This study involved an evaluation of the subjective perspectives held by a panel of 12 informaton security subject matter experts to determine the knowledge, skills, and abilities of information security undergraduates in meeting the needs of the information security business community. Knowledge, skills, and abilities deemed important in information security by industry experts were used determine existing gaps in current curriculum as defined by the National Security Agency (NSA) and The Department of Homeland Security (DHS) Core Knowledge Units (CKO) used to guide undergraduate information security program curriculum for designated Centers of Academic Excellence (CAE). This qualitative Delphi study was focused on gathering and analyzing data from information security subject matter experts. Data were collected using three rounds of web- based questionnaires. Data collection included using semi-structured questions, and data analysis involved descriptive interpretive data analysis using NVIVO software. The expert panel's responses were evaluated and reevaluated over the course of three rounds of surveys. This study identified essential topical areas of knowledge involving technical and non-technical information security skills and abilities and identified gaps that included: (a) critical thinking, (b) leadership, (c) problem solving, (d) oral and written communication skills, and (e) program and project management that future information security practitioners should attain. In addition, findings indicated that the current curriculum knowledge units as developed by NSA and DHS do not align with information security industry leaders perceptions of what should be taught in undergraduate information security programs. Findings also reflected that of the 6 CAEs curriculum reviewed for this study, all differed in number and type courses taught at the IS undergraduate level. Recommendations for practice included evaluatating current IS curriculum and teaching techniques to determine what changes are necessary to meet industry requirements. It is also recommended that industry take a pro-active approach in working with CAEs to promote IS skills and abilities they require and assist in determining and recommending course objectives designed to amerilate the shortage of qualified IS undergraduates. Recommendations for future research includes expanding the number of participants and the number of CAEs to other regions of the United States in order to develop a broader set of participants and expand upon the findings in this study. Future research should also focus on developing a model for collaboration between regional CAEs and IS companies to identify, monitor, reflect, and anticipate changes in knowledge and skill requirements, and should focus on delivery methods that that ensure entry-level information security practitioners have the knowledge, skills, and abilities deemed important. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://www.proquest.com.bibliotheek.ehb.be/en-US/products/dissertations/individuals.shtml.]