2014 Best Schools for Cybersecurity©
Sponsored by HP Enterprise Security
Independently conducted by Ponemon Institute LLC
Publication Date: February 2014

Ponemon Institute Research Report2014 Best Schools for Cybersecurity
Study of Educational Institutions in the United States
February 2014
Part 1. Introduction
The demand for well-educated cyber security professionals is outpacing the supply in both the
public and private sectors. According to former Defense Secretary Robert Gates, the Pentagon is“desperately short of people who have capabilities (defensive and offensive cybersecurity war
1skills) in all the services and we have to address it.”Ponemon Institute’s research has also
consistently revealed that one of the major
barriers to achieving a strong security
posture is the dearth of trained and skilled
security professionals. To bring attention tothis rising crisis in recruiting and retaining
highly skilled professionals in IT security, HP
commissioned Ponemon Institute to conduct
two studies on the issues of cybersecurity
education and IT security hiring practices in
2
organizations.

Top rated schools at a glance:
University of Texas, San Antonio
Norwich University
Mississippi State University
Syracuse University
Carnegie Mellon University
Purdue University
University of Southern California
University of Pittsburgh
George Mason University
West Chester University of Pennsylvania
U.S. Military Academy, West Point
University of Washington

The objective of the 2014 Best Schools for
Cybersecurity study is to determine thoseinstitutions that are achieving a high level of
excellence and the characteristics that set
them apart. We asked learned individuals to identify and rate U.S. colleges and universities they
believe are most committed to advancing students’ learning and domain expertise in theemerging fields of cybersecurity and information assurances. Participants were told to use fivenormatively important criteria, which include the following:
!
!
!
!
!

Academic excellence
Practical relevanceExperience and expertise of program faculty
Experience and background of students and alumni
Professional reputation in the cyber security community

A large, national sample composed of experienced practitioners with bona fide credentials in IT
and information security provided their candid opinions and impressions of more than 400
3
institutions of higher learning (a.k.a. master list).
A total of 5,003 individuated ratings of institutions ranging from two-year community colleges todoctoral granting programs were captured in this year’s study. Practitioners were asked to rate up
to five institutions that provide an academic program in cybersecurity. Individual responses weregathered over a 12-week period concluding in November 2013 and resulted in a final sample of1

Cyber In-Security Strengthening the Federal Cybersecurity Workforce, conducted by Partnership for PublicService and Booz Allen Hamilton, July 2009.
2
Understaffed and at Risk: Today’s IT Security Function, sponsored by HP Enterprise Security andconducted by Ponemon Institute, February 2014.
3
The majority of educational institutions rated and ranked in this study participate in a program sponsored by
the NSA and Department of Homeland Security (DHS) called the National Centers of Academic Excellencein IA Education (CAE). The purposes of this program is to promote higher education and research ininformation assurances, thus increasing the field of IA practitioners dedicated to protecting the nation’s
critical information infrastructure.

Ponemon Institute©: Research Report

Page 1

1,958 respondents who, on average, provided 2.6 discernible school ratings. These ratings wereused to construct a meta ranking for schools meeting a minimum threshold. The components of4
the meta ranking was vetted with a panel of experts.
Characteristics of the top schools
Based on our qualitative review of the best programs in cybersecurity, we have determined thefollowing 10 characteristics that appear to set them apart:!

Interdisciplinary program that cuts across different, but related fields – especially computerscience, engineering and management.

!

Designated by the NSA and DHS as a center of academic excellence in information
assurance education.

!

Curriculum addresses both technical and theoretical issues in cybersecurity.

!

Both undergraduate and graduate degree programs are offered.

!

A diverse student body, offering educational opportunities to women and members of themilitary.

!

Faculty composed of leading practitioners and researchers in the field of cybersecurity andinformation assurance.

!

Hands-on learning environment where students and faculty work together on projects that
address real life cybersecurity threats.

!

Emphasis on career and professional advancement.

!

Courses on management, information security policy and other related topics essential to theeffective governance of secure information systems.

!

Graduates of programs are placed in private and public sector positions.

Caveats
We believe this research provides an unambiguous indicator of how practitioners in the
cybersecurity community perceive specific schools and programs. While perception is never aperfect substitute for reality, in our experience the consistent view of learned practitioners is an
important indicator of educational quality and student performance.
We offer a cautionary note about these results. Based on previous opinion-based studies, wehave found that perceptions about specific organizations can be influenced by a number ofextraneous factors. In short, individual ratings may not reflect the exceptional features andpractices of the institution included in our master list of schools.
Further, what a school does in the area of cybersecurity or information assurance, especiallyextracurricular activities, may not be known or fully visible to the rater. In addition practitioner
ratings may be influenced by positive or negative experience with a particular college oruniversity. Finally, practitioner perceptions may be influenced by external communications andmarketing efforts including media coverage, unrelated to the quality and performance of thespecific program.

4

An elite panel of senior-level practitioners, mostly involving chief information security officers (CISOs),
were involved in setting the criteria and methods used for meta ranking.

Ponemon Institute©: Research Report

Page 2

Part 2. Methods
Using a survey instrument, respondents were ask to name up to five U.S. educational institutions
they believe are most committed to advancing students’ learning and domain expertise in theemerging fields of cybersecurity and information assurances. To facilitate the selection, the nameof 403 schools were provided in a pull down list with the option of sorting by school name (alpha)or U.S. state. The survey instrument also allowed each participant to freely name an institution
5
not contained in the master list.
Table 1 summarizes the survey response. A total of 49,950 IT or IT security practitioners from a
6wide array of organizations were invited through multiple channels to participate in this study.
The survey was fielded over a 12-week period concluding in November 2014. This effort resulted
in a final sample of 1,958 reliable surveys,, which produced 5,003 separate school ratings – or an
7
average of 2.6 rating per respondent.
Table 1. Sample response

Freq

Pct%

Total sampling frame

49,950100.0%

Total survey returns

2,219

4.4%

Rejected surveys

261

0.5%

Final sample

1,958

3.9%

Number of school ratings

5,003

Ratings per respondent

2.6

Figure 1 summarizes the approximate position level of respondents in our survey research. As
can be seen, 65 percent of respondents self report being at or above the supervisory level. The
mean years of relevant work experience is 9.85 years (median at 10.0 years). Approximately 76
percent of respondents are male and 24 percent female.
Figure 1. Respondents’ position level
Sample size = 1,958

2%

8%

19%

33%

Executive/VP
Director
ManagerSupervisor
Technician/Staff
Consultant

23%
15%

5

Third-seven respondents added a school name in the free-form survey field, but none of these entries met
our minimum threshold requirement for inclusion in the meta ranking.
6
The sampling frame was created through random selection of Ponemon Institute’s U.S. sampling frame.
7
A subset of 183 educational institutions met the criteria for inclusion in the meta ranking.

Ponemon Institute©: Research Report

Page 3

Figure 2 reports the primary industry classification of respondents’ companies. The largest
sectors in our sample include financial services, public sector organizations, health andpharmaceutical companies (including biotech) and retailers (including e-commerce).
Figure 2. Industry sector of respondents’ companies
Sample size = 1,958

2%

1%
20%

2%
3%
4%

8%
14%
9%

12%

9%
10%

Financial services
Public sector
Health & pharma
RetailServicesTechnology & software
Industrial
Consumer products
Energy & utilities
Transportation
Communications
Hospitality
Entertainment & media
Defense & aerospace
Education & research
Agra & food services

Figure 3 reports the headcount range of respondents’ companies. In this study, headcount serves
as a surrogate for organizational size. The largest segment pertains to organizations with aheadcount of 1,001 to 5,000. The smallest segment pertains to organizations with more than
75,000 employees.
Figure 3. Headcount (size) of respondents’ companies
Sample size = 1,958

7%
10%

27%
Less than 1,000
1,001 to 5,000
5,001 to 25,000

20%

25,001 to 75,000
More than 75,000

36%

Ponemon Institute©: Research Report

Page 4

Survey questions
As mentioned, the basic survey design allowed respondents to select up to five institutions forpurposes of program rating. For each school selected, respondents were required to complete
five questions using a 10-point scale. Following are the exact questions included in the survey:
Q1. For [name of school], please rate this program based on your perception of academic
excellence and rigor.
Low

1

2

3

4

5

6

7

8

9

10

High

Q2. For [name of school], please rate this program based on your perception of practicalrelevance.
Low

1

2

3

4

5

6

7

8

9

10

High

Q3. For [name of school], please rate this program based on your perception of the experienceand expertise of program faculty.
Low

1

2

3

4

5

6

7

8

9

10

High

Q4. For [name of school], please rate this program based on your perception of the relevant
experience and background of students and graduates.
Low

1

2

3

4

5

6

7

8

9

10

High

Q5. For [name of school], please rate this program based on your perception of the overall
professional reputation in the cybersecurity community.
Low

1

2

3

4

5

6

7

8

9

10

High

Each question is equally weighted. Hence, the average of all five questions is used to compile
R3 as defined below.
Ranking procedures
We carefully executed the following decision rules to compile a meta ranking of cybersecurity andinformation assurance programs in the U.S.
First, only educational Institutions with five or more separate ratings were included in the initialranking procedures mentioned below. A combined rating system composed of three ranking
procedures was used to determine the meta rank of a given institution. Following are the three8
different rating procedures and associated weighting:
R1: The rank order of a given institution based on the total number of ratings. R1 is assigned 10
percent weighting.
R2: The rank order of a given institution based on the percentage that this school was identified
first. R2 is assigned 10 percent weighting
R3: The rank order of the average overall rating from five survey questions. R3 is assigned 80
percent weighting.
The Meta Rank is simply a weighted average defined as: [(R1*10%)+(R2*10%)+(R3*80%)]/3 foreach educational institution that met the minimum threshold.
8

The weightings for R1, R2 and R3 were determined by unanimous agreement of the expert panel.

Ponemon Institute©: Research Report

Page 5

Part 3. Results
Figure 4 shows the top 12 educational programs in ascending order based on the meta ranking
procedure, which is a combination of three rank scores as defined above. The lowest meta rank
is 2 and the highest meta rank for all rated institutions is 175. The number next to each bar
reflects the meta rank for each institution. Like a golf score, a low meta rank is the objective. As
can be seen, the University of Texas at San Antonio achieves the top position in this year’s study,
followed by Norwich University and Mississippi State University. Syracuse University andCarnegie Mellon University are tied in forth place.
Figure 4: The top rated cybersecurity programs
Compiled from 183 rated institutions

University of Texas, San Antonio

2

Norwich University

3

Mississippi State University

5

Carnegie Mellon University

7

Syracuse University

7

Purdue University

8

University of Southern California

11

George Mason University

12

University of Pittsburgh

12West Chester University of Pennsylvania

14
17

U.S. Military Academy, West Point

20

University of Washington
0

5

10

15

20

25

Weighted Meta Rank

Table 2 summarizes the data used to construct the R1, R2, R3 and meta rank for the top 12 rated
schools. As can be seen, USC received the most individuated ratings. UT San Antonio received
the highest number of first choice ratings as well as the highest combined average survey score.

Table 2. Data used for meta ranking for top rated
educational institutions
University of Texas, San Antonio
Norwich University
Mississippi State University
Syracuse University
Carnegie Mellon University
Purdue University
University of Southern California
University of Pittsburgh
George Mason University
West Chester University of Pennsylvania
U.S. Military Academy, West Point
University of Washington

Ponemon Institute©: Research Report

Number of
ratings
98
69
78
78
80
63
116
71
91
57
21
81

Number offirst choiceratings
90
63
67
70
69
44
57
66
75
45
13
40

Averagesurvey score
9.40
9.20
9.00
8.80
8.80
9.00
8.80
8.60
8.60
8.60
9.00
8.40

Page 6

Table 3 summarizes key statistics 183 schools rated by respondents. The mean values areabove the medians for three characteristics, suggesting these distributions are slightly skewed.
Table 3. Key statistics for 183 rated educational
institutions
Quartile 1
Quartile 2
Quartile 3
Quartile 4
Average
MedianMaximum
Minimum

Number of
ratings
57.1
30.2
15.5
6.1
27.3
23.0
116.0
5.0

% of first
choice ratings
75%
39%
17%
01%
33%
29%
100%
0%

Averagesurvey score
8.3
7.0
6.0
4.7
6.5
6.4
9.4
3.2

Figure 4 shows the average score for five perception-based questions completed by respondents
using a 10-point scale with a scale median of 5.50 (dotted green line). The average scores for all
183 rated institutions range from a low of 5.54 for the question relating to reputation and a high of
7.22 for academic rigor.
Figure 4. Average scores for five survey questions
Compiled from 183 rated institutions

8.00

7.22

7.00

6.15

7.03

6.51

5.54

6.00
5.00
4.00
3.00
2.00
1.00
Academic rigor

Practical
relevance

Average score per question

Ponemon Institute©: Research Report

Program facultyStudent quality

Overall average

Reputation

Scale medianPage 7

The approximate departmental location of 183 cybersecurity programs is summarized in Figure 5.
As shown, the cybersecurity program is most likely to be situated in engineering or computerscience. Interdisciplinary studies represent programs that are co-located or shared acrossacademic departments – for example, engineering and computer science or business and libraryscience.
Figure 5. Academic department where cybersecurity is most likely situatedCompiled from 183 rated institutions

4%

4%

3%
25%
Engineering
Computer science

19%Interdisciplinary studies
Business or management
Library science
Military science
Legal studies
24%
21%

Figure 6 summarizes the average meta rank of cybersecurity program based on departmental
location. Clearly, program location makes a difference. Cybersecurity programs that areinterdisciplinary achieve the most positive rating (lowest meta rank), followed by computerscience and engineering.
Figure 6. Average meta rank by academic department
Complied from 183 rated institutions

68

Interdisciplinary studies

75

Computer science
Engineering80

Library science96

Legal studies

119

Military science

126

Business or management

128
0

20

40

60

80

100

120

140

Average meta rank by academic department

Ponemon Institute©: Research Report

Page 8Figure 7 summarizes the highest degree offered by the 183 cybersecurity programs rated in thisresearch. The largest segment pertains to masters followed by a doctoral degree. A fairly large
segment pertains to non-degree programs. Many of these non-degree programs offer course
work or a certificate of completion.
Figure 7. Highest degree offered by the cybersecurity program
Compiled from 183 rated institutions

10%

13%
38%

Masters
Doctorate
Non-degree
Associates

15%

Bachelors

24%

Figure 8 reports the average meta rank of cybersecurity program based on the highest degree
offered. As can be seen, doctoral granting institutions achieve the most positive rating (lowest
meta rank), followed by bachelors and masters level programs.
Figure 8. Average meta rank by highest degree offered
Complied from 183 rated institutions

151

160
140

128

120
100
70

80
60

78

55

40
20
0
Doctorate

Bachelors

Masters

Associates

Non-degree

Average meta rank by highest degree offered

Ponemon Institute©: Research Report

Page 9

Part 4. Summarized descriptions of top rated cybersecurity programs
Following are the program descriptions for the top rated programs in cybersecurity. Please notethat this information was obtained directly from the various program websites and not validated by
the researcher.
No.1 University of Texas, San Antonio: The Department of Information Systems andTechnology Management offers more than 14 undergraduate and graduate courses in the areasof digital forensics, secure network design, intrusion detection and incident response. Students
learn how to protect data, gather and examine digital evidence, perform security risk
assessments and study computer and network forensics procedures. Students selecting thisdegree field will develop special expertise in the information security arena. They will learn how toprotect and defend information systems by ensuring their integrity, authentication andconfidentiality.
No.2 Norwich University: Norwich’s Computer Science and Information Assurance (CSIA)
program offers a concentration in Advanced Information Assurance and Digital Forensics. The
National Security Agency has designated Norwich University one of the Centers of Academic
Excellence in Information Assurance Education, an honor of great value in the security
profession.
No.3 Mississippi State University: The Mississippi State University Center for Computer
Security Research (CCSR) is dedicated to the scientific exploration of computer vulnerabilities
with the objective of improving prevention and detection techniques through our core researchareas. We promote computer security education and research.
No.4 (tied) Syracuse University: Information Security Management (ISM) can be defined as thecomprehensive skills that manage a high degree of complex technical security, increased
operational costs, diverse policies, and user behavior. The Certificate of Advanced Study (CAS)in Information Security Management (ISM) offers a comprehensive set of skills. The 15-credit
program provides students with the flexibility to take coursework that does not overlap with theircurrent expertise, while giving them tools in information security technology, policy, risk
management, and evaluation, depending on their background. This certificate is offered in both
campus and distance learning formats, and can be completed as a full-time or part-time student.
The certificate is available to those with or without previous experience in the information
technology field. Applicants may be currently working in a related field, or they may be interested
in making a career change into the information security field. The certificate also provides anopportunity for professional development in information security and serves as a foundation forcareer advancement.
No.4 (tied) Carnegie Mellon University: Designated by the National Security Agency (NSA) asa Center of Academic Excellence in Information Assurance (IA) Education, Cylab is directed by
Dena Haritos Tsamitis, director of the College of Engineering's Information Networking
Institute (INI). Through the INI, as well as the Heinz College, a number of professional graduate
degree programs are offered in information networking, information security and information
technology, to create a pool of IA professionals who can address the wide range of technology,
policy, and management issues in government, industry, and academia. Additionally, several
colleges and departments at Carnegie Mellon offer Ph.D. programs. These include the School ofComputer Science and the Departments of Electrical and Computer Engineering and Engineeringand Public Policy, both from the College of Engineering. The Master of Science in Information
Security Technology and Management (MSISTM) provides an in-depth education in topics suchas network and distributed system security, secure software engineering, operating systemsecurity, and applied cryptography. This focus is complemented with courses in management,
information security policy, and other topics essential to the effective management of secure

Ponemon Institute©: Research Report

Page 10information systems.
No.5 Purdue University: Currently offers an interdisciplinary Master’s major in InfoSec. The
program is multidisciplinary and requires (and recommends) courses in Computer Sciences aswell as other fields. The new Ph. D. Program is an extension of the existing Interdisciplinary
Masters’ Program in Information Security. It was both the needs and interests of the graduates
and the United States Government’s (USG) new incentives for preparing Ph.D.-level researchers
in the field that have made this development timely and necessary. The new Interdisciplinary
major prepares students who are interested in enriching their technical and scientific backgroundin information security and combining it with preparation in a number of other disciplines. The
Interdisciplinary Ph.D. Program is currently sponsored by the Departments of Communication andPhilosophy, the College of Technology, and the Program in Linguistics, each of which has
established a major in Information Security at the Masters’ level and has now extended it to the
Ph.D. level. Other graduate programs are considering sponsorship at this time. Theinterdisciplinary Information Security Masters and Ph.D. majors are the first programs in this fieldin the State of Indiana and the region, and are the first truly multidisciplinary residential programsin the nation.
No.6 University of Southern California: A Comprehensive Approach to Improving Computer
Security USC's Center for Computer Systems Security (CCSS) conducts research and provides
education in the crucial disciplines of computer, network and application security. Courses areoffered at both undergraduate and graduate levels, and are taught through the USC Viterbi
School of Engineering Computer Science and USC Ming Hsieh Department of ElectricalEngineering and the Information Technology Program. Faculty include distinguishedacademicians, USC Information Sciences Institute research faculty, and professional cybersecurity experts. The CCSS also works closely with DETER, a general-purpose, experimental
testbed that supports research and development of next-generation cyber security technologies.
DETER enables users to conduct repeatable, medium-scale Internet emulation experiments inmalicious code and a wide range of other network security issues. Also located at the Information
Sciences Institute, DETER is accessible to CCSS researchers, students and the computer
security community.
No.7 (tied) University of Pittsburgh: The Center for Secure Information Systems (CSIS)
provides a dedicated environment to encourage the development of expertise in both thetheoretical and applied aspects of information systems security. CSIS emphasis on information
security makes it unique among the institutions of higher learning in this country. Established in
1990, CSIS has the distinction of being the first academic center in security at a U.S. university.
It is one of the National Security Agency’s original Centers of Academic Excellence in Information
Assurance Education, a designation it continues to hold. In 2008, NSA established a new
designation – The National Centers of Academic Excellence in Information Assurance Research(CAE-Research). CSIS has earned this new designation, and is designated for both CAEIAE and
CAE-Research through 2013. CSIS differentiates itself from other centers by working in a broad
spectrum of security topics and issues. The Center resides within The Volgenau School ofInformation Technology and Engineering (IT&E) at George Mason University (Mason).
No.7 (tied) George Mason University: The Center for Secure Information Systems (CSIS) was
created to provide a dedicated environment to encourage the development of expertise in boththe theoretical and applied aspects of information systems security. CSIS conducts a broad
spectrum research and development program on various aspects of information systems security;
services as a knowledge resource in the area of information system security; develops courses
dealing with information systems security; acts as a focus for doctoral research in the area of
information systems security and provides technical support to industry and government in theinformation systems security area.

Ponemon Institute©: Research Report

Page 11

No.8 West Chester University of Pennsylvania: The Computer Science Information Security
Center (ISC) has introduced Information Security content such as computer and network security
in the undergraduate and graduate curricula. The NSA has certified the curricula set forth by the
ISC to meet the National Training Standards for Information Systems Security Professionals(4011) and Systems Administrators (4013). Additionally, the Computer Science Department offers
specific courses that address technical and theoretical issues in Computer Security. Bothundergraduate and graduate students can obtain a Computer Security Certificate by taking
course sequences, which emphasize principles of computer security.
No.9 United States Military Academy, West Point: The Academy is dedicated to researching
and teaching information assurance, computer, and network security. The center for cybersecurity research, innovation and education, is responsible for teaching and developing a varietyof courses. Included in these courses are Information Assurance, Information Warfare andForensics.
No.10 University of Washington: The Center for Information Assurance and Cybersecurity(CIAC) prepares students for a career protecting computer systems from accidents, hackers,
viruses and other security threats. It is a unique collaboration between information science,computer science, economics, electrical engineering and law. Students have the opportunity towork with nationally known researchers in the field and conduct their own research projects.
Research is conducted across multiple departments at the University of Washington and withpartnering institutions to create an interdisciplinary knowledge-network.

Ponemon Institute©: Research Report

Page 12

Appendix 1. Cybersecurity programs in the top quartile
The following list of colleges and universities represent the top 25 percent of all 183 rated byrespondents in this research.

Educational Institutions

State

Weighted Meta
Rank

University of Texas, San Antonio

TX

2

Norwich University

VT

3

Mississippi State University

MS

5

Syracuse University

NY

7

Carnegie Mellon University

PA

7

Purdue University

IN

8

University of Southern California

CA

11

University of Pittsburgh

PA

12George Mason University

VA

12West Chester University of Pennsylvania

PA

14

U.S. Military Academy, West Point

NY

17

University of Washington

WA

20

The George Washington University

DC

21

United States Air Force Academy

CO

22

Air Force Institute of Technology

OH

22

Georgia Institute of Technology

GA

24

United States Naval Academy

MD

24

University of Maryland, College Park

MD

25

Dartmouth College

NH

26

Virginia Polytechnic Institute

VA

26

Naval Postgraduate SchoolCA

27

Oklahoma State University

OK

28

Rice University

TX

29

University of Missouri – ColumbiaMO

29

University of Massachusetts, Amherst

MA

30

University of Minnesota

MN

31

Iowa State University

IW

32

Ferris State University

MI

31

Johns Hopkins University

MD

35

University of Illinois at Urbana-Champaign

IL

36

Boston University

MA

37

Indiana University

IN

38

James Madison University

VA

39

Tuskegee University

AL

38

Howard University

DC

39

Indiana University of Pennsylvania

PA

40

Walsh College

MI

41

Brandeis University

MA

42

Texas A&M University

TX

42

University of Houston

TX

44

Ponemon Institute©: Research Report

Page 13

StateWeighted Meta
Rank

University of Kansas

KS

44

University of Tulsa

OK

45

Rochester Institute of Technology

NY48

University of California at DavisCA

49

Rutgers, University

NJ

50

Worcester Polytechnic InstituteMA

52

Educational Institutions – continued

If you have questions or comments about this research or you would like to obtain additional
copies of the document (including permission to quote or reuse this report), please contact us byletter, phone or email:Ponemon Institute LLC
Attn: Research Department
2308 US 31 North
Traverse City, Michigan 49686 USA
800.887.3118
research@ponemon.org

Ponemon Institute
Measuring Trust in Privacy & Security
Ponemon Institute is dedicated to independent research and education that advances responsible
information and privacy management practices within business and government. Our mission is
to conduct high quality, empirical studies on critical issues affecting the management and securityof sensitive information about people and organizations.
As a member of the Council of American Survey Research Organizations (CASRO), we
uphold strict data confidentiality, privacy and ethical research standards. We do not collect any
personally identifiable information from individuals (or company identifiable information in ourbusiness research). Furthermore, we have strict quality standards to ensure that subjects are notasked extraneous, irrelevant or improper questions.

Ponemon Institute©: Research Report

Page 14