Organization of vocational training of cyber security professionals by main subjects of the national cyber security system: practical aspect ; Організація професійної підготовки фахівців із кібербезпеки основними суб'єктами національної системи кібербезпеки: практичний аспект

Abstract

Problem setting. In the context of digital world and information technology development, special focus is made on issues related to professional training of IT specialists, and primarily of cybersecurity specialists within the security and defense authorities of Ukraine.Fundamental and advanced training as well as re-training of cybersecurity specialists are the challenges faced in safeguarding cybersecurity in Ukraine. In light of extensive reforms being implemented in all life areas of the Ukrainian society, proper training for cybersecurity specialists of the security and defense authorities of Ukraine is getting especially relevant and requires special attention of the leaders of these security and defense authorities.Recent research and publications analysis. The analysis has identified that principally the development, through effective reforms, of the system of fundamental and advanced training as well as re-training of people employed in the institutions committed to safeguarding the Ukrainian cybersecurity is one of the ways to implement the Cybersecurity Strategy of Ukraine and the Concept for the Development of the Security and Defense Sector of Ukraine.At the same time, one should acknowledge that the issue of implementing the Cybersecurity Strategy of Ukraine and other regulations has been taken beyond the focus of comprehensive scientific research studies. In practice, this results in the understated importance of training for the personnel of the security and defense sector entities, which is one of the priorities and ways of safeguarding cybersecurity in Ukraine.Highlighting previously unsettled parts of the general problem. The publication aims to outline the challenges related to professional training of cybersecurity specialists. To achieve the target, the following issues require being addressed: analysis of regulatory framework of professional training for cybersecurity specialists; study of issues related to procurement of training and training itself in the area of information security, cybersecurity, cyberprotection and data protection in cyberspace during 2016 – 2018 by the core Ukrainian security and defense sector entities; giving practical recommendations to government authorities on how to improve the system of professional training for cybersecurity specialists.Paper main body. Now, training of qualified personnel remains the key component of self-sufficient operation of the country. The issue of professional training of cybersecurity specialists can be found incorporated in a number of regulations made and approved by the Verkhovna Rada of Ukraine, President of Ukraine and Cabinet of Ministers of Ukraine (Law of Ukraine "On Fundamentals of Safeguarding Cybersecurity of Ukraine"; Strategy of the National Security of Ukraine; Cybersecurity Strategy of Ukraine; Regulation on the National Coordination Center for Cybersecurity; and the Cabinet's decrees for the respective year that directly approve the Ukrainian Cybersecurity Strategy implementation measures).The analysis in the publication shows that the major weaknesses of procuring the professional training of cybersecurity specialists by the Ukrainian security and defense sector entities are the lack:– of dedicated divisions (sectors, units, subdivisions) within the ministries and departments being the entities of the security and defense sector of Ukraine, which would be in charge of the issues related to training, qualification and advanced training of personnel, and primarily the issues of cybersecurity, cyberprotection, information security and data protection in cyberspace;– of procedure to identify the need for advanced training of cybersecurity specialists from among the military service personnel or the leaders;– of mandatory regular certification (re-certification) of the personnel in charge of safeguarding the cybersecurity;– of training centers dedicated to issues of information security, cybersecurity, cyberprotection and data protection in cyberspace.Given the above, the challenges of procuring professional training for cybersecurity specialists are getting especially relevant and particularly require raising issues about further development of such procurement to address the needs of the security and defense authorities of Ukraine.Conclusions of the research and prospects for further studies. Development of the information-oriented society and implementation of the cutting-edge information technology in all life areas of the community and government authorities is one of the critical directions of the state policy.Meanwhile, the research has shown the underworked nature of the regulatory framework of procurement and provision of various types of training in the area of information security, cybersecurity and data protection in cyberspace, and primarily at the government level. The research has also identified the fragmentary nature of regulating this issue. It has been discovered that the general weakness of the analyzed regulatory framework is the failure of practical fulfillment of most provisions and requirements incorporated in the above documents.The conclusions and recommendations made during the work process can be used in practical activities of the government authorities that directly participate in training the "Information Technology" specialists and in combating cyberthreats in the process of developing the sustainable state information policy and the regulatory framework. ; Проведено аналіз нормативно-правового забезпечення підготовки фахівців ізкібербезпеки та надано характеристику системі підготовки та підвищення кваліфікації фахівців із кібербезпеки основних суб'єктів національної системи кібербезпеки. Виявлено проблемні питання щодо підготовки та підвищення кваліфікації фахівців із кібербезпеки основних суб'єктів національної системи кібербезпеки, що уповільнюють впровадження інформаційних технологій в усіх сферах суспільного життя та діяльності. Сформульовано пропозиції основним суб'єктам національної системи кібербезпеки та Національному координаційному центру кібербезпеки, які беруть участь у професійній підготовці фахівців із кібербезпеки, для подальшого використання у практичній діяльності та для удосконалення відповідної нормативно-правової бази.