Learners in Calbright’s Cybersecurity program build foundational skills in security risk analysis, vulnerability assessment, cloud and system security, and incident response. During this 6-week, 20 to 40-hour micro-internship (August 3 – September 14), learners apply these skills to a real organizational challenge while practicing professional communication, documentation, and presentation.

Learners are able to:

1. Analyze security risks at the organizational and system levels
2. Identify vulnerabilities across networks, cloud platforms, and applications
3. Conduct lightweight security audits and threat modeling
4. Draft or refine cybersecurity policies and best practices
5. Provide recommendations for improving security posture
6. Communicate findings clearly to technical and non-technical audiences

Team model

Projects are completed by teams of 4–5 learners. Individual placements occur only by exception when enrollment is low.

Partner expectations

To ensure a high-quality experience, partners agree to:

1. Attend a kickoff meeting during Week 1 (week of August 3)
2. Provide any necessary data, access, or context
3. Offer timely feedback at midpoint (week of August 24)
4. Review final deliverables and submit evaluations by September 14

Timeline (Q3 2026)

1. August 3 – Mandatory learner onboarding
2. August 3 – 6 – 48-hour project self-selection window
3. Week of August 3 – Employer kickoff (project work begins)
4. Week of August 24 – Midpoint review
5. September 14 – Final deliverables due
6. September 21 – Employer evaluations due

Teams produce employer-ready outputs rooted in security assessment and risk analysis.

Deliverables for this program include:

1. Project Brief + Work Plan (Week 2)

Scope, assumptions, risks, and planned tasks.

2. Midpoint Progress Update (Week 3–4)

Preliminary findings, identified risks, questions, and next steps.

3. Final Deliverable (Week 6)

Examples include:

• Security assessment or audit report
• Threat model and risk analysis
• Cybersecurity policy drafts
• Vulnerability findings with remediation recommendations
• Security configuration review summaries

4. Executive Presentation (Week 6)

A 5–10 slide summary for a non-technical, decision-making audience.

5. Process Documentation

• Technical notes, supporting materials, links, or configuration steps (as applicable).