Google.org puts $3.5 million behind national network of student cyber clinics

Google's philanthropic arm, Google.org, is giving $3.5 million to launch Cyber Clinics Canada, a national network of training clinics led by the Rogers Cybersecure Catalyst at Toronto Metropolitan University. The funding was announced Oct. 14.

The program is aimed at two problems at once. Community organizations rarely have the money for security consultants, and new graduates struggle to get the hands-on experience employers ask for. In the clinic model, students do real work for real clients under supervision. Google's announcement cites a talent gap in which one in six cyber job postings goes unfilled.

How the clinics work

According to Google's announcement, $1 million of the money goes to the Catalyst, which will run the national network and give participating colleges and universities shared tools, resources and coaching so they can open their own community clinics. The rest supports the clinics themselves. Google.org is also funding scholarships for its Google Cybersecurity Certificate.

Students and early-career professionals in the clinics will provide free help to public and community organizations. BetaKit reported that the services include vulnerability and risk assessments, phishing and digital hygiene training, incident response planning and support with regulatory and privacy compliance. The clinics will not respond to active cyberattacks.

Cyber Clinics Canada expands the Catalyst Cyber Clinic, which the Brampton-based centre launched the previous year to support Canadian non-profits and community groups. Google says the model builds on a movement of more than 60 cyber clinics around the world.

Charles Finlay, the Catalyst's founding executive director, described the model to BetaKit as "a teaching hospital for the digital age," giving learners supervised experience while offering smaller organizations help they might not otherwise afford. Sabrina Geremia, vice-president and country manager of Google Canada, said a "strong, diverse, and skilled cybersecurity workforce is more important than ever."

What we don't know yet

Neither announcement named the colleges and universities that will host clinics, said how many clinics will open, or set a target for the number of students or organizations served. The number of certificate scholarships was also not disclosed.

What to do

Students in cybersecurity or IT programs should ask their department whether it plans to join the network, since clinic work can count as practical experience on a resume. Charities, non-profits and small businesses that cannot afford a security assessment can watch the Catalyst for clinic openings in their region.