The IA and Cyber Security Profession

9 September 2016

Is 2016 the year in which we can say the IA and Cyber Security profession came of age? (Or has it already?) With so many initiatives underway regarding apprentices, qualifications, research, skills and organisations, it is time to take stock of where the profession is. This research aims to consolidate views around the notion of what is declared as our profession.

To date we have tried to do this through maps, such as those produced by IACG or skills frameworks, which give a snapshot of where we are organisationally and what might be in a curriculum today. What else needs to be done and declared? For example, what are the values and ethics of the profession? Does a pen-tester’s code of ethics extend to the other disciplines? Do existing codes need to be reviewed or updated in light of technological change? Is there an ethical basis for the products and services we produce that can be inculcated as a set of values in the profession? How are we doing in this regard and what can be done to foster adoption by professionals? How can this influence the public debate on trust, security and privacy? How should the public see the IA and cyber security profession? How should apprenticeships be perceived by parents as a route forward for their children into the profession? Other fundamental questions relate to mapping the profession over time. For example, considerable effort is being spent in encouraging younger people into cyber jobs with a good technical base, but how does this relate to a career in the profession? What opportunities exist later in a career? What responsibility do we take for training and educating ourselves and our colleagues?

Three core workshops are planned, the first scoping and setting the research problem, and breaking it down into workable sub-tasks. The second and third workshops will delve deeper into specific facets of the profession. A final report will be developed for presentation in early 2017. The community of interest is invited to participate in this research programme. It is intended to ensure a diverse representation of stakeholders necessary to explore the crosscutting issues – so wide distribution of this is requested.