Information security education : bridging the gap between academic institutions and industry

Abstract

Information Security has been established as a growing discipline around the globe. There is however, a shortage of Information Security professionals in industry and a lack of Information Security awareness in organizations. This results in a real need for Information Security education. Additionally it is essential that the academic sector incorporates the needs of industry when teaching Information Security. This paper is devoted to an investigation of Information Security Education with a view to define a common body of knowledge for Information Security that incorporates the needs of both industry and the academic sector. The purpose of the paper is to propose a framework that maps the Information Security needs of industry to the academic sector. The framework could be used as a starting point when developing an Information Security education program.