Cybersecurity Management Capstone (Spring 2025)

University of Montana
Cybersecurity Management Capstone (Spring 2025)
03/24/2025 to 05/09/2025
Shawn Clouse
Collaboration Overview
About Students
The Cybersecurity Management Capstone course at the University of Montana provides graduate and undergraduate students with hands-on experience conducting cybersecurity risk assessments. This program is designed to help non-profits, schools, small businesses, and government organizations improve their cybersecurity posture while giving students practical experience in cybersecurity consulting, risk management, and compliance frameworks. 

Industry professionals from LMG Security in Missoula support the course by mentoring students on best practices for conducting a comprehensive cybersecurity assessment and risk analysis. 

For the Spring 2025 semester, we are seeking seven organizations to participate in this cybersecurity consulting project.  

This project can be conducted remotely via Zoom, as long as there is a designated point of contact from the organization who can consistently meet with the student team.

Previous participants include:
Non-Profits: Missoula Food Bank, Missoula Aging Services, Habitat for Humanity, United Way, Jeannette Rankin Peace Center, and Open Aid Alliance.
Educational Institutions: Missoula International School, Montana High Tech Business Alliance, Great Falls Schools, and UM College of Business.
Government Entities & Small Businesses: Missoula Chamber of Commerce, Missoula Urban Development Project, and local IT departments.

We are happy to provide references from past participating organizations upon request.
About Program Goals
Student teams (three to four students per team) will work directly with participating organizations to: 

  • Review cybersecurity policies, plans, and business documents.
  • Interview key management, technical staff, and client-serving personnel to understand security protocols.
  • Conduct a National Institute of Standards and Technology (NIST) cybersecurity assessment.
  • Perform optional vulnerability scans and technical security tests (if requested by the organization).
  • Identify and analyze key cybersecurity risks (typically 8-10 per organization).
  • Provide detailed recommendations to mitigate 4-5 high-priority risks.
  • Deliver a final 30-minute presentation on cybersecurity risks and recommendations.
  • Submit a comprehensive report outlining assessment results, risks, findings, and recommendations.
About the Collaboration Format
This course focuses on teaching advanced networking and cybersecurity principles that include design, setup, operations, and maintenance networks for an organization.  There will be a special emphasis on network security and how it aligns with organizational strategy, directory services for access to organizational information, and cybersecurity management. This course will utilize the lab in GBB 213 as well as will bring in outside experts to speak on cybersecurity topics.  Every class will include a lecture or discussion on cybersecurity topics along with a hands-on lab demonstrating the concepts.  The capstone project will be conducting a NIST Cybersecurity and Risk Assessment audit for an organization.
Benefits for Industry Partners
Benefits for Participating Industry Partners

Participating organizations gain access to a structured, high-value cybersecurity consulting engagement delivered by trained students under faculty and industry expert guidance. This collaboration is designed to create real organizational impact while requiring minimal time investment.

Key Benefits Include:

  • Actionable Cybersecurity Risk Assessment
    Receive a comprehensive cybersecurity and risk assessment aligned with NIST standards, including prioritized findings and clear mitigation recommendations tailored to your organization.

  • Expert-Guided Analysis at Low Cost
    Student teams are trained and supported by University of Montana faculty and industry professionals from LMG Security, ensuring assessments follow established best practices.

  • Improved Security Posture & Compliance Readiness
    Identify gaps in policies, procedures, and controls—and gain practical guidance to strengthen defenses, reduce exposure, and improve compliance readiness.

  • Fresh Perspective on Organizational Risk
    Gain an external, objective view of your cybersecurity posture from emerging professionals trained in modern frameworks, tools, and risk management approaches.

  • Professional Deliverables
    Receive a written assessment report and a final executive presentation summarizing key risks, impacts, and recommended next steps.

  • Minimal Time Commitment
    Engagement is designed to be efficient and respectful of staff time, requiring only limited interviews, document sharing, and participation in review meetings.

  • Talent Pipeline & Community Impact
    Engage with and mentor future cybersecurity professionals while supporting workforce development and experiential learning at a Montana public institution.

  • Optional Sponsorship Opportunity ($500)
    Organizations may optionally provide a $500 sponsorship to help offset student program costs. Sponsorship is not required to participate, but directly supports student access, learning resources, and program sustainability.

  • Ongoing Program Availability
    If timing does not align this semester, organizations may express interest in participating in future offerings of this capstone program.
Program Details

Students Include:

Students Enrolled:  Students Enrolled

Program Duration: 6 weeks

Program Launch Date: 03/24/25

Program End Date: 05/09/25

Student Commitment: 4-7 Hours hrs/week

Course Format: Bmis472 Cybersecurity Management Capstone, Multiple Projects Multiple Teams

Modality: Hybrid

# of Projects: 6

View All Program Details

Project Requirements

Industry Partner Requirements
Project Topics Cybersecurity
Location Preferences

Compensation

Following compensation will be offered to the students


Sponsorship

No Sponsorship Required

Other Requirements
Benefits for Participating Organizations 

Free Cybersecurity Consultation – Receive a professional-level risk assessment and recommendations at no cost.
Expert-Guided Analysis – Students receive training from LMG Security and faculty advisors, ensuring a high-quality assessment.
Compliance and Security Enhancements – Improve your organization's cybersecurity using NIST standards and industry best practices.
Minimal Time Commitment – Requires only a few hours of document review, staff interviews, and a final presentation.
Ongoing Support – If this semester does not work, we offer this consulting opportunity every year.  

The estimated time commitment for organizations includes: 
  • Document Gathering: A few hours to collect and share relevant cybersecurity policies, plans, or business documents.
  • Staff Interviews: A few hours for discussions with key personnel (management, IT staff, client-serving teams).
  • Optional Vulnerability Testing: A few hours (only if the organization opts in).
  • Preliminary Review Meeting: 1-hour meeting to discuss initial risks and findings.
  • Final Presentation: 30-minute session on May 1st or May 6th (alternative dates: April 28 or 30).
  • Feedback Survey: 10-minute online survey on the students’ performance and recommendations.
Project Management Time Commitment 2 Hours per week
Interested Industries Aerospace & Defense Agriculture & Farming Arts & Recreation Biotech & Pharmaceuticals Computers & Hardware Construction, Repair & Maitenance Consumer Services Education Energy & Utilities Fashion & Apparel Finance Food & Beverage Government Health Care Insurance Manufacturing Media Natural Resources Non-Profit Professional Services Public Works Real Estate Restaurants, Bars & Food Services Retail Semiconductor Software & IT Sports & Entertainment Telecommunications Transportation & Logistics Travel & Tourism
Skills & Expertise
Asset Inventory and Classification Business Impact Analysis Compliance Analysis Cybersecurity Risk Assessment Cybersecurity Strategy Data Protection Practices Documentation Review Ethical Hacking Fundamentals Executive-Level Presentation Skills Governance Risk and Compliance (GRC) Identity and Access Management Incident Response Planning IT Governance Log Analysis Network Security Fundamentals NIST Cybersecurity Framework Privacy and Data Security Professional Communication Risk Management Secure Configuration Review Security Awareness Training Security Controls Evaluation Security Policy Review Security Program Maturity Assessment Stakeholder Interviewing Technical Writing and Reporting Third-Party Risk Assessment Threat Modeling Vulnerability Assessment Vulnerability Scanning Tools
Key Program Dates Due Date
Industry Partner Proposal Deadline

Mar 25 2025, 12:00.00 AM
Students Rank Project Preferences

Mar 26 2025, 12:00.00 AM
Project Kickoff Meeting

Mar 31 2025, 12:00.00 AM
Final Presentations

 We’ll find a time on this day for you to meet with the students to wrap up your project. 

May 07 2025, 12:00.00 AM

* We’ve got some inspirational project ideas below! These are related project topics that you can mix and match the components for the best cross-functional project experience possible.

Cybersecurity

Program Overview
Program Title Cybersecurity Management Capstone (Spring 2025)
Organization University of Montana
Student Application Link https://umt.capsource.app/program/cybersecurity-management-capstone-spring-2025/rfp
# of Students Enrolled
0
# of Projects Running
2 Project/s Added (of 6 Projects Expected)

Program Timeline

Project Duration

Start Date: 03/24/25      End Date: 05/09/25

2 months

Collaboration Overview
About Students

The Cybersecurity Management Capstone course at the University of Montana provides graduate and undergraduate students with hands-on experience conducting cybersecurity risk assessments. This program is designed to help non-profits, schools, small businesses, and government organizations improve their cybersecurity posture while giving students practical experience in cybersecurity consulting, risk management, and compliance frameworks. 

Industry professionals from LMG Security in Missoula support the course by mentoring students on best practices for conducting a comprehensive cybersecurity assessment and risk analysis. 

For the Spring 2025 semester, we are seeking seven organizations to participate in this cybersecurity consulting project.  

This project can be conducted remotely via Zoom, as long as there is a designated point of contact from the organization who can consistently meet with the student team.

Previous participants include:
Non-Profits: Missoula Food Bank, Missoula Aging Services, Habitat for Humanity, United Way, Jeannette Rankin Peace Center, and Open Aid Alliance.
Educational Institutions: Missoula International School, Montana High Tech Business Alliance, Great Falls Schools, and UM College of Business.
Government Entities & Small Businesses: Missoula Chamber of Commerce, Missoula Urban Development Project, and local IT departments.

We are happy to provide references from past participating organizations upon request.

Student Level:  

Student Time Commitment:   Full Time

Team Structure:   3 - 4

Program Goals
Student teams (three to four students per team) will work directly with participating organizations to: 

  • Review cybersecurity policies, plans, and business documents.
  • Interview key management, technical staff, and client-serving personnel to understand security protocols.
  • Conduct a National Institute of Standards and Technology (NIST) cybersecurity assessment.
  • Perform optional vulnerability scans and technical security tests (if requested by the organization).
  • Identify and analyze key cybersecurity risks (typically 8-10 per organization).
  • Provide detailed recommendations to mitigate 4-5 high-priority risks.
  • Deliver a final 30-minute presentation on cybersecurity risks and recommendations.
  • Submit a comprehensive report outlining assessment results, risks, findings, and recommendations.
Format Structure

Multiple Projects Multiple Teams

Format Title Bmis472 Cybersecurity Management Capstone
Format Description
This course focuses on teaching advanced networking and cybersecurity principles that include design, setup, operations, and maintenance networks for an organization.  There will be a special emphasis on network security and how it aligns with organizational strategy, directory services for access to organizational information, and cybersecurity management. This course will utilize the lab in GBB 213 as well as will bring in outside experts to speak on cybersecurity topics.  Every class will include a lecture or discussion on cybersecurity topics along with a hands-on lab demonstrating the concepts.  The capstone project will be conducting a NIST Cybersecurity and Risk Assessment audit for an organization.
Benefits For Industry Partners
Benefits for Participating Industry Partners

Participating organizations gain access to a structured, high-value cybersecurity consulting engagement delivered by trained students under faculty and industry expert guidance. This collaboration is designed to create real organizational impact while requiring minimal time investment.

Key Benefits Include:

  • Actionable Cybersecurity Risk Assessment
    Receive a comprehensive cybersecurity and risk assessment aligned with NIST standards, including prioritized findings and clear mitigation recommendations tailored to your organization.

  • Expert-Guided Analysis at Low Cost
    Student teams are trained and supported by University of Montana faculty and industry professionals from LMG Security, ensuring assessments follow established best practices.

  • Improved Security Posture & Compliance Readiness
    Identify gaps in policies, procedures, and controls—and gain practical guidance to strengthen defenses, reduce exposure, and improve compliance readiness.

  • Fresh Perspective on Organizational Risk
    Gain an external, objective view of your cybersecurity posture from emerging professionals trained in modern frameworks, tools, and risk management approaches.

  • Professional Deliverables
    Receive a written assessment report and a final executive presentation summarizing key risks, impacts, and recommended next steps.

  • Minimal Time Commitment
    Engagement is designed to be efficient and respectful of staff time, requiring only limited interviews, document sharing, and participation in review meetings.

  • Talent Pipeline & Community Impact
    Engage with and mentor future cybersecurity professionals while supporting workforce development and experiential learning at a Montana public institution.

  • Optional Sponsorship Opportunity ($500)
    Organizations may optionally provide a $500 sponsorship to help offset student program costs. Sponsorship is not required to participate, but directly supports student access, learning resources, and program sustainability.

  • Ongoing Program Availability
    If timing does not align this semester, organizations may express interest in participating in future offerings of this capstone program.
Project Modality Hybrid
Industry Partner Requirements to Participate
Project Topics Cybersecurity
Target Industries Aerospace & Defense Agriculture & Farming Arts & Recreation Biotech & Pharmaceuticals Computers & Hardware Construction, Repair & Maitenance Consumer Services Education Energy & Utilities Fashion & Apparel Finance Food & Beverage Government Health Care Insurance Manufacturing Media Natural Resources Non-Profit Professional Services Public Works Real Estate Restaurants, Bars & Food Services Retail Semiconductor Software & IT Sports & Entertainment Telecommunications Transportation & Logistics Travel & Tourism
Skills & Expertise Asset Inventory and Classification Business Impact Analysis Compliance Analysis Cybersecurity Risk Assessment Cybersecurity Strategy Data Protection Practices Documentation Review Ethical Hacking Fundamentals Executive-Level Presentation Skills Governance Risk and Compliance (GRC) Identity and Access Management Incident Response Planning IT Governance Log Analysis Network Security Fundamentals NIST Cybersecurity Framework Privacy and Data Security Professional Communication Risk Management Secure Configuration Review Security Awareness Training Security Controls Evaluation Security Policy Review Security Program Maturity Assessment Stakeholder Interviewing Technical Writing and Reporting Third-Party Risk Assessment Threat Modeling Vulnerability Assessment Vulnerability Scanning Tools
Location Information & Preferences

59812-0003

These project can be remote, so there is no requirement to be in Missoula, MT

Sponsorship

No Sponsorship Required

Compensation

Following compensation will be offered to the students:

Other Requirements
Benefits for Participating Organizations 

Free Cybersecurity Consultation – Receive a professional-level risk assessment and recommendations at no cost.
Expert-Guided Analysis – Students receive training from LMG Security and faculty advisors, ensuring a high-quality assessment.
Compliance and Security Enhancements – Improve your organization's cybersecurity using NIST standards and industry best practices.
Minimal Time Commitment – Requires only a few hours of document review, staff interviews, and a final presentation.
Ongoing Support – If this semester does not work, we offer this consulting opportunity every year.  

The estimated time commitment for organizations includes: 
  • Document Gathering: A few hours to collect and share relevant cybersecurity policies, plans, or business documents.
  • Staff Interviews: A few hours for discussions with key personnel (management, IT staff, client-serving teams).
  • Optional Vulnerability Testing: A few hours (only if the organization opts in).
  • Preliminary Review Meeting: 1-hour meeting to discuss initial risks and findings.
  • Final Presentation: 30-minute session on May 1st or May 6th (alternative dates: April 28 or 30).
  • Feedback Survey: 10-minute online survey on the students’ performance and recommendations.
Expected Time Commitment For Project Managers 2 Hours per week
Key Program Dates Due Date
Industry Partner Proposal Deadline

Mar 25 2025, 12:00.00 AM
Students Rank Project Preferences

Mar 26 2025, 12:00.00 AM
Project Kickoff Meeting

Mar 31 2025, 12:00.00 AM
Final Presentations

 We’ll find a time on this day for you to meet with the students to wrap up your project. 

May 07 2025, 12:00.00 AM
Shawn Clouse
View Profile

Resources

Links & Documents
NDATemplate docx

Projects

Filters
Project Organization Topics