What Does Cybersecurity Apprenticeship Do And Its Key Impact On Careers

Hands-On Training and Practical Applications in Cybersecurity Apprenticeships

Simulation Environments and Threat Replication

"Effective simulations must balance realism with safety—apprentices should encounter threats akin to those documented in reports like the Verizon Data Breach Investigations Report (e.g., 82% of breaches involved stolen credentials in 2023)."

Ethical Hacking Techniques and Tool Integration

Apprentices document each engagement using attack trees to map exploitation paths and vulnerability assessment reports (e.g., OWASP Testing Guide templates).

Step-by-Step Controlled Cybersecurity Lab Setup

1. Hardware and Software Requirements:
   
2. Host Machine: Minimum 16GB RAM, quad-core CPU, and 200GB+ SSD (SSD preferred for performance).
3. Virtualization Tools: VirtualBox (free) or VMware Workstation Pro (paid) with nested virtualization enabled.
4. Guest Operating Systems: Kali Linux (for offensive tools), Windows Server (for target systems), and a jump host (e.g., Ubuntu) to manage lab traffic.
5. Network Configuration:
   
6. Create an internal network in VirtualBox (e.g., `192.168.56.0/24`) to isolate lab traffic from the host.
7. Use NAT or Host-Only Adapter to prevent external exposure; disable promiscuous mode on physical interfaces.
8. Legal and Ethical Safeguards:
   
9. Explicit Consent: Obtain written permission from lab owners if using third-party vulnerable machines (e.g., VulnHub VMs).
10. Data Destruction Protocols: Wipe all VMs post-exercise using tools like DBAN or VirtualBox’s built-in snapshot deletion.
11. Incident Reporting: Document all activities in a logbook (e.g., timestamps, tools used, vulnerabilities exploited) for audit trails.
12. Lab Topologies:
    
13. Basic Setup: Single Kali Linux VM attacking a Windows Server with pre-installed vulnerabilities (e.g., Metasploitable 2).
14. Advanced Setup: Multi-tiered network with firewalls (pfSense), IDS/IPS (Snort/Suricata), and honeypots (Cowrie) to simulate enterprise defenses.
15. Automation and Scalability:
    
16. Use Ansible or Terraform to automate VM provisioning and reset lab states between sessions.
17. Integrate SIEM tools (Splunk, ELK Stack) to log and analyze lab-generated alerts.

"A well-configured lab should mimic Tier 1/2 enterprise networks, including segmented VLANs, DMZs, and logging mechanisms, as outlined in NIST SP 800-53 for security controls."

Comparative Analysis of Apprenticeship Training Methods

Documenting and Reporting Vulnerabilities

1. Header Section:
   

   

   Certifications and Industry Validation in Cybersecurity Apprenticeships

   Cybersecurity apprenticeships bridge theoretical knowledge with industry-recognized credentials, ensuring apprentices acquire skills validated by global standards. These certifications enhance employability by aligning with employer requirements and addressing critical gaps in entry-level cybersecurity roles. The integration of certifications within apprenticeships follows a structured progression, supported by employer partnerships and competency-based assessments to guarantee practical proficiency.

   Certifications serve as benchmarks for proficiency in cybersecurity domains, with specific credentials tailored to entry-level roles. Apprenticeships leverage these certifications to demonstrate competence, reduce hiring risks for employers, and accelerate career growth for individuals. The alignment with industry bodies like (ISC)² and EC-Council ensures apprentices meet real-world demands, while competency assessments provide tangible proof of skills acquisition.
   

   Key Certifications Earned Through Cybersecurity Apprenticeships

   Certifications obtained during apprenticeships are selected based on their relevance to foundational cybersecurity roles, industry demand, and alignment with apprenticeship frameworks. Below are the most valuable credentials, categorized by their focus areas and typical integration into apprenticeship programs:
   
   • CompTIA Security+ A globally recognized entry-level certification validating core cybersecurity concepts, including threats, vulnerabilities, and risk management. It serves as a prerequisite for many advanced certifications and is often the first credential earned in apprenticeships, typically within the first 6–12 months. Employers frequently require or prefer this certification for roles such as SOC Analyst, Junior Penetration Tester, or IT Security Specialist.
   • Certified Ethical Hacker (CEH) by EC-Council Focuses on offensive security skills, including penetration testing, vulnerability assessment, and ethical hacking methodologies. This certification is ideal for apprentices pursuing roles in red teaming, security auditing, or incident response. It is often introduced after foundational training (e.g., Security+) and may require hands-on labs or simulated attacks to demonstrate practical application.
   • Certified Information Systems Security Professional (CISSP) by (ISC)² While primarily an advanced certification, some apprenticeships offer preparatory pathways for CISSP, particularly for those targeting leadership or specialized roles. Apprentices may engage in CISSP-related coursework or mentorship programs to build eligibility (e.g., 5 years of experience, though waivers exist for apprentices with structured training). The certification is critical for roles like Security Architect or Chief Information Security Officer (CISO) but is less common in entry-level apprenticeships.
   • Certified Cloud Security Professional (CCSP) by (ISC)² Growing in relevance due to the shift toward cloud-based infrastructures, CCSP validates expertise in cloud security architecture, governance, and compliance. Apprenticeships with cloud-focused tracks (e.g., AWS, Azure) may integrate CCSP preparation to address skills gaps in cloud-native security roles.
   • Certified in Risk and Information Systems Control (CRISC) by ISACA Targets risk management and control frameworks, aligning with compliance-driven roles such as IT Auditor or Governance, Risk, and Compliance (GRC) Analyst. This certification is valuable for apprentices in financial services or regulated industries, where risk assessment is a core responsibility.
   Certifications are chosen based on the apprenticeship’s specialization (e.g., offensive vs. defensive security) and employer partnerships. For example, an apprenticeship with a defense contractor may prioritize CEH or DoD-specific certifications, while a fintech company might emphasize CRISC or CISSP.
   

   Timeline and Integration of Certifications in Apprenticeship Programs

   The progression of certifications within an apprenticeship follows a phased approach, balancing theoretical learning with hands-on application. Below is a typical timeline, including prerequisites, exam support, and milestones:
   

   Phase	Duration	Certification Focus	Prerequisites	Exam Support	Employer Validation
   Foundational Training	0–6 months	CompTIA Security+, IT fundamentals (e.g., CompTIA A+)	Basic IT knowledge; no formal prerequisites for Security+	Study materials, practice exams, and instructor-led prep sessions	Skills assessments (e.g., lab simulations, scenario-based tests)
   Intermediate Specialization	6–12 months	CEH, Certified SOC Analyst (CSA), or vendor-specific certs (e.g., Cisco CCNA Security)	Security+ or equivalent; hands-on lab experience	Access to EC-Council’s official labs or vendor training portals; mentorship	Portfolio reviews (e.g., documented penetration tests, incident response exercises)
   Advanced Preparation	12–18 months	CISSP, CCSP, or niche certifications (e.g., GIAC Security Essentials)	2–5 years of experience (waivers for apprenticeships); foundational certs	Customized study plans, employer-sponsored exam vouchers, or scholarships	Capstone projects (e.g., full security audit, red team/blue team exercises)
   Industry Alignment	Ongoing	Continuous education (e.g., (ISC)² CPE credits, vendor recertifications)	Active certification maintenance requirements	Employer-funded refresher courses or conferences	Annual competency reassessments (e.g., skills challenges, peer reviews)

   Key Notes on Integration:
   
2. Prerequisites: Certifications like CISSP require experience, which apprenticeships address through accelerated pathways (e.g., mentorship or portfolio-based waivers).
3. Exam Support: Providers often include voucher coverage, exam prep workshops, or partnerships with certification bodies (e.g., EC-Council’s "iLabs" for CEH).
4. Employer Validation: Competency assessments are tied to real-world tasks, such as simulating a breach response or analyzing malware samples, ensuring skills translate to job performance.

Alignment with Industry Standards and Employer Credibility

Apprenticeships achieve credibility by adhering to frameworks established by industry consortia, professional bodies, and employer networks. This alignment ensures apprentices meet hiring benchmarks and reduces employer skepticism about unproven candidates. Key standards include:

• (ISC)²’s CBK (Common Body of Knowledge)
  The CISSP certification’s framework informs apprenticeship curricula, particularly in domains like security governance, cryptography, and physical security. Apprenticeships may map their training to CBK domains to demonstrate comprehensive coverage.
• EC-Council’s Certified Ethical Hacker (CEH) Framework
  The CEH certification’s five-phase ethical hacking methodology (reconnaissance, scanning, gaining access, maintaining access, covering tracks) is embedded in hands-on labs, ensuring apprentices develop offensive security skills aligned with industry practices.
• NICE Framework (National Initiative for Cybersecurity Education, USA)
  The NICE Workforce Framework categorizes cybersecurity roles into Specialty Areas (e.g., Protect and Defend, Analyze) and Knowledge, Skills, and Abilities (KSAs). Apprenticeships align certifications with NICE categories to validate role-specific competencies, such as:

  Analyze: CEH or GIAC Penetration Tester (GPEN) for threat analysis.
  Protect and Defend: Security+ or Certified Cloud Security Professional (CCSP) for infrastructure security.

• ISO/IEC 27001 and NIST Cybersecurity Framework
  Some apprenticeships incorporate compliance-focused certifications (e.g., ISACA’s CISM or CRISC) to address risk management and audit skills, critical for roles in regulated sectors.
• Vendor-Specific Standards (e.g., AWS, Microsoft, Cisco)
  Cloud and network security apprenticeships integrate certifications like AWS Certified Security – Specialty or Microsoft Certified: Azure Security Engineer
  

  Mentorship and Employer Integration in Cybersecurity Apprenticeships

  Cybersecurity apprenticeships thrive on structured guidance from industry experts and seamless integration with workplace environments, ensuring trainees develop both technical proficiency and professional acumen. Mentorship in these programs bridges the gap between theoretical knowledge and practical application, while employer partnerships provide real-world exposure, career pathways, and industry validation. The effectiveness of these relationships depends on clear role definitions, measurable outcomes, and alignment between educational objectives and workplace demands.
  

  Role of Mentors in Cybersecurity Apprenticeships

  Mentors in cybersecurity apprenticeships serve as technical advisors, career guides, and performance evaluators, drawing from diverse professional backgrounds. Many mentors are former apprentices who have progressed to senior roles, offering firsthand insights into industry challenges and career growth trajectories. Others are seasoned cybersecurity professionals—such as penetration testers, SOC analysts, or cloud security architects—who provide specialized expertise in niche domains like threat intelligence, compliance, or secure coding practices.

  Their guidance extends beyond skill development to include:
  

• Technical Skill Refinement: Hands-on feedback on vulnerability assessments, incident response simulations, or secure system configurations.
• Career Navigation: Advice on certifications, specialization paths, and soft skills like communication and stakeholder management.
• Industry Trends: Updates on emerging threats (e.g., AI-driven attacks, ransomware evolution) and regulatory changes (e.g., GDPR, NIST frameworks).
• Ethical and Professional Standards: Emphasis on compliance, ethical hacking principles, and workplace conduct.

Mentors often leverage structured frameworks like the Cybersecurity Apprenticeship Model (CAM), which aligns apprenticeships with NICE (National Initiative for Cybersecurity Education) Workforce Framework competencies. Their effectiveness is measured through 360-degree evaluations, combining peer reviews, self-assessments, and supervisor feedback.


Mentorship Agreement Template

A formal mentorship agreement clarifies expectations, responsibilities, and performance metrics to ensure accountability and mutual growth. Below is a structured template adaptable to cybersecurity apprenticeships:

Mentorship Agreement for Cybersecurity Apprenticeships
Parties Involved:


• Mentor: [Name], [Title], [Organization]
• Apprentice: [Name], [Program Name], [Enrollment Period: Start Date – End Date]

1. Objectives


• Apprentice will achieve [X] competency-based milestones (e.g., "Complete 10 penetration testing exercises" or "Earn CompTIA Security+ certification").
• Mentor will provide [Y] hours of structured guidance per month, including [Z] shadowing opportunities and [W] project-based feedback sessions.

2. Communication and Support


• Frequency: Bi-weekly check-ins (1 hour) via [preferred method: in-person, video call, or email].
• Documentation: Apprentice submits weekly progress reports; mentor provides written feedback within [X] days.
• Emergency Support: 24/7 availability for critical incidents (e.g., security breaches during apprenticeship projects).

3. Performance Metrics

Metric	Apprentice Responsibility	Mentor Responsibility	Evaluation Method
Technical Proficiency	Complete assigned tasks with 90% accuracy	Review submissions and provide remediation	Quarterly technical assessments
Project Completion	Deliver projects on time with mentor input	Approve project scopes and deadlines	Project sign-off logs
Soft Skills Development	Demonstrate improved communication skills	Conduct mock presentations and stakeholder meetings	Peer/manager feedback surveys
Certification Progress	Register and prepare for exams	Recommend study resources and mock tests	Certification pass/fail records

4. Confidentiality and Ethics

• Apprentice agrees to adhere to [Organization’s] data protection policies and non-disclosure agreements.
• Mentor ensures all feedback and evaluations remain constructive and free from bias.

5. Termination and Transition


• Either party may terminate the agreement with [X] weeks’ notice for valid reasons (e.g., performance issues, role changes).
• Upon completion, mentor provides a reference letter and connects apprentice with [Organization’s] talent pipeline.

Signed:
Mentor: ________________________ | Date: ___________
Apprentice: ____________________ | Date: ___________


Employer Partnerships and Workplace Integration

Cybersecurity apprenticeships are designed to embed trainees into operational environments, fostering direct exposure to industry challenges. Employer partnerships manifest in various models, each offering distinct advantages:

1. Direct Employer-Driven Programs


• Corporate Apprenticeships: Companies like IBM, Deloitte, and Cisco run in-house programs where apprentices work on client projects, rotate through departments (e.g., SOC, risk management), and may earn guaranteed job offers upon completion.
• Example: Google’s Cybersecurity Apprenticeship combines on-the-job training with mentorship from Google Cloud security teams, leading to roles in Chronicle or Mandiant.
• Internship-to-Hire Pathways: Organizations like Lockheed Martin and Booz Allen Hamilton convert top-performing interns into apprenticeships, fast-tracking them to full-time positions.
• Cooperative Education (Co-op): Institutions such as Northern Virginia Community College (NOVA) partner with DHS to place apprentices in federal cybersecurity roles, alternating between classroom learning and 6–12 month work stints.

2. Third-Party Provider Programs


• Bootcamps with Employer Consortia: Providers like Flatiron School or Springboard collaborate with companies to offer apprenticeship-track programs, where trainees complete projects for partner firms (e.g., Capital One, JPMorgan Chase).
• Community College Apprenticeships: Programs at Austin Community College (ACC) or Community College of Denver integrate NICE-aligned curricula with local employer placements, often funded by Workforce Innovation and Opportunity Act (WIOA) grants.
• Nonprofit-Led Initiatives: Organizations like CyberSN or ISC² facilitate apprenticeships by connecting trainees with SMEs (Subject Matter Experts) and mid-sized firms lacking in-house training infrastructure.

Comparison of Mentorship Quality and Resources

Aspect	Employer-Driven Programs	Third-Party Provider Programs
Mentor Expertise	Senior professionals with deep domain specialization	Mixed: May include contractors or adjunct faculty
Resource Access	Full access to company tools (e.g., SIEM, threat intel platforms)	Limited to provider-approved resources
Networking Opportunities	Direct exposure to executives and cross-functional teams	Networking events with multiple employers
Job Placement Guarantees	High (often 80–100% conversion to full-time roles)	Varies; dependent on provider partnerships
Flexibility	Rigid to company needs (e.g., project deadlines)	More adaptable to trainee schedules

Key Benefits of Employer Integration for Apprentices

Employer integration accelerates an apprentice’s transition from novice to industry-ready professional by providing contextualized learning, credibility, and career momentum. The following advantages are consistently cited by successful programs:


Employer-driven cybersecurity apprenticeships offer apprentices a triple-value proposition: they gain real-world problem-solving experience, industry-recognized validation, and accelerated career trajectories—often in roles that would otherwise require years of experience.

1. Networking and Industry Connections

• Access to alumni networks, professional associations (e.g., ISACA, ISC²), and conference opportunities (e.g., Black Hat, DEF CON).
• Informal mentorship beyond the primary mentor, including peer relationships with senior staff.
• Example: Apprentices in Deloitte’s Cyber Apprenticeship are invited to client briefings, fostering relationships with CISOs and risk officers.

2. Real-World Problem-Solving


• Participation in live incident response drills, red team/blue team exercises, or compliance audits under mentor supervision.
• Exposure to emerging technologies (e.g., zero-trust architectures, quantum-resistant cryptography) through hands-on projects.
• Case Study: A Microsoft Cyber Apprentice contributed to patching a zero-day vulnerability in Azure AD, with their work acknowledged in a company-wide security bulletin.

3. Career Acceleration


• Faster certification attainment through employer-sponsored training (e.g., CISSP, CEH, or AWS Certified Security).
• Prioritized internal mobility

Specializations and Niche Focus Areas in Cybersecurity Apprenticeships

Cybersecurity apprenticeships provide structured pathways for trainees to transition from foundational knowledge to specialized expertise in high-demand domains. These programs align technical training with industry-specific challenges, ensuring graduates possess both theoretical understanding and practical skills tailored to emerging threats. By focusing on niche areas such as cloud security, digital forensics, or IoT security, apprenticeships address critical gaps in workforce readiness while accommodating prerequisites like programming proficiency or regulatory compliance. The progression from general cybersecurity competencies to advanced specializations is facilitated through modular curricula, hands-on labs, and industry collaborations, resulting in role-specific skill sets.

The specialization process within cybersecurity apprenticeships follows a deliberate framework, beginning with core competencies before diverging into domain-specific tracks. This structured approach ensures trainees develop a broad foundation while progressively refining their expertise. Tools and methodologies vary significantly across specializations, reflecting the distinct technical and operational demands of each field. For instance, cloud security relies heavily on automation scripting (e.g., Python, PowerShell) and infrastructure-as-code (IaC) tools, whereas digital forensics emphasizes memory analysis (e.g., Volatility) and disk imaging (e.g., FTK Imager). Apprenticeships in regulated industries, such as healthcare or finance, incorporate compliance frameworks (e.g., HIPAA, PCI DSS) into their curricula, addressing sector-specific risks like ransomware in healthcare or payment card fraud in financial services.


Progression from General Cybersecurity to Niche Specializations

The transition from general cybersecurity skills to specialized roles within an apprenticeship framework follows a tiered structure, balancing breadth and depth. Trainees first acquire foundational knowledge in areas such as network security, cryptography, and risk management before selecting a specialization. This progression is visualized below as a flowchart, illustrating how apprenticeships integrate core competencies with advanced tracks:

Flowchart Outline:
1. Core Phase (0–6 months):


• Introduction to cybersecurity principles (e.g., CIA triad, threat modeling).
• Hands-on labs covering penetration testing basics (e.g., Metasploit, Nmap) and defensive strategies (e.g., SIEM tools like Splunk).
• Prerequisites: CompTIA Security+, IT fundamentals (e.g., CompTIA A+), or equivalent experience.

2. Intermediate Phase (6–12 months):


• Domain-specific modules (e.g., cloud architectures for AWS/Azure, forensic investigation methodologies).
• Electives based on trainee interests (e.g., ethical hacking, secure coding).
• Prerequisites: Completion of core labs, basic scripting (e.g., Python for automation), and exposure to industry tools.

3. Specialization Phase (12–24 months):


• Deep dives into niche areas (e.g., IoT security protocols, memory forensics techniques).
• Capstone projects simulating real-world scenarios (e.g., incident response in a healthcare environment).
• Prerequisites: Certifications (e.g., CCSP for cloud, GCFA for forensics) and employer-validated competencies.

Key Tools by Specialization:


• Cloud Security: Terraform, AWS IAM, Open Policy Agent (OPA), and cloud-native threat detection (e.g., AWS GuardDuty).
• Digital Forensics: Autopsy, X-Ways Forensics, and memory analysis frameworks (e.g., Rekall).
• IoT Security: Firmware analysis tools (e.g., Binwalk), network packet capture (Wireshark), and embedded system debugging (e.g., JTAG).
• Offensive Security: Exploit development (e.g., Metasploit Framework), red teaming (e.g., Cobalt Strike), and social engineering tools (e.g., SET).

Industry-Specific Apprenticeships and Unique Challenges

Apprenticeships tailored to industries such as healthcare, finance, and government incorporate sector-specific threats and compliance requirements into their curricula. These programs often partner with employers to address niche challenges, such as:

• Healthcare: Mitigating ransomware attacks on electronic health records (EHRs) and ensuring HIPAA compliance during data breaches.
Example Provider: HIMSS Cybersecurity Apprenticeship (collaboration with hospitals and healthcare IT vendors).

• Unique Tools: Healthcare-specific SIEM rules (e.g., IBM QRadar for EHR logs) and patient data anonymization techniques.
• Challenges: Balancing patient privacy with real-time threat detection and integrating legacy medical devices into secure networks.

- Finance: Combating payment card fraud and insider threats in high-transaction environments.
Example Provider: Financial Services Information Sharing and Analysis Center (FS-ISAC) Apprenticeships.


• Unique Tools: Fraud detection algorithms (e.g., dark web monitoring via Recorded Future) and PCI DSS-compliant encryption.
• Challenges: Aligning with dynamic regulatory landscapes (e.g., GDPR, Basel III) and securing API gateways for fintech applications.

- Government: Defending critical infrastructure against nation-state actors and managing classified data leaks.
Example Provider: DoD Cybersecurity Apprenticeship Program (DODCAP).


• Unique Tools: Red Hat Enterprise Linux for secure government networks and STIG (Security Technical Implementation Guide) compliance tools.
• Challenges: Adhering to strict clearance requirements and collaborating with intelligence agencies on threat intelligence sharing.

Skill Sets and Career Outcomes by Specialization

The table below contrasts the skill sets, tools, and career trajectories of apprentices specializing in offensive versus defensive cybersecurity roles, as well as niche domains. Career outcomes are derived from industry reports (e.g., (ISC)², Burning Glass Technologies) and apprenticeship provider data.


Specialization	Core Skills	Key Tools/Methodologies	Prerequisites	Career Outcomes (Entry-Level Roles)	Industry Demand Drivers
Offensive Security (Red Teaming)	Exploit development, social engineering, post-exploitation techniques.	Metasploit, Burp Suite, Cobalt Strike, SET.	OSCP, CEH, or equivalent hands-on experience.	Penetration Tester, Red Team Operator, Vulnerability Researcher.	Increase in targeted phishing campaigns and zero-day exploits.
	Adversary simulation, threat emulation, and attack path modeling.	MITRE ATT&CK framework, Caldera, Sliver.	Certified Red Team Professional (CRTP).	Red Team Analyst, Threat Hunter.	Growth in ransomware-as-a-service (RaaS) and APT groups.
Defensive Security (Blue Teaming)	Incident response, SIEM administration, threat detection.	Splunk, Wazuh, Elastic Stack, TheHive.	Security+ or CISSP, experience with log analysis.	SOC Analyst, Incident Responder, Threat Intelligence Analyst.	Rise in supply chain attacks and insider threats.
	Endpoint detection and response (EDR), network forensics.	CrowdStrike, SentinelOne, Zeek (Bro), Velociraptor.	GCFA, GCIH, or vendor-specific certifications.	EDR Analyst, Digital Forensic Investigator.	Proliferation of fileless malware and living-off-the-land (LOTL) attacks.
Cloud Security	IAM management, cloud-native threat detection, compliance automation.	AWS IAM, Azure Sentinel, Terraform, Open Policy Agent.	AWS Certified Security – Specialty or CCSP.	Cloud Security Engineer, DevSecOps Engineer.	Migration to multi-cloud environments and shadow IT risks.
	Serverless security, container orchestration (Kubernetes).	AWS Lambda, Docker Bench Security, Prisma Cloud.	Certified Kubernetes Security Specialist (CKS).A cybersecurity apprenticeship transcends conventional education by delivering a trifecta of value: actionable expertise, industry validation, and direct career acceleration. Through hands-on training, participants not only master defensive and offensive techniques but also develop the ability to document vulnerabilities, align with global standards, and collaborate with employers in real-time problem-solving. The structured progression—from foundational skills to niche specializations—ensures adaptability in sectors like healthcare, finance, or government, where cybersecurity demands are uniquely critical. Beyond technical proficiency, apprentices gain a competitive edge through mentorship networks, portfolio-building assessments, and certifications that validate their readiness. Ultimately, this model redefines entry into cybersecurity, transforming theoretical knowledge into a tangible, market-ready skill set that addresses both individual aspirations and the urgent needs of a security-conscious workforce.

• apprenticeship programs
• career development in tech
• cybersecurity training
• hands-on cybersecurity skills
• it certifications

Leave a Comment

Name

Comment

Post Comment

Comments are moderated before appearing. The data you submit is processed according to the Privacy Policy of ir.msu.ac.zw.