Re: Quick Poll Results Follow Up - Student Workers in SOC

["Douglas R. Lomsdalen" <dlomsdal () CALPOLY EDU>]

Hi Ron,

Cal Poly State University uses student employees almost exclusively in our Tier 1 SOC (we stood up initial SOC service 
during our Fall Quarter).  The students took a huge load off our full-time staff (three of us).  We let them address 
all email abuse that is reported (e.g., Analyze, determine the source, and use O365 tools to handle blocking).  They 
research Splunk alerts, and take remediation efforts (e.g., lock phished accounts).  We've also put them to work in our 
Splunk environment setting up SOC specific dashboards and alerts.

We provide hands-on training with the tools, over the shoulder training.  We have the students take Splunk Fundamentals 
1 training and give them access to Fundamentals 2 training material.


Douglas R. Lomsdalen

Information Security Officer

Information Technology Services

Cal Poly San Luis Obispo

1 Grand Avenue

San Luis Obispo, CA 93407-0007

_____

office 805-756-7686

email dlomsdal () calpoly edu<mailto:dlomsdal () calpoly edu>

www.calpoly.edu <http://www.calpoly.edu>


________________________________
From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Ronald Loneker 
<rloneker () CSE EDU>
Sent: Thursday, June 4, 2020 11:04 AM
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Quick Poll Results Follow Up - Student Workers in SOC

Good Afternoon -

I really appreciated seeing the results of the Quick Poll on InfoSec.

It was very enlightening and could be helpful in growing our information security program.

I did notice the one comment at the end about a school using student workers in their SOC.

I'm interested in hearing from any institution who is doing this and what duties/responsibilities you are assigning to 
students.  I already use student workers in a non IT security area I manage so it might be another area to grow for me 
if it can be helpful.

Ron Loneker, Jr.
Director, IT Special Projects
College of Saint Elizabeth
Mahoney Library
2 Convent Road
Morristown, NJ  07960

Phone:  973-290-4229<tel:973-290-4229>

e-mail:  rloneker () cse edu<mailto:rloneker () cse edu>






**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community