NCPC Training Courses

---

Web-Based. 13 Hours; 1.3 CEUs; 2 hours - ACE; 2 Semester Hours.

Click Here to Register

Cyber Ethics is designed to share the proper techniques for approaching the difficult ethical dilemmas arising from use of the modern Internet. Develop the skills to assess future ethical dilemmas by examining some of the more pressing concerns related to Internet usage today.

Course Objectives

• Describe the theories of ethics
• Describe cyber ethics and the unique scenarios that arise from the use of technology in society
• Describe the perspectives of applied ethics
• Describe ethical business practices
• Describe the concepts of personal and public privacy
• Describe data collection and user consent
• Describe privacy enhancing tools
• Describe privacy laws
• Describe industry self regulation
• Describe intellectual objects and intellectual property
• Apply ownership theory to intellectual property
• Apply copyright laws to intellectual property
• Describe topics relating to the protection of intellectual property
• Describe other violations of intellectual property rights
• Describe the ethical frameworks of varying professions
• Describe ethical considerations of whistle-blowing

Course Developed by: NERRTC - Texas A&M Engineering Extension Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 2 Hours; .2 CEUs.

Click Here to Register

This course covers basic cyber awareness for Municipal, Police, Fire and EMS Information Technology personnel. Participants will have an increased knowledge of threats specific to their jurisdiction and an understanding of the processes and procedures needed to develop a cyber-awareness program. This course will focus on the steps involved in being aware of cyber threats and effectively communicating the processes and procedures to protect users against common cyber threats. The participants will apply this knowledge by developing processes and procedures to integrate cyber awareness into routine operations. Participants will gain the understanding and knowledge needed to start developing and integrating cyber awareness programs in their specific jurisdictions.

Course Developed by: Norwich University Applied Research Institute

POC: pro.norwich.edu • norwichpro@norwich.edu • (802) 485-2213

---

Instructor-Led. 8 Hours.

This course introduces state, local, tribal and territorial first responders with limited or no prior knowledge of computer crime and cyber investigations to the importance of identifying evidence related to suspected criminal activity, and incorporating evidence into investigation.

Course Developed by: CJI - University of Arkansas System and Norwich University Applied Research Institute

POC: mslack@norwich.edu • (984) 999-8295

---

Web-based. 4 Hours; .4 CEUs.

Click Here to Register

Computers, mobile devices and the Internet of Things (IoT) are a part of our daily lives. By using all of this technology, which makes our lives easier, we have opened ourselves up to the risks of cyber-attacks. This course will introduce you to the basics of protecting your computer and the data it stores as well as protecting yourself when you are online, on social media, and while using your mobile or smart devices.

Course Objectives

• Explain basic concepts for protecting their computers and data.
• Explain basic concepts for protecting their identities and privacy while online.
• Implement best practices for protecting themselves on social media.
• Protect themselves on mobile and smart devices.

Prerequisites: Must be a U.S. Citizen or Permanent Resident or receive approval from TEEX/DHS-FEMA prior to the start of the class.

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-based. 2 Hours; .2 CEUs.

Click Here to Register

The use of computers and networked systems in the workplace has opened businesses and organizations to a variety of risks. Every employee using a computer connected to the organization's network is a potential point of entry for a cyber-attack. For this reason, cybersecurity and protecting the organization's data/information is every employee's responsibility. This course will help students understand the different types of cyber-attacks their company may face, the type of information that is at risk, how to recognize cyber-attacks and why it is important for everyone in the organization to participate in cybersecurity.

Course Objectives

• Participants will be able to explain their role in cybersecurity.
• Participants will be able to explain various cyber-attacks that may impact their them and their organization.
• Participants will be able to implement cybersecurity practices to protect themselves and their organizations.

Prerequisites: Must be a U.S. Citizen or Permanent Resident or receive approval from TEEX/DHS-FEMA prior to the start of the class.

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 4 Hours; .4 CEUs.

Click Here to Register

This is a non-technical course designed to develop awareness of cybersecurity risks for elected officials, appointed officials and other senior managers so that they are better informed to properly protect the jurisdiction/organization during a cybersecurity incident. It is designed to help officials and senior management work more effectively with their Information Technology (IT) departments to mitigate cyber threats.

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 8 Hours.

Click Here to Register

This course demonstrates tools used by bad actors and cyber defenders to provide a complete picture of a cyber-attack. This course is ideal for any individual responsible for responding to cyber incidents or organizational strategy.

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-based. 4 Hours; .4 CEUs.

Click Here to Register

As computers and mobile devices become a part of most people's everyday lives, the challenges of protecting computers and mobile devices and the data on them increases. Part of protecting computers and mobile devices is understanding how to recognize when they are compromised, the steps to take to respond to compromised computers and devices, and how to recover once they have been rid of any infection. This course will introduce students to various types of cyber-attacks and how to detect and respond to them in order to protect their data and information.

Course Objectives

• Explain malware, and how to detect and respond to it to protect computers.
• Explain social engineering and how to respond to social engineering attacks.
• Identify how to detect and respond to cyber-attacks on their mobile devices.
• Explain how to detect and respond to physical security threats that lead to cyber-attacks.

Prerequisites: Must be a U.S. Citizen or Permanent Resident or receive approval from TEEX/DHS-FEMA prior to the start of the class.

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 4 Hours; .4 CEUs.

Click Here to Register

This discussion-based, non-technical course is an introduction to cybersecurity that provides individuals, community leaders and first responders with information on how cyber attacks can impact, prevent and/or stop operations and emergency responses in a community. The Essentials of Community Cybersecurity course provides a cursory introduction to cybersecurity vulnerabilities, risks, threats and countermeasures and introduces actions communities can take to establish a cybersecurity program. It introduces the Community Cybersecurity Maturity Model (CCSMM) as a framework for understanding community cybersecurity and offers a brief introduction to low or no-cost approaches to securing a community against cybersecurity threats and attacks; setting the stage for further efforts in which a community can build a cybersecurity program.

Course Objectives

• Identify reasons why communities are vulnerable to cyber attack
• Differentiate between the levels of cybersecurity threats
• Recognize that terrorists are capable of using, and planning to use, computers to attack American communities and citizens
• Describe how everyone is affected by and has a role in cybersecurity efforts
• List ways cyberattacks can affect the physical world
• Recognize the purpose of the Community Cyber Security Maturity Model
• State one technique for enhancing security awareness among community leaders
• Give one example of how a community can share cybersecurity-related information
• Identify at least two kinds of exercises
• Recognize that cybersecurity exercises are as important as other exercises to protect their organization, community, state and nation

Course Developed by: UTSA Center for Infrastructure Assurance and Security

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119

---

Web-Based. 10 Hours; 1 CEU; 2 hours - ACE; 2 Semester Hours.

Click Here to Register

This course examines cyber and cyber facilitated non-violent white-collar crimes, fraud and financial crimes, and violent crimes and the appropriate response by first responders and other local, state and federal agencies that may encounter them. Participants will identify legislative, organizational and suggested personal efforts to control or prevent cyber crimes.

Course Objectives

• Demonstrate knowledge of Internet regulation (Federal, state and self-regulations)
• Demonstrate knowledge of online contracting
• Demonstrate knowledge of consumer protection and employee privacy
• Demonstrate knowledge of the Federal Trade Commission (FTC) and online marketing
• Demonstrate knowledge of the Computer Fraud and Abuse Act (CFAA)
• Demonstrate knowledge of the Wire Fraud Act
• Demonstrate knowledge of the National Stolen Property Act
• Demonstrate knowledge of copyrights and intellectual property
• Demonstrate knowledge of website domain names and ICANN
• Demonstrate knowledge of the legality of hyperlinking

Prerequisites

To have a good understanding of the topics discussed, we recommend taking the following NCPC courses:
• AWR-173 Information Security Basics
• AWR-174 Cyber Ethics
• OR, you should have a good understanding of: Cyber Ethics; Ethical Business Practices; Privacy Laws and Principles; Intellectual Property, Copyright Laws, Patents, Trademarks and Trade Secrets; Code of Ethics and Professional Practices; Freedom of Speech and the Internet; Ethical Hacking; Patching and updating; Firewalls; Malware; Confidentiality, Integrity and Availability; Disclosure, Alteration and Denial; Vulnerabilities, Attacks and Controls; Types of Attacks and Attackers; Controls; Access Control; TCP/IP Networking; Networking Basics and Security; Operating System Security; Encryption.

Course Developed by: NERRTC - Texas A&M Engineering Extension Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 2 Hours; .2 CEUs.

Click Here to Register

This course provides an understanding of the history, definitions and components that make up IoT. It addresses the different applications of IoT, as well as applicable laws and policies, technologies, emerging threats, best practices, security and a variety of existing and developing technologies. This course is ideal for participants, from throughout the various levels of government, private industry and community, wanting to understand how they are affected by IoT.

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 6.5 Hours; .7 CEUs.

Click Here to Register

This course is designed to provide a better understanding of security and privacy issues associated with mobile devices and infrastructure; including benefits and challenges of designing, implementing, and maintaining Bring Your Own Device (BYOD) Programs. Using scenarios, thought challenges and exercises as a framework, students will learn about:
• the purpose of Enterprise Mobile Management platforms;
• elements that make mobile networks and operating systems different;
• mobile malware classifications and detection strategies; and
• mobile architecture data leakage detection and prevention strategies.

Course Developed by: CflA - University of Memphis

POC: cfia@memphis.edu • (901) 678-4270

---

Web-based. 2 Hours; .2 CEUs.

Click Here to Register

The Internet (the world's largest network) allows us to accomplish tasks more conveniently and efficiently at home, work and on the road! However, there are security risks with networks, and users must be aware and remain vigilant about these risks and how to secure their home or small business network. This course will introduce students to the basics of networks for homes and small businesses and provide them with best practices to secure their networks in order to protect their personal information as well as other (friends, family, customers, vendors, etc.) information that may flow through their network.

Course Objectives

• Define terminology related to networking.
• Identify equipment associated with networks.
• Describe the purpose of http, DNS, and IP addresses.
• Explain different types of small networks.
• Explain why network security is important.
• Identify types of network attacks.
• Describe brute force and dictionary password attacks.
• Identify examples of strong passwords/passphrases.
• Explain how to set up a secure home or small business network.
• Identify the impacts of a data breach.
• Identify vulnerabilities in point of sale systems.
• Explain how to secure point of sale systems.

Prerequisites: Must be a U.S. Citizen or Permanent Resident or receive approval from TEEX/DHS-FEMA prior to the start of the class.

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 16 Hours.

This classroom-based activity will be designed to introduce students to identify and describe the components of an IoT system and associated security concerns. The course will cover the elements of an IoT system including programmable logic controllers, sensors and network interfaces. Topics will include PLC functions and programming, common IoT network protocols and security concerns related to IoT systems. Students will explore IoT vulnerabilities using common vulnerability assessment tools such as Kali Linux. Lecture and exercises will culminate in a laboratory experience where teams of students will build an IoT system and examine security considerations, vulnerabilities, and threats. No prior programming experience is required.

Course Objectives

• Learners will be able to describe concepts related to IoT communication
• Learners will be able to describe data collection methods by IoT device
• Learners will be able to describe the process used by threat actors to attack IoT devices and services
• Learners will be able to describe methods for defending IoT systems

Course Developed by: Norwich University Applied Research Institute

POC: pro.norwich.edu • cmercer1@norwich.edu • (802) 485-2213

---

Web-Based. 4-6 Hours.

This course addresses the changing workforce as a result from the COVID-19 Pandemic situation, opening the door for remote work environments changing the landscape of cybersecurity and Work From Home (WFH) strategies. The need for home office and normal work strategy/infrastructures is becoming tightly coupled, requiring the use of different cyber-enabled systems, devices and services.

Course Objectives

• Introduce concepts related to the new and emerging WFH workforce, such as changing architectures, VideoConferencing platforms, cybersecurity policies/procedures, new technologies and new emerging threats (e.g., the changing threat landscape)
• End User Awareness best practices, Endpoint visibility (Security Suites/VPN), Edge security, Identity theft, social engineering, threat analysis, and Cybercrime and Operational Continuity
• Threat intelligence, analysis (network monitoring/analysis), and cyber hygiene measures that will help mitigate cybersecurity attacks. Ensuring data confidentiality, integrity and availability is paramount to the successful operation of any organizational entity

Course Developed by: CflA - University of Memphis

POC: cfia@memphis.edu • (901) 678-4270

---

Web-Based. 8 Hours; .8 CEUs.

Click Here to Register

This course educates members of the public in the general understanding and some common defense tactics that can be used to mitigate social engineering attacks. Designed for public and private personnel at all levels of government, law enforcement, the private sector and other stakeholders, this course provides students with an understanding of how social engineering attacks can be better mitigated by combining comprehensive security measures with an understanding and awareness of how such attacks can exploit human behaviors. Phishing, spear-phishing, water-holing, ransomware and other types of advanced persistent threats.

Course Developed by: CfIA - University of Memphis

cfia@memphis.edu • (901) 678-4270

---

Instructor-Led. 8 Hours; .8 CEUs.

Click Here to Register

This course provides participants with specific information regarding targeted cyber attacks, including advanced persistent threats. This information will place them in a better position to plan and prepare for, respond to and recover from targeted cyber attacks. Understanding Targeted Cyber Attacks will fill the gap in threat-specific training for cybersecurity as a community-driven course that focuses on the phases of targeted cyber attacks and the attacker methods used during each phase. Participants will also receive valuable information on cyber attack prevention, mitigation and response.

Course Objectives

• Understand basic concepts related to a targeted cyber attack
• Recommend strategies for preventing and mitigating targeted cyber attacks utilized during the reconnaissance phase
• Explain how targeted cyber attacks progress after the initial breach has occurred
• Recommend strategies for the preparation for, response to, and recovery from a targeted cyber attack

Prerequisites

There are no prerequisites, but participants are recommended to have successfully completed the following:
• AWR-136: Essentials of Community Cybersecurity
• AWR-173-W: Information Security Basics

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 4 Hours.

This survey course enables leaders to define and determine business risk related to cybersecurity in a multi-dimensional environment. Students are exposed to complex analysis and decisionmaking with consideration of converged catalysts (e.g., cyber, physical, informational) impacting operations. They will gain an appreciation for a standard taxonomy and introduced to methods to calculate risk. The course is based on Factor Analysis of Information Risk (FAIR) but does not purport to cover FAIR in its entirety.

At the end of this course, students will apply risk management techniques to identify and measure risk to their organization from multi-faceted threats incorporating cyber, physical and other means.

Course Objectives

• Recognize methods for formalized decision-making processes
• Utilize a common language taxonomy for risk management
• Understand methods for calculating and measuring risk

Target Audience

All users, management, and information technology practitioners.

Course Being Developed by: Norwich University Applied Research Institute

POC: pro.norwich.edu • cmercer1@norwich.edu • (802) 485-2213

---

Instructor-Led. 8 Hours.

Educational institutions of all sizes (including universities, colleges and K-12 school districts) are data rich making them targets for cyber-attacks. Cybersecurity readiness is not solely a technology issue; it includes managing student safety, well-being and digital risks. The leadership are responsible for managing the cybersecurity risk for our schools. This non-technical course will introduce key cybersecurity concerns for leaders and will foster discussions to build strategies of cybersecurity preparedness to ensure adequate resources are considered to meet data privacy and cybersecurity needs reducing their overall cyber risk.

Target Audience

This course is designed for university and college leadership and mid-level managers/administrators and K-12 School Administrators (Superintendents, principals, managers); school security staff (All Physical and IT-Cyber-security) and those that determine a school’s mission and purpose which can include School Board members and policy makers.

Course Being Developed by: Norwich University Applied Research Institute and The UTSA Center for Infrastructure Assurance and Security

POC: pro.norwich.edu • cmercer1@norwich.edu • (802) 485-2213

---

Web-Based. 6 Hours.

This survey course enables Awareness level course designed to address the technical needs of future workforce and industry professionals in various sectors including electric vehicle charging stations (EVCS). General topics to be covered in the course are: understanding various cyberattacks and their negative impacts on OTs and charging systems, OT threat actors, OT security measures for both Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA), detecting cyberattacks on the OTs, exploring mitigation solutions for cyberattacks on OTs, OT and security best practices.

Participants will understand different adversarial attacks on cyber-enabled Operational Technologies (OTs) and mitigation tools and techniques.

Course Objectives

• Students will be aware of the operational materials which need to be accounted for
• Students will understand the need to focus on safety and reliability in addition to confidentiality and accessibility
• Students will learn the best security monitoring and protection for industrial IoTs and OT interfaces
• Students will be able to understand OT security measures for both Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA)

Target Audience

Leaders or Technical Role or Users. The course will be useful to various stakeholders, such as local, state and federal governments, and industry professionals including future technical leaders.

Course Being Developed by: CflA - University of Memphis

POC: cfia@memphis.edu • (901) 678-4270

---

Web-Based. 6 Hours.

Awareness level course designed to provide Distributed Energy Resources related cybersecurity training, education and outreach program in order to address the technical needs of future workforce and industry professionals in energy/utility. This course will assess the current state of cybersecurity standards and develop methods for the grid-connected DERs under cyber threats for enhanced resiliency by applying appropriate physics-driven real-time monitoring and advanced data analytics, including machine learning and artificial intelligence on observed data.

Students will understand various cyberattacks and detecting cybersecurity vulnerabilities and solutions for various components of the distributed energy resources (DERs). Participants will be able to develop incident response guidelines and procedures for mitigating cyber risks on the cyber-physical components.

Course Objectives

• Students will be aware of cyberattacks on the distributed energy resources (DERs)
• Students will understand the need of SCADA systems, smart inverters, energy storage, and various controllers for the DERs
• Students will learn the best security monitoring and protection for industrial SCADA systems
• Students will be able to understand resiliency driven defense mechanisms for the system under coordinated cyberattacks

Target Audience

The course is useful to various stakeholders, such as local, state and federal governments, and industry professionals including future technical leaders.

Course Being Developed by: CflA - University of Memphis

POC: cfia@memphis.edu • (901) 678-4270

---

Instructor-Led. 24 Hours.

Designed to provide knowledge and skills to a targeted audience of information technology practitioners about the importance of IoT in society, the current components of typical IoT implementations and trends for the future. The course will cover IoT design considerations, constraints and interfacing between the physical world and a very large variety of devices that have not traditionally been considered as part of the IT Security problem. It will also cover key components of networking to ensure that students understand how IoT devices can be properly and securely connected to the Internet.

Upon completion of this course, students will have a better understanding of IoT device technologies such as sensing and actuating functions, IoT protocol stacks (Zigbee, 5G, NFC, MQTT, etc.), networking backhaul design and security enforcement, and data management for IoT platforms. Students will be guided through laboratory exercises designed to give them practical real-world experience, where they will learn how to secure and monitor IoT platforms consisting of a variety of sensors. Students will have a better understanding of how IoT interfaces with traditional information technology solutions with the confidence to carry out.

Course Objectives

• Define the term "Internet of Things"
• State the technological trends which have led to widespread use of IoT devices.
• Define what an embedded system is in terms of its interface
• Enumerate and describe the components of embedded systems
• Describe the interaction between software and hardware in an IoT device
• Name the core hardware components commonly used in IoT devices
• Describe the role of an operating system to support software in an IoT device
• Explain the use of networking and basic networking hardware

Target Audience

Information technology practitioners.

Course Being Developed by: CJI - University of Arkansas System

POC: cdi@cji.edu

---

Instructor-Led. 8 Hours.

This performance level course designed to provide hands-on content/labs. The hands-on activities will cover some topics from the security in operational technology (OT) course and some topics from cybersecurity in distributed energy resource (DER) course. This is important for state and local professionals and employees in specific sectors to transition theory to practice to more effectively deal with cybersecurity challenges.

The course will be useful to various stakeholders such as local, state and federal governments, and industry professionals including future Technical Leaders.

Target Audience

The course will be useful to various stakeholders such as local, state and federal governments, and industry professionals including future Technical Leaders.

Course Being Developed by: CflA - University of Memphis

POC: cfia@memphis.edu • (901) 678-4270

---

Instructor-Led. 8 Hours.

This course is designed as a tabletop activity simulating a community-wide cybersecurity event. Using a gamification approach, participants will strategize with a diverse group of stakeholders to plan for and respond from a cybersecurity incident that could have cascading effects across a community.

Specifically, this training will encourage participants to discuss budgeting and planning strategies; coordinate with other community stakeholders to respond to a cyber incident; and will inform participants of various recovery aspects that may be included in a cybersecurity program.

Course Objectives

• Participants will be able to summarize the relationship between organizational and community cybersecurity
• Develop an action plan for organizational or community cybersecurity preparedness
• Describe the cascading effects that a cyber-attack may have in a community
• Given a set of limited resources, decide which cybersecurity planning efforts can be implemented in an organization
• Relate how the NIST Cybersecurity Framework categories can be used to create or enhance a cybersecurity program
• Evaluate how information sharing can be used to prevent, detect, mitigate, respond and recover from a cybersecurity incident

Course Developed by: UTSA Center for Infrastructure Assurance and Security

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119

---

Instructor-Led. 12 Hours; 1.2 CEUs.

Click Here to Register

Community Preparedness for Cyber Incidents is a two-day, non-technical course designed to provide organizations and communities with strategies and processes to increase cyber resilience. During this 12-hour course, participants will analyze cyber threats and initial and cascading impacts of cyber incidents, evaluate the process for developing a cyber preparedness program, examine the importance and challenges of cyber related information sharing and discover low to no-cost resources to help build cyber resilience.

Prerequisites

Course AWR-136 Essentials of Community Cybersecurity

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 8 Hours; .8 CEUs.

Click Here to Register

The national and economic security of the United States depends on the reliable functioning of critical infrastructure. This course encourages collaboration efforts among individuals and organizations responsible for both physical and cybersecurity toward development of integrated risk management strategies that lead to enhanced capabilities necessary for the protection of our Nation's critical infrastructure. Participants will identify physical and cybersecurity concerns impacting overall infrastructure security posture, examine integrated physical and cybersecurity incidents and the evolving risks and impacts they pose to critical infrastructure, and explore resources that can be applied to improve security within an organization, business, or government entity.

Course Objectives

• Identify physical and cybersecurity concerns impacting overall infrastructure security posture
• Classify integrated physical and cybersecurity incidents and the evolving risks and impacts they pose to critical infrastructure
• Apply key concepts and resources to improve security within an organization or business

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 2 Hours.

Click Here to Register

Using the Community Cyber Security Maturity Model to develop a cybersecurity program will enable community leaders, network/security personnel and those individuals involved in developing or maintaining plans used for and throughout the community. This course assists participants to understand what is required to develop a coordinated, sustained, and viable community cybersecurity program. The course introduces participants at all levels to the DHS-supported Community Cyber Security Maturity Model (CCSMM) and can be used to guide communities and states in developing their own CCSMM-consistent cybersecurity programs. Participants are introduced to different resources that can be used for a community program.

Course Objectives

• Explain why the Community Cyber Security Maturity Model (CCSMM) was developed and summarize the purpose of the model
• Learn how to use the CCSMM to develop a cybersecurity program in their community
• Be able to explain how metrics, technology, training, processes and procedures, and finally assessment fit into the overall process of improving community cybersecurity at all levels
• Gain a clearer understanding of additional DHS, NIST and other resources and be able to recall government, regulatory and industry standard resources to be used for community cybersecurity efforts

Course Developed by: UTSA Center for Infrastructure Assurance and Security

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119

---

Instructor-Led. 16 Hours.

Designed as a collaborative community approach to identifying the gaps in cyber plans and the training needed in cybersecurity for all levels of community personnel and local critical infrastructure partners.

At the end of this course, participants will be able to conduct a community cybersecurity gap analysis resulting in a cybersecurity training plan for all levels of community personnel and local critical infrastructure partners.

Course Objectives

• Identify and assess the cybersecurity risk for his/her particular community
• Develop a community profile defining key people, capabilities and resources needed for community cybersecurity preparedness and resiliency
• Evaluate cybersecurity plans to identify gaps affecting community resiliency and potential cascading impacts to the community associated with a sophisticated cyber-attack
• Assess gaps in their cybersecurity training and prepare a training action plan for their community

Course Being Developed by: All NCPC Partners

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119

---

Instructor-Led. 16 Hours.

Through learning to conduct cybersecurity vulnerability assessments and developing a vulnerability remediation program, this course will help organizations to prepare and plan for cyber incidents.

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 8 Hours.

Every organization has critical information and technology assets that are essential to their business operations and require enhanced security. Organizational resources that can be dedicated to cybersecurity are finite; therefore, those resources should be applied deliberately and strategically focusing on the most important assets. This course will enable participants to identify their high value assets, prioritize them, assess them and create a remediation action plan. The course is designed to align with the Federal HVA Program but provides a scalable and flexible approach that will assist any size SLTT organization to identify their critical assets based on their individual requirements.

At the end of this course, participants will be able to identify, prioritize and assess their high value assets resulting in a remediation action plan.

Course Objectives

• Identify key critical asset stakeholders in their organization and community
• Identify their mission essential functions (MEFs) and identify the assets needed to support those MEFs
• Using a tool, participants will be able to prioritize critical assets also known as high value assets (HVAs) resulting in an HVA inventory
• Using a tool, participants will be able to assess their HVAs against the NIST Cybersecurity Framework resulting in a remediation action plan

Target Audience

Designed for government, private sector and critical infrastructure decision makers, mid-level management, policymakers, administrators, information security and cybersecurity personnel. The course is also applicable for individuals in any size organization or agency who has an interest and/or influence to integrate High Value Assets (HVA) processes into their cybersecurity program.

Course Being Developed by: UTSA Center for Infrastructure Assurance and Security

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119

---

Instructor-Led. 8 Hours.

This is an awareness-level course that is designed to teach exercise planners the importance of incorporating cyber into all hazard emergency management. While most exercise planners know cyber-hazards exists, they may have not been taught how to incorporate those hazards into their exercise planning. Furthermore, exercise planners may not know the extent to which cyber hazards impact critical infrastructure. This course will ensure exercise planners are aware of the hazards related to cyber-enabled threats and how to address those hazards within their exercises.

Prerequisites: Participants should understand the role of exercises in emergency management functions, plans, mitigation, preparedness, response and recovery.

Course Objectives

• The purpose and types of exercises
• A review of Homeland Security Exercise and Evaluation Program (HSEEP), Threat Hazard Identification and Risk Assessment (THIRA), and Stakeholder Preparedness Review (SPR)
• Discussion of Cyber as a hazard including current threat landscape for SLTT
• Incorporating cyber events into exercises and adding cyber exercises to exercise program.

Target Audience

This course targets exercise planners; EP team leaders; THIRA managers; emergency management personnel; and cyber plan and policy managers.

Course Being Developed by: Norwich University Applied Research Institute

POC: pro.norwich.edu • cmercer1@norwich.edu • (802) 485-2213

---

Web-Based. 4 Hours.

This course is designed to provide students with a process for development of cybersecurity policies. Students will learn six key tasks to consider when developing policies, basic structure of a cybersecurity policy, and the types of cybersecurity policies an organization should consider. In this course, students will understand how to develop and implement cybersecurity policies that address cybersecurity practices and controls needed for their organization.

Course Objectives

• Understand the key components of cybersecurity policies
• Students will know how to define the content that should be included in a cybersecurity policy
• Students will have an understanding of and the ability to explain additional security policies that should be implemented within an organization
• Students will be able to highlight challenges or obstacles in the cybersecurity process and know what steps to take to overcome the challenges or obstacles

Target Audience

This course is designed for critical infrastructure managers, local government and private sector management, policymakers, emergency management, information security and cybersecurity personnel and managers. Individuals will be targeted whose official duties are part of the strategic planning process associated with successful agency/organizational operation, data integrity and data security.

Course Being Developed by: UTSA Center for Infrastructure Assurance and Security

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119

---

Instructor-Led. 8 Hours.

Cybersecurity preparedness and response in a resource-constrained enterprise, partnering Information Technology with Operational Technology security and operations professionals, and with a detailed focus on the business and regulatory environment that public and rural electricity providers experience.

At the end of this course, students are better prepared to plan for, exercise, and respond during cyber (and other) incidents across the entity in a more cohesive partnership and increased understanding of the unique needs of each other. During an incident, this will result in improved communication, increased resilience, and enhanced safety for providers and the public (customers), alike.

Target Audience

Information Technology, Operational Technology, and operations staff, primarily at public and rural (cooperative) electricity providers, with benefit applicable to other resource-constrained critical infrastructure providers (e.g., water, transportation) in similar environments.

Course Being Developed by: Norwich University Applied Research Institute

POC: pro.norwich.edu • cmercer1@norwich.edu • (802) 485-2213

---

Web-Based. 10 Hours; 1.0 CEUs; 1 Semester Hour; 2 hours - ACE (Note: two credit hours through ACE are provided only if all three courses, AWR-169, AWR-176 & AWR-177, within the Online for Business Professionals (Cyber 301) track are completed).

Click Here to Register

This course provides practical guidelines on responding to incidents effectively and efficiently as part of an incident response program. Primary topics include detecting, analyzing, prioritizing, and handling cyber incidents. Real-world examples and scenarios to help provide knowledge, understanding, and capacity for effective cyber incident analysis and response.

Course Objectives

• Explain the concepts of cyber incident management
• Explain the preparation phase of cybersecurity incident management policies, services and procedures, the organizational structure, roles and personnel, and cyber incident management training and awareness programs
• Explain how to detect cyber incidents, cyber incident containment, eradication and recover and proactive and post incident services

Course Developed by: NERRTC - Texas A&M Engineering Extension Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 24 Hours; 2.4 CEUs.

To register, email BCS@teex.tamu.edu.

The Cybersecurity Incident Response for IT Personnel course is designed to address the gap in specific technical skills needed for an effective cyber response. This course will also help improve the limited availability of targeted hands-on IT and security training focused on cyber-attacks. This training focuses on government and private sector technical personnel who have intermediate and advanced knowledge of network operations and/or the responsibility for network security.

Course Objectives

• Explain elements of cybersecurity
• Determine threat levels of cyber incidents through detection and analysis
• Examine strategies for containing, eradicating, and recovering from a cyber incident
• Practice network enumeration to become familiar with the virtual cyber environment
• Manage devices by implementing tools in the virtual environment
• Perform cybersecurity response actions for a variety of simulated cyber incidents in the virtual environment
• Operate as a team to manage a multi-faceted, advanced, persistent, simulated threat in the virtual environment

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 6 Hours; .6 CEUs.

Click Here to Register

This online course addresses the need for a strategic-level "how to" of responding to and sharing information about cybersecurity incidents through the cyber annex vehicle. At the end of this course, participants should possess the fundamentals needed to design and develop a cyber annex for states, locals, tribes and/or territories (SLTTs). It addresses what the annex is, how it is used, who should participate in the design, implementation and execution. This course is suitable for personnel assigned to work in the jurisdiction's emergency operations center, policy makers, elected and/or appointed officials, emergency responders, IT personnel with responsibilities for identifying and responding to cyber events for SLTT government, private industry and critical infrastructure representatives.

Course Developed by: UTSA Center for Infrastructure Assurance and Security

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119

---

Web-Based. 10 Hours; 1.0 CEU; 1 Semester Hour; 2 hours - ACE (Note: two credit hours through ACE are provided only if all three courses, AWR-169, AWR-176 & AWR-177, within the Online for Business Professionals (Cyber 301) track are completed).

Click Here to Register

Disaster Recovery for Information Systems trains business managers to respond to varying threats that might impact their organization's access to information. The course provides requisite background theory and recommended best practices needed by managers to keep their offices running during incidents of different types. Topics include an overview of business continuity planning; disaster recovery planning; guides for implementing and managing disaster recovery plans, a discussion of technical vulnerabilities faced by organizations and an examination of legal issues that may confront an organization.

Course Developed by: NERRTC - Texas A&M Engineering Extension Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 2 Hours; .2 CEUs.

Click Here to Register

This course is the second training in a two-part course. The course is intended to introduce the basics of the incident response process to the Information Technology personnel in Police, Fire or EMS departments. The content of the course will include: cyber incidents in Police, Fire, EMS and IT departments, and developing a response plan to cyber incidents.

Course Developed by: Norwich University Applied Research Institute

POC: pro.norwich.edu • norwichpro@norwich.edu • (802) 485-2213

---

Instructor-Led. 24 Hours; 2.4 CEUs.

To register, email BCS@teex.tamu.edu.

The course is designed to assist jurisdictions with coordinating and managing response efforts between emergency response organizations and critical infrastructure cybersecurity personnel, necessary as a result of a cyber incident. The course will help to ensure that traditional emergency management personnel and cybersecurity personnel recognize the importance of working together to mitigate the effects of a cyber incident. This course utilizes the Emergency Management Exercise System (EM*ES) incident simulation software, which provides many features that resemble or imitate actual incident management systems.

Course Objectives

• Explain aspects of cyber incidents
• Examine the management structure of the Emergency Operations Center (EOC)
• Examine cyber incident management activities
• Interpret the EOC management process
• Manage the coordinated response efforts for simulated cyber incidents within an activated EOC

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 16 Hours; 1.6 CEUs.

To register, email BCS@teex.tamu.edu.

The Recovering from Cybersecurity Incidents course is designed to provide guidance to a jurisdiction on the actions necessary to effectively recover from a cybersecurity attack. It discusses the pre- and post-incident programmatic activities needed for short-term and long-term recovery. The course bridges the different worlds of information technology and emergency management. This training is particularly pertinent to IT management, emergency management personnel, as well as any other government, critical infrastructure, or private sector personnel who has the responsibility for recovering after a cyber incident. This course is intended to be delivered across the country to jurisdictions at all response levels: local, state, tribal, territorial, as well as private industry.

Course Objectives

• Explain the essential concepts of recovering from a cyber incident
• Explain the relationship between cybersecurity and emergency management
• Examine recovery preparedness for cybersecurity incidents
• Describe short-term and long-term recovery operations for cybersecurity incidents
• Develop an incident recovery action plan

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 6 Hours; .6 CEUs.

Click Here to Register

This course addresses different forms of authentication, such as two-factor, multi-factor and other authentication products protections addressing identity compromise. Designed for public and private personnel at all levels of government, law enforcement, the private sector and other stakeholders, CIAA provides a broad-base of knowledge connecting the underlying concepts of digital identity to how people, devices and systems are authorized to access digital resources and services. This course also covers "best practices" for using identity management and access control techniques and mechanisms to develop authentication standards.

Course Developed by: CfIA - University of Memphis

cfia@memphis.edu • (901) 678-4270

---

Instructor-Led. 32 Hours.

To register, email jwnobles@cji.edu.

Comprehensive Cybersecurity Defense is a basic-level course designed for technical personnel who monitor and protect our nation's critical cyber infrastructure. The course introduces students to cyber-defense tools that will assist them in monitoring their computer networks and implementing cybersecurity measures to prevent or greatly reduce the risk of a cyber-based attack. This course integrates hands-on computer lab applications to maximize the student's learning experience.

Course Objectives

• Effectively protect computer networks by a survey of the following: planning and preparation of defenses, installation and administration of defenses, hardening network defenses, monitoring defenses, and testing and modifying defense
• Increase understanding of historical perspectives, network design, and emerging methodologies in computer hacking

Preferred Prerequisites

This course is an intermediate level hands-on course where knowledge and experience is required. Participants should have a minimum of two years' experience as a system or network administrator, or as an IT security specialist. Any experience with penetration testing, plus a minimum of three years' experience as a system or network administrator or an IT security specialist is preferred.

Course Developed by: CJI - University of Arkansas System

POC: jwnobles@cji.edu • (501) 570-8058

---

Instructor-Led. 32 Hours.

Click Here to Register

Cybersecurity First Responder is an intermediate-level course designed for technical personnel who are first responders to any type of cyber-based attack against our nation's critical cyber infrastructure. Blended learning methods are utilized, to include a balance of classroom lecture, hands-on laboratory exercises, and the use of cyberterrorism response tools against real world simulated cyber-attacks. Students learn the proper steps of an incident response to include incident assessment, detection and analysis, and the containing, eradicating, and recovering process from a system or network-based attack.

Course Objectives

• Define steps for handling cybersecurity attacks, including incident assessment, detection and analysis for security incidents, and containing, eradicating and recovering from a system or network-based attack
• Identify, define and practice with tools and resources required in the cybersecurity incident response process in order to accurately and successfully detect, analyze and mitigate a cyberattack
• Describe the CFR process to include emergency assessment, containment, eradication, restoration and the post-emergency response
• Describe secondary incident response techniques and the proper integration of these activites into the CFR process
• Define the proper techniques used to properly review, critique and build upon the CFR process through a series of review meetings and lessons learned methods

Preferred Prerequisites

Any experience with handling cyber-incidents; plus, a minimum three years' experience as a system or network administrator, or a minimum of four years' experience as a cybersecurity professional.

Course Developed by: CJI - University of Arkansas System

POC: jwnobles@cji.edu • (501) (501) 570-8058

---

Web-Based. 4 Hours.

Click Here to Register

Cybersecurity Fundamentals is an introductory level course designed for new and transitioning Information Technology professionals. Students learn preferred network topologies and the uses of Intrusion Detection/Prevention systems; the use and maintenance of firewalls and anti-virus software; to recognize various types of network based attacks; to recognize social engineering attacks, both remote and in-person; and the importance of establishing policies, and disaster planning.

Course Developed by: CJI - University of Arkansas System

POC: jwnobles@cji.edu • (501) 570-8058

---

Instructor-Based. 8 Hours.

Click Here to Register

This course provides an understanding of cybersecurity resiliency in industrial control systems (ICS). The course will review the Internet of Things (IoT), vulnerabilities within Operational Technology (OT) and Supervisory Control and Data Acquisition (SCADA) systems, methods of detecting and responding to cyber attacks in the systems, as well as actions that can be taken by non-technical personnel to mitigate or minimize the effects of cyber attacks.

This course is designed for non-IT operators, managers, and technicians within critical infrastructure sectors such as power, water/wastewater, manufacturing and risk management personnel.

Course Objectives

• Define Internet of Things (IoT) and IndustrialInternet of Things (IIoT)
• Identify ICS technical vulnerabilities, ICS human vulnerabilities and other risks to critical infrastructure
• Discuss the risk management process and convenience versus usability
• Identify cybersecurity programmatic considerations for ICS
• Identify limitations to mitigating risk in ICS/SCADA
• Discuss how to detect cyber attacks and vulnerabilities
• Discuss how the operator can detect cyber issues with ICS systems
• Discuss containment, eradication, and recovery techniques
• Discuss considerations for incident management in critical infrastructure
• Recognize critical decisions and false alarms

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 32 Hours.

Cybersecurity Proactive Defense (CPD) is an advanced-level course designed for technical personnel who monitor and protect our nation's critical cyber infrastructure. CPD uses hands-on computer lab applications to simulate advanced attack vectors, sequential and escalating attack steps, and hands-on attack execution. Students learn penetration testing skills, defense analysis techniques, and real-time response and threat mitigation steps.

Course Developed by: CJI - University of Arkansas System

POC: jwnobles@cji.edu • (501) 570-8058

---

Web-Based. 7 Hours; .7 CEUs; 1 Semester Hour; 2 hours - ACE (Note: two credit hours through ACE are provided only if all four courses, AWR-138, AWR-139, AWR-173 & AWR-178, within the Online for IT Professionals (Cyber 201) track are completed).

Click Here to Register

This course explains investigative methods and standards for the acquisition, extraction, preservation, analysis, and deposition of digital evidence from storage devices. Using realistic forensics situations, learn how to find traces of illegal or illicit activities using computer forensics tools and manual techniques. Also, learn how to recover data intentionally hidden or encrypted by perpetrators.

Course Objectives

• Explain data storage, components of common storage devices, memory management and file system organization
• Identify the forensics investigative process, requirements, documentation and rules for collecting and acquiring evidence
• Describe evidentiary reporting to include activities of expert witnesses, types of acceptable evidence and the requirements of written and oral reports
• Understand forensics issues pertaining to cloud computing, as well as mobile and gaming console devices

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 4-5 Hours.

This course will focus primarily on end-user's perspective. In particular, various security-related challenges faced by end-users and their impact on data privacy. The course will also include content concerning online content providers and local ISPs on access rights, unintentional data sharing, mobile apps and how to be compliant to a NIAP Protection Profile (PP), etc.

Course Objectives

• Setting up different types of accounts and credential sharing, hosted firewalls, routers, switch configurations, network zoning, device lock mechanisms, biometric verification, and seamless controlled access to information across different cyber enabled device
• Security-awareness training will enable end-users to understand end-to-end encryption (such as VPN, SSH), security threats from Apps and data sharing

Course Developed by: CflA - University of Memphis

POC: cfia@memphis.edu • (901) 678-4270

---

Web-Based. 4 Hours; .4 CEUs.

This course addresses best practices that can be used to assist in protecting an organization against advanced persistent threats. Designed for public and private personnel at all levels of government, law enforcement, the private sector and other stakeholders, the Examining Advanced Persistent Threats course provides a broad base of knowledge focused on how to prepare for, respond to and recover from the impacts of advanced cyber-attacks that exploit targeted victims. This course also uses interactive simulations to enhance students' understanding of complex attack paths and countermeasures for various advanced persistent threats, including ransomware and Stuxnet.

Course Developed by: CfIA - University of Memphis

cfia@memphis.edu • (901) 678-4270

---

Web-Based. 13 Hours; 1.3 CEUs; 1 Semester Hour; 2 hours - ACE (Note: two credit hours through ACE are provided only if all three courses, AWR-169, AWR-176 & AWR-177, within the Online for Business Professionals (Cyber 301) track are completed).

Click Here to Register

This Information Risk Management course addresses topics related to information assets, identifying risks and management processes. Receive training on information risk-related tools and technologies for better understanding of potential threats and vulnerabilities in online business. Learn best practices and how to apply levels of security measures.

Course Objectives

• Demonstrate understanding of the concept of risk
• Demonstrate understanding of the concept of hazard
• Demonstrate understanding of the concept of threat
• Demonstrate understanding of the concept of vulnerability
• Demonstrate understanding of the goal of information security risk management
• Demonstrate understanding of the components of information security risk management
• Demonstrate understanding of the distinctions between business continuity planning and risk management
• Describe information security stakeholders
• Describe the steps in the risk context process
• List and describe the basic types of IT components
• List the main hardware asset attributes that may be used in an asset inventory system
• List the main procedure asset attributes that may be used in an asset inventory system
• Describe human asset attributes that may be used in an asset inventory system
• List the main methods used to collect asset inventory data

Course Developed by: NERRTC - Texas A&M Engineering Extension Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 13 Hours; 1.3 CEUs; 1 Semester Hour; 2 hours - ACE (Note: credit hours through ACE are provided only if all four courses, AWR-138, AWR-139, AWR-173 & AWR-178, within the Online for IT Professionals (Cyber 201) track are completed).

Click Here to Register

This Information Security Basics course provides entry and mid-level IT staff a technical overview of information security, focusing on the knowledge to identify and stop various cyber threats. General concepts and topics covered include TCP/IP protocol, introductory network security, introductory operating system security and basic cryptography.

Course Objectives

• Explain the goals of the information security professional and attackers to include the four basic types of attacks most likely to be encountered
• Explain Confidentiality, Integrity, and access controls as they apply to the Biba Integrity and Bell-LaPuda Confidentiality Models
• Explain the use of a layered architecture model to design and secure a TCP/IP Network
• Identify the common techniques of offensive attacks, as well as defensive tactics and appliances available, to include wireless vulnerabilities
• Explain the vulnerabilities of current operating systems and the solutions to guard against common exploits
• Recognize the different types of cryptographic algorithms and their vulnerabilities to include digital hardware encryption

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 7.5 Hours; .8 CEUs.

Click Here to Register

This introductory course is intended to help prepare learners for the technical challenges associated with conducting vulnerability assessments and/or penetration testing. The six course modules introduce the basic skills learners will need to begin mastering in order to conduct or manage vulnerability assessments. These skills range from the "soft skills" of the ethics involved in vulnerability assessments, to the more technical skills of network scanning and packet analysis. In addition, learners are provided with an introduction to a common, open source tool, Metasploit, which is used by red teams, as well as blue teams to test networks. The content covered in this course provides learners with an understanding of the skills and knowledge needed to successfully learn how to conduct assessments in future, more technical and hands-on courses.

Prerequisites

Participants in this course should be currently serving in an Information Technology support capacity or come from an Information Technology middle management position. Although there are no prerequisites for this course, it is expected that participants have network and internet proficiency, as well as familiarity with both Windows and Linux file and operating systems, as well as basic command line use.

Course Being Developed by: Norwich University Applied Research Institute

POC: pro.norwich.edu • norwichpro@norwich.edu • (802) 485-2213

---

Instructor-Led. 32 Hours.

Malware Prevention, Discovery, and Recovery (MPDR) is an intermediate-level course is designed for technical personnel who monitor and protect our nation's critical cyber infrastructure. Students learn how to recognize, identify, and analyze malware; the remediation process to eliminate the malware; and proper procedures to recover from the attack and regain network connectivity in a timely manner. This course integrates hands-on computer lab applications to maximize the student's learning experience.

Course Being Developed by: CJI - University of Arkansas System

POC: jwnobles@cji.edu • (501) 570-8058

---

Web-Based. 5 Hours; .5 CEUs; 1 Semester Hour; 2 hours - ACE (Note: credit hours through ACE are provided only if all four courses, AWR-138, AWR-139, AWR-173 & AWR-178, within the Online for IT Professionals (Cyber 201) track are completed).

Click Here to Register

The Network Assurance course covers secure network practices to protect networked systems against attacks and exploits. Topics include authentication, authorization and accounting (AAA), as well as firewalls, intrusion detection/prevention, common cryptographic ciphers, server and client security, and secure policy generation.

Course Objectives

• Understand the purpose of a firewall, application layer firewalls and stateful packet inspection firewalls
• Differentiate between NAT and PAT firewalls
• Understand the purpose of Intrusion Detection Systems
• Understand the general functionality of host-based and network-based ID
• Understand anomaly detection
• Understand the purpose and protection of Intrusion Prevention Systems and and host IPS
• Understand the need for maintaining the security of encryption keys
• Differentiate between common encryption standards
• Understand common VPN topologies and configurations (tunneling, etc.)
• Understand encryption algorithms at varying layers of the TCP/IP stack
• Understand the purpose of logging and auditing
• Understand data logging in Unix (and related) systems and in Windows
• Understand the need for securing log files
• Obtain familiarity with common functionality offered by Windows and Unix auditing tools
• Differentiate between authentication and authorization

Prerequisites

• AWR-173 Information Security Basics
• OR have a good knowledge and understanding of the following topics: Patching and updating; Firewalls; Malware; Confidentiality, integrity and availability; Disclosure, alteration and denial; Vulnerabilities, attacks and controls; Types of attacks and attackers; Controls; Access Control; TCP/IP Networking; Networking basics and security; Operating system security; Encryption.

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Web-Based. 9 Hours; 0.9 CEUs; 1 Semester Hour; 2 hours - ACE (Note: credit hours through ACE are provided only if all four courses, AWR-138, AWR-139, AWR-173 & AWR-178, within the Online for IT Professionals (Cyber 201) track are completed).

Click Here to Register

The Secure Software course teaches programming practices used to secure applications against attacks and exploits. Fundamental concepts and topics covered include secure software development, defensive programming techniques, secure design and testing, and secure development methodologies.

Course Objectives

• Demonstrate understanding of the concepts of reliability, predictability and traceability
• Demonstrate knowledge of software errors
• Demonstrate understanding of the need for simplicity in secure software programming
• Demonstrate understanding of vulnerabilities
• Demonstrate knowledge of common security requirements
• Demonstrate understanding of the concept of awareness
• Demonstrate understanding of the importance of and uses of vulnerability databases
• Demonstrate knowledge of input validation
• Demonstrate understanding of the concepts of buffer overflow and race conditions
• Demonstrate knowledge of compartmentalization and its implementation methods
• Demonstrate understanding of the concepts of obscurity, obfuscation and encapsulation
• Demonstrate knowledge of a basic framework for software architecture design
• Demonstrate understanding of the need for and benefits of security modeling
• The trainee will demonstrate knowledge of five steps for secure design
• Demonstrate knowledge of common design objectives

Course Developed by: NERRTC - Texas A&M Engineering Extensive Service

POC: TEEX.org/Cyber • BCS@teex.tamu.edu • (800) 541-7149

---

Instructor-Led. 24 Hours.

This course will train students to conduct traffic analysis on their internal networks by doing a "deep-dive" into network traffic analysis using Wireshark and other tools to identify regular and anomalous network traffic. It will teach techniques necessary to identify network attacks by context and type.

Course Objectives

• Understand network traffic types and identifying attacks against their networks, as well as allowing them to identify internal hazards
• Discussions and hands-on exercises will familiarize the students with Wireshark and other Network analysis tools

Course Developed by: CJI - University of Arkansas System

POC: jwnobles@cji.edu • (501) 570-8058

---

Web-Based. 5 Hours.

This course will address concepts related to Zero Trust and Access Control. Students will learn different forms of access control and their usages in practice, the concept of zero trust, the shift from perimeter-based security to Zero Trust, and Zero Trust implementation.

Course Objectives

• Having a better understanding of identity access control and its usages in practice
• Having a better understanding of the tenets of Zero Trust
• Understanding the shift from perimeter-based security to Zero Trust
• Having a better understanding of Zero Trust implementation; authentication; asset inventory, information flow, and account management and auditing

Target Audience

This developed for critical infrastructure managers, local government and private sector management, policymakers, emergency management, information security and cybersecurity personnel and managers. Individuals targeted include those whose official duties are part of the strategic planning process associated with successful agency/organizational operation, data integrity and data security.

Course Developed by: CflA - University of Memphis

POC: cfia@memphis.edu • (901) 678-4270

---

16 Hours. Instructor-Led

This course will show SLTTs how to integrate cybersecurity information sharing into their community programs. Community Cybersecurity Information Sharing Integration will train students to strategically design and implement a cybersecurity information sharing program for their state, territory, tribe, jurisdiction, or region. This will include governance; creating public and private partnerships; services and capabilities; and coordinating efforts to prevent, mitigate, and counter attacks for a community.

Course Developed by: UTSA Center for Infrastructure Assurance and Security

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119

---

16 Hours. Instructor-Led

The purpose of analysis is to produce intelligence that decreases uncertainty in decision making and therefore reduces risk. This course introduces the information analysis process and how an organization can use it to identify, define and mitigate cybersecurity threats. The intent is to provide participants with a general understanding of the tools and processes needed for an analysis team to create cybersecurity information and intelligence within their organization. This course establishes a framework for an analytical process, including establishing information and intelligence requirements as well as collecting, processing, analyzing and exploiting relevant data to generate products that provide the organization with cybersecurity situational awareness. Shared analysis can provide actionable information, reduce uncertainty, and thereby reduce risk to enable decision makers.

Course Objectives

• Establish cyber threat intelligence collection methods
• Cyber threat intelligence analysis
• Understand cyber threat intelligence dissemination and disclosure, including Traffic Light Protocol
• Using Open Source Intelligence

Course Developed by: UTSA Center for Infrastructure Assurance and Security & CJI - University of Arkansas System

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119

---

Web-Based. 8 Hours; .8 CEUs.

Click Here to Register

This course assists communities of interest to establish an Information Sharing and Analysis Organization (ISAO). The course will introduce the value proposition of creating an ISAO and provide considerations to joining an existing ISAO. The course will closely follow the guidance provided by the ISAO Standards Organization (ISAO SO), whose mission is to "improve the nation's cybersecurity posture by identifying standards and guidelines for robust and effective information sharing and analysis related to cybersecurity risks, incidents, and best practices".

Course Developed by: UTSA Center for Infrastructure Assurance and Security

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119

---

Web-Based. 2 Hours; .2 CEUs.

Click Here to Register

This course is designed to introduce the basics of the cybersecurity information sharing processes. Participants will have an increased knowledge of cybersecurity information sharing and an understanding of the steps taken to join or establish an Information Sharing and Analysis Organization (ISAO) or Information Sharing and Analysis Center (ISAC).

Course Objectives

• The importance of Cyber-Security Information Sharing
• Information sharing organizations and what they do
• Steps for cyber-security information sharing and analysis

Course Developed by: Norwich University Applied Research Institute

POC: pro.norwich.edu • norwichpro@norwich.edu • (802) 485-2213

---

16 Hours. Instructor-Based

This course introduces fundamental cyber information sharing concepts that can be incorporated into a cybersecurity program for both inside and outside an agency or organization. It introduces the purpose and value of information sharing and how sharing can assist with cyber incident preparedness and response before, during and after a cyber incident occurs. It will identify types of shared cyber information; explore when to share information; and will explore attributes found when reporting cyber information.

Course Developed by: UTSA Center for Infrastructure Assurance and Security

POC: CIAS.UTSA.edu • cias@utsa.edu • (210) 458-2119