CPRs: Community Project Requirements

CPRs:

Community Project Requirements

Version 1.1

Current Version
Archives

The community of security professionals in government, commercial, and academic and research organizations is a powerful force for good. They often work together in ad hoc teams to fight against cyber crime and to help organizations block attacks or recover from attacks. When they learn about a major new vulnerability and wonder how best to respond, or when their organization is attacked and they are seeking tools that can help them defend their systems, security practitioners look to their network of practitioners for ideas, proven techniques and help in avoiding major mistakes. The SANS Technology Institute education provides opportunities for you to build your own network of security professionals from the other students and the faculty. The following is a description of the Community

Project Requirements:

Attendance at Three Residential Institutes

Residential Institutes (RI) are large 5 to 7 day conferences that SANS Institute offers on a periodic basis in various U.S. cities and some international sites. Students may take some or all of their courses at the Residential Institutes.

(It is possible for a student to take the courses through different delivery systems such as self study, on demand, mentor, at home (also known as webcast), etc.; but the student still must attend three residential institutes).

Why does the student have to attend the three RIs?

The RIs provides live face- to- face time among students, faculty, and instructors. It provides students with opportunities to build their own network of security professionals with other students, faculty, and instructors. This is such an important component of the student's education that STI has engineered team activities into the programs to enrich the student's educational experience, to assist the student in contributing to the security community, and to expanding the student's network of peers.

Oral Presentations at two of the three RIs - Students must make an oral presentation at TWO of the three RIs. Generally, the presentation occurs at the second and third RIs, but it is possible for the student to do the first presentation at the first RI if they coordinate it with STI's senior management. The presentation topic is based on the student's previously earned Gold GIAC certification research. This presentation will be given in front of a member of STI's senior management. Generally it is done in the evening and there will be other people in the audience as well. The grade will be on a pass/fail basis, but that may change in the future.

First Residential Institute

The student will participate as follows:

Volunteer (also known as "work study") - The student will coordinate with the volunteer coordinator well in advance of the scheduled RI. The student should let the volunteer coordinator know that the student is in STI's masters degree program. Some examples of volunteer duty include room monitor or bookroom volunteer. Students can participate in those two types of activities without affecting their ability to take a course at the conference since those volunteer duties can occur before or after the classes, or during class breaks. A volunteer pays a reduced fee for the course in which he or she is a volunteer. The student will be graded on a pass/fail basis, but that may change in the future.

Joint Written Project -A student must engage in ONE joint written project during the term of the masters program. (It must be completed after the first RI preferably, or after the second RI). The student must select at least one other student to be his or her partner(s) in the joint written project. The student should do this while at the conference and also the students will need to coordinate getting the topic from the faculty representative. The faculty representative will select a Learning Object (LO) for the team. The LO will have an associated LO Outcome Statement. The team will:

  • Perform a critical analysis of the LO with respect to objectives articulated in the outcome statement.
  • Perform a gap analysis and determine the project steps to improve the LO. A gap analysis means the team determines where they are and where they want to be.
  • Conduct original research on new developments that may have altered the LO subject matter
  • Students create an assessment tool to measure whether students have mastered the subject material.
  • Submit the project results for evaluation and grading.

The joint written project is written, and does not involve an oral presentation. The students will collaborate with their partner(s) by e-mail, phone, etc. to coordinate their efforts. The project must be completed and submitted to STI within 30 days after the RI where the students received the topic. The grade will be a team grade / each student in that team will receive the same grade. The grade will be on a pass/fail basis, but that may change in the future.

Second Residential Institute

The student will participate as follows:

Group Discussion and Project - The student will arrive one day BEFORE the scheduled RI to participate in a group discussion and project. A problem will be presented to the student's team in the morning; and as a team, the team prepares to present a recommended solution to senior management later that day. The actual presentation is given by one member of the team which the team selects. The presentation usually occurs in the evening in front of a member of STI's senior management. Generally, there are people in the audience. The grade will be a team grade / each student in that team will receive the same grade. The grade will be on a pass/fail basis, but that may change in the future.

Joint Written Project - if not already completed. See discussion above.

Oral Presentation - See the Oral Presentation discussion in the "Attendance at Three Residential Institutes" section above.

Third Residential Institute

The student will participate as follows:

Proctor - The student will assist an instructor as a proctor in a hands-on course. The student will help students as needed. The student will be graded by the instructor on a pass/fail basis. The student will not be able to take courses at this RI due since he or she will be a proctor probably 36 hours over the span of the conference. The student will benefit from being exposed to an excellent hands-on instructor, and the student will be able to exercise important skills while assisting others in the hands-on instruction. The student will not be paid a fee for this proctoring requirement. (If a student later wants to be a proctor for another course, the student may be able to receive a proctor fee).

Oral Presentation - See the Oral Presentation discussion in the "Attendance at Three Residential Institutes" section above.

Awareness Talk in Student's Community

The Plan for the Community Awareness Talk. Within 30 days after the student finishes the third RI, the student must present a plan to STI describing how the student intends to satisfy the Community Awareness Talk. (The foregoing paragraph about "the Plan" applies to students admitted June 1, 2006 and after.)

Teaching Community Awareness in the Community. (Applies to all students)

The student will teach SANS 351 - Computer and Network Security Awareness, or a similar awareness course, at no cost or low cost to members of the public in the student's own community. STI will make available to the student the SEC 351 course material, or the student can devise his or her own course content. The student, and possibly STI, will invite members of the public to attend. At least one representative from the student's own organization (place of employment) must be present. That person will provide evidence to STI that the talk was made, and will note how well the student handled questions in his or her opinion. The talk is a requirement, but the student will not receive a grade for it.