Cybersecurity Education and Training
摘要
This chapter discusses first the manner in which we use in this book the concepts of education and training in the context of cybersecurity, with education referring to the act of imparting knowledge, and training referring to the use of practice to bring participants to a target level of proficiency. Then, an overview of the two main categories of training, technical cybersecurity training and cybersecurity awareness training, is provided. Technical cybersecurity training is aimed at improving the technical skills of the participants. Therefore, it often includes hands-on activities that rely on training environments built for cybersecurity training purposes, named cyber ranges. Cybersecurity awareness training is intended for the wide public of regular IT users, as well as for those IT professionals who do not require advanced security skills. Instead, such users must acquire basic knowledge about IT and cybersecurity, so that they are able to avoid security issues during their daily use of IT technology. The chapter ends with a comparison of technical cybersecurity training and cybersecurity awareness training that analyzes the main characteristics of each training category.