The Growing Importance of the Non-Code Aspects of Cybersecurity

Abstract

According to the National Initiative for Cybersecurity Education, half of the cybersecurity specialties now involve primarily non-code work. This lecture draws on the "Pedagogic Cybersecurity Framework" published in 2018 in the Communications of the ACM. It extends the OSI stack to layer 8 (organizations), layer 9 (government), and layer 10 (international), showing the broader range of subject-matter expertise that organizations now need for effective cybersecurity. The lecture will also extend the PCF to privacy as well as cybersecurity.