Educause Security Discussion mailing list archives
Re: Quick Poll Results Follow Up - Student Workers in SOC
From: "Douglas R. Lomsdalen" <dlomsdal () CALPOLY EDU>
Date: Thu, 4 Jun 2020 18:31:55 +0000
Hi Ron, Cal Poly State University uses student employees almost exclusively in our Tier 1 SOC (we stood up initial SOC service during our Fall Quarter). The students took a huge load off our full-time staff (three of us). We let them address all email abuse that is reported (e.g., Analyze, determine the source, and use O365 tools to handle blocking). They research Splunk alerts, and take remediation efforts (e.g., lock phished accounts). We've also put them to work in our Splunk environment setting up SOC specific dashboards and alerts. We provide hands-on training with the tools, over the shoulder training. We have the students take Splunk Fundamentals 1 training and give them access to Fundamentals 2 training material. Douglas R. Lomsdalen Information Security Officer Information Technology Services Cal Poly San Luis Obispo 1 Grand Avenue San Luis Obispo, CA 93407-0007 _____ office 805-756-7686 email dlomsdal () calpoly edu<mailto:dlomsdal () calpoly edu> www.calpoly.edu <http://www.calpoly.edu> ________________________________ From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Ronald Loneker <rloneker () CSE EDU> Sent: Thursday, June 4, 2020 11:04 AM To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU> Subject: [SECURITY] Quick Poll Results Follow Up - Student Workers in SOC Good Afternoon - I really appreciated seeing the results of the Quick Poll on InfoSec. It was very enlightening and could be helpful in growing our information security program. I did notice the one comment at the end about a school using student workers in their SOC. I'm interested in hearing from any institution who is doing this and what duties/responsibilities you are assigning to students. I already use student workers in a non IT security area I manage so it might be another area to grow for me if it can be helpful. Ron Loneker, Jr. Director, IT Special Projects College of Saint Elizabeth Mahoney Library 2 Convent Road Morristown, NJ 07960 Phone: 973-290-4229<tel:973-290-4229> e-mail: rloneker () cse edu<mailto:rloneker () cse edu> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Quick Poll Results Follow Up - Student Workers in SOC Ronald Loneker (Jun 04)
- Re: Quick Poll Results Follow Up - Student Workers in SOC Rick Haugerud (Jun 04)
- Re: Quick Poll Results Follow Up - Student Workers in SOC Kevin Wilcox (Jun 04)
- Re: Quick Poll Results Follow Up - Student Workers in SOC Mac McGaughy (Jun 04)
- Re: Quick Poll Results Follow Up - Student Workers in SOC Koppel, Lorna (Jun 04)
- Re: Quick Poll Results Follow Up - Student Workers in SOC Mac McGaughy (Jun 04)
- Re: Quick Poll Results Follow Up - Student Workers in SOC Douglas R. Lomsdalen (Jun 04)
- Re: Quick Poll Results Follow Up - Student Workers in SOC Grundig, Thomas J (Jun 04)
- Re: Quick Poll Results Follow Up - Student Workers in SOC Gregory A Jackson (Jun 04)