IST Degree Programs in Security & Risk Analysis

SRA Major

SRA Minors

Information Assurance

SRA’s Fast Track Success• Spring 2005 - President Spanier’s inspiration• Summer 2005 - White paper• Fall 2005 - Advisory board meeting• Winter 2006 - Curriculum proposal• Spring 2006 - Faculty Senate approval• Summer 2006 – PSU Trustees approval• Fall 2006 – Implementation • Spring 2008 – over 650 @ UP completed SRA 111 • Fall 2008 – nearly 1000 @ UP completed SRA 111

SRA Options for B.S. Major

• Intelligence Analysis and Modeling: Skills developed in the strategic and tactical levels of

intelligence collection, analysis, and decision-making. 

• Information and Cyber-Security: Skills developed in network security, cyber-threat

defense, information warfare, and critical infrastructure protection across multiple venues.

• Social Factors and Risk: Skills developed in legal, regulatory, ethical, and other

social theories associated with security and risk assurance.

SRA Core Curriculum

Information, People & Technology

(110)

Introduction to Security& Risk Analysis

(111)Statistics

Overview of Information Security

(221)

Threat of Terrorism& Crime

(211)

Decision Theory& Analysis

(231)

Risk Management:Mitigation & Assessment

(311)

Legal, Ethical &Regulatory Issues

(432)

InternationalCulture &

Foreign Language

Emergency Planning& Crisis Management

(440)

Internships, GuestSpeakers & Field

Experience

SRA Skills Developed• SRA Curriculum Prepares for SRA Careers• Generalized knowledge

– Problem framing– Assessment– Planning, forecasting and alternative evaluation

• Analysis Techniques to Protect Critical Infrastructures– Cyber-Infrastructure is Cross-Cutting & IST’s Major Advantages

• Specialized knowledge– Threat Analysis Crisis management– Anticipating the criminal/terrorist mindset– Systems-level patterns– Anomaly detection– Cultural and political awareness

• Security is Key Outcome for Protection– Privacy is Key Outcome but Sometimes a Balancing Factor with

Security

Critical Infrastructure Protection• Basic facilities, services & installations needed for societal functioning

– “Infrastructure” • Interdependent networks & systems comprising identifiable industries, institutions & distribution

capabilities that • provide a reliable flow of products & services • essential to defense, economic security, smooth govt. functioning & society

– “Critical”• national infrastructures • so vital that incapacity or destruction would have a debilitating impact on

– defense or economic security

• What are the “Critical Infrastructures?”– telecommunications; – electrical power systems; – gas & oil storage & transportation; – banking and finance; – transportation; – water supply systems; – emergency services e.g., medical, police, fire, rescue – continuity of government.– National Defense

• Cyber-Infrastructure is the Ultimate Cross-Cutting Cr. Inf.

IST/SRA Curricular Standards• Problem based learning (PBL)

– Case studies– Critical Thinking – Project Management

• Communication Skills• Teamwork• Internships • Interdisciplinary Coursework & faculty• 3rd year analytical skills capstone (SRA 331) • 4th year capstone (IST 440W) • Optional Study Abroad

Minors in IST & SRA• SRA Related Minors

– SRA Minor – Global Security Minor (Pol Sci)

• IST Minors– Communication Arts and Sciences (ISCAS) – Earth & Mineral Sciences (ISEMS) – Health Policy Administration (IST/HPA)– Hotel, Inst. Restaurant Mgt (IST/HRIM) – Industrial Engineering (ISTIE)– Labor & Industrial Relations (IST/LER)– Mathematics (IST/MATH )– Telecommunications (IST/TELCM)– Supply Chain (SCIST)

• See: http://ist.psu.edu/currentstudents/undergraduate/minors/page2.cfm?pageID=141

The SRA Minor• All PSU Minors available to any major, minimum 18 credits, SRA=21 credits• Prescribed Courses (15 credits):

IST 110 INFORMATION, PEOPLE, & TECHNOLOGY (3) SRA 111 INTRODUCTION TO SECURITY & RISK ANALYSIS (3) SRA 211 THREAT OF TERRIOSM & CRIME (3) SRA 221 OVERVIEW OF INFORMATION SECURITY (3) IST 452 LEGAL & REGULATORY ENVIRONMENT OF PRIVACY & SECURITY (3)

• Select 6 Credits from the following areas: (At least 3 credits from 400 level)

Risk Management Focus SRA 231 DECISION THEORY & ANALYSIS(3) SRA 311 RISK MANAGEMENT: ASSESSMENT & MITIGATION (3) IST 432 LEGAL & REGULATORY ENVIRONMENT OF INFORMATION SCIENCE & TECHNOLOGY (3) IST 456 SECURITY & RISK MANAGEMENT (3)

Network Security Focus IST 220 NETWORKING & TELECOMMUNICATIONS (3) IST 451 NETWORK SECURITY (3)

Cyber Forensics Focus IST 453 LEGAL, REGULATORY, & POLICY ENVIRONMENT OF CYBER FORENSICS (3) IST 454 COMPUTER & CYBER FORENSICS (3)

Employment Outlook for SRASecurity and privacy services represent the fastest growing

segment of IBM's Global Technology Services business. These services include disciplines in information security, asset and risk management with an increasing focus on compliance. In both the public and private sector, there exists heightened interest to protect systems and information assets.

Clients are looking for skilled professionals to design and implement comprehensive information security policy that covers a wide range of business security priorities. Since projects of this type focus in some of the most sensitive areas of IT and business systems management, career opportunities are expected to flourish with fast career progression in both professional and management career dimensions.

-Dave CassanoIBM Managing Director, Altria Group, Inc.

Security &

Risk Analysis

Graduates

LawEnforcement

MultinationalCorporations

Research Labs& Universities

GovernmentAgencies

EmergencyPlanning

IncidentResponse

PrivacyPreservation

CrisisManagement