EDUCAUSE | Training

Tune In Nov. 14: Free Web Seminar on IT Security Essential Body of Knowledge for Workforce Development

vvogel — Thu, 08 Nov 2007 16:15:57 -0600

The Department of Homeland Security's National Cyber Security Division worked with subject matter experts from government, the private sector, and academia to develop an umbrella framework that establishes a national baseline representing the essential knowledge and skills IT security practitioners must have to perform their jobs. The IT Security EBK builds directly on established work and is not intended to represent a standard, directive, or policy by DHS. Instead, it further clarifies key IT security terms and concepts for well-defined competencies, identifies notional security roles, and defines primary functional perspectives to help advance the IT security training and certification landscape as we strive to ensure that we have the most qualified and appropriately trained IT security workforce possible.

This free November 14 EDUCAUSE Live! Web seminar, IT Security Essential Body of Knowledge: A Competency and Functional Framework for IT Security Workforce Development, features presenter Brenda Oldfield, Director of Education, Training, and Workforce Development, Office of Cyber Security and Communications, U.S. Department of Homeland Security.

Those unable to attend may wish to visit the archives after the event or browse related EDUCAUSE resources:

IT Security Essential Body of Knowledge: Federal Register Notice Request for Comments

Rodney — Tue, 09 Oct 2007 11:20:50 -0500

A Federal Register Notice has been published for the Department of Homeland Security's "Information Technology (IT) Security Essential Body of Knowledge (EBK): A Competency and Functional Framework for IT Security Workforce Development." The deadline for comments is December 7, 2007.

According to the Notice:

The EBK is not an additional set of DHS guidelines, and it is not intended to represent a standard, directive, or policy by DHS. Instead, it further clarifies key IT security terms and concepts for well-defined competencies, identifies notional security roles, defines four primary functional perspectives, and establishes an IT Security Role, Competency, and Functional Matrix.

More information, including a downloadable version of the IT Security EBK, is available at http://www.us-cert.gov/ITSecurityEBK/

There will be a briefing for the higher education sector with Brenda Oldfield from DHS as part of an EDUCAUSE Live on November 14, 2007, at 1 p.m.

Video Skills for Interdisciplinary Research

catherine — Wed, 22 Nov 2006 09:57:42 -0600

Use of digital video is exploding in UK higher education, both as a tool for teaching but also as a topic for research -- and in the arts and humanities, as well as the sciences. New meta-search tools like PureVideo are making video content newly accessible to researchers and institutions. Organisations like JISC, AHDS and the British Universities' Film and Video Council are helping to set up open-access video archives for education. There's a whole constellation of factors at work (technological developments, affordability, licensing agreements, etc.), jointly conspiring to make digital video an emergent key research tool.

What particularly interests me in all this is that film and video, as research tools but also as research subjects in their own right, have broken free of the boundaries of disciplines like Media Studies, Design, and Journalism. In the humanities, digital video is now of significant interest to historians, political scientists, performing arts specialists, literary scholars, architects--in fact, the whole scholarly battalion. In Cambridge, high demand has led to establishment of a new graduate degree programme in Screen Media, and a cluster of associated research seminars. At a graduate training seminar I gave recently, I couldn't keep up with the video-related questions fired at me by the students.

Using digital video seems to enable interdisciplinarity. This is intriguing, especially in the context of a research-intensive university with well-established disciplinary methods and microcultures. And it demands that staff and students acquire new skills -- including "social" skills like e-safety and copyright, as well as technical skills. Who within research institutions is recognised as having this kind of expertise, and who is best placed to deliver "whole package" training? Is there a growing skills gap between older and younger staff, or between staff and students? What new forms of collaboration might video use enable, or require?

EDUCAUSE Security Professionals Conference 2006.Summary: Implementing HIPAA Security Rule Training Program for Sys Admins at ECU

llarsen — Tue, 25 Apr 2006 14:31:00 -0500

Implementing a HIPAA Security Rule Training Program for System Administrators at East Carolina University. Carol Davis, DRP Coordinator, East Carolina University

This session walked us through the planning and implementation process that created a training program for systems administrators at ECU for the HIPAA Security Rule. The program was added to a privacy program that already existed but was in need of revision. A key resource was the SANS Press HIPAA Security Implementation book.

Key questions for the planning process were

What is the training?
Who needs the training?
What are the overall project alternatives?
How will it be delivered?
What will the cost be?
What is the “completion” point?
How will effectiveness be measured?
How often must the training be taken?
Who will do the Public Relations on the project and what will be included?
Who will continue to update the training content and monitor?

The project was developed over three months using their HIPAA Committee as the key advisory group. This committee developed the policies for the project. Time was spent on fully understanding the rule sets: the privacy rule, the transaction and code set rule, and the security rule. Technical safeguards and related policies were to be included in the training. Initial options considered included purchasing a full set of modules or customizing the training using Blackboard which was already an established resource.

Awareness training was to be included for all members of their health care workforce including management. Visitors and students complete an abbreviated version of the training and students take a web-based quiz and take the results to their faculty.

The course objectives were:

Familiarity with HIPAA and the security rule
Understanding rule sets
Understanding why both Privacy and Security rules are needed
Understanding how the rule applies to the trainee.
Understanding safeguards
Review of security policies
Understanding technical security awareness
Understanding individual responsibility for protecting health information

The content was created in five sections:

Overview and structure
Security rule principles
ITCS safeguards
Security awareness
Security incident notifications

A Blackboard course was populated & information on the program was distributed

Training guidelines were provided electronically and course deadlines were included

Management helped to ensure course completion.

Current knowledge was sampled by having administrators complete the quiz before the online training and again afterwards. The specific training assessment is a quiz of 10 questions based on HIPAA privacy but concentrating on security specifics. Instant feedback is provided for both correct and incorrect answers. The training and quiz can be retaken to improve learning. Certificates are awarded for 80% or better scores. The certificates are popular and being hung on office walls and added to resumes.

Each person taking the training is asked to complete an evaluation survey that includes the question of the application of the training to their position and a blank field for additional comments.

The latest phase is to more fully utilize Blackboard with one training package that includes two modules and to incorporate student training into the system as well as reviewing role-based training opportunities. HR is assisting in identifying new departments or individual positions that require compliancy or other special training. And, of course, the training content is continually reviewed and revised when appropriate.

HIPAA Security Rule Training – presentation slides

HIPAA System Admin Training Guidelines – 4 page document – instructions for training program.

E2005 Podcast: 64 Campuses, One Central Organization

podcaster — Tue, 28 Mar 2006 17:24:20 -0600

This 50 minute recording provides coverage of the 2005 EDUCAUSE Annual Conference Session entitled 64 Campuses, One Central Organization for Training and Professional Development.

E2005 Podcast: Revitalize and Transform Online Staff Training and Development

podcaster — Fri, 24 Mar 2006 17:42:00 -0600

This 51 minute recording provides coverage of the 2005 EDUCAUSE Annual Conference Session entitled Learning Mania: A How-To Guide to Revitalize and Transform Online Staff Training and Development.

Faculty Development

markmorton — Wed, 12 Oct 2005 11:11:06 -0500

One part of my job as Instructional Program Manager is to help faculty members develop pedagogical strategies that work effectively in an online environment. There are a number of challenges to this, and the primary one is probably the looming presence of the technology itself: that is, the complex and powerful online course management system is there in front of the instructors -- they can almost stub their toe on it -- and so when they start to think about incorporating an online component into one of their face-to-face courses, the first thing that comes into their mind is "how do I use the technology" rather than "what do I do with the technology." In other words, they are well aware that they need guidance and probably even training with regard to the nuts and bolts aspects of logging on, making online quizzes, using the online gradebook, and so on. But this focus on the technology AS technology causes them to overlook less tangible things, such as the need to develop new pedagogical approaches, and the need (and opportunity) to make online learning as active and student-centred as possible. On a day to day basis, this problem is manifested in the fact that many of our faculty mistakenly think that our unit -- The Centre for Learning and Teaching Through Technology (LT3)-- is a kind of "technology help desk," the place that they phone when they are having a problem with a computer or with software. In short, it's lamentable that LT3 sometimes gets confused with IST (Information and Systems Technology); and sometimes we are also confused with other quite distinct units, such as Distance Education.

Another challenge with regard to faculty development is simply finding time. Instructors are busy: with teaching, with research, and with life. It's hard to convince them to devote time to a workshop, even one that's designed to help them devise learning activities that will work effectively in an online environment. The workshop I offer -- called The E-Merging Learning Workshop -- demands upwards of twenty hours from a participating instructor. He or she first spends eight or so hours completing a series of online modules; then attends a two-hour coaching session; then completes another online module that requires another few hours; and then attends one final coaching session. We've had success with this workshop in the past, because it successfully gets instructors to re-think how they use "time and space." That is, they come to see the efficacy of using the online environment to do two things. First, to use the online environment to deliver some of the course content, so that the classroom time and classroom space can be re-purposed for more interactive activities such as discussions, question and answer, field trips, lab work, and so on. Second, they come to see the value of using the online environment to have students engage with content in an active and student-centered manner: that is, they're not just reading a posted lecture, but rather are completing online activities (quizzes, simulations, role playing, discussion groups, etc) that pull them into the material, and which allow the instructor to provide them with formative feedback. (We call this instructional model, which we developed at the University of Waterloo, the T5 model -- the "T"s stand for tasks, topics, tutoring (i.e. feedback), teams, and tools). However, despite the demonstrated benefit of the New Classroom Workshop, it's sometimes hard to get faculty members to sign up for it -- due, as I was saying, to their time constraints. And sometimes it's even hard to get the faculty members who do sign up to complete all of the online modules before the first coaching session (which is ironic considering that one of the "instructional challenges" that we discuss during the workshop is how to get undergraduates to come to class prepared!). At York University, in Toronto, they offer similar faculty development program (called doTEL), except that it's ten weeks in length rather than two weeks like our New Classroom Workshop. In the upcoming weeks I'll be looking further into their approach at York -- and I'd welcome suggestions or ideas from other engaged in faculty development. Feel free to leave them here as comments, or to email me directly at markmorton@LT3.uwaterloo.ca