Free medical clinics and legal aid clinics, where college students and their instructors help their communities while also learning more about their professions, are now commonplace. Google hopes to add cybersecurity clinics to that list.
Google CEO Sundar Pichai pledged $20 million in grants on Thursday to support and expand the Consortium of Cybersecurity Clinics to introduce thousands of students to potential careers in cybersecurity, while also helping defend small government offices, rural hospitals and nonprofits from hacking.
Pichai said the new initiative addresses both the rising number of cyberattacks — up 38% globally in 2022 – and the lack of candidates trained to stop them.
“Just as technology can create new threats, it can also help us fight them,” Pichai said, announcing the commitment at Google's Washington headquarters. “Security was critical to the work I did early in my Google career, including when we built our Chrome browser. Today, it’s core to everything we do, and the current inflection point in AI is helping take our efforts to the next level.”
The tech giant launched the Google Cybersecurity Certificate program last month to help prepare people for entry-level cybersecurity jobs. It also partnered with universities in New York on a research program to create learning and career opportunities across the cybersecurity sector.
“It’s a challenge,” said Justin Steele, director of Google.org, the company’s philanthropic arm, who estimates that there are currently more than 650,000 open cybersecurity jobs. “But there’s a huge opportunity here.”
Steele anticipates the cybersecurity clinics will have students help small organizations that lack their own technology departments with threat assessments and installing defenses.
“Those students get hands-on experience and they get to increase their marketability for all of these open jobs in cybersecurity,” Steele said. “We get to diversify the field of cybersecurity by training these students and we get to protect critical US infrastructure.”
Ann Cleaveland, executive director of the Center for Long-Term Cybersecurity at the University of California, Berkeley, said the clinics can help organizations “get over a sense of nihilism” about dealing with hackers. While many groups think there is nothing they can do against a state-supported hacker or ransomware attacks, the clinics can offer low-level solutions that can combat a large number of threats.
“Students can really help organizations overcome 80 to 90% of the problems and give them a much more resilient stance,” said Cleaveland, adding that the Consortium of Cybersecurity Clinics hopes to establish clinics in every state by 2030.
Mark Lupo, coordinator of the University of Georgia’s clinic, known as CyberArch, said demand continues to increase for the clinic’s services because more and more data is at risk.
“We have continued as a society to bring more of our sensitive information online, so that vulnerability has only increased,” he said. “The malicious actors understand that sensitive data can be monetized, which, at some point in the past, was not even a thought. Now that there’s money there, they’re going to gravitate toward that.”
That makes cybersecurity and “all hands on deck” issue, said Cleaveland, who is co-chair of the consortium’s executive committee. She said Google.org’s donation will help the consortium establish new clinics, as well as provide mentors to the students staffing them.
“The funding is critical, especially for the smaller universities and colleges and for some of the minority-serving institutions,” she said. “And I think it will be transformative just in terms of making other institutions of higher education aware of the opportunity to have a cybersecurity clinic.”
Kevin Harris, program chair of the Department of Computational and Information Sciences at Stillman College, said he is ready to apply for a grant from Google.org to expand the cybersecurity clinic at his school, the first member of the consortium at a historically Black college or university.
“We’re still pushing to make the field more inclusive,” Harris said. “When you look at an unfilled demand of 700,000+ jobs, why shouldn’t everyone be able to take advantage of those opportunities no matter where you’re located?”
