undergradly.
Major · Homeland Security & Infrastructure

Defending the 16 sectors that the country runs on every day

Critical Infrastructure Protection (CIP 43.0303) trains you to assess threats, design physical and cyber safeguards, and write contingency plans for the systems CISA classifies as critical — energy, water, transportation, communications, financial services, healthcare, food, and chemical. About 309 students complete this CIP across 19 colleges, with bachelor’s grads earning a tracked five-year median of $69,949.

Schools offering
19
Annual completions
309
Typical degree level
Associate's + Bachelor's
Median earnings (5yr)
$69k

About this major

Critical Infrastructure Protection (CIP 43.0303) is the lane within homeland security focused on the systems that the country runs on. The CIP definition centers on the design, planning, and management of procedures for protecting national physical and cyber infrastructure from external threats, including terrorism. Coursework covers homeland-security and critical-infrastructure policy, information security, matrix vulnerability assessment, threat assessment, physical and personnel security, operational security, contingency and redundancy planning, emergency and disaster planning, security systems, and intelligence operations. Programs ground those topics in case analyses of specific industries — electric grids, water utilities, pipelines, ports, hospitals, financial-clearing networks, telecom backbones — that map to the 16 critical-infrastructure sectors defined by CISA.

The major fits students drawn to systems thinking and the question of how a single failure cascades across a region. Strong candidates can read a NERC-CIP standard, a TSA pipeline-security directive, or an EPA America’s Water Infrastructure Act provision without losing the thread, and they can translate a technical risk into a written brief a utility board or federal program office will act on. Day-to-day analyst work blends vulnerability assessments, control reviews, tabletop exercises, after-action documentation, and the procedural rigor that defines defensible regulatory compliance.

One grounded observation about scale and trajectory: 309 students complete this CIP across 19 institutions, with bachelor’s grads earning a tracked five-year median of $69,949 and associate’s grads $62,219. George Mason University (114 bachelor’s), Utica University (57), Waldorf University (41), and Johnson & Wales-Providence (20) anchor the named-producer list, with smaller cohorts at Idaho State, New Mexico State-Dona Ana, Columbia Southern, Indiana Wesleyan, Community College of Allegheny County, and George Washington. The packet’s SOC career list reads as a poor map for this niche — Managers all other ($136,550) is a mid-career catch-all, First-line supervisors of police and detectives ($105,980) describes uniformed LE supervision rather than infrastructure work, and Emergency management directors ($86,130) is itself a bachelor’s-plus-experience destination. Realistic first-job landings sit outside those codes: CISA analyst seats, FEMA infrastructure-protection officer roles, NERC-CIP compliance work at investor-owned electric utilities (Duke, PG&E, ConEd, Southern Company), pipeline-security analyst tracks at TC Energy, Enbridge, and Williams, port-security positions with USCG and port authorities, and sector-ISAC analyst seats at E-ISAC, WaterISAC, and FS-ISAC, plus federal-contractor work at MITRE, Booz Allen, Idaho National Laboratory, and Leidos.

Section 3 · Careers

Where this major leads

Occupations most often associated with this major, from the federal BLS+O*NET crosswalk. Job-growth projections and median wages are national.

Occupation Median wage Job growth Typical education
Managers, all other $137k +4.5% Bachelor's degree
First-line supervisors of police and detectives $106k +2.9% High school diploma or equivalent
Emergency management directors $86k +3.0% Bachelor's degree
Section 4 · Earnings

Earnings at a glance

Median graduate earnings from the federal College Scorecard, 5 and 10 years out.

Median 5-year earnings

$69k

Associate's vs Bachelor's — early-career earnings

Associate's

$62k

Bachelor's

$70k

Who this major is for

You may thrive here if the way one failure cascades across a region — a substation trip pulling down a city, a single pipeline leak shifting fuel prices for a quarter — is the kind of question you want to spend a degree on; if you can read a NERC-CIP standard, a TSA pipeline directive, or an EPA AWIA provision and write a clear policy memo on what it requires; if you meet the U.S. citizenship and clean-background requirements that Public Trust, Secret, or TS clearances demand, since federal and federal-contractor hiring runs on that gate; if the prospect of layering CISSP, CISM, GICSP, or NERC-CIP certifications onto the credential during your first years of work fits your career calculus; and if a CISA, FEMA, investor-owned-utility, sector-ISAC, or defense-contractor career arc — rather than corporate cyber engineering or police work — is what you want to aim at.

Think twice if your real interest is hands-on technical cybersecurity work — pen testing, red team, security engineering, SOC analyst — because Computer and Information Systems Security (CIP 11.1003) recruits more directly into those roles, and 43.0303 will leave you with policy-and-systems depth where employers want technical depth. Reconsider if you are drawn to the federal intelligence, counterterrorism, or border-enforcement framing; the broader Homeland Security CIP (43.0301, 1,355 completions) or Terrorism and Counterterrorism Operations (43.0304, 51) frame those careers more directly. The 309-completion scale across 19 institutions means program quality varies sharply: George Mason (114) and Utica (57) anchor the producer list, and outside the named programs the content often arrives as a concentration inside a broader homeland-security or emergency-management degree, so verify clearance-coaching, federal-internship pipelines, and certification-prep integration before enrolling. The packet’s SOC career list also overstates likely entry pay — Managers all other ($136,550) is a mid-career catch-all and First-line supervisors of police and detectives ($105,980) is off-track for this lane, so plan around the $69,949 bachelor’s median with cleared utility-compliance and federal-contractor work pulling earnings higher over time.

Section 6 · Where to study

Top colleges for Critical Infrastructure Protection

Ranked by annual completions at the associate's or bachelor's level — a proxy for program scale.

College Location Assoc. Bach. Total
George Mason University Fairfax, VA 0 114 114
Utica University Utica, NY 0 57 57
Waldorf University Forest City, IA 0 41 41
Johnson & Wales University-Providence Providence, RI 0 20 20
Idaho State University Pocatello, ID 8 8 16
New Mexico State University-Dona Ana Las Cruces, NM 16 0 16
Columbia Southern University Orange Beach, AL 12 0 12
Indiana Wesleyan University-National & Global Marion, IN 0 12 12
Community College of Allegheny County Pittsburgh, PA 7 0 7
George Washington University Washington, DC 0 4 4
Section 7 · Explore sideways

Related majors to explore

Criminal Justice/Law Enforcement Administration

20,738 completions/yr

Criminal Justice and Corrections, General

1,490 completions/yr

Homeland Security

1,355 completions/yr

Crisis/Emergency/Disaster Management

1,270 completions/yr

Cybersecurity Defense Strategy/Policy

333 completions/yr

Homeland Security, Other

53 completions/yr

Terrorism and Counterterrorism Operations

51 completions/yr

Protective Services Operations

10 completions/yr
Section 9 · Frequently asked

Common questions

What does Critical Infrastructure Protection actually cover?
The CIP definition centers on the design, planning, and management of systems and procedures that protect national physical and cyber infrastructure from external threats, including terrorism. Coursework spans homeland-security and critical-infrastructure policy, information security, matrix vulnerability assessment, threat assessment, physical security, personnel security, operational security, contingency and redundancy planning, emergency and disaster planning, security systems, and intelligence operations. Programs ground these topics in case analyses of specific industries — electric grids, water utilities, pipelines, ports, hospitals, financial-clearing networks. Expect a mix of policy reading, risk-modeling exercises, and tabletop scenarios run against the 16 CISA-defined critical-infrastructure sectors.
How does this differ from Homeland Security, Crisis Management, and Cybersecurity Policy?
Four siblings sit inside the 43.03xx family. Homeland Security (CIP 43.0301, 1,355 completions) is the broad parent — intelligence, terrorism, border, federal-agency framing. Crisis/Emergency/Disaster Management (43.0302, 1,270 completions) is built around the operational disaster cycle of preparedness, response, and recovery. Critical Infrastructure Protection (43.0303, 309 completions) narrows to the systems themselves — assessing what could break the grid, the pipeline, or the water plant, and designing the controls that prevent or contain it. Cybersecurity Defense Strategy/Policy (43.0404, 333 completions) is the cyber-policy lane, overlapping where CIP work touches NERC-CIP, FERC, or TSA cyber directives.
What jobs do graduates actually land?
The packet names three SOC codes: Managers, all other ($136,550, 4.5% growth, bachelor’s entry), First-line supervisors of police and detectives ($105,980, 2.9% growth, high-school entry), and Emergency management directors ($86,130, 3% growth, bachelor’s entry). The first is a mid-career catch-all reachable only after years of experience, and the second describes uniformed law-enforcement supervision rather than infrastructure-protection work. Realistic first-job destinations sit outside those codes: CISA infrastructure-security analyst, FEMA infrastructure-protection officer, NERC-CIP compliance analyst at investor-owned electric utilities (Duke, PG&E, ConEd, Southern Company), pipeline-security analyst at TC Energy, Enbridge, or Williams, port-security analyst with USCG or port authorities, sector-ISAC analyst at E-ISAC, WaterISAC, or FS-ISAC, and federal-contractor seats at MITRE, Booz Allen, Idaho National Laboratory, and Leidos. Entry pay tracks the $69,949 bachelor’s median, with cleared roles and utility-compliance positions trending higher.
Why are completions so low (309 across 19 colleges)?
The small number reflects administrative coding more than market demand. Most students who end up in infrastructure-protection roles get rolled into broader CIPs — Homeland Security (43.0301, 1,355 completions), Crisis/Emergency/Disaster Management (43.0302, 1,270), or Criminal Justice (43.0103, 20,738) — and only a short list of institutions code a distinct CIP-43.0303 program. George Mason (114 bachelor’s) alone produces about 37% of national output, with Utica University (57) and Waldorf University (41) accounting for most of the remainder. Outside those named producers, expect the infrastructure-protection content to be delivered as a concentration inside a broader homeland-security or emergency-management degree.
Associate’s or bachelor’s — which credential opens more doors?
The earnings split is meaningful: associate’s completers report $62,219 in tracked five-year earnings, bachelor’s completers $69,949. Federal hiring at CISA, FEMA, and DHS, plus NERC-CIP compliance roles at investor-owned utilities, are written to the bachelor’s level, and security-clearance pathway programs filter for four-year credentials. Associate-level work tends to cluster in physical-security, dispatch, and municipal-coordinator roles where prior fire, EMS, police, or military experience matters as much as the degree itself. Of the 309 completions in the packet, the bachelor’s share dominates at roughly 75% of degrees awarded.
What about clearance, certifications, and graduate school?
Federal and federal-contractor work in this lane is gated by Public Trust, Secret, or Top Secret clearance depending on the sector and role, with clearance eligibility — U.S. citizenship, clean financial and criminal history, manageable foreign-contact profile — as the binding constraint. Stackable industry certifications strengthen a resume: CISSP for broad security management, CISM for information-security governance, GICSP for industrial-control-systems cyber, and the NERC-CIP certification track for electric-utility compliance work. Many graduates use the bachelor’s as a ramp to a master’s in critical-infrastructure protection or homeland security at George Mason, Norwich, Penn State World Campus, or Johns Hopkins AAP, or to an MPP. Grad school typically lands on a five-to-seven-year horizon for those targeting senior policy or directorate roles.