Abstract:

In last ten years the European Qualification Framework is base for development of the curriculum corresponding to the business needs in each EU country. The building of the competency profile is very important for better communication between business and the educational organisations. These is crucial for new job profiles such as the cyber security area. It is one of the main research topic of the The Bulgarian University of Library Studies and Information Technologies (ULSIT). There are bachelor, master, PhD and VET programmes in cyber security. The academic research include several projects in last three years as NATO project MN CD E&T, Erasmus+ projects 573901-EPP-1-2016-1-IT-EPPKAZ-CBHE-JP for development of Bachelor and MSc programmes in Information Security for Moldova, Kazakhstan and Vietnam and 2018-1-LV01-KA202-046987 for reducing the cyber security management skills gap in SMEs and 2018-1-BG01-KA202-047919: Internet of Things security nuggets.

ULSIT extracts the best practices, combine already established cyber security frameworks according the needs of Bulgarian business and implement the results in training. The university staff train and support their colleagues from the partners countries how to specify their training.

This paper presents the processes of defining the cyber security competency framework for educational levels (from basic to expert) for cyber user, cyber manager and cyber security specialist. The main purpose is to define curriculum in small educational modules and configure the sequences. The education include simulation and inquire approach. The challenge is to specify the educational nuggets and to develop significant set with educational recourses and activities. The paper shows first and second phase of the process: identifications of the gaps between supply and demand and creation of the cyber security competence framework for internet of things ecosystems.

The defined model includes common competences as personal effectiveness, academic and workplace as well as specific industry - wide technical and sector functional area and in the end the management specific.

The learning is designed in micro modules sorted in sequence. The educational nuggets supports the professional development and give learners flexibility to fix gaps in their specific knowledge and skills.

Keywords:

Cybersecurity, specialized competencies, building, training.