Skip to main content

McDonald’s to launch cybersecurity apprenticeship program

McDonald’s to launch cybersecurity apprenticeship program



DIVE BRIEF

McDonald’s to launch cybersecurity apprenticeship program



Dive Brief:

  • McDonald’s is set to launch its first registered cybersecurity apprenticeship program in the U.S., part of the government’s 120-day Cybersecurity Apprenticeship Sprint. The restaurant chain’s program aims to bring talent from Chicago City Colleges to its headquarters.
  • The cybersecurity sprint, championed by the White House, the U.S. Department of Labor, U.S. Department of Commerce, U.S. Department of Homeland Security and other federal agencies, resulted in 194 new cybersecurity registered apprenticeship programs that have been approved or are under development. More than 7,000 apprentices have been hired, the White House said Tuesday.
  • The White House touted the registered apprenticeship model as a solution for numerous industries to train a skilled and diverse cybersecurity workforce. Of those that were hired in the private sector, 42% were people of color and 32% were female, according to the White House.

Dive Insight:

This week the U.S. Department of Labor is celebrating the eighth annual National Apprenticeship Week, an effort that highlights the different avenues companies take to acquire talent. 

Alongside McDonald’s, other major private sector companies are supporting apprenticeship models. IBM’s program, launched in 2017, has now expanded to include 30 registered apprenticeship roles, including data science, design and cybersecurity. Cisco Systems is also a registered apprenticeship sponsor.  

The U.S. Department of Veteran Affairs designed and established the first civilian federal cybersecurity apprenticeship program which is set to begin in February 2023 with a cohort of 8-10 apprentices. 

“I firmly believe that skills-based hiring is the direction employers will increasingly shift to in order to grow their pipeline of the diverse talent they need to succeed as a business,” Dan Weeks, director of employer partnerships at Fullstack Academy, said in an email. 

Some companies have invested in training models, such as apprenticeship programs and boot camps, to widen their talent pool and upskill already employed tech workers. Companies have even reduced educational requirements on job postings, instead focusing on skills and experience. 

In October, employers sought to fill 317,000 technology roles, up 10,000 from September, according to a CompTIA review of U.S. Bureau of Labor Statistics data. And despite big tech tech layoffs commanding headlines, the reality is that companies continue to struggle to find skilled tech workers. 

“Apprenticeship supports a holistic talent pipeline,” Tony Bryan, executive director of CyberUp, said in an email. “Companies who focus on building entry-level pathways, supporting apprentices and their managers and developing career roadmaps for their organizations see incredible ROI.”

Benefits for employers include higher retention rates, lower recruiting costs and an overall more loyal talent pool, according to Bryan. 

For participants of apprenticeships, benefits include applied learning, learning industry specific knowledge and gaining real workforce experience, according to a Multiverse survey of 500 U.S. adults between the ages of 18-26.

President Joe Biden, in a statement earlier this month about The National Apprenticeship Week and Cybersecurity Sprint, said “these programs, particularly through local unions, ensure that our nation is producing the best-trained, best-prepared and best-skilled workers for industries now and of the future — from healthcare and information technology to clean energy.”

 

Comments

Post a Comment

Popular posts from this blog

Lazarus Group Uses Updated DTrack Backdoor Across Europe and South America

Image
  Lazarus Group Uses Updated DTrack Backdoor Across Europe and South America Malware and Vulnerabilities    November 16, 2022     Cyware Alerts - Hacker News CSAP Situational Awareness Platform CTIX Threat Intelligence eXchange CFTR Fusion & Threat Response CTIX LITE eXchange Lite Cyware Orchestrate Vendor Agnostic Orchestration Platform North Korean hacking group  Lazarus Group  is using DTrack malware as an important asset in its operations against a wide variety of targets. Recently, it has been found using a new modified variant of the DTrack backdoor to attack organizations in Europe and South America. What’s new? According to  Kaspersky researchers , the latest DTrack variant doesn't feature many functional or code changes compared to samples analyzed in the past. In this campaign, Dtrack hides inside legitimate-looking executable files, such as NvContainer.exe, which is the same as a legitimate NVIDIA file. The latest variant uses API hashing to load the proper libraries
Read more

Chinese APT Targets Government and Defense Agencies in Asia

Image
  Chinese APT Targets Government and Defense Agencies in Asia Threat Actors    November 16, 2022     Cyware Alerts - Hacker News CSAP Situational Awareness Platform CTIX Threat Intelligence eXchange CFTR Fusion & Threat Response CTIX LITE eXchange Lite Cyware Orchestrate Vendor Agnostic Orchestration Platform A Chinese state-sponsored actor tracked as  Billbug  (aka Thrip, Lotus Blossom, Spring Dragon) has been using the same custom backdoors with minimal changes over the past years. The group has launched a new campaign, ongoing since at least March. The campaign targets According to  Symantec researchers , Billbug targeted a digital certificate authority, as well as government agencies and defense organizations in several countries in Asia in the latest campaign. It targeted the certificate authority company possibly to steal legitimate digital certificates and deploy signed malware to make detection more difficult. Campaign tools Billbug  is assumed to be gaining initial access
Read more

All Day DevOps: Third of Log4j downloads still pull vulnerable version despite threat of supply chain attacks

Image
All Day DevOps: Third of Log4j downloads still pull vulnerable version despite threat of supply chain attacks Updated: 14 November 2022 at 16:54 UTC AppSec engineer keynote says Log4j revealed lessons were not learned from the Equifax breach Shutting the proverbial back door to your networks “cuts the risks [of attacks] down tremendously”, said  application security  engineer Sean Wright at Friday’s All Day DevOps. The keynote speaker urged security teams to have “appropriate  access controls  in place” in order to protect themselves against a  742% rise  in ‘next generation’ supply chain attacks, a threat that has mushroomed since the SolarWinds incident rocked the open source ecosystem in December 2020. Among other techniques, attackers are leveraging typosquatting,  dependancy confusion , malicious code injections, vulnerabilities within packages,  protestware , and takeovers of package author accounts (the latter prompting package managers to  implement multi-factor authentication
Read more

Meaning Of A Cybersecurity Executive Order For The Private Sector

Image
  Meaning Of A Cybersecurity Executive Order For The Private Sector For many reasons, it's unreasonable to expect Central and State Governments to develop software that will protect their day-to-day operations. So, they depend on solutions provided by private companies. This helps the government to get access to best-of-breed solutions developed by experienced companies, and in return, the private firms get secure funds and help them to develop more advanced technology; a perfect win-win situation. But let's discuss the security implications of this relationship? Recent incidents have exhausted any assumption that if governmental agencies, use any kind of software, it must be secure. And this isn't necessarily due to a shortage of assiduity on the government's side; some sort of security threats, like ones found further up the supply chain, are simply out of their hands. In the USA SolarWinds, breach incident was, and still is, highly talked about, and it's for good
Read more