National Cybersecurity
Preparedness Consortium

Courses

NCPC's no-cost courses may be web-based (self-paced) or instructor-led (live).

Category

Cyber Threat Information Sharing

Learn to prepare for known threats by collaborating with the community

Coordination & Planning

Learn to design a cybersecurity strategy that connects with other communities

Awareness

Courses that bring an important cybersecurity topic to light

Cyber Incident Response & Recovery

Learn to respond to today's cybersecurity threats

Technical

Dig into the implementation specifics of cybersecurity
Audience

End Users

Cybersecurity courses for everyone

Leadership & Management

Cybersecurity courses for our leaders

Technical

Cybersecurity courses for technologists
Modality

Web-based Training

Self-paced, prerecorded online courses

Instructor-led Training

In-person or online courses with live instructor
Scope

Organizational

Courses focused on the cybersecurity of organizations

Individual

Courses focused on the cybersecurity of individuals

Jurisdictional

Courses focused on the cybersecurity of jurisdictions
Developers

MGT-478

• 16hrs

Community Cybersecurity Information Sharing Integration

instructor-led training

This course will introduce foundational cybersecurity information sharing concepts that can be leveraged to build a community information sharing collaborative. It will establish the purpose and value of community information sharing; and will explore how sharing can assist communities with cyber incident preparedness and response before, during and after a cyber incident occurs.

CIAS (UTSA)

MGT-301

• 8hrs

Community Cybersecurity Preparedness Simulation

instructor-led training

This course is designed as a tabletop activity simulating a community-wide cybersecurity event. Using a gamification approach, participants will strategize with a diverse group of stakeholders to plan for and respond from a cybersecurity incident that could have cascading effects across a community.

CIAS (UTSA)

MGT-384

• 12hrs

Community Preparedness for Cyber Incidents

instructor-led training

Community Preparedness for Cyber Incidents is a two-day, non-technical course designed to provide organizations and communities with strategies and processes to increase cyber resilience. During this course, participants will analyze cyber threats and initial and cascading impacts of cyber incidents, evaluate the process for developing a cyber preparedness program, examine the importance and challenges of cyber related information sharing and discover low to no-cost resources to help build cyber resilience.

TEEX NERRTC (Texas A&M)

In Development

• 16hrs

Community-Level Cybersecurity Planning and Training Gap Analysis

instructor-led training

Designed as a collaborative community approach to identifying the gaps in cyber plans and the training needed in cybersecurity for all levels of community personnel and local critical infrastructure partners. At the end of this course, participants will be able to conduct a community cybersecurity gap analysis resulting in a cybersecurity training plan for all levels of community personnel and local critical infrastructure partners.

CflA (Memphis), CIAS (UTSA), CJI (Arkansas), NUARI (Norwich), TEEX NERRTC (Texas A&M)

PER-256

• 32hrs

Comprehensive Cybersecurity Defense

instructor-led training

Comprehensive Cybersecurity Defense (formerly: Comprehensive Cyberterrorism Defense) is a basic-level course designed for technical personnel who monitor and protect our nation’s critical cyber infrastructure. The course introduces students to cyber-defense tools that will assist them in monitoring their computer networks and implementing cybersecurity measures to prevent or greatly reduce the risk of a cyber-based attack. This course integrates hands-on computer lab applications to maximize the student’s learning experience.

CJI (Arkansas)

In Development

• 4hrs

Critical Thinking and Risk Management in a Cyber-Converged World

instructor-led training

This survey course enables leaders to define and determine business risk related to cybersecurity in a multi-dimensional environment. Students are exposed to complex analysis and decision-making with consideration of converged catalysts (e.g., cyber, physical, informational) impacting operations. They will gain an appreciation for a standard taxonomy and introduced to methods to calculate risk. The course is based on Factor Analysis of Information Risk (FAIR) but does not purport to cover FAIR in its entirety.

NUARI (Norwich)

AWR-174-W

• 13hrs

Cyber Ethics

web-based training

Cyber Ethics is designed to share the proper techniques for approaching the difficult ethical dilemmas arising from use of the modern Internet. Develop the skills to assess future ethical dilemmas by examining some of the more pressing concerns related to Internet usage today.

TEEX NERRTC (Texas A&M)

AWR-384-W

• 6hrs

Cyber Identity and Authentication

web-based training

This course addresses different forms of authentication, such as two-factor, multi-factor and other authentication products protections addressing identity compromise. Designed for public and private personnel at all levels of government, law enforcement, the private sector and other stakeholders, CIAA provides a broad-base of knowledge connecting the underlying concepts of digital identity to how people, devices and systems are authorized to access digital resources and services. This course also covers “best practices” for using identity management and access control techniques and mechanisms to develop authentication standards.

CflA (Memphis)

AWR-388-W

• 2hrs

Cyber Security Awareness for Municipal, Police, Fire and EMS IT Personnel

web-based training

This course covers basic cyber awareness for Municipal, Police, Fire and EMS Information Technology personnel. Participants will have an increased knowledge of threats specific to their jurisdiction and an understanding of the processes and procedures needed to develop a cyber-awareness program. This course will focus on the steps involved in being aware of cyber threats and effectively communicating the processes and procedures to protect users against common cyber threats. The participants will apply this knowledge by developing processes and procedures to integrate cyber awareness into routine operations.

NUARI (Norwich)

PER-412

• 16hrs

Cyber Threat Intelligence

instructor-led training

The purpose of analysis is to produce intelligence that decreases uncertainty in decision making and therefore reduces risk. This course introduces the information analysis process and how an organization can use it to identify, define and mitigate cybersecurity threats. The intent is to provide participants with a general understanding of the tools and processes needed for an analysis team to create cybersecurity information and intelligence within their organization.

CIAS (UTSA), CJI (Arkansas)

AWR-427

• 8hrs

Cybercrime Insight and Introduction to Digital Evidence Identification

instructor-led training

This course introduces state, local, tribal and territorial first responders with limited or no prior knowledge of computer crime and cyber investigations to the importance of identifying evidence related to suspected criminal activity, and how to incorporate the evidence into an investigation. This is an awareness level course that will help first responders reduce cybersecurity risks and response impacts to critical infrastructure.

CJI (Arkansas)

PER-257

• 32hrs

Cybersecurity First Responder

instructor-led training

This is an intermediate-level course designed for technical personnel who are first responders to any type of cyber-based attack against our nation’s critical cyber infrastructure. Blended learning methods are utilized, to include a balance of classroom lecture, hands-on laboratory exercises, and the use of cyberterrorism response tools against real world simulated cyber-attacks. Students learn the proper steps of an incident response to include incident assessment, detection and analysis, and the containing, eradicating, and recovering process from a system or network-based attack.

CJI (Arkansas)

AWR-301

• 8hrs

Cybersecurity for Educational Leaders

instructor-led training

This is an awareness-level, non-technical course that is focused on educational institutions with training to assist them in addressing cybersecurity threats. Educational institutions of all sizes (including universities, colleges and K-12 school districts) are data rich making them targets for cyber-attacks. Cybersecurity readiness is not solely a technology issue; it includes managing student safety, well-being and digital risks. The leadership are responsible for managing the cybersecurity risk for our schools.

CIAS (UTSA), NUARI (Norwich)

AWR-397-W

• 4hrs

Cybersecurity for Everyone

web-based training

Computers, mobile devices and the Internet of Things (IoT) are a part of our daily lives. By using all of this technology, which makes our lives easier, we have opened ourselves up to the risks of cyber-attacks. This course will introduce you to the basics of protecting your computer and the data it stores as well as protecting yourself when you are online, on social media and while using your mobile or smart devices.

TEEX NERRTC (Texas A&M)

AWR-418-W

• 4hrs

Cybersecurity Fundamentals

web-based training

Cybersecurity Fundamentals is an introductory level course designed for new and transitioning Information Technology professionals. Students learn preferred network topologies and the uses of Intrusion Detection/Prevention systems; the use and maintenance of firewalls and anti-virus software; to recognize various types of network based attacks; to recognize social engineering attacks, both remote and in-person; and the importance of establishing policies, and disaster planning.

CJI (Arkansas)

In Development

• 6hrs

Cybersecurity in Operational Technology

web-based training

Awareness level course designed to address the technical needs of future workforce and industry professionals in various sectors including electric vehicle charging stations (EVCS). General topics to be covered in the course are: understanding various cyberattacks and their negative impacts on OTs and charging systems, OT threat actors, OT security measures for both Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA), detecting cyberattacks on the OTs, exploring mitigation solutions for cyberattacks on OTs, OT and security best practices.

CflA (Memphis)

AWR-395-W

• 2hrs

Cybersecurity in the Workplace

web-based training

The use of computers and networked systems in the workplace has opened businesses and organizations to a variety of risks. Every employee using a computer connected to the organization’s network is a potential point of entry for a cyber-attack. For this reason, cybersecurity and protecting the organization’s data/information is every employee’s responsibility. This course will help students understand the different types of cyber-attacks their company may face, the type of information that is at risk, how to recognize cyber-attacks and why it is important for everyone in the organization to participate in cybersecurity.

TEEX NERRTC (Texas A&M)

PER-371

• 24hrs

Cybersecurity Incident Response and Management

instructor-led training

This course is designed to address the gap in specific technical skills needed for an effective cyber response. It will also help improve the limited availability of targeted hands-on IT and security training focused on cyber-attacks. This training focuses on government and private sector technical personnel who have intermediate and advanced knowledge of network operations and/or the responsibility for network security. This course utilizes the Metova Virtualized Cyber Classroom Environment (VCCE) for incident simulation, which provides many features that resemble or imitate actual cyber incidents.

TEEX NERRTC (Texas A&M)

In Development

• 6hrs

Cybersecurity Issues in Distributed Energy Resources (DER’s)

web-based training

Awareness level course designed to provide Distributed Energy Resources related cybersecurity training, education and outreach program in order to address the technical needs of future workforce and industry professionals in energy/utility. This course will assess the current state of cybersecurity standards and develop methods for the grid-connected DERs under cyber threats for enhanced resiliency by applying appropriate physics-driven real-time monitoring and advanced data analytics, including machine learning and artificial intelligence on observed data.

CflA (Memphis)

PER-377

• 32hrs

Cybersecurity Proactive Defense

instructor-led training

Cybersecurity Proactive Defense (CPD) is an advanced-level course designed for technical personnel who monitor and protect our nation’s critical cyber infrastructure. This course prepares cyber defenders to recognize their own weaknesses by providing advanced attack vectors, sequential and escalating attack steps, and hands-on attack execution experience. CPD provides context behind a cyberterrorism attack by illustrating each attack step, the tools used to conduct the step, and the resulting impact on targeted systems.

CJI (Arkansas)

PER-398

• 8hrs

Cybersecurity Resiliency for Industrial Control Systems

instructor-led training

The national and economic security of the United States depends on the reliable functioning of critical infrastructure and community stability. This course provides participants from throughout various levels of government, private industry and community an understanding of cybersecurity resiliency in industrial control systems (ICS). Additionally, this course provides an understanding of cybersecurity resiliency in industrial control systems (ICS) and will review the Internet of Things (IoT), vulnerabilities within Operational Technology (OT) and Supervisory Control and Data Acquisition (SCADA) systems, methods of detecting and responding to cyber attacks in the systems, as well as actions that can be taken by non-technical personnel to mitigate or minimize the effects of cyber attacks.

TEEX NERRTC (Texas A&M)

AWR-383

• 4hrs

Cybersecurity Risk Awareness for Officials and Senior Management

instructor-led training

This is a non-technical course designed to develop awareness of cybersecurity risks for elected officials, appointed officials and other senior managers so that they are better informed to properly protect the jurisdiction/organization during a cybersecurity incident. It is designed to help officials and senior management work more effectively with their Information Technology (IT) departments to mitigate cyber threats. Upon successful completion of the course, participants shall have a better understanding of the cybersecurity risks that their jurisdiction or organization faces and how to work with their IT teams and other departments to mitigate those risks.

TEEX NERRTC (Texas A&M)

MGT-303

• 16hrs

Cybersecurity Vulnerability Assessment and Remediation

instructor-led training

This course is designed to address specific technical and professional skills needed to assess, document, remediate and report on cybersecurity vulnerability assessments within organizations through a series of lectures and hands-on activities. Activities include examining, analyzing, and prioritizing assets, risks and vulnerabilities to develop a vulnerability assessment report that could be delivered to organizational leadership. This course utilizes active discussions and activities to extend the participant’s understanding of vulnerability assessments.

TEEX NERRTC (Texas A&M)

AWR-421

• 8hrs

Demystifying Cyber Attacks

instructor-led training

This course, through discussion, pre-recorded attacks and live example attacks, will demystify common cyber attacks for non-technical participants. Participants will also learn how common cyber attacks can be disrupted at various points of the cyber kill chain using various mitigation and response strategies. Upon successful completion of this course, participants will have a better understanding of the progression of common cyber attacks; and, where and how they can be prevented or disrupted.

TEEX NERRTC (Texas A&M)

AWR-399-W

• 4hrs

Detecting and Responding to a Cyber Attack

web-based training

As computers and mobile devices become a part of most people’s everyday lives, the challenges of protecting computers and mobile devices and the data on them increases. Part of protecting computers and mobile devices is understanding how to recognize when they are compromised, the steps to take to respond to compromised computers and devices, and how to recover once they have been rid of any infection. This course will introduce students to various types of cyber-attacks and how to detect and respond to them in order to protect their data and information.

TEEX NERRTC (Texas A&M)

AWR-366-W

• 6hrs

Developing a Cyber Security Annex for Incident Response

web-based training

Cyber-attacks occur more frequently and have become increasingly sophisticated. Cybersecurity events now have the potential to significantly disrupt the business operations of government and critical infrastructure services. Public and private sectors, in the United States, are at increasing and continual risk of surprise attacks from nation-state and non-state actors. (Burgess, 2018) The National Response Framework describes how preparedness can be achieved by developing an incident annex for each hazard. Incident annexes describe coordinating structures used to deliver core capabilities and support response missions unique to a specific type of incident.

TEEX NERRTC (Texas A&M)

AWR-139-W

• 7hrs

Digital Forensics Basics

web-based training

This course explains investigative methods and standards for the acquisition, extraction, preservation, analysis, and deposition of digital evidence from storage devices. Using realistic forensics situations, learn how to find traces of illegal or illicit activities using computer forensics tools and manual techniques. Also, learn how to recover data intentionally hidden or encrypted by perpetrators.

TEEX NERRTC (Texas A&M)

AWR-176-W

• 10hrs

Disaster Recovery for Information Systems

web-based training

Disaster Recovery for Information Systems trains business managers to respond to varying threats that might impact their organization’s access to information. The course provides requisite background theory and recommended best practices needed by managers to keep their offices running during incidents of different types. Topics include an overview of business continuity planning; disaster recovery planning; guides for implementing and managing disaster recovery plans, a discussion of technical vulnerabilities faced by organizations and an examination of legal issues that may confront an organization.

TEEX NERRTC (Texas A&M)

AWR-300-W

• 5hrs

End-User Security and Privacy (ESP)

web-based training

This course will focus primarily on the end-user’s perspective. In particular, various security-related challenges faced by end-users and their impact on data privacy. The course will also include content concerning online content providers and local ISPs on access rights, unintentional data sharing, mobile apps and how to be compliant to a NIAP Protection Profile (PP), etc.

CflA (Memphis)

AWR-136

• 4hrs

Essentials of Community Cybersecurity

instructor-led training

This discussion-based, non-technical course is an introduction to cybersecurity that provides individuals, community leaders and first responders with information on how cyber attacks can impact, prevent and/or stop operations and emergency responses in a community. The Essentials of Community Cybersecurity course provides a cursory introduction to cybersecurity vulnerabilities, risks, threats and countermeasures and introduces actions communities can take to establish a cybersecurity program. It introduces the Community Cybersecurity Maturity Model (CCSMM) as a framework for understanding community cybersecurity and offers a brief introduction to low or no-cost approaches to securing a community against cybersecurity threats and attacks; setting the stage for further efforts in which a community can build a cybersecurity program.

TEEX NERRTC (Texas A&M)

AWR-381-W

• 8hrs

Establishing an Information Sharing and Analysis Organization

web-based training

The growing Information Sharing and Analysis Organization (ISAO) ecosystem provides an opportunity to empower the nation to become more educated and effective in preventing, detecting and responding to the increasingly sophisticated landscape of cyber threats. There are considerable challenges with the vast quantity of information, the complexities of analysis and the uncertainties of sharing data with a large network of organizations. This course assists communities of interest to establish an Information Sharing and Analysis Organization (ISAO).

CIAS (UTSA)

AWR-403-W

• 4hrs

Examining Advanced Persistent Threats

web-based training

Today’s advanced persistent threats (APTs) are increasingly sophisticated, varied, targeted, aggressive and successful. There is an increasing deployment of and dependence on Internet of Things (IoT) for remote access devices to National Critical Infrastructure Sectors and Services (NCISS). Inadequate deployment and maintenance of security on these systems could provide opportunities for attackers to harm to the American citizenry through NCISS infrastructure and associated resource disruption.

CflA (Memphis)

AWR-168-W

• 10hrs

Foundations of Cyber Crimes

web-based training

This course highlights a range of cyber crimes and the appropriate response by first responders and other local, state and federal agencies that may encounter them. Participants will identify legislative, organizational and suggested personal efforts to control or prevent cyber crimes. This course examines cyber and cyber facilitated non-violent white-collar crimes, fraud and financial crimes, and violent crimes. The broad landscape of the cyber crimes discussed in this course illustrates the fact that almost all crimes can either be directly committed or indirectly facilitated through the cyber domain-a result of society’s increasing integration and dependence on the Internet and computers into nearly every aspect of daily life.

TEEX NERRTC (Texas A&M)

In Development

• 8hrs

Identifying and Prioritizing High Value Assets

instructor-led training

Every organization has critical information and technology assets that are essential to their business operations and require enhanced security. Organizational resources that can be dedicated to cybersecurity are finite; therefore, those resources should be applied deliberately and strategically focusing on the most important assets. This course will enable participants to identify their high value assets, prioritize them, assess them and create a remediation action plan.

CIAS (UTSA)

AWR-389-W

• 2hrs

Incident Response for Municipal, Police, Fire and EMS Information Technology Personnel

web-based training

This course is the second training in a two-part course. It is intended to introduce the basics of the incident response process to the Information Technology personnel in Police, Fire or EMS departments. This web-based course focuses on the steps involved in being aware of common cyber incidents, as well as steps in developing an incident response plan. The participants will apply this knowledge by developing a response plan specific to their jurisdiction. The content of the course includes: common cyber incidents occurring in Police, Fire and EMS IT departments, developing a response plan for common cyber incidents, distinguishing tasks for police, fire and EMS IT departments, and processes for future improvements to response plans.

NUARI (Norwich)

AWR-177-W

• 13hrs

Information Risk Management

web-based training

This Information Risk Management course addresses topics related to information assets, identifying risks and management processes. Receive training on information risk-related tools and technologies for better understanding of potential threats and vulnerabilities in online business. Learn best practices and how to apply levels of security measures.

TEEX NERRTC (Texas A&M)

AWR-173-W

• 13hrs

Information Security Basics

web-based training

This Information Security Basics course provides entry and mid-level IT staff a technical overview of information security, focusing on the knowledge to identify and stop various cyber threats. In addition to providing an introduction to information assurance, general concepts and topics covered include TCP/IP protocol, introductory network security, introductory operating system security and basic cryptography.

TEEX NERRTC (Texas A&M)

AWR-432

• 8hrs

Integrating Cyber Hazard Response into Exercise Planning

instructor-led training

This is an awareness-level course that is designed to teach exercise planners the importance of incorporating cyber into all hazard emergency management. While most exercise planners know cyber-hazards exists, they may have not been taught how to incorporate those hazards into their exercise planning. Furthermore, exercise planners may not know the extent to which cyber hazards impact critical infrastructure. This course will ensure exercise planners are aware of the hazards related to cyber-enabled threats and how to address those hazards within their exercises.

NUARI (Norwich)

MGT-456

• 24hrs

Integration of Cybersecurity Personnel into the Emergency Operations Center for Cyber Incidents

instructor-led training

Traditionally, cybersecurity is the responsibility of each organization individually using their own information security and technology personnel to manage threats. However, the physical consequences of a cyber incident are a shared responsibility that involves all levels of government, law enforcement, the private sector and other “stakeholders”. With this shared responsibility, there is a clear need to bring IT professionals and traditional emergency management personnel together to prepare for, respond to, and recover from the impacts of a cyber incident. The course is designed to assist jurisdictions at all response levels (i.e.,

TEEX NERRTC (Texas A&M)

PER-301

• 24hrs

Internet of Things Security for IT Practitioners (IoTS)

instructor-led training

Designed to provide knowledge and skills to a targeted audience of information technology practitioners about the importance of IoT in society, the current components of typical IoT implementations and trends for the future. The course will cover IoT design considerations, constraints and interfacing between the physical world and a very large variety of devices that have not traditionally been considered as part of the IT Security problem. It will also cover key components of networking to ensure that students understand how IoT devices can be properly and securely connected to the Internet.

CJI (Arkansas)

AWR-368-W

• 8hrs

Introduction to Basic Vulnerability Assessment Skills

web-based training

This introductory course is intended to help prepare learners for the technical challenges associated with conducting vulnerability assessments and/or penetration testing. The six course modules introduce the basic skills learners will need to begin mastering in order to conduct or manage vulnerability assessments. These skills range from the “soft skills” of the ethics involved in vulnerability assessments, to the more technical skills of network scanning and packet analysis. In addition, learners are provided with an introduction to a common, open source tool, Metasploit, which is used by red teams, as well as blue teams to test networks.

NUARI (Norwich)

AWR-169-W

• 10hrs

Introduction to Cyber Incident Management

web-based training

This course provides practical guidelines on responding to incidents effectively and efficiently as part of an incident response program. Primary topics include detecting, analyzing, prioritizing, and handling cyber incidents. Real-world examples and scenarios to help provide knowledge, understanding, and capacity for effective cyber incident analysis and response. This advanced level course is designed to teach students the fundamental of cyber incident analysis and responses.

TEEX NERRTC (Texas A&M)

AWR-398-W

• 2hrs

Introduction to Information Sharing and Analysis Organizations

web-based training

This course introduces the basics of the cybersecurity information sharing processes. Participants will gain knowledge of cybersecurity information sharing and an understanding of how to join or establish an Information Sharing and Analysis Organization (ISAO) or Information Sharing and Analysis Center (ISAC). This course introduces elected officials at multiple levels (State, Local, Tribal, Territorial), as well as senior management and decision-makers (including for commercial entities), to the value proposition of sharing cybersecurity information.

NUARI (Norwich)

AWR-402-W

• 2hrs

Introduction to Internet of Things

web-based training

The national and economic security of the United States depends on the reliable functioning of critical infrastructure and community stability. This course provides participants from throughout the various levels of government, private industry, and community an understanding of how they are all affected by the Internet of Things (IoT). The purpose of this course is to provide an understanding of the history, definitions and components that make up IoT. It addresses the different applications of IoT, as well as applicable laws and policies, technologies, emerging threats, best practices, security and a variety of existing and developing technologies.

TEEX NERRTC (Texas A&M)

PER-382

• 32hrs

Malware Prevention, Discovery, and Recovery

instructor-led training

Malware Prevention, Discovery, and Recovery (MPDR) is an intermediate-level course is designed for technical personnel who monitor and protect our nation’s critical cyber infrastructure. Students learn how to recognize, identify, and analyze malware; the remediation process to eliminate the malware; and proper procedures to recover from the attack and regain network connectivity in a timely manner. This course integrates hands-on computer lab applications to maximize the student’s learning experience.

CJI (Arkansas)

AWR-385-W

• 7hrs

Mobile Device Security and Privacy

web-based training

This course is designed to provide a better understanding of security and privacy issues associated with mobile devices and infrastructure; including benefits and challenges of designing, implementing, and maintaining Bring Your Own Device (BYOD) Programs.

CflA (Memphis)

AWR-138-W

• 5hrs

Network Assurance

web-based training

The Network Assurance course covers secure network practices to protect networked systems against attacks and exploits. Topics include authentication, authorization and accounting (AAA), as well as firewalls, intrusion detection/prevention, common cryptographic ciphers, server and client security, and secure policy generation. This course also includes information on securing cloud-based networks and applications.

TEEX NERRTC (Texas A&M)

AWR-396-W

• 2hrs

Network Security for Homes and Small Businesses

web-based training

The Internet (the world’s largest network) allows us to accomplish tasks more conveniently and efficiently at home, work and on the road! However, there are security risks with networks, and users must be aware and remain vigilant about these risks and how to secure their home or small business network. This course will introduce students to the basics of networks for homes and small businesses and provide them with best practices to secure their networks in order to protect their personal information as well as other (friends, family, customers, vendors, etc.)

TEEX NERRTC (Texas A&M)

PER-418

• 24hrs

Network Traffic Analysis

instructor-led training

This course will train students to conduct traffic analysis on their internal networks by doing a “deep-dive” into network traffic analysis using Wireshark and other tools to identify regular and anomalous network traffic. It will teach techniques necessary to identify network attacks by context and type. You will be introduced to a wide variety of network traffic analysis information and methods. This course is delivered in a mobile training lab, using laptops that are preconfigured with hands-on exercises that immerse students in real-world examples.

CJI (Arkansas)

MGT-473

• 16hrs

Organizational Cybersecurity Information Sharing

instructor-led training

This course introduces fundamental cyber information sharing concepts that can be incorporated into a cybersecurity program for both inside and outside an agency or organization. It introduces the purpose and value of information sharing and how sharing can assist with cyber incident preparedness and response before, during and after a cyber incident occurs.

CIAS (UTSA)

AWR-327-W

• 4hrs

Organizational Cybersecurity Policy Essentials

web-based training

The Organizational Cybersecurity Policy Essentials course is designed to provide students with a process for development of cybersecurity policies. Students will learn six key tasks to consider when developing policies, basic structure of a cybersecurity policy, and the types of cybersecurity policies an organization should consider. In this course, students will understand how to develop and implement cybersecurity policies that address cybersecurity practices and controls needed for their organization.

CIAS (UTSA)

In Development

• 8hrs

Partnering for Cybersecurity: Optimizing Resources in a Constrained Environment for Public and Rural Electricity Providers

instructor-led training

Cybersecurity preparedness and response in a resource-constrained enterprise, partnering Information Technology with Operational Technology security and operations professionals, and with a detailed focus on the business and regulatory environment that public and rural electricity providers experience.

NUARI (Norwich)

MGT-452

• 8hrs

Physical and Cybersecurity for Critical Infrastructure

instructor-led training

The national and economic security of the United States depends on the reliable functioning of critical infrastructure. This course encourages collaboration efforts among individuals and organizations responsible for both physical and cybersecurity toward development of integrated risk management strategies that lead to enhanced capabilities necessary for the protection of our Nation’s critical infrastructure. Participants will identify physical and cybersecurity concerns impacting overall infrastructure security posture, examine integrated physical and cybersecurity incidents and the evolving risks and impacts they pose to critical infrastructure, and explore resources that can be applied to improve security within an organization, business, or government entity.

TEEX NERRTC (Texas A&M)

AWR-428

• 16hrs

Practical Internet of Things (IoT) Security

instructor-led training

This classroom-based activity will be designed to introduce students to identify and describe the components of an IoT system and associated security concerns. The course will cover the elements of an IoT system including programmable logic controllers, sensors and network interfaces. Topics will include PLC functions and programming, common IoT network protocols and security concerns related to IoT systems. Students will explore IoT vulnerabilities using common vulnerability assessment tools such as Kali Linux. Lecture and exercises will culminate in a laboratory experience where teams of students will build an IoT system and examine security considerations, vulnerabilities, and threats.

NUARI (Norwich)

MGT-465

• 16hrs

Recovering from Cybersecurity Incidents

instructor-led training

The Recovering from Cybersecurity Incidents course is designed to provide guidance to a jurisdiction on the actions necessary to effectively recover from a cybersecurity attack. It discusses the pre- and post-incident programmatic activities needed for short-term and long-term recovery. The course bridges the different worlds of information technology and emergency management. This training is particularly pertinent to IT management, emergency management personnel, as well as any other government, critical infrastructure, or private sector personnel who has the responsibility for recovering after a cyber incident.

TEEX NERRTC (Texas A&M)

AWR-431-W

• 4hrs

Remote/Home-Office Cybersecurity Preparedness (RHC)

web-based training

The changing cybersecurity landscape and the Work from Home (WFH) strategies due to the COVID-19 pandemic affected the workforce worldwide. This unexpected pandemic opened the doors to vulnerable cyber-attacks in remote home office environments. Cybersecurity threats impacted WFH workers and some organizations, requiring them to use different cyber-enabled systems, devices and services.

CflA (Memphis)

AWR-178-W

• 9hrs

Secure Software

web-based training

This course covers secure programming practices necessary to secure applications against attacks and exploits. Topics covered include fundamental concepts of secure software development, defensive programming techniques, secure design and testing, and secure development methodologies. Network security administration topics include firewalls, intrusion detection/prevention, common cryptographic ciphers, AAA (authentication, authorization and accounting), server and client security, and secure policy generation.

TEEX NERRTC (Texas A&M)

In Development

• 8hrs

Security in Operational Technology and Distributed Energy Resources: Tools and Applications

web-based training

This performance level course designed to provide hands-on content/labs. The hands-on activities will cover some topics from the security in operational technology (OT) course and some topics from cybersecurity in distributed energy resource (DER) course. This is important for state and local professionals and employees in specific sectors to transition theory to practice to more effectively deal with cybersecurity challenges.

CflA (Memphis)

AWR-367-W

• 8hrs

Understanding Social Engineering Attacks

web-based training

This course educates members of the public in the general understanding and some common defense tactics that can be used to mitigate social engineering attacks. Designed for public and private personnel at all levels of government, law enforcement, the private sector and other stakeholders, this course provides students with an understanding of how social engineering attacks can be better mitigated by combining comprehensive security measures with an understanding and awareness of how such attacks can exploit human behaviors. Phishing, spear-phishing, water-holing, ransomware and other types of advanced persistent threats.

CflA (Memphis)

AWR-376

• 8hrs

Understanding Targeted Cyber Attacks

instructor-led training

This course provides participants with specific information regarding targeted cyber attacks, including advanced persistent threats. This information will place them in a better position to plan and prepare for, respond to and recover from targeted cyber attacks. Understanding Targeted Cyber Attacks will fill the gap in threat-specific training for cybersecurity as a community-driven course that focuses on the phases of targeted cyber attacks and the attacker methods used during each phase. Participants will also receive valuable information on cyber attack prevention, mitigation and response.

TEEX NERRTC (Texas A&M)

AWR-353-W

• 2hrs

Using the Community Cyber Security Maturity Model (CCSMM) to Develop a Cyber Security Program

web-based training

Using the Community Cyber Security Maturity Model (CCSMM) to develop a cybersecurity program will enable community leaders, network/security personnel and those individuals involved in developing or maintaining plans used for and throughout the community. This course assists participants to understand what is required to develop a coordinated, sustained and viable community cybersecurity program. The course introduces participants at all levels to the DHS-supported CCSMM and can be used to guide communities and states in developing their own CCSMM-consistent cybersecurity programs. Participants are introduced to different resources that can be used for a community program.

CIAS (UTSA)

PER-302-W

• 5hrs

Zero Trust Access and Identity Management

web-based training

This course will address concepts related to Zero Trust and Access Control. Students will learn different forms of access control and their usages in practice, the concept of zero trust, the shift from perimeter-based security to Zero Trust, and Zero Trust implementation.

CflA (Memphis)

Share the Printed Course Catalog

The NCPC catalog is available as a brochure in PDF form. Get the latest edition here: