Month: September 2022

We know that almost 90% of data breaches are caused by human error*; the human factor is very often the weakest link. Security-aware employees are a primary line of defense in our interconnected world. CyberMontana offers ongoing, focused training in cyber vigilance tailored to both employees & employers to help establish best practices in security awareness and aid Montana organizations in becoming more secure. Professional development in security awareness is one of our statewide efforts.

What Does Security Awareness Mean?

Cybersecurity is about being aware and mindful of different day-to-day, common activities. What understanding do end users have about best practices in cybersecurity and the threats that face us every day? Both as individuals and as employees or organizations.  

One interesting practice is to look up your email address and see if it has been a part of any breach. Think about which devices have been used to access that email address and the potential cyber breaches that may have accompanied that one email breach.

What is the cost of training?

CyberMontana is now offering free end-user Security Awareness Training for the months of September, October, and November 2022. We recommend continuing courses and creating a cyber secure environment. If your organization starts training and would like to continue after November 2022, please contact CyberMontana to discuss the cost and make a plan to continue moving forward. 

How long are the courses and how many should we complete?

Lessons are interactive, fully online, can be taken at any time, and are 20-30 minutes each in length. We recommend small businesses spend a week on each lesson. For larger businesses, we recommend two weeks per lesson. Currently, six courses are available, with more being developed. 

What lessons are available?

Currently, six lessons are available, with more being developed. Topics include: 

• Phishing: The lesson defines phishing (a form of fraud in which an attacker masquerades as a reputable entity or person in email or other forms of communication), how to identify it, and what to do if phishing I suspected. Users are given several examples of phishing emails.
• Password Creation: Users are taught the importance of proper passwords and how to construct them. Users are given examples of strong and weak passwords and will then practice constructing stronger, unique passwords. 
• Social Media: Users learn best practices to keep themselves safe on social media. Users learn strong security settings and thoughtful consideration of what they share about themselves and their organization.
• Malware and Ransomware: The lesson defines malware (malicious software) and ransomware (type of malware that blocks access to devices and/or data, often until payment). The lesson describes what attacks can look like, prevention methods to implement, and what impacts malware can have on an organization.
• Work From Home: The Lesson focuses on securing the home workspace, work and personal devices, and your network. Users learn the dangers of unknown networks, the importance of securing devices in transit and in public places, and how to handle secure information in public places both on devices and in calls. 
• Mobile Device: This lesson covers foundational information to keep data safe when using a mobile device. This includes app permissions, phone calls, and network/Bluetooth connection in public areas. It also includes what it means to share information on your mobile devices and what exact information you are sharing with those applications. 

Who should plan for cybersecurity awareness in the workplace?

Both the employer and employee are responsible for security awareness to protect the organization. Both are also responsible for deciding when it is time to learn more about security awareness. CyberMontana works with organizations to set their individual teams up for training. Your organization will designate a point of contact who will work with our point of contact to make sure your team is set up for success. Not all employees have to complete the training. It is important to decide which employees you think would benefit most from learning about cybersecurity.

Lessons can be completed in any order, although we do have a suggested path. There is a pre and post-test for each lesson, with test scores being delivered after each lesson. These reports allow you the opportunity to look at how the training has been beneficial to your organization. We also send reminders out a few days after lessons are sent to employees who have not logged in and started yet. 

Does Montana require SAT for employees?

Individual participants completing 5 of the 6 available lessons over the 3-month period will be awarded a digital badge/certificate of completion in Cybersecurity Awareness Training. Additionally, businesses will be validated as Cyber Aware if 75% of employees complete their assigned lessons.

How does your business benefit from Cybersecurity training?

Cybersecurity training is not required in the state of Montana. There are many benefits to having a cyber background. With the right knowledge, there is a decreased exposure to human-triggered cybersecurity threats. There are also cybersecurity liability insurance requirements often met by these pieces of training. 

Some organizations look for an employee to have a badge or certificate to accompany their training. Individual participants completing 5 of the 6 available lessons over the 3-month period will be awarded a digital badge/certificate of completion in Cybersecurity Awareness Training. Additionally, businesses will be validated as Cyber Aware if 75% of employees complete their assigned lessons.

Conclusion

Please contact CyberMontana if you would like to take advantage of our free end-user Security Awareness Training or any of our other cyber offerings to upskill or re-skill your existing cyber and IT workforce or build your future workforce pipelines with our existing training cohorts.  

*Tessian, 2020. The Psychology of Human Error

No age is too young to start learning about cybersecurity. As an education hub for the state, CyberMontana provides training for a broad range of recipients. We are excited to walk with High School students as they start to develop what their passions are and what paths those passions will lead.  CyberMontana offers two opportunities for High School students to grow in their cybersecurity paths.

Currently, there are over 1,100 job openings annually in the state of Montana. There are about 598,000 cyber jobs available annually nationwide. Almost 90% of data breaches are caused by human error*; the human factor is the weakest link. Security-aware employees are one of the primary defenses in the business world.

Join the discussion about CyberMontana’s Early College Programs:

CyberMontana is holding a virtual event to answer questions regarding our High School options. This event will happen twice. Please join us on either September 14^th from 6:30 p.m. – 7 p.m. or on September 21^st from 7:00 p.m. – 7:45 p.m. During this time, you will learn about the program, and employment opportunities upon graduation, and hear from the instructors. 

Introduction to Cybersecurity (ITS 191)

Introduction to Cybersecurity provides an online early college option for high school students to explore cybersecurity topics and opportunities for careers. Students will develop a foundational understanding of Cybersecurity and its relation to information and network security. Upon completion of the course, students will earn 3 University of Montana credits. This course introduces students to cybercrime, security principles, technologies, and procedures to defend their networks. 

Cybersecurity Certificate of Technical Studies (CTS)

The Cybersecurity Certificate of Technical Studies is a set of 4 courses (12 credits) that provides students with an entry-level credential that can lead to the Associate of Applied Science degree in Information Technology. This certificate program can be completed in 1-2 years for High School Students. Students would enroll in ITS 215E Fall 2022, starting in October.

Upon completion of the courses, students receive special recognition indicating completion of an NSA-approved Cybersecurity Center of Academic Excellence program of study. Students will have the option of testing for the CompTIA Network+ and Security+ industry-recognized credentials, which are recognized by the U.S. Department of Defense for certain cybersecurity positions. 

Skills gained include:

• Networking Concepts
• IT system Components
• System Administration
• Fundamental security design principles
• Cyber-threats and cyber defense
• Cryptography
• Policy, legal, ethics, and compliance

Why take these Cybersecurity courses in High School?

Cybersecurity is a need in society that is growing at a rapid rate. Whether used for personal or professional purposes, everyone needs to learn skills needed to keep safe in a technological world. Consider how many devices you use for school, as well as at home. Consider as well how many hands some of those devices have used. Cybersecurity is key to keeping information safe.

High school is a time to start looking at and thinking about the future. Many businesses require their employees to align their skills and certifications with the U.S. Department of Defense 8570 matrix for Information Assurance (Cybersecurity) positions involving:

• Technical activities such as securing networks and computers
• Management activities such as ensuring cyber compliance
• Information Assurance Architecture and Engineering
• Cyber Security Provider

Preparing yourself to be cyber aware is preparing yourself to be job ready. 

What is the cost of CyberMontana’s Early College Cybersecurity Courses?

Both the ITS 191 course and the Cybersecurity Certificate of Technical Studies are part of the 1-2-Free program. High school students may take up to two university courses (up to 6 credits) tuition free. After the two courses are complete, the cost is $57/credit (the academic year 2022-2023), which is half the standard Missoula college per credit rate.

There is a further scholarship available for students who (themselves or their households:

• receive free or reduced lunch
• participate in Montana Healthy Kids and or medicaid
• receive SNAP or WIC benefits 
• participate in the Head Start Program
• are McKinney-Vento participants  
• receive TANF or SSI benefits 
• receive a Section 8 Housing Voucher

If you or your family receive any of these services, you are eligible to apply for a scholarship. 

What happens after completing the program?

Upon completion of the program, Students will have the option of testing for the CompTIA Network+ and Security+ industry-recognized credentials. Successful completion of the program sets up students to be prepared for entry-level cybersecurity positions. Students are also able to continue their education by completing an Associate of Applied Science in Information Technology. The 12 credits acquired in the CTS program may be applied to the AAS at the University of Montana, offered through Missoula College.

What are my next steps?

Join us for either an information session, on September 14^th from 6:30 p.m. – 7 p.m. or on September 21^stfrom 7:00 p.m. – 7:45 p.m. Hear from the professors, meet the cybersecurity staff, and of course, ask your questions! Let’s get started on this cybersecurity adventure together.