Information System Security Education and Training Framework

This technical report outlines the importance of training and education in information system security, particularly for personnel involved in Web administration within the Department of Defense (DoD). It emphasizes the need for a standardized training program that addresses the unique knowledge and skills required for effective Web administration. The report categorizes the functionalities associated with Web administration into information management, information systems administration, and information systems security. It identifies the roles and responsibilities of various individuals involved in this process, including users, originating offices, public affairs officers, and web administrators. Furthermore, the report discusses the existing training efforts within the DoD, highlighting the lack of a uniform certification process for Web administrators. Recommendations include establishing a common core of knowledge and developing a certification process that distinguishes Web administration from general system administration. The report aims to enhance the effectiveness of information security practices through improved training and certification.