Forming the Abilities of Designing Information Security Maintenance Systems in the Implementation of Educational Programmes in Information Security

Abstract

The paper shares the NRNU MEPhI's experience in forming the abilities to design the Information Security Maintenance Systems (ISMaS) in training Bachelors, Masters and Engineers in the field of Information Security (IS). It is proposed to form their abilities and teamwork skills when executing a course project by a team of students under supervision of their Professor within the framework of the "IS Management" discipline. Course projects help to reinforce the students' theoretical knowledge and develop their ability to apply this knowledge to the solution of practical problems. They are assigned at a group basis and in our case are aimed at designing the ISMaS of a particular object, which automates the implementation of a separate organization's process. A brief description of the process model for ensuring IS of such objects is given and the regulations for implementing the course project are presented in detail, indicating the types of abilities that are gained at each stage.

Formation of General Professional Competencies in Academic Training of Information Security Professionals

“…Masters' training is conducted under four degree programmes: "Application of Cryptology Methods in ISMS"; "IS Maintenance for Key Information Infrastructure Systems"; "Business Continuity and IS Maintenance" and "Information and Analytical Support of Financial Monitoring". The papers [14] and [15] shares the NRNU MEPhI's experience in training Bachelors and Masters in IS. All these programmes are developed in accordance with the Professional standards of the Russian Federation for IS [16] and the Federal Educational Standards of the Russian Federation in the IS Direction [17].…”

Andragogy as a Scientific Basis for Training Professionals in Information Security

“…For example, in the UK [12] it involves the development of the trajectory of academic education, which includes the implementation of the following programmes (Fig. 1 In the Russian Federation [13], the trajectory of academic Bachelor's and Master's training is also implemented, as well as in-depth engineering education on the basis of so-called Specialitet (S), and additional professional training in the form of RC and RT programmes is traditionally developed (Fig. 1).…”

“…Therefore, the acquired professional competencies should include a set of abilities (practical skills) that can be applied not only after graduation from the programme but also in the FQW's implementation. This can be done if the discipline's programme includes laboratory work, practical (case) training, homework followed by public protection of the results of their implementation [13].…”