According to the Department of Homeland Security, cyber-security managers have chief responsibility for overseeing the security of an information system or network. This work includes understanding the infrastructure necessary to protect the organization, developing procedures for responding to information security threats, maintaining situational awareness of cyber-security threats and assisting with the development and enforcement of organizational policies to secure information.To effectively respond to organizational threats, the cyber-security manager merges basic knowledge of cybersecurity technical skills with an understanding of policy, theory, and business practice. Thus, cyber-security specialists must have: 1) knowledge of computer networking concepts and protocols, and network security methodologies; 2) knowledge of cybersecurity and privacy principles used to manage risks related to the use, processing, storage, and transmission of information; 3) knowledge of cyber threats and vulnerabilities; 4) knowledge of risk management processes (e.g. methods of assessing and mitigating risk); and 5) knowledge of vulnerability information dissemination sources (e.g. alerts, advisories, errata, and bulletins).Businesses, government agencies and private citizens are all at risk of falling victim to cybersecurity attack. According to the National Initiative for Cybersecurity Careers and Studies, cyber-security management professionals “provide leadership, management, direction or development and advocacy so the organization may effectively conduct cybersecurity work.” The Bureau of Labor Statistics reports that information security related jobs are expected to grow 28 percent from 2016 to 2026. Thus, the need for professionals who understand cyber-security policy and how to manage, direct, deploy and enforce cyber-security practices remains high. Criminal justice studies majors with this concentration can look beyond law enforcement and successfully pursue security careers with businesses, contracting firms, financial firms and nonprofits. We take a hands-on approach to building the student’s cyber-security skillset. The concentration includes a two-semester analysis and design project carried out with a local business, government agency or nonprofit organization.