During a recent Spiders in Cybersecurity meeting, University of Richmond students confronted a real-world scenario in which an internal AI assistant is rushed to launch, leading to a security breach.

The University’s first student-led club devoted to information security participated in a tabletop exercise called “Ghost in the Machine,” led by John Craft, UR’s director of information security. Students worked through how to detect, contain, and recover from a cyberattack — just as professionals do.

For sophomore Brandon Nunez, a business administration major who founded the club in November, exercises like this are exactly the point.

“Spiders in Cybersecurity was created to bridge the gap between academic theory and technical industry practice,” Nunez said. “We are very excited about the community we are building here at the University of Richmond.”

Over 60 students have joined the club since its November launch, drawn by the opportunity to gain practical experience in a fast-growing field. The club hosts guest speakers, including CEOs and chief information security officers from major cybersecurity firms and financial institutions. They share insights on emerging threats and career pathways.

The club has also partnered with Black Birch Group, a NYC-based IT consulting firm that is offering internships to club members this semester.

Hands-on learning is central to the experience. During the “Ghost in the Machine” exercise, Craft guided students through a national incident response framework that helps organizations detect, contain, eradicate, and recover from cybersecurity incidents. Craft said Information Systems takes part in simulated activities like this once a year with other departments because interdepartmental communication is an important part of breach response.

“His ‘Ghost in the Machine’ activity really hit home the idea that you aren't alone on the journey,” Nunez said. “A successful response requires defined roles and a clear playbook to ensure a breach never happens again.”

At other meetings, members build technical skills through platforms like TryHackMe, an interactive training program that provides hands-on practice to work toward IT certifications needed in the cloud security field.

This semester, the club is hosting prep sessions to help members earn the Microsoft Security, Compliance, and Identity Fundamentals certification.

Members also compete in Capture the Flag events, where teams simulate cyberattacks to identify and address vulnerabilities. “It’s an intense but rewarding experience that allows us to practice ethical hacking legally and safely,” Nunez said.

University Professor Nancy Bagranoff, who teaches Cybersecurity for Accounting and Business, serves as the club’s faculty adviser.

“In an age where we all have concerns about careers being impacted by AI, cybersecurity careers are booming, and there are many career paths available for anyone with an interest in the topic,” said Bagranoff.

Along with Bagranoff’s class, interested students can take the Information Security class taught within Computer Science. Bagranoff said students wishing to pursue cybersecurity careers can pursue a computer science degree or a business degree with concentrations in accounting, finance, consulting, or analytics. 

The club’s growth is a sign of both student interest and the field’s relevance. “Cybersecurity touches every industry,” Bagranoff said. “We want Richmond students to be ready.”