Cybersecurity

Dan Shoemaker is a professor and senior research scientist at the Center for Cyber Security and Intelligence Studies--a National Security Agency (NSA) Center of Academic Excellence--at the University of Detroit Mercy (UDM). He also served as chair of the Computer and Information Systems Department at UDM for 25 years and holds a visiting appointment at London South Bank University. Dr. Shoemaker is co-chair of the Software Assurance Workforce Training and Education working group within the Department of Homeland Security's National Cybersecurity Division (NCSD). He has also served the NCSD as a member of the working group that developed its Essential Body of Knowledge, and as an expert panelist on three national working groups. A prolific author, Dr. Shoemaker is one of three domain editors for the Software Assurance Common Body of Knowledge. He lectures internationally on cybersecurity, information assurance, and software engineering topics, and he founded the International Cybersecurity Education Coalition (ICSEC) to connect higher education institutions and expand teaching of standard information assurance curricula throughout the Midwest. Dr. Shoemaker is the recipient of the Michigan Homeland Security annual Statewide award for Educators (2007). Wm. Arthur Conklin is an Assistant Professor and Director of the Center for Information Security Research and Education in the College of Technology at the University of Houston. He received his Ph.D. in Business Administration, from The University of Texas at San Antonio (UTSA). He holds Security+, CISSP, CSSLP, IAM and IEM certifications. His research interests include the use of systems theory to explore information security, specifically in Cyber Physical Systems. He has an extensive background in secure coding and is a co-chair of the DHS Software Assurance Forum working group for workforce education, training and development.

Section I: BACKGROUND.
1. The Field of Cyber Security.
2. The DHS EBK Initiative.
3. Applying the EBK.
Section II: EBK ROLES AND REQUIRED CAPABILITIES.
4. The Executive role.
5. The Functional role.
6. The Corollary role.
Section II: THE 14 AREAS OF INFORMATION SECURITY.
7. Data Security.
8. Digital Forensics.
9. Enterprise Continuity.
10. Incident Management.
11. IT Security Training and Awareness.
12. IT Systems Operations and Maintenance.
13. Network and Telecommunications Security.
14. Personnel Security.
15. Physical and Environmental Security.
16. Procurement.
17. Regulatory and Standards Compliance.
18. Security Risk Management.
19. Strategic Security Management.
20. System and Application Security.