Richard Swart: There’s a gap between the expectations of industry in terms of the skill levels that recent graduates should have and the type of training that universities were providing. Despite a significant increase in the number of information security programs over past five years, the majority of those programs are dominated by computer science and computer engineering faculty. Smaller schools located in communities of less than 250,000 people seem to be more nimble and they are responding to industry needs. Larger schools in metropolitan areas appear to be effected by industry demands. Internships are useful for providing basic skill, but its very unusual to find an internship in an MBA or PhD program.”]