BLOG

In today's world, cybersecurity is no longer an isolated technical discipline. It has become intricately intertwined with the business world, playing a critical role in protecting organizations from cyber threats and safeguarding sensitive data.

While technical skills are undoubtedly essential, cybersecurity instructors must recognize the growing need to equip students with a comprehensive understanding of the business side of cybersecurity.

Let's delve into the reasons why cybersecurity instructors need to teach students to prepare for the business side of a cybersecurity job, rather than focusing solely on technical skills. We will explore pertinent data and insights from experts, and provide examples of how this can be accomplished effectively.

Aligning Security Objectives with Business Goals

The threat landscape has evolved significantly over the years, with cyber attacks becoming more sophisticated and pervasive. As a result, cybersecurity professionals are no longer confined to working in silos; they must actively engage with various stakeholders across the organization, including executives, legal teams, and compliance officers. To effectively protect the digital infrastructure, students must be equipped with a holistic understanding of business operations, risk management, and compliance requirements.

Cybersecurity should be seen as an enabler rather than an obstacle to business operations. By teaching students about the business side of cybersecurity, instructors can help bridge the gap between security and other departments within an organization. Students will learn to align security objectives with broader business goals, effectively communicating the value of cybersecurity initiatives to stakeholders. This alignment fosters a collaborative culture that integrates security into the fabric of the organization.

For example: In recent years, the regulatory landscape has undergone significant changes, with stringent data protection laws such as the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) coming into effect. Cybersecurity professionals must navigate these complex regulations, ensuring compliance and mitigating potential legal risks. By teaching students about the business implications of these regulations, instructors can enable them to design effective security strategies and teach them how to get internal buy-in to make compliance a priority. Ultimately, students with these skills will be prepared help an organization address legal requirements and protect the organization's reputation.

Michael G. Solomon, Ph.D, CISSP, PMP, CISM, CySA+, Pentest+, Professor of Cybersecurity and Global Business at the University of the Cumberlands, has written several textbooks on cybersecurity including Fundamentals of Communications and Networking, Third Edition, Ethical Hacking: Techniques, Tools, and Countermeasures, Fourth Edition, and Security Strategies in Windows Platforms and Applications, Third Edition. He stresses the importance of teaching business acumen to cybersecurity students. Watch here:

Strategies for Cybersecurity Teachers, Professors, and Instructors

Now that we understand the importance of teaching business acumen to cybersecurity students, let's explore some effective teaching strategies to achieve this objective.

• Case Studies: Incorporate real-world case studies that highlight the business implications of cybersecurity incidents. Analyzing past breaches and their consequences can help students understand the broader impact on organizations, including financial losses, reputational damage, and legal repercussions.
• Guest Speakers: Invite industry experts and executives from organizations that have experienced cyber attacks to share their experiences. This firsthand perspective can help students grasp the business impact of such incidents and understand the importance of cybersecurity from a real-world business standpoint.
• Internships and Experiential Learning: Encourage students to participate in internships or work-study programs that provide exposure to the business aspects of cybersecurity. This hands-on experience will allow them to observe and engage with professionals in the field, gaining practical insights into the intersection of cybersecurity and business operations.
• Business-oriented Curriculum: Integrate business-focused courses into the cybersecurity curriculum, covering topics such as risk management, compliance, and business continuity planning. These courses should provide students with a solid foundation in business concepts and frameworks relevant to cybersecurity.
• Teaching Soft-Skills: Students often have the raw, technical skills needed to become highly qualified cybersecurity professionals. However, many students lack "soft skills" such as communication, presentation skills and effective collaboration. Incorporate group assignments that mimic real-world scenarios. This will help students navigate different perspectives and possibly conflicting viewpoints with the understanding that a project must get done on time.

In an era of ever-increasing cyber threats, cybersecurity professionals must possess a multidimensional skill set that extends beyond technical expertise. By imparting business acumen to cybersecurity students, instructors can equip them with the necessary tools to effectively navigate the complex business landscape. 

If you'd like to learn more about how to accomplish this, reach out to the Jones & Bartlett Learning team.

Contact Us

Related Content:

• Artificial Intelligence is Helping Hackers Write Malicious Code—Cybersecurity Educators Have a Role to Play to Stop Them
• Cybersecurity Students Want Real-World Experience in the Classroom. Here’s How to Give It to Them.
• Instructors Provide Guidance on Teaching the Cybersecurity Workforce of the Future