National Cybersecurity
Preparedness Consortium

Leadership & Management

Any leader in an organization or community. Leaders may have a technical or non-technical background. A leader has some level of influence or decision-making authority within an organization or community.

Community Cybersecurity Information Sharing Integration

This course will introduce foundational cybersecurity information sharing concepts that can be leveraged to build a community information sharing collaborative. It will establish the purpose and value of community information sharing; and will explore how sharing can assist communities with cyber incident preparedness and response before, during and after a cyber incident occurs.

MGT-478

16 hours

Learn More

Community Cybersecurity Preparedness Simulation

This course is designed as a tabletop activity simulating a community-wide cybersecurity event. Using a gamification approach, participants will strategize with a diverse group of stakeholders to plan for and respond from a cybersecurity incident that could have cascading effects across a community. Specifically, this training will encourage participants to discuss budgeting and planning strategies; coordinate with other community stakeholders to respond to a cyber incident; and will inform participants of various recovery aspects that may be included in a cybersecurity program.

MGT-301

8 hours

Learn More

Cybersecurity for Educational Leaders

This is an awareness-level, non-technical course that is focused on educational institutions with training to assist them in addressing cybersecurity threats. Educational institutions of all sizes (including universities, colleges and K-12 school districts) are data rich making them targets for cyber-attacks. Cybersecurity readiness is not solely a technology issue; it includes managing student safety, well-being and digital risks. The leadership are responsible for managing the cybersecurity risk for our schools.

AWR-301

, ,

8 hours

Learn More

Cybersecurity Fundamentals

Cybersecurity Fundamentals is an introductory level course designed for new and transitioning Information Technology professionals. Students learn preferred network topologies and the uses of Intrusion Detection/Prevention systems; the use and maintenance of firewalls and anti-virus software; to recognize various types of network based attacks; to recognize social engineering attacks, both remote and in-person; and the importance of establishing policies, and disaster planning.

AWR-418-W

4 hours

Learn More
Register

Cybersecurity Risk Awareness for Officials and Senior Management

This is a non-technical course designed to develop awareness of cybersecurity risks for elected officials, appointed officials and other senior managers so that they are better informed to properly protect the jurisdiction/organization during a cybersecurity incident. It is designed to help officials and senior management work more effectively with their Information Technology (IT) departments to mitigate cyber threats. Upon successful completion of the course, participants shall have a better understanding of the cybersecurity risks that their jurisdiction or organization faces and how to work with their IT teams and other departments to mitigate those risks.

AWR-383

4 hours

Learn More
Register

Cybersecurity Vulnerability Assessment and Remediation

This course is designed to address specific technical and professional skills needed to assess, document, remediate and report on cybersecurity vulnerability assessments within organizations through a series of lectures and hands-on activities. Activities include examining, analyzing, and prioritizing assets, risks and vulnerabilities to develop a vulnerability assessment report that could be delivered to organizational leadership. This course utilizes active discussions and activities to extend the participant’s understanding of vulnerability assessments.  

MGT-303

16 hours

Learn More
Register

Demystifying Cyber Attacks

This course, through discussion, pre-recorded attacks and live example attacks, will demystify common cyber attacks for non-technical participants. Participants will also learn how common cyber attacks can be disrupted at various points of the cyber kill chain using various mitigation and response strategies. Upon successful completion of this course, participants will have a better understanding of the progression of common cyber attacks; and, where and how they can be prevented or disrupted.

AWR-421

8 hours

Learn More
Register

Developing a Cyber Security Annex for Incident Response

Cyber-attacks occur more frequently and have become increasingly sophisticated. Cybersecurity events now have the potential to significantly disrupt the business operations of government and critical infrastructure services. Public and private sectors, in the United States, are at increasing and continual risk of surprise attacks from nation-state and non-state actors. (Burgess, 2018) The National Response Framework describes how preparedness can be achieved by developing an incident annex for each hazard. Incident annexes describe coordinating structures used to deliver core capabilities and support response missions unique to a specific type of incident.

AWR-366-W

6 hours

Learn More
Register

Disaster Recovery for Information Systems

Disaster Recovery for Information Systems trains business managers to respond to varying threats that might impact their organization’s access to information. The course provides requisite background theory and recommended best practices needed by managers to keep their offices running during incidents of different types. Topics include an overview of business continuity planning; disaster recovery planning; guides for implementing and managing disaster recovery plans, a discussion of technical vulnerabilities faced by organizations and an examination of legal issues that may confront an organization.

AWR-176-W

1 hours

Learn More
Register

Establishing an Information Sharing and Analysis Organization

The growing Information Sharing and Analysis Organization (ISAO) ecosystem provides an opportunity to empower the nation to become more educated and effective in preventing, detecting and responding to the increasingly sophisticated landscape of cyber threats. There are considerable challenges with the vast quantity of information, the complexities of analysis and the uncertainties of sharing data with a large network of organizations. This course assists communities of interest to establish an Information Sharing and Analysis Organization (ISAO).

AWR-381-W

8 hours

Learn More
Register

Examining Advanced Persistent Threats

Today’s advanced persistent threats (APTs) are increasingly sophisticated, varied, targeted, aggressive and successful. There is an increasing deployment of and dependence on Internet of Things (IoT) for remote access devices to National Critical Infrastructure Sectors and Services (NCISS). Inadequate deployment and maintenance of security on these systems could provide opportunities for attackers to harm to the American citizenry through NCISS infrastructure and associated resource disruption.

AWR-403-W

4 hours

Learn More
Register

Integrating Cyber Hazard Response into Exercise Planning

This is an awareness-level course that is designed to teach exercise planners the importance of incorporating cyber into all hazard emergency management. While most exercise planners know cyber-hazards exists, they may have not been taught how to incorporate those hazards into their exercise planning. Furthermore, exercise planners may not know the extent to which cyber hazards impact critical infrastructure. This course will ensure exercise planners are aware of the hazards related to cyber-enabled threats and how to address those hazards within their exercises.

AWR-432

4 hours

Learn More

Integration of Cybersecurity Personnel into the Emergency Operations Center for Cyber Incidents

Traditionally, cybersecurity is the responsibility of each organization individually using their own information security and technology personnel to manage threats. However, the physical consequences of a cyber incident are a shared responsibility that involves all levels of government, law enforcement, the private sector and other “stakeholders”. With this shared responsibility, there is a clear need to bring IT professionals and traditional emergency management personnel together to prepare for, respond to, and recover from the impacts of a cyber incident.

MGT-456

24 hours

Learn More
Register

Introduction to Cyber Incident Management

This course provides practical guidelines on responding to incidents effectively and efficiently as part of an incident response program. Primary topics include detecting, analyzing, prioritizing, and handling cyber incidents. Real-world examples and scenarios to help provide knowledge, understanding, and capacity for effective cyber incident analysis and response. This advanced level course is designed to teach students the fundamental of cyber incident analysis and responses.

AWR-169-W

10 hours

Learn More
Register

Introduction to Information Sharing and Analysis Organizations

This course introduces the basics of the cybersecurity information sharing processes. Participants will gain knowledge of cybersecurity information sharing and an understanding of how to join or establish an Information Sharing and Analysis Organization (ISAO) or Information Sharing and Analysis Center (ISAC). This course introduces elected officials at multiple levels (State, Local, Tribal, Territorial), as well as senior management and decision-makers (including for commercial entities), to the value proposition of sharing cybersecurity information.

AWR-398-W

2 hours

Learn More
Register

Organizational Cybersecurity Information Sharing

This course introduces fundamental cyber information sharing concepts that can be incorporated into a cybersecurity program for both inside and outside an agency or organization. It introduces the purpose and value of information sharing and how sharing can assist with cyber incident preparedness and response before, during and after a cyber incident occurs.

MGT-473

16 hours

Learn More

Physical and Cybersecurity for Critical Infrastructure

The national and economic security of the United States depends on the reliable functioning of critical infrastructure. This course encourages collaboration efforts among individuals and organizations responsible for both physical and cybersecurity toward development of integrated risk management strategies that lead to enhanced capabilities necessary for the protection of our Nation’s critical infrastructure. Participants will identify physical and cybersecurity concerns impacting overall infrastructure security posture, examine integrated physical and cybersecurity incidents and the evolving risks and impacts they pose to critical infrastructure, and explore resources that can be applied to improve security within an organization, business, or government entity.

MGT-452

8 hours

Learn More
Register

Preparing for Cyber Attacks and Incidents

Preparing for Cyber Attacks and Incidents is a two-day, non-technical course designed to provide organizations and communities with strategies and processes to increase cyber resilience. During this course, participants will analyze cyber threats and initial and cascading impacts of cyber incidents, evaluate the process for developing a cyber preparedness program, examine the importance and challenges of cyber related information sharing and discover low to no-cost resources to help build cyber resilience.

MGT-384

16 hours

Learn More
Register

Recovering from Cybersecurity Incidents

The Recovering from Cybersecurity Incidents course is designed to provide guidance to a jurisdiction on the actions necessary to effectively recover from a cybersecurity attack. It discusses the pre- and post-incident programmatic activities needed for short-term and long-term recovery. The course bridges the different worlds of information technology and emergency management. This training is particularly pertinent to IT management, emergency management personnel, as well as any other government, critical infrastructure, or private sector personnel who has the responsibility for recovering after a cyber incident.

MGT-465

16 hours

Learn More
Register

Understanding Targeted Cyber Attacks

This course provides participants with specific information regarding targeted cyber attacks, including advanced persistent threats. This information will place them in a better position to plan and prepare for, respond to and recover from targeted cyber attacks. Understanding Targeted Cyber Attacks will fill the gap in threat-specific training for cybersecurity as a community-driven course that focuses on the phases of targeted cyber attacks and the attacker methods used during each phase. Participants will also receive valuable information on cyber attack prevention, mitigation and response.

AWR-376

8 hours

Learn More
Register

Using the Community Cyber Security Maturity Model (CCSMM) to Develop a Cyber Security Program

Using the Community Cyber Security Maturity Model (CCSMM) to develop a cybersecurity program will enable community leaders, network/security personnel and those individuals involved in developing or maintaining plans used for and throughout the community. This course assists participants to understand what is required to develop a coordinated, sustained and viable community cybersecurity program. The course introduces participants at all levels to the DHS-supported CCSMM and can be used to guide communities and states in developing their own CCSMM-consistent cybersecurity programs. Participants are introduced to different resources that can be used for a community program.

AWR-353-W

2 hours

Learn More
Register
COMING SOON

Community Engagement

A distributed Community Engagement Training Event designed for the Whole Community and offered as a capstone event following certification pathways in the Community Cyber Security Maturity Model (CCSMM). Participants (organizational and individual) practice and refine cybersecurity skills and procedures developed independently, within a coordinated training environment. Attendees work collaboratively to enhance preparedness, response, and recovery capabilities in an All-Hazards event.

In Development

8 hours

Learn More
COMING SOON

Community-Level Cybersecurity Planning and Training Gap Analysis

Designed as a collaborative community approach to identifying the gaps in cyber plans and the training needed in cybersecurity for all levels of community personnel and local critical infrastructure partners. At the end of this course, participants will be able to conduct a community cybersecurity gap analysis resulting in a cybersecurity training plan for all levels of community personnel and local critical infrastructure partners.  

In Development

, , , ,

16 hours

Learn More
COMING SOON

Identifying and Prioritizing High Value Assets

Every organization has critical information and technology assets that are essential to their business operations and require enhanced security. Organizational resources that can be dedicated to cybersecurity are finite; therefore, those resources should be applied deliberately and strategically focusing on the most important assets. This course will enable participants to identify their high value assets, prioritize them, assess them and create a remediation action plan.

In Development

8 hours

Learn More
COMING SOON

Organizational Cybersecurity Policy Essentials

The Organizational Cybersecurity Policy Essentials course is designed to provide students with a process for development of cybersecurity policies. Students will learn six key tasks to consider when developing policies, basic structure of a cybersecurity policy, and the types of cybersecurity policies an organization should consider. In this course, students will understand how to develop and implement cybersecurity policies that address cybersecurity practices and controls needed for their organization.

AWR-327-W

4 hours

Learn More
COMING SOON

Zero Trust: Identity and Access Management (IAM)

This course will address concepts related to Zero Trust and Access Control. Students will learn different forms of access control and their usages in practice, the concept of zero trust, the shift from perimeter-based security to Zero Trust, and Zero Trust implementation.

AWR-351-W

5 hours

Learn More

Share the Printed Course Catalog

The NCPC catalog is available as a brochure in PDF form. Get the latest edition here:

Download PDF

Join the NCPC mailing list