PhD Information Security, Information Assurance

TheProfezzor

Hello,

Well, the topic of the thread seems self explanatory. I want to pursue a PhD program in future and it would be great if it's online cause, I am an asian, (Not THE asian) living in asia and we don't have a good enough college or university to enroll in. It would also help if the college doesn't milk its students and charge them a gazillion $$$ as tuition fee. Looking for cheap, reputable colleges. Something like coursera etc. Thanks.

Note: All help will be rewarded with customized notes of thank you and appreciation

veritas_libertas

I don't know about a PhD in INFOSEC, but Dakota State University has a Doctor of Science: Doctor of Science in Information Systems - D.Sc.IS

CyberfiSecurity

Well, there are some colleges/universities offer Doctorate in Information Security/Assurance relates online or limited residency.

Doctor of Philosophy (Ph.D)
- Capella University's Ph.D in Information Technology with Information Security
Residency Requirements: 3 Colloquial for the entire program around the country

- Northcentral University's Ph.D in Business Administration w/ Information Security
Residency Requirements: None

- Nova Southeastern University Ph.D in Information Assurance or Ph.D in Information Systems with Information Security
Residency Requirements: 2 per semester during course works in Fort Lauderdale, Florida

Other Doctorates

- Capitol College's Doctor of Science in Information Assurance
Residency Requirement: None; however, the program is synchronous mode (you have to attend live lecture via online)

- Colorado Technical University's Doctor of Computer Science w/ Information Assurance
Residency Requirement: I think once per year in Colorado Springs, Colorado

- Columbia University (Ivy League)'s Doctor of Engineering Science in Computer Science with Computer Security
Residency Requirement: Only during the dissertation phase
Notes: Highest tuition and also the most prestigious out of all other colleges/university flexible programs

- Dakota State University's Doctor of Science in Information Systems w/ Information Assurance (as mentioned above)
Residency Requirement: Not sure
Notes: The program admission is very competitive due to low tuition and high number of applicants. (Lowest tuition)

I am currently a Ph.D in Information Assurance student at Nova Southeastern University. Yes, I travel to the school in Fort Lauderdale, Florida twice per semester. If you have any question about the program, I can help you to answer as much as I can.

shauncarter1

That particular specialization I believe Nova is the only option. A PhD program is going to be a gazillion $$$ regardless haha. One last note, since the PhD is a scholarly pursuit the overall value of your degree is defined more so by the level of scholarly work you contribute after your first real research piece in that of the dissertation. I opted for Phoenix for a few reasons, most notably 33% off and familiarity as an instructor there.

Last thing, Indiana State University has a pretty good program as well.

GarudaMin

CyberfiSecurity,

What's your current take on Nova Southeastern University and its program? In what position, do you currently work (such as infosec professional or management, etc.)? Where do you see yourself going after Ph.D?
I have been contemplating on Ph.D to see if I would have an ROI and your experience/take on it would help.
Thanks.

CyberfiSecurity

shauncarter1,

I don't consider myself smart, but I tried to avoid any universities/colleges that mainly online school without b&m campus. Therefore, I chose Nova Southeastern University...I started as Ph.D in Computer Information Systems w/ Information Security. However, at this point I have option to choose either CIS w/ InfoSec or IA.

Indiana State University's Ph.D in Information Technology do not have concentration in Information Security/Information Assurance. It is a consortium program with other universities: North Carolina A&T University, East Carolina University, Bowling Green State University, and University of Central Missouri.

Garudamin,

I am still doing my courseworks at Nova Southeastern University, possible direct research courses next year. I have not learned anything new about information security/assurance in term of technical. The only thing I learn is turning the technical into research. The Doctor of Philosophy (Ph.D) is transforming a practitioner into a scholar. Professional Doctorate might concentrate into more technical works, but not Ph.D. My profession is Network Security and Cyber Security, and currently I am currently more into network security. I see myself being a independent consultant on Information Security/Cyber Security subject matter expertise (SME). I do not plan to teach with this Ph.D, but I want to be a technical instructor instead. I am not interested in full-time scholar; however, for my generation social security might not be there. Therefore, I could use this Doctorate degree to teach after retiring.

I don't think this program is a good return on investment if I have to pay entire program out of my pocket. Since I am a Marine Veteran, I utilize the Post 9/11 GI Bill with Yellow Ribbon, so half of the program is paid by the VA and the school. I also receive monthly housing allowance about $2,000.00 per month with tax free. So far, it is a good ROI for me.

jfitzg

I am currently enrolled in Capitol College's D.SC IA program. CyberfiSecurity was wrong in his assessment of their residency requirements, you have to go down for a 3 day weekend at least once a year for residency. I chose Capitol over Nova for two reasons. 1. The price. Nova from what I saw had a price tag of approx $75,000 after its all said and done, Capitol is at around $42,000. 2. Dissertation support. From what I read, a lot of current students at Nova were complaining about having no support on the dissertation process, leading them to be ABDs. I do not know if this is actually the case, but Capitol advertises that they offer assistance throughout the entire dissertation process, I am not far enough along to know if its true but it seems that it is. My experience of the course content is the same as CyberfiSecurity's. They arent here to teach us new ideas, we were supposed to come into the program already as experts in the field, they are there to teach us how to transition from being a practitioner to a scholar.

shauncarter1

CyberfiSecurity I hear you, I looked at Nova, but the cost was just too much for me to bear especially since my GI Bill was exhausted . I have many colleagues who graduated from the program there, it's good. Everyone that pursues this type of degree has their reasons for doing so. My endeavors involve state and government work, so the degree matters more than where it is from. I can say the same for the colleges that I teach at as well. Accreditation reigns supreme and it would also help your cause to continue with published work after your dissertation.

GarudaMin

One of the issue I see for me going after phd is dissertation. I don't know if I still have it in me to write, I don't mind research. Aside from that I have no issues with other courses. Like you guys have mentioned, as practitioner, topics are not new and it's just about transitioning to scholar.
Another issue is, since I would have to pay out of my pocket, I can't seem to find ROI. I wouldn't mind paying for it if it can land me into oversight/advisory position. I have reached the glass ceiling as infosec tech and I like to move on to management, but I prefer oversight/advisory/consultation role instead of managing others.

Doyen

CyberfiSecurity wrote: »

The Doctor of Philosophy (Ph.D) is transforming a practitioner into a scholar. Professional Doctorate might concentrate into more technical works, but not Ph.D. My profession is Network Security and Cyber Security, and currently I am currently more into network security. I see myself being a independent consultant on Information Security/Cyber Security subject matter expertise (SME). I do not plan to teach with this Ph.D, but I want to be a technical instructor instead. I am not interested in full-time scholar; however, for my generation social security might not be there. Therefore, I could use this Doctorate degree to teach after retiring.

How do people on this forum view professional doctorates and Ph.Ds? The way I see it, unless you intend to pursue academia later on, I do not see the advantage of going for a Ph.D over a "professional doctorate" like DBA, D.Sc., DIT, etc. I can see a doctorate in an engineering or lab type of work. Since many of you are out there professionally in the field, how do you see them viewed? Would earning a doctorate of some variety do better than certifications? I have also seen a lot of professionals that are quite successful with just an undergrad. Are those that are pursuing or have gained a graduate degree did so in order to past the ceiling in your field by moving onto management?

CyberfiSecurity wrote: »

Well, there are some colleges/universities offer Doctorate in Information Security/Assurance relates online or limited residency.

Thank you for compiling a great list +rep The University of Fairfax also offers doctorates in Information Assurance as either a doctorate or a doctor of science.

jfitzg

WARNING! University of Fairfax is NOT regionally accredited! that is a HUGE distinction in many circles, schools that do not have regional accreditation are widely look down upon. I would HIGHLY recommend avoiding University of Fairfax!

jfitzg

GarudaMin wrote: »

Another issue is, since I would have to pay out of my pocket, I can't seem to find ROI. I wouldn't mind paying for it if it can land me into oversight/advisory position. I have reached the glass ceiling as infosec tech and I like to move on to management, but I prefer oversight/advisory/consultation role instead of managing others.

I can tell you that unless you are a senior level executive already, this degree wont help you at all in your career path unless you are trying to enter academia. This is speaking from personal experience. I dont even put my doctorate on my resume as I have been told multiple times I was overqualified for the positions I was interviewing for, and I wasnt exactly interviewing for help desk positions if you know what I mean.

Doyen

jfitzg wrote: »

WARNING! University of Fairfax is NOT regionally accredited! that is a HUGE distinction in many circles, schools that do not have regional accreditation are widely look down upon. I would HIGHLY recommend avoiding University of Fairfax!

Good eye! I didn't even catch that. I was too involved in looking at their education building program to notice their accreditation. They are only nationally, and not regionally accredited.

CyberfiSecurity

Right, University of Fairfax is nationally accredited through Distance Education and Training Council. It is the most expensive program out there, include. If you ask most people who live in Fairfax or Fairfax County, Virginia; most of them do not know the school exists. And University of Fairfax is not recorgnized by NSA Centers of Academic Excellence Institutions. The following schools are designated by NSA's Centers of Academic Excellence for Cyber Operations:
"

• Air Force Institute of Technology (AFIT), Ohio
• Auburn University, Alabama
• Carnegie Mellon University, Pennsylvania
• Dakota State University, South Dakota
• Mississippi State University, Mississippi
• Naval Postgraduate School, California
• Northeastern University, Massachusetts
• University of Tulsa, Oklahoma" URL: List of Centers of Academic Excellence for Cyber Operations

colemic

I will be tapped out on my GI Bill in the very near future, but if I still had enough funds, I would pursue a PhD in InfoSec, or a closely-related field... is it overkill for the positions I will probably hold in my lifetime, but no one has mentioned the personal aspect/setting and reaching a goal... which would be the primary driver for me... to prove to myself that I could.

Q: Why'd you summit Everest?

A: Because it's there.

jfitzg

CyberfiSecurity wrote: »

Right, University of Fairfax is nationally accredited through Distance Education and Training Council. It is the most expensive program out there, include. If you ask most people who live in Fairfax or Fairfax County, Virginia; most of them do not know the school exists. And University of Fairfax is not recorgnized by NSA Centers of Academic Excellence Institutions. The following schools are designated by NSA's Centers of Academic Excellence for Cyber Operations:
"

• Air Force Institute of Technology (AFIT), Ohio
• Auburn University, Alabama
• Carnegie Mellon University, Pennsylvania
• Dakota State University, South Dakota
• Mississippi State University, Mississippi
• Naval Postgraduate School, California
• Northeastern University, Massachusetts
• University of Tulsa, Oklahoma" URL: List of Centers of Academic Excellence for Cyber Operations

This is partially incorrect. The NSA Centers of Academic Excellence Institutions has several categories. Cyber Operations which you listed, Information Assurance Research and Information Assurance education. The list for the latter two is much larger than the one posted above, however University of Fairfax is not on that list as well.

GarudaMin

jfitzg wrote: »

I can tell you that unless you are a senior level executive already, this degree wont help you at all in your career path unless you are trying to enter academia. This is speaking from personal experience. I dont even put my doctorate on my resume as I have been told multiple times I was overqualified for the positions I was interviewing for, and I wasnt exactly interviewing for help desk positions if you know what I mean.

Thanks, I will just stick to certs. I don't want to enter academia though I don't mind being a trainer but that doesn't really require doctorate.

DavidEthington

Capella has a requirement that you attend three colloquium, which occur at different phases in your coursework. They are actually pretty cool, but usually require travel on your part.

They don't slack when it comes to academia, either. The comps are no joke, and often require rewrites. It's not as technical as you might like, either. It focuses primarily on teaching you how to become a researcher, and understanding high-level holistic concepts to IT governance.

teancum144

jfitzg wrote: »

This is partially incorrect. The NSA Centers of Academic Excellence Institutions has several categories. Cyber Operations which you listed, Information Assurance Research and Information Assurance education. The list for the latter two is much larger than the one posted above, however University of Fairfax is not on that list as well.

Here's a link to the broader list: Centers of Academic Excellence - Institutions - NSA/CSS

CyberfiSecurity

jfitzg wrote: »

This is partially incorrect. The NSA Centers of Academic Excellence Institutions has several categories. Cyber Operations which you listed, Information Assurance Research and Information Assurance education. The list for the latter two is much larger than the one posted above, however University of Fairfax is not on that list as well.

hahaha, I did not post any difference. The Cyber Operations is designated for research and security lab. The NSA Centers of Academic Excellence Institutions. is focusing on information security/assurance academic quality and assurance.

daviddws

I am impressed with the motivation in this thread! Personally I have decided not to pursue a Ph.d, although I was tempted for a few years.

CyberfiSecurity

jfitzg is right about Doctorate and professional career. Unless you need a Doctorate for professional career for license such as Medical Doctor (MD), Juris Doctor (JD), Doctor of Psychology (PsyD); otherwise Doctorate is only for academia. There is no return on investment on Doctorate degree for IT professional. If you want to stay with Information Technology and transfer into the Executive level management, it is better with a Master of Business Administration (MBA) instead a Doctorate.

As for me, it is part of my current return on investment by getting paid going to college. Also, a Ph.D is also part of personal enrichment, but not necessary career enhancement. Therefore, I keep balance out between professional experiences, certifications, and college degrees. But I'll be working on PMP, CCFP, GXPN, GREM, CCIE , and Ph.D (only if I complete, but not ABD) terminal credentials for the next 3 years.

philz1982

I am finishing my two Masters in Info Sec and IS. Once these are done, I will do a dual Masters (MBA and either Finance, Marketing, or Strategy). Once that is done, I will re-evaluate and either pick up a Masters Level Certificate in Analytics, programming, or I a few Certs OSCE, CCNP, MCSE.

Eventually, probably in my early 40's I will go for a Doctorate or a PHD. My goal is to be the CTO of a Fortune 500 company by the time I am in my mid-40's.

shauncarter1

jfitzg wrote: »

I can tell you that unless you are a senior level executive already, this degree wont help you at all in your career path unless you are trying to enter academia. This is speaking from personal experience. I dont even put my doctorate on my resume as I have been told multiple times I was overqualified for the positions I was interviewing for, and I wasnt exactly interviewing for help desk positions if you know what I mean.

Very true jfitzg if your goal is to perform implementation, troubleshooting, and support work then the doctorate will not provide you with much return on your investment. On the other hand tons of CIO jobs at colleges and within the government give preferences to candidates with a doctorate. For myself each of my online college gigs give you a nice bump in pay per class with a terminal degree. Smart move not putting it on your resume in certain situations because it can make you appear overqualified for certain jobs. Of course there is the pursuit as a lifelong goal as well.

chucktaylor244

i got mine from Capella, the residencies are ok but i was able to do mine locally thankfully.

the comp's were not fun, i ended up passing on the 2nd try (you only get two tries)

my dissertation took just over a year.

it's mainly a talking point in interviews. no one really cares about it and it's prime purpose was to eventually teach when i reach full retirement age and i have 25 years for that.

I have dual CCIE's, at this point those take precedence with regard to job hunting. once the recruiters see those, they typically do not care about the rest.

Doyen

chucktaylor244 wrote: »

i got mine from Capella, the residencies are ok but i was able to do mine locally thankfully.

the comp's were not fun, i ended up passing on the 2nd try (you only get two tries)

my dissertation took just over a year.

it's mainly a talking point in interviews. no one really cares about it and it's prime purpose was to eventually teach when i reach full retirement age and i have 25 years for that.

I have dual CCIE's, at this point those take precedence with regard to job hunting. once the recruiters see those, they typically do not care about the rest.

I see that you reside in the DC area Dr. Taylor. One CCIE is typically marketable, so I cannot imagine two CCIEs having an issue with high salary employment. I imagine that you are going to pass your CISSP tomorrow, so how much would you consider with your qualifications around that area?

CyberfiSecurity

Dr. Taylor,

Maybe we met at Capella University's Doctorate cluster meeting in Arlington,Virginia in the past. I met a guy attended Capella University, he did not finish is degree because they rejected his comp on the second tries. I dropped out after two semester because I found Capella University's program study mode was not for me. I am currently attending Nova Southeastern University's program, but not sure if I am going to complete.

Also, with your credentials in Cisco products, I don't think you will have any problem passing the CISSP exam. Good luck!

CyberfiSecurity

Another school worth to explore is University of Colorado at Colorado Springs. It is a Ph.D in Engineering with Security. I contacted them once, all the courses can be done via distance learning; however, research must be conduct at the local campus or something. University of Colorado at Colorado Springs is part of the University of Colorado system, it does not have good reputation likes UC-Boulder, but good enough to beat Capella, Colorado Technical University, Dakota State, and etc.

URL: UCCS | Department of Computer Science

chucktaylor244

Doyen wrote: »

I see that you reside in the DC area Dr. Taylor. One CCIE is typically marketable, so I cannot imagine two CCIEs having an issue with high salary employment. I imagine that you are going to pass your CISSP tomorrow, so how much would you consider with your qualifications around that area?

CCIE is typically running around 130-165k usually depending on where you are working. 150/hr doing 1099 work is not out of the normal. having a clearance helps of course, around this area you pretty much need it unless you are going to work commercial only. additional CCIE's really don't buy you much other than credibility with Cisco, etc. I think i got a slight bonus when i passed my second, but they don't bill you out any higher with multiples.

I dont really count on the CISSP to really bump me up, it's something that i felt i always should have had to be well rounded. plus it looks really good on a resume. They may give me a small one-time bonus, but that's about it really.

chucktaylor244

CyberfiSecurity wrote: »

Dr. Taylor,

Maybe we met at Capella University's Doctorate cluster meeting in Arlington,Virginia in the past. I met a guy attended Capella University, he did not finish is degree because they rejected his comp on the second tries. I dropped out after two semester because I found Capella University's program study mode was not for me. I am currently attending Nova Southeastern University's program, but not sure if I am going to complete.

Also, with your credentials in Cisco products, I don't think you will have any problem passing the CISSP exam. Good luck!

it's highly likely we met in Arlington. i went to all 3 of mine there, in fact i did two of them pretty much back to back there because i wanted to get them over with. Capella's classes do take some getting used too. I honestly only kept going because i was getting post 9/11 GI BILL (Retired Officer) and i cranked through the curriculum pretty quick (3 classes a quarter). The hardest portion of the curriculum were the research classes, the technical classes were not that difficult IMHO.

I passed my Comp on a re-write, that process in and of itself was painful. Once your dissertation topic is approved and you have a mentor, etc..you pretty much just fly through. i think i wrote the bulk of my dissertation in about a month of almost non-stop work

da_vato

For those of you that are in or have completed a doctorates degree, what was you impressions from a masters program to a doctorate program? At first did any of you feel like "what did I get myself into?" or was it a rather simple transition?

I am considering attending Capitol-College. I attended their tour and spoken with some of the staff but I am still fuzzy on the difference between (or transition from) a "practitioner to a scholar."