Information security education based on job profiles and the e-CF

PurposeThe information security field requires standardised education. This could be based on generic job profiles and a standard competence framework. The question is whether this is possible and feasible. To find out, the author did a case study: developing an information security master curriculum based on a generic PVIB job profile and the underlying competence framework e-CF.Design/methodology/approachThe research is a case study, using Design Science. Starting point is the specification of the learning goals for a cybersecurity master curriculum, using a generic PvIB job profile and the underlying competence framework e-CF. The curriculum has subsequently been developed, using backward design. Thereafter, the curriculum has been submitted for accreditation to test the successfulness of the approach.FindingsA generic job profile and a competence framework such as the e-CF support the development of standardised education. The generic PVIB job profile used works well. The e-CF can be useful, but requires modifications and the introduction of sub-competences. However, the main complaint concerning the e-CF is the use of examples instead of mandatory content.Originality/valueCompetence frameworks are available to formulate job descriptions, and are also suited for developing standardised education. Little research has been done on this. This case study shows that a competence framework is a useful tool for developing standardised education, although the e-CF may not be the most appropriate.

[1]  Tim Dornan,et al.  Outcome (competency) based education: an exploration of its origins, theoretical basis, and empirical evidence , 2012, Advances in Health Sciences Education.

[2]  Robert K. Cunningham,et al.  A Discussion on Security Education in Academia , 2018, CCS.

[3]  Geoff Norman,et al.  Competency-based education: milestones or millstones? , 2014, Journal of graduate medical education.

[4]  T. Leggett.  Competency-based education: a brief overview. , 2015, Radiologic Technology.

[5]  M. Elken.  Standardization of (higher) education in Europe – policy coordination 2.0? , 2017 .

[6]  Loek Nieuwenhuis,et al.  Competence-based VET in the Netherlands: background and pitfalls , 2004 .

[7]  L. Baartman,et al.  Knowing everything from soup to dessert: an exploratory study to describe what characterises students’ vocational knowledge , 2018 .

[8]  Herbert J. Mattord,et al.  Cybersecurity Curricular Guidelines , 2017, World Conference on Information Security Education.

[9]  Joanna C. Richards,et al.  Curriculum Approaches in Language Teaching: Forward, Central, and Backward Design , 2013 .

[10]  Françoise Delamare Le Deist,et al.  What Is Competence? , 2005 .

[11]  John Impagliazzo,et al.  A competency-based approach toward curricular guidelines for information technology education , 2018, 2018 IEEE Global Engineering Education Conference (EDUCON).

[12]  F. Meijers,et al.  New school for the old school: career guidance and counselling in education , 2017 .

[13]  Alan R. Hevner,et al.  Design Science in Information Systems Research , 2004, MIS Q..

[14]  Ronald G. Sultana,et al.  Competence and competence frameworks in career guidance: complex and contested concepts , 2009 .

[15]  Denis Music,et al.  Competency-based learning model in practice , 2017, 2017 IEEE 15th International Symposium on Intelligent Systems and Informatics (SISY).

[16]  L. Curry,et al.  Implementing Competency-Based Education , 2017 .

[17]  Irwin Brown,et al.  Skills Requirements for Cyber Security Professionals: A Content Analysis of Job Descriptions in South Africa , 2018, ISSA.

[18]  E. Martinez-brawley,et al.  Tacit and Codified Knowledge in Social Work: A Critique of Standardization in Education and Practice , 2007 .

[19]  F. Meijers,et al.  The development of strong career learning environments: the project ‘Career Orientation and Guidance’ in Dutch vocational education , 2018 .

[20]  Martin Mulder,et al.  The concept of competence in the development of vocational education and training in selected EU member states: a critical analysis , 2007 .

[21]  S. Ganie,et al.  The concept of competence: a thematic review and discussion , 2020 .

[22]  Bulent Tarman.  Innovation and Education , 2016 .

[23]  Ross J. Anderson.  Why information security is hard - an economic perspective , 2001, Seventeenth Annual Computer Security Applications Conference.

[24]  Jaap Scheerens,et al.  Career Competencies for the Modern Career , 2006 .

[25]  Emanuel Soare,et al.  Perspectives on Designing the Competence Based Curriculum , 2015 .

[26]  N. Davidovitch.  Learning-Centered Teaching And Backward Course Design From Transferring Knowledge To Teaching Skills , 2013 .

[27]  Tanya Horsley,et al.  Toward a definition of competency-based education in medicine: a systematic review of published definitions , 2010, Medical teacher.

[28]  Rebecca Vogel,et al.  Closing the cybersecurity skills gap , 2016 .

[29]  F. Dochy,et al.  A phenomenographic analysis of the implementation of competence-based education in higher education , 2015 .