IST Degree Programs in
Security & Risk Analysis
SRA Major
SRA Minors
Information Assurance
SRA’s Fast Track Success
•
•
•
•
•
•
•
•
•
Spring 2005 - President Spanier’s inspiration
Summer 2005 - White paper
Fall 2005 - Advisory board meeting
Winter 2006 - Curriculum proposal
Spring 2006 - Faculty Senate approval
Summer 2006 – PSU Trustees approval
Fall 2006 – Implementation
Spring 2008 – over 650 @ UP completed SRA 111
Fall 2008 – nearly 1000 @ UP completed SRA 111
SRA Options for B.S. Major
• Intelligence Analysis and Modeling:
Skills developed in the strategic and tactical levels of
intelligence collection, analysis, and decision-making.
• Information and Cyber-Security:
Skills developed in network security, cyber-threat
defense, information warfare, and critical infrastructure
protection across multiple venues.
• Social Factors and Risk:
Skills developed in legal, regulatory, ethical, and other
social theories associated with security and risk
assurance.
SRA Core Curriculum
Information, People &
Technology
(110)
Introduction to Security
& Risk Analysis
(111)
Statistics
Overview of
Information Security
(221)
Threat of Terrorism
& Crime
(211)
Decision Theory
& Analysis
(231)
Risk Management:
Mitigation & Assessment
(311)
International
Culture &
Foreign Language
Legal, Ethical &
Regulatory Issues
(432)
Emergency Planning
& Crisis Management
(440)
Internships, Guest
Speakers & Field
Experience
SRA Skills Developed
• SRA Curriculum Prepares for SRA Careers
• Generalized knowledge
– Problem framing
– Assessment
– Planning, forecasting and alternative evaluation
• Analysis Techniques to Protect Critical Infrastructures
– Cyber-Infrastructure is Cross-Cutting & IST’s Major Advantages
• Specialized knowledge
–
–
–
–
–
Threat Analysis Crisis management
Anticipating the criminal/terrorist mindset
Systems-level patterns
Anomaly detection
Cultural and political awareness
• Security is Key Outcome for Protection
– Privacy is Key Outcome but Sometimes a Balancing Factor with
Security
Critical Infrastructure Protection
•
Basic facilities, services & installations needed for societal functioning
– “Infrastructure”
•
•
•
Interdependent networks & systems comprising identifiable industries, institutions & distribution
capabilities that
provide a reliable flow of products & services
essential to defense, economic security, smooth govt. functioning & society
– “Critical”
• national infrastructures
• so vital that incapacity or destruction would have a debilitating impact on
– defense or economic security
• What are the “Critical Infrastructures?”
–
–
–
–
–
–
–
–
–
telecommunications;
electrical power systems;
gas & oil storage & transportation;
banking and finance;
transportation;
water supply systems;
emergency services e.g., medical, police, fire, rescue
continuity of government.
National Defense
• Cyber-Infrastructure is the Ultimate Cross-Cutting Cr. Inf.
IST/SRA Curricular Standards
• Problem based learning (PBL)
– Case studies
– Critical Thinking
– Project Management
•
•
•
•
•
•
•
Communication Skills
Teamwork
Internships
Interdisciplinary Coursework & faculty
3rd year analytical skills capstone (SRA 331)
4th year capstone (IST 440W)
Optional Study Abroad
Minors in IST & SRA
• SRA Related Minors
– SRA Minor
– Global Security Minor (Pol Sci)
• IST Minors
–
–
–
–
–
–
–
–
–
Communication Arts and Sciences (ISCAS)
Earth & Mineral Sciences (ISEMS)
Health Policy Administration (IST/HPA)
Hotel, Inst. Restaurant Mgt (IST/HRIM)
Industrial Engineering (ISTIE)
Labor & Industrial Relations (IST/LER)
Mathematics (IST/MATH )
Telecommunications (IST/TELCM)
Supply Chain (SCIST)
• See:
http://ist.psu.edu/currentstudents/undergraduate/minors/p
age2.cfm?pageID=141
The SRA Minor
•
•
All PSU Minors available to any major, minimum 18 credits, SRA=21 credits
Prescribed Courses (15 credits):
IST 110 INFORMATION, PEOPLE, & TECHNOLOGY (3)
SRA 111 INTRODUCTION TO SECURITY & RISK ANALYSIS (3)
SRA 211 THREAT OF TERRIOSM & CRIME (3)
SRA 221 OVERVIEW OF INFORMATION SECURITY (3)
IST 452 LEGAL & REGULATORY ENVIRONMENT OF PRIVACY & SECURITY (3)
•
Select 6 Credits from the following areas: (At least 3 credits from 400 level)
Risk Management Focus
SRA 231 DECISION THEORY & ANALYSIS(3)
SRA 311 RISK MANAGEMENT: ASSESSMENT & MITIGATION (3)
IST 432 LEGAL & REGULATORY ENVIRONMENT OF INFORMATION SCIENCE &
TECHNOLOGY (3)
IST 456 SECURITY & RISK MANAGEMENT (3)
Network Security Focus
IST 220 NETWORKING & TELECOMMUNICATIONS (3)
IST 451 NETWORK SECURITY (3)
Cyber Forensics Focus
IST 453 LEGAL, REGULATORY, & POLICY ENVIRONMENT OF CYBER FORENSICS
(3)
IST 454 COMPUTER & CYBER FORENSICS (3)
Employment Outlook for SRA
Security and privacy services represent the fastest growing
segment of IBM's Global Technology Services business.
These services include disciplines in information security,
asset and risk management with an increasing focus on
compliance. In both the public and private sector, there
exists heightened interest to protect systems and
information assets.
Clients are looking for skilled professionals to design and
implement comprehensive information security policy that
covers a wide range of business security priorities. Since
projects of this type focus in some of the most sensitive
areas of IT and business systems management, career
opportunities are expected to flourish with fast career
progression in both professional and management career
dimensions.
-Dave Cassano
IBM Managing Director, Altria Group, Inc.
Emergency
Planning
al
n
tio rity
a
N ecu
ce
S
n
e is
g
i
ell alys
t
In An
Government
Agencies
Vu
As lne
se rab
ss il
m ity
en
t
Security &
Risk Analysis
Graduates
Law
Enforcement
Fo Cy
re ber
ns
ic
s
Fi
na
In nc
ve i a
sti l C
ga rim
tio e
n
Incident
Response
An Risk
aly
sis
Privacy
Preservation
Multinational
Corporations
Research Labs
& Universities
n
is o n
ru ctio
t
In ete
on
i
t
D
a ce
m
r
o ran
f
n
I ssu
A
Crisis
Management