Communities across the United States and globally are increasingly vulnerable to cyberattacks targeting critical infrastructure, nonprofits, and other trusted institutions. In response, a national consortium of universities and community colleges has established cybersecurity clinics to address this challenge through an innovative, action-oriented approach. This article explores the role of clinical education not only in training cybersecurity professionals, but also in scaling the development of clinics to improve the security posture of critical infrastructure providers. By integrating classroom instruction, hands-on practice, direct client interaction, and close supervision, clinics can bridge the gap between theory and practice, enhancing public sector cyber resilience while having institutions of higher education meet their larger social obligations. Case studies from the consortium of cybersecurity clinics—including those at Indiana University, MIT, and UC Berkeley—illustrate the role these clinics have already played in supporting critical infrastructure and advancing national cyber resilience efforts. Furthermore, we examine the clinics’ role in promoting change and improvement in cyber culture within a wide range of government and non-governmental organizations. This work provides a foundation for the continued expansion of cybersecurity clinics as a model for national cyber resilience, offering key insights into ways of strengthening cyber defenses and protecting critical infrastructure.
READ THE FULL ARTICLE HERE