Design and development of an executive course in information security: A multidisciplinary fundamentals project for legal advise and advocacy track

• Main Author: Faustorilla, John Francis L., Jr.
• Format: text
• Language: English
• Published: Animo Repository 2021
• Subjects: Computer security; Data privacy; Data protection; Computer Sciences; Information Security
• Online Access: https://animorepository.dlsu.edu.ph/etdm_comtech/5
• Institution: De La Salle University

Technological innovations amidst the Digital and COVID Economy has facilitated survival of industries during the pandemic and in a VUCA World. Face-to-face transactions has been replaced with digital solutions as quarantine protocols and restrictions on movement have been imposed during the surge of COVID-19. However, information and privacy security risks have surged over the period where electronic transactions have proliferated sustainable transactions of people at risk for COVID-19. Moreover, there is a lack of decision-makers and information technology professionals who have sufficient knowledge, skills, and abilities in managing information security threats, vulnerabilities, and risks in the Philippines. This paper aimed at designing and developing an executive course in information security starting with the legal advise and advocacy track using the Workforce Framework for Cybersecurity of the National Institute of Standards and Technology. The study utilized the project design and development process following ISO 21000:2018 Educational organization management system clause 8.3 Educational design and development requirements. This study generated mapping of 7 Knowledge, 1 Skills, and 5 Abilities focused on the Data Protection Fundamentals Course as a baseline set of competencies for the legal advise and advocacy track. A total of 5 significant improvement points for the instructional design and 4 significant improvement points for the facilitation guide have been noted by subject matter experts who reviewed the initial outputs of the program design and development activities. Future work is needed to develop the Privacy Compliance Manager and other Cyber Legal Adviser roles as part of the legal advise and advocacy track. Future researchers may also explore developing beginning, advances, and expert roles with the technical and security management tracks provided in the NIST Special Publication 800-181 Revision 1 as of July 7, 2020. Job analysis and competency mapping may also be done by organizations using the Reference Spreadsheet for the Workforce Framework for Cybersecurity with the array of Tasks, Knowledge, and Skills published.