Students are permitted to enter businesses, governmental agencies, or other organizations for the purposes of obtaining practical and applied information security management experience. A paper or suitable project associated with a description and analysis of this experience is required.