FedVTE Course Catalog

In this course, you will learn the basics of computer programming - how to give a machine a set of instructions to produce a desired behavior. This course provides information on the elements of programming and programming languages, frameworks, and models. The course includes an interactive programming game, interactive knowledge checks, and the chance to write your own fully functional code.

Learning Objectives

• Define programming.
• Describe the structure and purpose of major programming paradigms.
• Explain the difference between high-level and low-level languages.
• Describe the uses of scripting and compiled languages.
• State the elements of programming.
• Explain when to use a variable in programming.
• List basic data types.
• State how operators are used in programming.
• Explain why logic and flow are important in programming
• State the purpose of programming frameworks.

Training Purpose: Securely Provision

Specialty Areas: Software Assurance and Security Engineering, Systems Development, Systems Requirements Planning, Systems Security Architecture, Technology Research and Development, Test and Evaluation

Training Proficiency Area: Level 1 - Basic

Course Date: 6/7/2017

Learning Objectives

• Define and give examples of critical infrastructure.
• Identify possible cyber threats to critical infrastructure.
• Describe U.S. cybersecurity policies and programs.
• Explain the cybersecurity roles of the Department of Homeland Security (DHS) and other Federal agencies.

Training Purpose: Securely Provision, Operate and Maintain, Oversee and Govern, Protect and Defend

Specialty Areas: Systems Architecture, Technology Research and Development, Systems Requirements Planning, Systems Development, Software Assurance and Security Engineering, Network Services, Systems Administration, Systems Analysis, Information Systems Security Operations, Security Program Management, Strategic Planning and Policy Development, Computer Network Defense Analysis, Computer Network Defense Infrastructure Support

Training Proficiency Area: Level 1 - Basic

Course Date: 5/19/2017

In this course, you will learn the basics of reverse engineering, the process of analyzing a technology specifically to determine how it was designed or how it operates. Instead of working toward building a finished product (like you would in engineering), in reverse engineering you start with a finished product and try to work backwards to determine its component parts. This course focuses on reverse engineering computer software.

Learning Objectives

• Identify common uses for reverse engineering
• Explain the process and methodology of reverse engineering
• Understand some of the legal questions involved in reverse engineering.

Training Purpose: Securely Provision

Specialty Areas: Software Assurance and Security Engineering, Systems Development, Technology Research and Development

Training Proficiency Area: Level 1 - Basic

Course Date: 5/19/2017

The Advanced Computer Forensics course focuses on building the learner's skills to improve their ability to piece together the various components of the digital investigation. The course begins with acquisition planning and preparation, progresses through the investigative process, and concludes with analysis techniques and methods for more manageable investigations.

Key topics covered:

• Develop an investigative process for the digital forensic investigation
• Explain methods of focusing investigations through analysis of multiple evidence sources
• Effectively prepare for incident response of both victim and suspect systems
• Identify sources of evidentiary value in various evidence sources including network logs, network traffic, volatile data and through disk forensics
• Identify common areas of malicious software activity and characteristics of various types of malicious software files
• Confidently perform live response in intrusion investigation scenarios

Date: 2020

Training Proficiency Area: Level 3 - Advanced

Training Purpose: Skill Development

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

The Advanced PCAP Analysis and Signature Development (APA) course takes users through an introduction to rules, goes over example syntax, protocols and expressions. This course contains several supporting video demonstrations as well as lab exercises writing and testing basic rules.

Training Purpose: Analyze, Protect and Defend
Specialty Areas: Cyber Defense Analysis, Cyber Defense Infrastructure Support, All Source Analysis, Cyber Operations
Training Proficiency Area: Level 2 - Intermediate

Specialty Areas: Software Development, Systems Administration, Systems Analysis, Customer Service and Technical Support

Training Proficiency Area: Level 1 - Basic

Capture Date: 2015

Training Purpose - Protect and Defend, Collect and Operate, Operate and Maintain

Specialty Areas - Network Services, Cyber Operations, Cyber Defense Analysis

Training Proficiency Area: Level 2 - Intermediate

The AI/ML for Cyber course provides students with the foundational practices and ethical principles of Artificial Intelligence. Diving into each of the ethical principles along with other technical ethics, is aimed at reducing risk and unwanted bias to create ethical, transparent, and fair artificial intelligence systems.

Learning Objectives:

• Explain the harm with bias in artificial intelligence
• Discuss how to reduce risk and unwanted bias
• Cite several principles of AI and the goals of each
• Describe how principles are applied to create ethical, transparent and fair AI

Date: 2020

Training Proficiency Area: Level 2 - Intermediate

Training Purpose: Skill Development

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

Learning Objectives:

• Learn how to perform a vulnerability analysis to identify security weakness in an organization's network structure.
• Perform a security assessment of a cloud environment to understand cloud computing threats and attacks.
• Understand risks and defensive strategies for IoT Platforms and devices.

• Cyber Defense Analysis
• Systems Analysis
• Vulnerability Assessment and Management

Training Proficiency Area Level 3 - Advanced

These short videos (5-11 minutes) of the new CDM Agency Dashboard will provide a foundation level of knowledge and background that will help end users of the dashboard prepare for training demonstrations and hands-on activities, as well as the implementation of the new dashboard.

Learning Objectives:

• Understand what are CDM and the CDM Agency Dashboard
• Understand the New CDM Agency Dashboard
• Provide an overview on the AWARE Scoring Algorithm 1.0
• Become familiar with the Kibana User Interface
• Understand the general architecture, data flow, and data structure and schema
• Become familiar with JSON Documents

Date: 2020

Training Proficiency Area: Level 1 - Beginner

Training Purpose: Skill Development

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

Custom Searches and Reports: View demonstrations of navigating and searching the data within the CDM Agency Dashboard. See how that data can be used to create meaningful and visually appealing custom reports to communicate query results to leadership and stakeholders.

Learning Objectives:

• Learn how to examine the standard operating view (SOV) and iView of the Legacy (Archer) CDM agency dashboard
• Learn how to examine records and containers, browse and filter hardware records and build custom queries

Date: 2019

Training Proficiency Area: Level 1 - Beginner

Training Purpose: Skill Development

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

Custom Searches and Reports: View demonstrations of navigating and searching the hardware and software data within CDM and create reports.

Learning Objectives:

• Learn how to find hardware by the FISMA container using the Legacy (Archer) CDM Agency Dashboard
• Learn how to conduct a multi-filter query to find legacy software and unauthorized software
• Learn how to create reports and iViews from custom queries

Date: 2019

Training Proficiency Area: Level 1 - Beginner

Training Purpose: Skill Development

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

Learn how to use AWARE to prioritize vulnerability management activities to address the worst vulnerabilities first.

Learning Objectives:

• Understand AWARE Risk Scoring using the Legacy (Archer) CDM Agency Dashboard
• Learn how to identify vulnerabilities, components and mitigations

Date: 2020

Training Proficiency Area: Level 1 - Beginner

Training Purpose: Skill Development

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

The course provides a high level overview of the CDM program. Topics covered include basic CDM concepts, how CDM relates to NIST 800-53 and other NIST SPs, CDM Concept of Operations, the CDM Environment, and CDM’s Phases and Capabilities.

Training Purpose: Securely Provision, Oversee and Govern, Protect and Defend

Specialty Areas: Risk Management, Cybersecurity Management, Vulnerability Assessment and Management, Cyber Defense Analysis

Proficiency: Level 1 - Basic

Capture Date: 2015

The course begins by defining Hardware Asset Management (HWAM) and why it is critical to the implementation of a robust cybersecurity program. The training highlights the criteria for monitoring and managing hardware assets using CDM. It then transitions into HWAM implementation criteria and discusses the generic CDM concept of operations specific to HWAM. Topics covered include Actual State, Desired State, and Defects.

Training Purpose: Securely Provision, Oversee and Govern, Protect and Defend

Specialty Areas: Risk Management, Cybersecurity Management, Vulnerability Assessment and Management, Cyber Defense Analysis

Proficiency: Level 1 - Basic

Capture Date: 2015

The course begins by defining SWAM and why it is critical to the implementation of a robust cyber-security program. It covers new roles and responsibilities which the department or agency (D/A) must implement. It then transitions into SWAM implementation criteria, and discusses the generic CDM concept of operations specific to SWAM Actual State, Desired State, and Defects. It includes high level discussions of software lists (white, gray, black) and how software can be identified and tracked in CDM through the use of Common Platform Enumeration (CPE) and Software Identification (SWID) tags by Software package down to executables.

Training Purpose: Securely Provision, Oversee and Govern, Protect and Defend

Specialty Areas: Risk Management, Cybersecurity Management, Vulnerability Assessment and Management, Cyber Defense Analysis

Proficiency: Level 1 - Basic

Capture Date: 2015

The course begins by outlining the Cyber Security Manager position (CSM) and highlighting the types of attacks CSM can help prevent. It then transitions into CSM methods and criteria, where it reviews Actual State, Desired State, and Defect Checks specific to the capability area. It explains how CSM builds upon the other capabilities and how defect checks differ at the local and federal levels.

Training Purpose: Securely Provision, Oversee and Govern, Protect and Defend

Specialty Areas: Risk Management, Cybersecurity Management, Vulnerability Assessment and Management, Cyber Defense Analysis

Proficiency: Level 1 - Basic

Capture Date: 2015

The course begins by defining VULN, how it applies to the target environment, and how a fully implemented VULN capability impacts a Department or Agency. It then transitions into VULN criteria and methods, where it reviews Actual State, Desired State, and Defect Checks specific to the capability area. It explains how VULN builds upon the other capabilities areas, the types of defects, and how those defect checks differ at the local and federal levels.

Training Purpose: Securely Provision, Oversee and Govern, Protect and Defend

Specialty Areas: Risk Management, Cybersecurity Management, Vulnerability Assessment and Management, Cyber Defense Analysis

Proficiency: Level 1 - Basic

Capture Date: 2015

• X1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• X2 General use of the web portal for requesting, accessing and managing privileged credentials.
• X3 Account management features which include account reconciliation and password management.
• X4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• P1 Splunk dashboard introduction.
• S1 SailPoint Introduction covers the UI and highlights how to locate an Identity Attribute
• S2 SailPoint Administration I covers configuring Applications and Tasks.
• S3 SailPoint Administration II covers Target Applications and Connectors
• S4 SailPoint Administration III includes the ability to run, schedule and review reports.

• C1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• C2 General use of the web portal for requesting, accessing and managing privileged credentials.
• C3 Account management features which include account reconciliation and password management.
• C4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• P1 Splunk dashboard introduction.
• S1 SailPoint Introduction covers the UI and highlights how to locate an Identity Attribute.
• S2 SailPoint Administration I covers configuring Applications and Tasks.
• S3 SailPoint Administration II covers Target Applications and Connectors.
• S4 SailPoint Administration III includes the ability to run, schedule and review reports.

• X1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• X2 General use of the web portal for requesting, accessing and managing privileged credentials.
• X3 Account management features which include account reconciliation and password management.
• X4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• P1 Splunk dashboard introduction.
• S1 SailPoint Introduction covers the UI and highlights how to locate an Identity Attribute
• S2 SailPoint Administration I covers configuring Applications and Tasks.
• S3 SailPoint Administration II covers Target Applications and Connectors
• S4 SailPoint Administration III includes the ability to run, schedule and review reports.

• C1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• C2 General use of the web portal for requesting, accessing and managing privileged credentials.
• C3 Account management features which include account reconciliation and password management.
• C4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• P1 Splunk dashboard introduction.
• S1 SailPoint Introduction covers the UI and highlights how to locate an Identity Attribute
• S2 SailPoint Administration I covers configuring Applications and Tasks.
• S3 SailPoint Administration II covers Target Applications and Connectors
• S4 SailPoint Administration III includes the ability to run, schedule and review reports.

• X1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• X2 General use of the web portal for requesting, accessing and managing privileged credentials.
• X4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• P1 Splunk dashboard introduction.
• P2 Splunk Integration

• C1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• C2 General use of the web portal for requesting, accessing and managing privileged credentials.
• C4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• P1 Splunk dashboard introduction.
• P2 Splunk Integration

C1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
C2 General use of the web portal for requesting, accessing and managing privileged credentials.
C3 Account management features which include account reconciliation and password management.

C1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
C2 General use of the web portal for requesting, accessing and managing privileged credentials.
C3 Account management features which include account reconciliation and password management.

• X1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• X2 General use of the web portal for requesting, accessing and managing privileged credentials.
• X3 Account management features which include account reconciliation and password management.
• X4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• S1 SailPoint Introduction covers the UI and highlights how to locate an Identity Attribute
• S2 SailPoint Administration I covers configuring Applications and Tasks.
• S3 SailPoint Administration II covers Target Applications and Connectors
• S4 SailPoint Administration III includes the ability to run, schedule and review reports.

• C1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• C2 General use of the web portal for requesting, accessing and managing privileged credentials.
• C3 Account management features which include account reconciliation and password management.
• C4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• S1 SailPoint Introduction covers the UI and highlights how to locate an Identity Attribute
• S2 SailPoint Administration I covers configuring Applications and Tasks.
• S3 SailPoint Administration II covers Target Applications and Connectors
• S4 SailPoint Administration III includes the ability to run, schedule and review reports.

• X1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• X2 General use of the web portal for requesting, accessing and managing privileged credentials.
• X4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• P1 Splunk dashboard introduction.
• P2 Splunk Integration

• C1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• C2 General use of the web portal for requesting, accessing and managing privileged credentials.
• C4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• P1 Splunk dashboard introduction.
• P2 Splunk Integration

• S1 SailPoint Introduction covers the UI and highlights how to locate an Identity Attribute
• S2 SailPoint Administration I covers configuring Applications and Tasks.
• S3 SailPoint Administration II covers Target Applications and Connectors
• S4 SailPoint Administration III includes the ability to run, schedule and review reports.

X1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals. X2 General use of the web portal for requesting, accessing and managing privileged credentials. X3 Account management features which include account reconciliation and password management. X4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests. X5 Administration I covers how to add new users, devices, organize groups and connect to external resources such as LDAP. X6 Administration II provides users with the ability to create and configure application or services and setup policies. X7 Administration III covers how to run reports and schedule reports, locate/manage log files, perform session management and locate troubleshooting tools. X8 Administration IV provides users with an understanding of how to manage disaster recovery features.

• C1 An introduction into the PRIVMGMT solution and how it aligns to CDM goals.
• C2 General use of the web portal for requesting, accessing and managing privileged credentials.
• C3 Account management features which include account reconciliation and password management.
• C4 Credential Approval designed to provide agencies with a functional understanding of approving credential requests.
• C5 Administration I covers how to add new users, devices, organize groups and connect to external resources such as LDAP.
• C6 Administration II (Part 1 and 2) provides users with the ability to create and manage platforms and safes, configure master policies as well as an in-depth look into safe design.
• C7 Administration III covers how to run reports in the PVWA, operate the PrivateArk Client and how to locate and manage log files.
• C8 Administration IV provides users with an understanding of how to manage disaster recovery features.

Training Purpose: Operate and Maintain

Specialty Areas: Network Services, Systems Administration, Systems Analysis, Customer Service and Technical Support

Training Proficiency Area: Level 2 - Intermediate

Capture Date: 2015

The cloud security course explores guidance from the Cloud Security Alliance (CSA), National Institute of Standards and Technology (NIST), National Security Agency (NSA), and several Cloud Service Providers (CSPs). Topics will cover cloud security risks and threats, basic operations, incident response considerations, along with application, data and infrastructure security concepts. Where applicable, demonstrations of cloud provider tools and capabilities will be used to reinforce key points.

Learning Objectives:

• Define cloud models and components
• Apply CSA security guidance and other best practices to cloud deployments
• Understand cybersecurity requirements within the Shared Responsibilities model
• Prepare for cloud computing governance and compliance challenges
• Relate traditional cybersecurity controls to popular cloud solutions
• Recognize and prepare for cloud computing threats
• Review additional cloud security tools and use cases

Date: 2020

Training Purpose: Skill Development

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

Training Proficiency Area: Level 2 - Intermediate

Training Purpose: Operate and Maintain

Specialty Areas: Network Services, Systems Administration, Systems Analysis, Customer Service and Technical Support

Training Proficiency Area: Level 2 - Intermediate

Capture Date: 2015

Training Purpose: Protect and Defend

Specialty Areas: Cyber Defense Analysis, Cyber Defense Infrastructure Support, Incident Response, Vulnerability Assessment and Management

Training Proficiency Area: Level 1 - Basic

Course Capture Date: 2016

This hour-long webinar recorded on July 17, 2020 features National Defense University Professor Robert Richardson discussing important security and oversight requirements for commercial cloud solutions.

Learning Objectives:

• Overview of the cloud physically, logically, and architecturally.
• Discuss cloud deployment models and characteristics.
• Overview of cloud infrastructure characteristics.
• Cloud Supply Chain Risk Management and considerations of commercial cloud as third-party cloud services; senior leaders should "beware of the gaps and seams."
• Cloud software components — microservices & APIs.
• The driving forces and key technology enablers of commercial cloud services in the Federal Government.
• Must-have security requirements and policies for cloud solutions.
• The top ten cybersecurity cloud risks such as: loss of service, data breaches, human error. As well as non-cybersecurity risks such as: outsourcing risks, personnel security, and supply chain risk management.
• Where Federal Government adoption of commercial cloud is now and predictions for the future.

Date: July 17, 2020

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

Training Purpose: Skill Development

Specialty Areas: Computer Network Defense Analysis, Computer Network Defense Infrastructure Support, Incident Response, Vulnerability Assessment and Management

Training Proficiency Area: Level 1 - Basic

Capture Date: 2017

Training Proficiency Level: Level 1 - Basic

Capture Date: 2018

The CompTIA A+ (220-1001) certification prep course is a self-study resource to help students prepare for the CompTIA A+ certification exam. Topics covered in the CompTIA A+ 220-1001 cover mobile devices, networking technology, hardware, virtualization and cloud computing and network troubleshooting.

Learning objectives:

• Supplemental self-study preparation resource for the CompTIA A+ 220-1001 certification exam.
• Identify installation, configuration, and maintenance details for PC components, mobile devices, and user applications.
• Recall basics of networking and security fundamentals
• Apply troubleshooting techniques and satisfactory customer support.

NICCS Specialty Areas:

• (Operate and Maintain) Customer Service and Technical Support
• Network Services
• System Administration

Training Purpose: Skill Development

Training Proficiency Area: Level 1 - Basic

The CompTIA A+ 1002 certification prep course is a self-study resource to help students prepare for the CompTIA A+ certification exam. Topics in the A+1002 covers installing and configuring operating systems, expanded security, software troubleshooting and operational procedures.

Learning objectives:

• Supplemental self-study preparation resource for the CompTIA A+ 220-1002 certification exam.
• Apply diagnostic and resolution processes to hardware and software issues
• Employ device installation and sound troubleshooting and customer support practices.
• Recall fundamentals of cloud and virtualization deployment strategies

NICCS Specialty Areas:

• (Operate and Maintain) Customer Service and Technical Support
• Network Services
• System Administration

Training Purpose: Skill Development

Training Proficiency Area: Level 1 - Basic

Learning Objectives:

• Design and implement a functional network
• Configure, manage and maintain network security, standards and protocols
• Troubleshoot network issues
• Create and support virtualized networks

NICCS Specialty Areas:

• Operate and Maintain
• Network Services
• System Administration
• Customer Service and Technical Support

Training Purpose: Skill Development

Training Proficiency Area: Level 1- Basic

The Cybersecurity Analyst course is designed to help reinforce concepts for cyber work roles that require monitoring and information analysis to respond to suspicious events. This intermediate-level course focuses on defense techniques leveraging data and tools to identify risks to an organization, and apply effective mitigation strategies to detect and respond to threats.

Learning Objectives:

• List common cyber threats and examples of scanning and assessment tools and techniques to identify potential vulnerabilities.
• Analyze data from various sources to identify vulnerabilities and recommend strategies for mitigation.
• Configure and implement threat detection tools to detect incidents, and effectively respond and recover.

Date: 2018

Training Proficiency Area: Level 2 - Intermediate

Training Purpose: Skill Development

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

The Cybersecurity for Technical Staff course highlights best practices applicable to a wide variety cybersecurity job roles. Topics such as risk management, architecture and design, and tools and technologies, are key concepts for detecting, protecting, and defending from security threats. This foundational knowledge of cybersecurity controls and strategies is essential for technical operations staff.

Learning Objectives:

• List common cyber threats and how scanning and assessment tools and techniques identify potential vulnerabilities
• Explain how various tools and technologies are configured or deployed to support an organization's security posture
• Detail risk management best practices and mitigation strategies

Date: 2018

Training Proficiency Area: Level 1 - Beginner

Training Purpose: Skill Development

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

The Creating a Computer Security Incident Response Team course was developed for organizations and individuals who are at the beginning of their planning and implementation process for creating a computer security incident response team or an incident management capability. The course begins with definitions and context for defining a CSIRT framework, followed by services that may be provided and building an action plan. A attendee workbook is included with questions and exercises to use in conjunction with the training.

Learning Objectives:

• Understand the function of Computer Security Incident Response Teams (CSIRT) and the philosophy behind them
• Understand the role of CSIRT in the incident management process
• Identify the requirements to establish an effective CSIRT
• Appreciate the key issues and decisions that must be addressed when creating a CSIRT
• Learn to strategically plan the development and implementation of your CSIRT/li>

Date: 2020

Training Proficiency Area: Level 1 - Basic

Training Purpose: Management Development

Alignment to the NIST SP 800-181 Cybersecurity Workforce Framework

This course covers the history, risks and legality of cryptocurrency as well as discusses what cryptocurrency items can be seized by law enforcement.

Learning Objectives:

• Define cryptocurrency and compare it to traditional currency
• Describe the history of cryptocurrency
• State the elements of a cryptocurrency transaction and their roles
• Describe safety measures taken to protect cryptocurrency
• Identify items that serve as wallets for cryptocurrency and could be seized by law enforcement
• Evaluate apps and websites that could be linked to cryptocurrency
• Compare degrees of anonymity of various cryptocurrencies
• Compare legal and illegal uses of cryptocurrency
• Evaluate the legality of different cryptocurrency scenarios
• Identify notable cases of illegal uses of cryptocurrency found in recent headlines

Training Purpose: Investigate

Specialty Areas: Cyber Investigation, Digital Forensics

Training Proficiency Area: Level 1 - Basic

Course Date: 2/27/2019

Cyber Dark Arts highlights ‘dark’ or deceptive activities that are employed by malicious users via the Internet. Several legitimate purpose technologies and techniques and how they are leveraged, or manipulated for fraudulent purposes, is discussed. Threats from topics such as zero-day attacks, dark web, alternate OSs, VPN/TOR, weaponized psychology, and anonymous services will be detailed, as well as methods for concealing one’s identity. These methods are taught in order for cybersecurity experts to defend against such attacks. The course includes reinforcing video demonstrations.

Learning Objectives:

• Explain several techniques for obfuscating online activities
• List examples of technologies leveraged for deceptive purposes
• Detail best practices for prevention and protection from malicious cyber activities

• Collect and Operate: Cyber Operations
• Operate and Maintain: Systems Analysis
• Protect and Defend: Cyber Defense Analysis

Training Purpose: Skill Development

Training Proficiency Area Level 2 - Intermediate

This course is based on the DHS CISA Cyber Essentials, a guide for leaders to develop actionable items to start implementing organizational cybersecurity practices. This course provides an overview of the Cyber Essentials from a leadership perspective and is designed to introduce the six essential elements of building a culture of cyber readiness.

Learning objectives:
At the end of this course, you will be able to:

• Identify actionable items to reduce your organization's cyber risks through a holistic approach
• Identify the six essential elements of building a culture of cyber readiness
• Identify the stepping stones to building a culture of cyber readiness

Specialty Areas:

• Training
• Education and Awareness
• Cybersecurity Management
• Strategic Planning and Policy
• Executive Cyber Leadership
• Program/Project Management and Acquisition

Training Purpose: Oversee and Govern

Training Proficiency Area: Level 1

This course serves as an introduction and overview of several concepts and technologies that may be encountered as part of an investigation with a digital or cyber component. Starting with the basics of how devices communicate, the course continues with technical concepts and applications that may be used to facilitate or investigate incidents. Content includes lab exercises and practical application takeaways to reinforce concepts, and a course exam.

Learning objectives:

• Describe essential computing communication concepts
• Identify digital evidence sources and handling
• Apply techniques to examine applications for target information

Training Purpose: Skill Development

Specialty Areas: Threat Analysis, Digital Forensics, Investigation

Training Proficiency Area: Level 2 - Intermediate

Capture Date: 2017

Training Purpose: Skill Development

Specialty Areas: Digital Forensics, Cyber Operations, Incident Response, Investigation

Training Proficiency Area: Level 1 - Basic

Capture Date: 2015

Cybersecurity Overview for Managers is designed for managers and other stakeholders who may be involved in decision making regarding their cyber environment but do not have a strong technical background. Discussions will not focus on specific technologies or implementation techniques, but rather cybersecurity methodologies and the framework for providing a resilient cyber presence. The course aims to help managers better understand how people and devices work together to protect mission critical assets and more effectively evaluate their cyber posture.

Training Purpose: Skill development

Specialty Areas: Information System Security Management, Security Program Management, Strategic Planning and Policy Development

Training Proficiency Area: Level 1 - Basic

Capture Date: 2012

Objectives:

• Describe product supply chains and life cycles
• Identify the role of adversaries in supply chain risk management
• Define the risks associated with supply chains
• State the principles of supply chain management
• Identify security measures taken to protect a supply chain
• Apply suggested tools to address supply chain vulnerabilities
• Explain how knowledge of the "internet of things" (IOT) is used to evaluate products as IOT devices
• Recognize potential dangers posed by various devices brought to work
• Identify the threats outlined for acquisitions personnel through the Federal Acquisition Regulation (FAR)
• Define how to personally safeguard your organization’s cybersecurity

Training Purpose: Skill development

Specialty Area: Computer Network Defense Infrastructure Support, Network Services, Systems Security Analysis, System Administration

Training Proficiency Area: Level 2 - Intermediate

Capture Date: 2013