Originally posted on August 11, 2020 @ 11:04 pm
I’m sitting here in the airport after finishing a 1 week Risk Management Framework (RMF) Security Controls Assessment (SCA) and reflecting on the week. This week the team and I reviewed nearly 30 hosts and over 3000 individual controls. I remember throughout the week there were many times thinking “this is pretty basic stuff, why aren’t they (the client) following the security guidance?.” and I remember that to many system administrators security isn’t “baked in” like we’ve always claimed it should be. It also underscores the need to get more Information Technology (IT) professionals trained in cyber security. That’s why Cyber Centurion is proud to sponsor Civil Air Patrol NC-162 Squadron’s first CyberPatriot Team.
CyberPatriot is the National Youth Cyber Education Program created by the Air Force Association to inspire K-12 students toward careers in cybersecurity or other science, technology, engineering, and mathematics (STEM) disciplines critical to our nation’s future. At the core of the program is the National Youth Cyber Defense Competition, the nation’s largest cyber defense competition that puts high school and middle school students in charge of securing virtual networks.
The cadets on our team, who range in age from 13-16 began practice in April with basic computer skills and cyber hygiene concepts. Over the past several months they’ve progress through the basic materials absorbing the information at an incredible pace. For many, this is their first exposure to managing operating systems and advanced concepts of computer security. They are excited to begin their first scored round and put their knowledge to the test.
Throughout the week, there were many times that I thought: “Gee, I wish ‘R’ was here. He could do this in his sleep” or “Wow ‘E’ would have known what to make this setting” or “I wish ‘A’ was here to explain why the system needs to be configured this way”. I highlight these examples because the cadets in this program have in most cases at least 7 years before they’re in the workforce. Regardless of what they do in their careers, many will stay close to technology and one thing I am sure of; with these cadets I know security will be baked into whatever they do!
The competition round begins this coming weekend, October 25-27, 2019. If you are so inclined check out the Cyber Patriot website (www.uscyberpatriot.org) or your local Civil Air Patrol (https://www.gocivilairpatrol.com/) both are great organizations for engaging our youth in Cyber Security and Aerospace Engineering. If you don’t have a local team or squadron, reach out to me, most of the cyber security training I do with our cadets is virtual and I’m always looking for help!