core Competencies, learning objectives and curricula guidelines. The approach builds upon the U.S. Government's success in collaborating with academia and private sector in the development of CIO Core Competencies. Finally, this project is developing a Cybersecurity Leadership Education Forum and associated board with the goal of ongoing project sustainability and for ongoing updating of the Core Competencies, learning objectives and curricula guidelines. As a direct outcome of this project, universities in partnership with government organizations and the private sector have a set of best practices for developing cybersecurity leadership programs and measurable outcomes to compare with.