Despite a variety of Information Security Assurance (ISA) curricula and diverse educational models, universities often fail to provide their graduates with skills demanded by employers. There is a big discrepancy between the levels of skills expected by employers and those the graduates have after completing their studies. The authors compare the information security education in other countries with the ISA educational programs in the U.S. They identified that there is greater variation and flexibility in the ISA academic programs with universities located outside the U.S. The authors briefly discuss the changes to approaches, topics, resources, and courses. They discuss the implementation of an effective ISA curriculum based on the curriculum content, methodology, currency, and research. Finally, the authors suggest actions that should make the ISA curricula in the universities responsive to the needs of the general population and the industry in which graduates with ISA skills and specialization will be employed. (Contains 2 tables.)