CYSE 368

Cybersecurity Internship

This course allows students to volunteer to work in an agency related to cybersecurity. Students must volunteer for 50 hours per course credit and complete course assignments.

Course Material

The following are examples of my work:

  • Reflection Journals
    • 1, 2, 3
    • Personal

Applying Course Knowledge

  • What have you learned in coursework which relates to the world of work?
  • How are the concepts you have read about in course texts applied in practice?
  • What theories, ideas, or concepts might be applied in your career area?

Skill Development

  • What new skills did you learn during the internship?

    • Risk Management Fundamentals
      I gained hands-on exposure to identifying, assessing, and mitigating organizational risks. This included understanding how to analyze potential threats, prioritize them based on severity, and propose strategic solutions.

    • Client Communication and Empathy
      Working directly with a client taught me how to actively listen, ask the right questions, and build rapport. I learned the importance of empathizing with the client’s perspective to better understand their needs and design more effective solutions.

    • Design Thinking
      Influenced by Dr. Baaki’s approach, I practiced brainstorming creative solutions and thinking outside the box. I learned to approach problems with curiosity and an open mind, focusing on user-centered design principles.

    • Team Collaboration and Adaptability
      Navigating the unexpected loss of our first client helped me develop adaptability and resilience. Collaborating closely with a committed team also sharpened my communication, coordination, and conflict-resolution skills.

    • Project Planning and Flexibility
      I learned how to pivot quickly when plans changed, maintain momentum, and adjust project timelines and goals accordingly—skills that are crucial in dynamic work environments.

    • Personal Development
  • How did you benefit personally from the internship experience?
    • Personally, the internship experience helped me grow in several meaningful ways. First, it boosted my confidence in working with real-world clients and navigating uncertain situations. When our first client didn’t show up, I learned to remain calm and adaptable—valuable traits not just in professional settings, but in everyday life. The experience also helped me recognize the importance of empathy, communication, and collaboration. I became more comfortable voicing ideas in group settings and learned how to build stronger working relationships by listening actively and respecting different perspectives. Additionally, the exposure to risk management opened my eyes to a potential career path I had never considered before. It gave me a sense of direction and encouraged me to explore opportunities beyond my initial plans. Overall, this internship pushed me out of my comfort zone in the best way possible, helping me grow both professionally and personally.

 

Akela Villegas

01/30/2025

Reflection 1

My Internship Experience: Design Thinking

During my internship so far, we met several integral people who will help us along the way. Greg Tomchick was the first guest instructor. He introduced himself briefly and quickly went over his 10 cybersecurity list of questions, which will be used when consulting with my small business. We also interacted with Dr. John Baaki. Dr.Baaki walked us through Design Thinking, and on the third day, we all presented our cybersecurity plan for our specific topic. The first day he went over the design and possibilities framework. The framework consisted of: Empathize, Define, Ideate, Prototype, and Test (Space). On the second day, we went over design critique rules. Those rules were:

  1. Yes add.
  2. Always make your fellow designers look good
  3. Listen to your fellow designer
  4. Show what your design does
  5. Share the context

At the end of his presentation on day two, we broke out into three groups and were given three different scenarios. My group was tasked with designing and implementing a cybersecurity for William Davis who is contracted by the Navy and Coast Guard to develop and design e-learning courses. The issues were related to the security of Davis’s test servers and our job as a group was to create a cybersecurity plan. Below is an image of the architecture our group created and then later presented on day 3.

Akela Villegas

3/1/2025

Reflection 2

As we are approaching the hallway mark, we are getting closer to meeting with our small business. After the design thinking workshops, we had Kristin Stephens come speak to us. She went over professional communication must-haves like proper ways to carry oneself, especially in an interview, and how to properly write an email. She left us with these final thoughts:

  • Be Professional: Your communication reflects your competence: speak and write clearly, respectfully, and confidently.
  • Be Proactive: Take initiative, ask thoughtful questions, and follow up promptly.
  • Be Engaged: Listen actively, take notes, and show enthusiasm for learning.
  • Be Adaptable: Every professional has a different communication style – observe and adjust accordingly.
  • Be Memorable (for the Right Reasons!): A great first impression can open doors for future opportunities. Every interaction is a networking moment!

As we got closer to meeting with our small business, we had a second meeting with Greg Tomchick. During this time, we were assigned to go out into the community and offer the top 10 checklist and get at least two businesses to agree to a risk assessment. This forced me to step outside my comfort zone and it turned out to be easier than I anticipated. The last exercise before the meet was with David Price, an IT Cyber Specialist. He introduced us to Cross-Sector Cybersecurity Performance Goals (CPGs) and gave us amazing advice and resources. The following Thursday was the time for us to meet our small business with the questions we had prepared. Sadly, our small business didn’t show.

Akela Villegas

3/30/2025

Reflection 3

Over the last 50 hours of my internship, I have experienced a range of emotions, from frustration to anticipation, as I navigated real-world cybersecurity challenges. One of the biggest challenges I encountered was the absence of our small business, Johnathan Cares. Their failure to show up for the scheduled meeting disrupted our workflow and required our team to adjust our approach. We had to learn to remain professional and flexible, develop contingency plans and communicate effectively to keep the project moving forward. This experience is a prime example of the importance of adaptability and perseverance in the cybersecurity field.

On the other hand, I felt eager anticipation when preparing for our engagement with Omnicruit. Our team worked diligently to research and develop tailored cybersecurity solutions for them, focusing on risk assessments and best practices. The process allowed me to deepen my understanding of cybersecurity frameworks and apply theoretical knowledge to practical scenarios. It was rewarding to see our work take shape. Additionally, I gained hands-on experience completing an executive summary for the two businesses for which we performed risk assessments.

Overall, these last 50 hours have provided valuable insights into the realities of cybersecurity risk management. While there were moments of frustration, they were outweighed by the satisfaction of problem-solving and making a tangible impact on our small business. I look forward to the next phase which is presenting the report and continuing to refine my skills in cybersecurity risk assessment and mitigation.

Akela Villegas


May 4, 2025


Internship Reflection Paper


Throughout my internship experience, I encountered a variety of learning opportunities, challenges, and personal growth moments that have positively shaped both my academic and professional outlook. As I reflect on the overall journey, several things went right while others posed some difficulties. Nevertheless, this experience has helped me grow and clarified my future direction in ways I hadn’t expected.


Reflection: What Went Right and What Went Wrong
One of the most rewarding aspects of the internship was the team collaboration. I was fortunate to work with a group of individuals who were just as motivated and committed to the project as I was. Unlike other group experiences I’ve had in the past, I didn’t have to pull someone else’s weight or make up for a lack of effort. Everyone was fully engaged, and that synergy made the work more meaningful and enjoyable. Another highlight was the opportunity to receive a new client mid-project. This not only tested our adaptability but also gave us a fresh perspective and a renewed sense of purpose. However, not everything went according to plan. Our first client didn’t show up, which left us feeling anxious and uncertain about our next steps. That moment introduced a level of unpredictability that was difficult to navigate. We were left wondering how to pivot and whether the project would be successful at all. Despite this early challenge, we quickly adapted and found a new client, which ultimately turned the situation around. In hindsight, even though this initial obstacle was stressful, I wouldn’t have done anything differently. That experience helped me build resilience and flexibility, qualities that are essential in both academic and professional environments.


Internship Objectives and Outcomes
One of the goals outlined in our Memorandum of Agreement was to gain exposure to risk management processes. I can confidently say this goal was fulfilled. Our client engagement required us to assess various types of organizational risks and think strategically about mitigation approaches. I developed a deeper understanding of how to identify, evaluate, and prioritize risks—skills that will benefit me in a wide range of professional settings.
On the other hand, one area where the internship fell short was in offering hands-on technical work. While the strategic and analytical components were well covered, I had hoped for more opportunities to engage with technical tools or systems. Having a balance between technical and conceptual learning would have made the experience even more comprehensive. Nevertheless, the exposure I did get to risk management has inspired me to further explore this field in future academic and professional endeavors.


Motivating and Challenging Aspects
One of the most motivating aspects of the internship was the opportunity to think creatively and apply concepts from Dr. Baaki’s design thinking approach. This method encouraged us to approach problems from multiple angles and, most importantly, to empathize with our client. The emphasis on understanding the client’s needs and values transformed the way I viewed problem-solving. It was exciting to brainstorm ideas for a prototype that was not only functional but also tailored specifically to the client. The most challenging aspect was learning to navigate uncertainty—especially after our first client dropped out. That moment forced us to rely on our ability to adapt and stay solution-focused, even when the path forward was unclear. It tested our patience and communication as a team, but it ultimately strengthened our problem-solving skills.


Recommendations for Future Interns
For future interns stepping into this experience, my biggest piece of advice is to stay open-minded. Things won’t always go according to plan, and that’s okay. It’s essential not to get discouraged if circumstances cause your project to pivot or change direction. Embrace the unexpected and use it as a learning opportunity. Most importantly, have fun—especially when working with your team and client. The interpersonal connections you form will be just as valuable as the work you produce. Also, take the time to build empathy; it’s a vital skill for consulting work. Familiarity with risk management concepts is helpful, though not required, but coming in with a basic understanding will make the learning curve easier.


Conclusion: Main Takeaways
This internship has opened new doors for me, particularly in the field of risk management consulting. Before this experience, I had never considered consulting in this area as a potential career path. Now, not only am I comfortable with the risk management process, but I am also excited about the prospect of incorporating it into my future professional life. I’ve learned to become comfortable with being uncomfortable—an invaluable lesson that will serve me well going forward.
At Old Dominion University, this experience will influence the remainder of my college journey by encouraging me to explore coursework in risk management. I now see value in diversifying my studies to include business and consulting elements that complement my primary academic focus. Professionally, this internship has shifted my perspective on what’s possible. I’ve gained confidence in my ability to consult, problem-solve, and think strategically. Risk management consulting was never on my radar before, but now that I’ve had exposure to it, I’m open to delving deeper into this field and potentially offering consulting services in the future.


Course Recommendations
If there’s one change I would recommend for the course, it would be to always have an extra business on standby in case the original client becomes unavailable. If the backup business isn’t needed, they can simply be the first to participate in the next semester. This small adjustment would add a layer of reliability to the course and ease the pressure on student teams.
Overall, this internship has been a transformative experience that has not only enhanced my academic development but also opened new professional possibilities. I am grateful for the lessons learned, the relationships formed, and the confidence gained throughout this journey.