Cy Says Blog & Podcast

Posts by:

Rachel Bracker

Empowering Tomorrow's Cybersecurity Leaders

In the dynamic landscape of cybersecurity education, CyberUp’s PowerUp youth program stands as a beacon for young minds eager to explore the world of online safety. PowerUp youth program is a transformative initiative designed to provide a fun, free, and hands-on experience for students. Through engaging activities, the program empowers participants to understand the intricacies of the Internet and equips them with crucial knowledge on staying safe in the digital realm. By partnering with cybersecurity experts and local schools, PowerUp encourages students to think critically about their online presence while introducing them to the idea of cybersecurity as a career. 

 

CyberUp’s PowerUp youth program, which seeks to eliminate barriers that would normally keep some students from receiving this essential information, could not exist without sponsors who believe in our mission. Today, we’d like to highlight two of our amazing sponsors: PwC and Maryville University.

 

PwC: Catalysts for Innovation and Learning

PricewaterhouseCoopers (PwC) a global leader in professional services, plays a pivotal role in the success of the PowerUp initiative. Beyond financial contributions, PwC employees have volunteered their time to share their expertise and experience with the young people in our program.

 

"PwC US supports the PowerUp youth education program for its ongoing impact in bringing awareness to youth around the cybersecurity space,” said Rik Boren, Partner at PwC.  “Providing cybersecurity information and skills can help shape their education and future career opportunities, potentially in cybersecurity.  By investing in this program, we are hopeful that we can help increase interest in cybersecurity topics with youth in underserved communities. Introducing cybersecurity skills today is investing in their future -- to develop and grow skills that are marketable for their future careers, help address the cybersecurity skills shortfall, and help the future security of the world." 

 

Maryville University: Commitment to Academic Excellence

Maryville University brings its dedication to academic excellence to the PowerUp youth program through its generous sponsorship. Their commitment to improving the lives of St. Louis citizens through education is the type of mission that we at CyberUp love to collaborate with. Students can’t enter a career field they know nothing about, which is why it’s essential to introduce them to these pathways as early as possible so that they can make informed decisions about their future.

 

“Maryville University's sponsorship of the PowerUp youth program directly correlates with our strategic plan, access & opportunity for all, especially our youth,” explains Brian Gant, Assistant Dean of Technology at Maryville University. 



Program Reach and Impact:

Thanks to the generous support of PwC and Maryville University, CyberUp’s PowerUp youth program has successfully reached over 250 students in the St. Louis area since October 2023. The program's hands-on approach and the sponsorship's commitment to education and mentorship have left a lasting impact on young minds, preparing them for a future where cybersecurity plays a crucial role.

 

If you would like CyberUp to visit your elementary or middle school and participate in our free program, you can find more information about it here: https://wecyberup.org/powerup. Additionally, if you're passionate about helping our youth become more cyber-aware and would like to volunteer with us, you can learn more about volunteer opportunities here: https://wecyberup.org/volunteer/.

 

Read More

Empower Your Cybersecurity Journey: Contribute to a Thriving Community

It's an exciting time to be part of the growing cybersecurity community. With the ever-increasing digital landscape, our skills and expertise are more in demand than ever. But have you ever wondered how you can make a meaningful contribution to this vibrant community? In this blog post, we'll explore some practical ways in which you can contribute to the growing cybersecurity community and help make the digital world a safer place for all.

 

  1. Sharing Knowledge and Expertise

 

We all know that knowledge is power, and in our field, sharing it is crucial. One way to contribute is by actively participating in forums and online communities where cybersecurity enthusiasts seek advice and share experiences. Offer your insights, answer questions, and engage in discussions to help others navigate the challenging terrain of cybersecurity.

 

Additionally, consider blogging or writing research papers to share unique discoveries, tips, and best practices. By publishing your work, you contribute to the collective knowledge of the community and help both aspiring and experienced professionals stay informed about the latest trends and threats.

 

  1. Mentoring and Coaching

 

Remember when you were starting out in the cybersecurity field and how valuable it would have been to have a mentor to guide you along the way? Now, you have the chance to pay it forward and become a mentor yourself. By sharing your experiences, providing guidance, and helping aspiring professionals navigate their career paths, you can make a profound impact on the next generation of cybersecurity experts.

 

Consider joining mentorship programs or volunteering with educational institutions to offer your expertise. By doing so, you not only enrich the lives of those you mentor but also foster a strong community built on collaboration and support.

 

  1. Volunteering for Nonprofit Organizations

 

If you have a passion for giving back, consider volunteering your skills with CyberUp which is focused on K-career cybersecurity awareness and education. You can educate kids about the importance of online safety and teach them practical cybersecurity measures.

 

By volunteering, you not only make a difference in your community but also enhance your own skills and gain valuable experience by tackling real-world cybersecurity challenges.

 

  1. Collaborative Projects and Research Initiatives

 

As cybersecurity threats grow increasingly sophisticated, collaboration becomes extremely important. Seek out opportunities to collaborate on projects and research initiatives with professionals from diverse backgrounds. By combining expertise from different fields, such as data science and artificial intelligence, we can develop innovative solutions to safeguard against emerging threats.

 

Engaging in collaborative projects not only expands your network but also allows you to be part of critical research that pushes the boundaries of cybersecurity knowledge.

 

  1. Engaging in Cybersecurity Advocacy

 

As cybersecurity professionals, we have unique insights into the challenges faced by individuals, businesses, and society as a whole. By engaging in cybersecurity advocacy, you can contribute to shaping policies and regulations that effectively address these challenges.

 

Participate in industry associations, join cybersecurity task forces, and collaborate with policymakers to voice concerns, propose strategies, and advocate for stronger privacy and security standards. Your expertise can help protect public interest and influence decisions that shape the future of cybersecurity.

 

  1. Continuous Learning and Professional Development

 

In the ever-evolving world of cybersecurity, staying updated is not only essential but also beneficial to the community. Commit yourself to continuous learning by pursuing professional certification programs, attending workshops, and participating in training courses.

 

By embracing a growth mindset and keeping up with the latest trends and technologies, you not only enhance your own skills and knowledge but also contribute to the community by sharing newfound expertise and insights.

 

In conclusion, as cybersecurity professionals, we have a responsibility to contribute to the growing cybersecurity community. By sharing knowledge, mentoring aspiring professionals, volunteering, collaborating, advocating for best practices, and continually learning, we create a supportive environment where we can all thrive.

Read More

Understanding Cybersecurity Basics: A Guide for K-12 Students

In today's digital age, where technology is all around us, it's essential to understand the basics of cybersecurity. Whether you're watching cat videos on YouTube, connecting with friends on social media, or doing research for school projects, it's crucial to know how to keep our kids safe online. So, let's dive in and explore the world of cybersecurity together!

 

But first, what exactly is cybersecurity? Well, it's like a virtual shield that protects you from online threats. Just as you lock your front door to keep intruders out, cybersecurity helps you safeguard your personal information and keep hackers at bay.

 

Now, you might be wondering, "Why is cybersecurity important for me?" In today's interconnected world, cyber threats are constantly evolving. Cybercriminals may try to steal your personal information, like passwords or credit card details, through various tricks. That's why it's essential to understand common cyber threats, like malware, phishing, social engineering, and password attacks.

 

So, how can you protect your personal information online? Let's find out!

 

First and foremost, let's talk about passwords. We know, remembering multiple passwords can be tough. But it's important to use strong and unique passwords for all your accounts. Avoid common words or personal information in your passwords and consider using a trusted password manager to make your life easier.

 

Another great way to secure your accounts is by enabling two-factor authentication. It's like having a secret code on top of your password. So even if someone manages to get hold of your password, they won't be able to access your accounts without the code generated on your smartphone or email.

 

Speaking of personal information, it's crucial to keep it safe. Be careful about sharing personal details like your address or phone number online, especially in public forums or on social media. And remember, if a stranger on the internet asks for your personal information, it's a big red flag! Always trust your instincts and avoid sharing sensitive information.

 

Social media is an amazing way to connect with friends and share cool stuff, but it can also have its risks. Set your privacy settings wisely to control who can see your posts and information. Also, never accept friend requests from people you don't know in real life and if something seems suspicious or too good to be true, it's best to steer clear of it.

 

Unfortunately, cyberbullying is a sad reality in today's digital world. If you ever experience cyberbullying, don't keep it to yourself. Reach out to a trusted adult, like a parent or teacher, who can provide guidance and support. Remember, you're never alone, and there are people who care about your well-being.

 

Now, let's talk about general internet safety. When browsing the web, be cautious of suspicious websites. Stick to trusted sources for information and double-check facts before accepting them as true. It's essential to build your critical thinking skills and be aware of fake news.

 

When it comes to online communication, use email wisely. Be cautious about opening emails from unknown senders, especially if they contain suspicious attachments or ask for personal information. Always double-check the email address to ensure it's legitimate. And hey, never click on links from unknown sources. Hover over the link to see the actual web address it will take you to before clicking on it.

 

Keeping your devices secure is also crucial. Make sure to update your computer, smartphone, or tablet regularly. These updates often include security patches that fix vulnerabilities hackers can exploit. Additionally, consider using reputable antivirus software to protect your devices from malware and other digital nasties.

 

Oh, and let's not forget about rogue applications and stick to official app stores when downloading apps. Read reviews and check the developer's information before clicking that download button and always think twice before granting permissions to an app, especially if it wants access to your contacts, camera, or microphone.

 

To protect your devices from theft or loss, create a strong password or PIN to lock your device. And if your device supports it, enable remote tracking or wiping features. This way, if you misplace your device or someone steals it, you can locate or erase its contents remotely.

 

Now, let's talk about online gaming! It's a fun way to connect with friends and explore virtual worlds. But remember, not everyone online has good intentions. Protect your personal information while gaming by using usernames instead of your real name. Avoid sharing personal details or your location with other players. And if you encounter inappropriate behavior, report it to the game's moderation or support team.

 

Lastly, let's touch on cybersecurity etiquette. As responsible digital citizens, it's important to respect others' privacy online. Understand the terms of service when using websites or apps, and only accept agreements you truly understand. Treat others online as you would in real life, with kindness and respect. And always think before you post or share something, considering how it might impact others.

 

In conclusion, understanding cybersecurity basics is crucial in today's digital world. By following these simple practices, you can protect yourself online and navigate the digital landscape safely. Remember, cybersecurity is a continuous learning journey, so stay updated and share your knowledge with others. Together, we can create a safer online environment for everyone. Keep exploring, stay curious, and be cyber savvy!

Read More

RGA Collaborates with CyberUp to Empower Youth Through Cybersecurity Program

St. Louis, MO, Aug 21, 2023 - RGA, a global leader in life and health reinsurance, proudly sponsors CyberUp’s Youth Program. CyberUp is a nonprofit organization whose mission is to elevate the cybersecurity workforce by igniting curiosity, developing talent, and transforming career pathways.  This sponsorship and volunteer support seek to revolutionize the landscape of digital safety education by introducing PowerUp, an innovative youth program aimed at equipping elementary and middle school students with essential cybersecurity skills.

In an era marked by rapid technological advancements and the increase of digital platforms, the need for cybersecurity education has never been more critical. PowerUp, an initiative by CyberUp, is poised to address this pressing need. Designed as a comprehensive and engaging curriculum taught by industry volunteers, PowerUp ignites curiosity in young individuals and helps them navigate the online world confidently and securely.

PowerUp delivers a comprehensive curriculum that provides cybersecurity knowledge and skills to students. Participants will gain insights into fundamental concepts such as creating strong and resilient passwords, identifying and thwarting phishing scams, and adopting best practices for online safety. Furthermore, the program introduces students to the diverse and promising avenues within the cybersecurity industry, opening doors to potential career paths.

One of PowerUp's standout features is that it’s taught by IT/Cybersecurity industry professionals who bring real-world expertise and insights to the educational forefront. PowerUp removes the stress and burden off of the teachers so they don’t have to be the subject matter expert.  Notably, the program is tailored to ensure inclusivity and accessibility, as it does not rely on sophisticated technology. This unique approach enables schools of varying resources to participate, thereby extending the program's reach to the students who need it the most.

"RGA is proud to support the PowerUp program to ensure youth in our community have equitable access and vast opportunities to pursue careers in the cybersecurity sector," said Jasmina Schue, ESG specialist, charitable giving at RGA. "Through our partnership with CyberUp, we hope to bring awareness about digital safety to the forefront and provide students with the knowledge and skills needed to navigate the digital world safely and securely."

 

For more information about RGA and its ongoing initiatives, please visit https://www.rgare.com/.

To learn more about PowerUp program and its transformative impact on youth cybersecurity education, please visit https://wecyberup.org/powerup/.

 

Read More

5 Tips for Keeping Kids Safe Online During the New School Year

As the new school year begins, parents play a vital role in ensuring their children's safety not only in the physical world but also in the vast digital landscape. With online learning, social interactions, and entertainment becoming more prevalent, it's crucial to equip parents with the knowledge to protect their kids while they navigate the virtual realm. In this blog, we'll share five essential tips for parents to keep their children safe online during the new school year.

1. Open Communication and Digital Literacy

Establish open communication with your children about their online activities and experiences. Encourage them to share any concerns or encounters that make them uncomfortable. Moreover, promote digital literacy by teaching them about online privacy, recognizing potential risks, and discerning trustworthy sources of information.

2. Set Clear Boundaries and Screen Time Rules

Create clear boundaries for internet usage and set age-appropriate screen time limits. Discuss guidelines for using social media, playing online games, and visiting websites. Striking a balance between digital interactions and real-world activities fosters healthier habits and reduces potential risks.

3. Implement Parental Control and Safety Tools

Leverage parental control and safety tools available on devices and applications your children use. These tools enable you to filter content, restrict access to certain websites, and monitor online activities. Familiarize yourself with the features and customize them to suit your child's age and needs.

4. Teach Online Stranger Danger

Educate your children about the concept of "online stranger danger." Advise them not to share personal information, such as their address, school name, or contact details, with strangers online. Encourage them to avoid accepting friend requests or messages from unknown individuals.

5. Be a Positive Online Role Model

Lead by example and be a positive online role model for your children. Demonstrate responsible internet usage, empathy, and respect in your own digital interactions. Emphasize that the same principles of good behavior apply online as they do in the real world.

As the new school year unfolds, parents must equip themselves with the tools and knowledge to protect their children's safety in the digital realm. By fostering open communication, promoting digital literacy, setting clear boundaries, implementing parental control tools, teaching online stranger danger, and being a positive online role model, parents can empower their kids to navigate the virtual landscape safely and responsibly. Together, let's ensure that our children's online experiences are enriching, positive, and secure as they continue their educational journey in the new school year.

Read More
Protecting Student Data

Strengthening School Cybersecurity: Protecting Student Info

As we embrace a new school year, the safety and security of our students' information take on greater importance than ever before. With an increasing reliance on technology for education and administration, schools and teachers must prioritize cybersecurity practices to protect sensitive data from potential threats. In this blog, we'll explore proactive measures that schools can implement to keep their students' information safe and maintain a secure digital environment.

1. Conduct Cybersecurity Training for Staff

A robust cybersecurity practice starts with a well-informed staff. Organize regular training sessions for teachers and school staff to educate them about potential cyber threats, safe online practices, and how to recognize phishing attempts. This knowledge empowers staff to protect not only their own information but also that of their students.

2. Implement Strong Password Policies

Enforce strict password policies for all school-related accounts and systems. Require passwords to be unique, complex, and regularly updated. Utilize multi-factor authentication (MFA) whenever possible to add an extra layer of protection against unauthorized access.

3. Secure Data with Encryption

Ensure that all sensitive student information, including grades, medical records, and personal details, is encrypted. Encryption converts data into unreadable code, making it significantly harder for cybercriminals to access or decipher the information, even if they breach the system.

4. Regularly Update and Patch Software

Stay vigilant about updating software and applications on all devices used by the school. Regular updates often contain security patches that address vulnerabilities in the system, reducing the risk of exploitation by cyber attackers.

5. Back Up Data Frequently

Frequent data backups are crucial in the event of a cyber incident or hardware failure. Set up automated backups for all critical systems and ensure that the data is stored in a secure, off-site location.

6. Monitor Network Traffic

Employ robust network monitoring tools to keep an eye on incoming and outgoing traffic. Detecting unusual or suspicious activities promptly can help identify potential cyber threats and mitigate them before they escalate.

7. Restrict Access to Sensitive Information

Limit access to student information on a need-to-know basis. Only authorized personnel should have access to sensitive data, and their permissions should be regularly reviewed and updated as necessary.

8. Secure Remote Learning Environments

If the school supports remote learning, ensure that the virtual classroom platforms and collaboration tools used are secure and privacy-compliant. Train teachers and students on best practices for online safety during remote sessions.

9. Develop an Incident Response Plan

Prepare an incident response plan that outlines the steps to be taken in case of a cybersecurity breach. A well-structured plan can help minimize damage and speed up the recovery process.

10. Foster a Cybersecurity Culture

Promote a cybersecurity-conscious culture within the school community. Encourage students, teachers, and parents to report any suspicious activities promptly. Emphasize that cybersecurity is a shared responsibility.

As schools embrace the digital age, safeguarding student information must be a top priority. By implementing cybersecurity practices, such as conducting regular training, enforcing strong passwords, encrypting data, and developing incident response plans, educational institutions can significantly reduce the risk of cyber threats. By fostering a culture of cybersecurity awareness, schools can create a safe and secure digital environment for their students and staff, enabling them to focus on the joy of learning and teaching without compromising their privacy or safety. Let this school year mark a new chapter in strengthening our commitment to safeguarding our educational community's digital well-being.

Read More

CyberUp’s New Approach to Cybersecurity Education - PowerUp

Why Free Cybersecurity Resources Don’t Work

In 2020, we launched a cybersecurity competition for middle and high school students called PowerUp Cyber Games. Capture the Flag competitions (or CTFs) are a great way for students to learn about cybersecurity in a fun, low-stakes environment, earn awards and recognition among their peers, and determine if cyber is a career they want to pursue. After 3 years of running our CTF, we had hundreds of students across the country involved. It would seem that our program was, by most metrics, extremely successful. However, we were plagued with a nagging question: Are we helping the students who need help, or giving more resources to students who already have all of the resources they need to succeed?

The issue with the CTFs, we found, is that they rely entirely on a teacher or other adult to make it successful for their students. For example, with PowerUp Cyber Games, we created lesson plans, practice packets, and a virtual practice gym, we hosted live streams to cover the topics, and we made an online portal for students to ask questions and play relevant games. But still, the success of the teams came back to their coach–usually a teacher–and whether or not they pushed this content out to their students or encouraged them to use it. And with all that has been happening in education over the past few years and the mass exodus of teachers who are overworked and burnt out, how could we expect them to take more onto their overflowing plates? 

Typically, the students who are the most successful in the CTFs come from districts that had the funding and resources to dedicate to cybersecurity education. This is not the majority of districts. In fact, according to a study by Cyber.org in 2020, only 18% of school districts even offer cybersecurity classes. Missouri has only recently started implementing general computer science graduation requirements for high school. The fact is that most public school districts in America are still way behind when it comes to computer science education. There is a huge pile of free, “easy to use” cybersecurity resources out there for teachers to incorporate into their lessons, but again, this requires that teachers commit time and energy outside of their already packed schedules to learn and prepare these lessons. So, how do we teach students about this important topic while also lightening the load on teachers? 

This is the question that led us to develop our new PowerUp program.

A New Approach to Cybersecurity Education

Starting in Fall 2023, we will be entering several St. Louis Public School District elementary and middle schools to teach students as young as Kindergarten about cybersecurity. Rather than simply giving teachers a lesson for them to prepare and teach, we will be using industry volunteers to deliver the lessons. Teachers will only be expected to stay in the room while our volunteers explore cybersecurity with the class through hands-on activities and relevant, age-appropriate lessons. Volunteers will have the chance to share their experiences and use their expertise to answer questions as they arise. 

CyberUp has developed activities for every age. The program aims to teach students how to recognize and avoid potential online threats. It encourages students to think critically and make informed decisions while using the internet. 2nd graders will learn about talking to strangers online and how to hide their personal information from these people. 3rd graders will get an introduction to how the Internet works with an activity that gets them out of their seats and working together. 7th graders can expect to learn all about cyber crimes and a peek into a career in cybersecurity. These are just some of the many topics that will be covered during our volunteers’ time in the classroom.

Creating Accessible Pathways for All Students

The intended impact of our new PowerUp program is twofold: to educate the youth about their personal online safety, and to inspire students to pursue cybersecurity as a career.

We know that almost all data breaches are caused by human error. The general public uses the Internet every day for work, school, and entertainment. Between phones and computers, we are connected to the Internet at all times. But do most people know what to do if they receive a phishing email? Does the average Facebook user have a secure password? Would your employees download something to their work computer without a second thought? The need for more informed digital citizens has never been more important. We teach our kids not to cross a busy street or to take candy from strangers in vans, but kids aren’t playing in the streets without supervision anymore. They are, however, playing online games and watching YouTube, and chatting with people they met on apps. By teaching them about online threats and how to stay safe while they use the Internet early, we can protect our children and educate the future workforce on avoiding data breaches.

Going back to one of the major questions we had to ask ourselves while we were hosting PowerUp Cyber Games, who are we helping with our services? If our goal as a non-profit is to fill the over 750,000 open cybersecurity jobs with diverse candidates, we should be putting our efforts into help those communities who wouldn’t receive these types of services otherwise. The school districts with plenty of funding for computer science and parents who can afford to pay for their students to participate in CTFs and clubs don’t need our help. The districts that can’t afford enough Chromebooks for all of their students, that struggle to find enough substitute teachers to fill the vacancies every day, and have students who are struggling at home as well as in school–those are the districts we want to help.

If you ask kindergarteners what they want to be when they grow up, they probably won’t say security analyst or information system security officer. In fact, most high school seniors aren’t aware that these jobs even exist. And by that age, they’ve mostly made up their minds about what kind of career they want. They don’t know that they could be making an entry-level salary of $80,000 or that they can get that job without having to go to college. They don’t know that they could start accumulating generational wealth in a career field that’s constantly growing and changing and offers endless opportunities regardless of their background or where they live. It’s not their fault that they don’t know all of this–nobody has told them! That’s why, at the same critical time in a child’s life that they are learning about jobs like firefighter and doctor and teacher, they should be learning about tech jobs, too. And that’s why we include our industry professionals in our program, to help guide and inspire these young people as they form their ideas of what their future could look like.

This is also why we are offering our program for free to public schools in the St. Louis area, as well as supplying all of the materials and volunteers for the lessons. Our activities don’t require technology, so even if a classroom has an outdated SmartBoard, those students can still learn about cybersecurity in a meaningful way. We also gift books and other resources to the classrooms we serve. Our goal with this new program is to make cybersecurity education accessible to all students and, in doing so, encourage a more diverse cyber workforce. 

If we want to fill cybersecurity jobs with capable, hard-working people, we have to start introducing these topics as young as possible. If we want to live in a more cyber-secure world, we have to step in early. Children are the future–so we need to invest in them if we want to change the world.

Read More