Employers should also clearly define the process for the intern and explain what is required of them. If possible, Smith recommends mentoring an intern, not simply ticking off a bureaucratic checklist of their tasks: “I do fervently believe you essentially need a sponsor, someone who’s going to take the intern under his or her wing and nurture that relationship, nurture that person.”

Chiasson warns employers to manage their own expectations as carefully as they manage the interns themselves. Rather than expecting a unicorn to show up — an intern with one or more degrees, several technical certifications and other prior workplace experience — she urges companies to “take them on and then train them based on what you require.”

Focusing solely on technical skills can be a mistake

Chiasson also cautions employers against focusing solely on teaching technical skills. She says cyber internships are an opportunity for many students and new grads to learn soft skills that are crucial in real-world infosec, such as communication, teamwork, problem-solving, and interacting with customers.