Scribd Logo
Upload

Welcome to Scribd!

  • IT Security HR BR Update

    Uploaded by

    budi rahardjo
    61 views10 pages
    The document discusses the need for IT security professionals in Indonesia and outlines strategies to address the shortage of qualified candidates. It notes the positions that need to be filled in industry, military, government and academia. It also discusses levels of competence, certification vs formal education, suggested initiatives like security courses and training, and ITB's new information security graduate program starting in August 2013. The overall message is that security has become critical due to IT dependence but remains an emerging field, so concerted efforts are needed to train sufficient professionals.

    Original Description:

    The need for IT Security Professionals

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PPT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document discusses the need for IT security professionals in Indonesia and outlines strategies to address the shortage of qualified candidates. It notes the positions that need to be filled in industry, military, government and academia. It also discusses levels of competence, certification vs formal education, suggested initiatives like security courses and training, and ITB's new information security graduate program starting in August 2013. The overall message is that security has become critical due to IT dependence but remains an emerging field, so concerted efforts are needed to train sufficient professionals.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    61 views10 pages

    IT Security HR BR Update

    Uploaded by

    budi rahardjo
    The document discusses the need for IT security professionals in Indonesia and outlines strategies to address the shortage of qualified candidates. It notes the positions that need to be filled in industry, military, government and academia. It also discusses levels of competence, certification vs formal education, suggested initiatives like security courses and training, and ITB's new information security graduate program starting in August 2013. The overall message is that security has become critical due to IT dependence but remains an emerging field, so concerted efforts are needed to train sufficient professionals.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 10

    ICT Security Human Resources

    Budi Rahardjo
    Institut Teknologi Bandung br@paume.itb.ac.id

    Current Situation
    The need for IT Security Professionals But, not enough human resources available locally
    Need initiatives, strategies, to solve this challenge

    Stakeholders / Positions To Be Filled


    Industry
    Banking, Telecommunication, eCommerce, companies in general

    Military
    Cybertroops

    Government
    Policy makers

    Academics
    Researchers, inventors, Lecturers, Teachers

    To Do: Must map current and projected need

    Level of Competence (Dreyfus & Dreyfus)


    1. Novice
    Rule-based behaviour, strongly limited and inflexible

    2. Experienced Beginner
    Incorporates aspects of the situation

    3. Practitioner
    Acting consciously from long-term goals and plans

    4. Knowledgeable practitioner
    Sees the situation as a whole and acts from personal conviction

    5. Expert
    Has intuitive understanding of situation and zooms in on central aspects

    Americas National Initiative for Cybersecurity Education (NICE) Strategic Plan, August 11, 2011

    Certification vs. Formal Education similar to software engineering


    Certification Formal Education

    Too many certifications Widely diverse Not standard (yet) Expensive

    Has just started Still a new field Not available in most places Not recognized (yet) by the industry

    Suggested Initiatives
    More security courses at universities Security training at different level (from awareness to advanced skill) Security forum / sharing / conferences Incentives for certification Inexpensive certification Regulation to make sure security is considered

    Info Security Grad Programme at ITB


    Two paths
    InfoSec Engineering InfoSec Governance

    Facilities (Cybersecurity Center)


    Malware lab (virus, botnet, honeypot) Forensic lab

    Opening Agustus 2013

    Concluding Remarks
    We have become too dependent on IT Security is a major concern IT security is still a new field Professionals are in demand Must fill the gap quickly

    You might also like