National Cybersecurity
Preparedness Consortium

Web-Based Training

Courses held online, with self-paced learning material and recordings.

Category

Cyber Threat Information Sharing

Learn to prepare for known threats by collaborating with the community

Coordination & Planning

Learn to design a cybersecurity strategy that connects with other communities

Awareness

Courses that bring an important cybersecurity topic to light

Cyber Incident Response & Recovery

Learn to respond to today's cybersecurity threats

Technical

Dig into the implementation specifics of cybersecurity
Audience

End Users

Cybersecurity courses for everyone

Leadership & Management

Cybersecurity courses for our leaders

Technical

Cybersecurity courses for technologists
Modality

Web-based Training

Self-paced, prerecorded online courses

Instructor-led Training

In-person or online courses with live instructor
Scope

Organizational

Courses focused on the cybersecurity of organizations

Individual

Courses focused on the cybersecurity of individuals

Jurisdictional

Courses focused on the cybersecurity of jurisdictions
Developers

AWR-174-W

• 13hrs

Cyber Ethics

web-based training

Cyber Ethics is designed to share the proper techniques for approaching the difficult ethical dilemmas arising from use of the modern Internet. Develop the skills to assess future ethical dilemmas by examining some of the more pressing concerns related to Internet usage today.

TEEX NERRTC (Texas A&M)

AWR-384-W

• 6hrs

Cyber Identity and Authentication

web-based training

This course addresses different forms of authentication, such as two-factor, multi-factor and other authentication products protections addressing identity compromise. Designed for public and private personnel at all levels of government, law enforcement, the private sector and other stakeholders, CIAA provides a broad-base of knowledge connecting the underlying concepts of digital identity to how people, devices and systems are authorized to access digital resources and services. This course also covers “best practices” for using identity management and access control techniques and mechanisms to develop authentication standards.

CflA (Memphis)

AWR-388-W

• 2hrs

Cyber Security Awareness for Municipal, Police, Fire and EMS IT Personnel

web-based training

This course covers basic cyber awareness for Municipal, Police, Fire and EMS Information Technology personnel. Participants will have an increased knowledge of threats specific to their jurisdiction and an understanding of the processes and procedures needed to develop a cyber-awareness program. This course will focus on the steps involved in being aware of cyber threats and effectively communicating the processes and procedures to protect users against common cyber threats. The participants will apply this knowledge by developing processes and procedures to integrate cyber awareness into routine operations.

NUARI (Norwich)

AWR-397-W

• 4hrs

Cybersecurity for Everyone

web-based training

Computers, mobile devices and the Internet of Things (IoT) are a part of our daily lives. By using all of this technology, which makes our lives easier, we have opened ourselves up to the risks of cyber-attacks. This course will introduce you to the basics of protecting your computer and the data it stores as well as protecting yourself when you are online, on social media and while using your mobile or smart devices.

TEEX NERRTC (Texas A&M)

AWR-418-W

• 4hrs

Cybersecurity Fundamentals

web-based training

Cybersecurity Fundamentals is an introductory level course designed for new and transitioning Information Technology professionals. Students learn preferred network topologies and the uses of Intrusion Detection/Prevention systems; the use and maintenance of firewalls and anti-virus software; to recognize various types of network based attacks; to recognize social engineering attacks, both remote and in-person; and the importance of establishing policies, and disaster planning.

CJI (Arkansas)

In Development

• 4hrs

Cybersecurity in Cloud Environments

web-based training

The proliferation of cloud computing continues to grow as organizations look to reduce the cost of operating and maintaining traditional information technology (IT) data centers and associated IT resources. Cloud computing service providers, such as Amazon Web Services, Microsoft Azure and Google Cloud, focus on securing their underlying infrastructure, but it is the responsibility of each organization and user to provide security protections for the payloads they deploy.

CflA (Memphis)

AWR-395-W

• 2hrs

Cybersecurity in the Workplace

web-based training

The use of computers and networked systems in the workplace has opened businesses and organizations to a variety of risks. Every employee using a computer connected to the organization’s network is a potential point of entry for a cyber-attack. For this reason, cybersecurity and protecting the organization’s data/information is every employee’s responsibility. This course will help students understand the different types of cyber-attacks their company may face, the type of information that is at risk, how to recognize cyber-attacks and why it is important for everyone in the organization to participate in cybersecurity.

TEEX NERRTC (Texas A&M)

In Development

• 6hrs

Cybersecurity Issues in Distributed Energy Resources (DER’s)

web-based training

Awareness level course designed to provide Distributed Energy Resources related cybersecurity training, education and outreach program in order to address the technical needs of future workforce and industry professionals in energy/utility. This course will assess the current state of cybersecurity standards and develop methods for the grid-connected DERs under cyber threats for enhanced resiliency by applying appropriate physics-driven real-time monitoring and advanced data analytics, including machine learning and artificial intelligence on observed data.

CflA (Memphis)

AWR-399-W

• 4hrs

Detecting and Responding to a Cyber Attack

web-based training

As computers and mobile devices become a part of most people’s everyday lives, the challenges of protecting computers and mobile devices and the data on them increases. Part of protecting computers and mobile devices is understanding how to recognize when they are compromised, the steps to take to respond to compromised computers and devices, and how to recover once they have been rid of any infection. This course will introduce students to various types of cyber-attacks and how to detect and respond to them in order to protect their data and information.

TEEX NERRTC (Texas A&M)

AWR-366-W

• 6hrs

Developing a Cyber Security Annex for Incident Response

web-based training

Cyber-attacks occur more frequently and have become increasingly sophisticated. Cybersecurity events now have the potential to significantly disrupt the business operations of government and critical infrastructure services. Public and private sectors, in the United States, are at increasing and continual risk of surprise attacks from nation-state and non-state actors. (Burgess, 2018) The National Response Framework describes how preparedness can be achieved by developing an incident annex for each hazard. Incident annexes describe coordinating structures used to deliver core capabilities and support response missions unique to a specific type of incident.

TEEX NERRTC (Texas A&M)

AWR-139-W

• 7hrs

Digital Forensics Basics

web-based training

This course explains investigative methods and standards for the acquisition, extraction, preservation, analysis, and deposition of digital evidence from storage devices. Using realistic forensics situations, learn how to find traces of illegal or illicit activities using computer forensics tools and manual techniques. Also, learn how to recover data intentionally hidden or encrypted by perpetrators.

TEEX NERRTC (Texas A&M)

AWR-176-W

• 10hrs

Disaster Recovery for Information Systems

web-based training

Disaster Recovery for Information Systems trains business managers to respond to varying threats that might impact their organization’s access to information. The course provides requisite background theory and recommended best practices needed by managers to keep their offices running during incidents of different types. Topics include an overview of business continuity planning; disaster recovery planning; guides for implementing and managing disaster recovery plans, a discussion of technical vulnerabilities faced by organizations and an examination of legal issues that may confront an organization.

TEEX NERRTC (Texas A&M)

AWR-300-W

• 5hrs

End-User Security and Privacy (ESP)

web-based training

This course will focus primarily on the end-user’s perspective. In particular, various security-related challenges faced by end-users and their impact on data privacy. The course will also include content concerning online content providers and local ISPs on access rights, unintentional data sharing, mobile apps and how to be compliant to a NIAP Protection Profile (PP), etc.

CflA (Memphis)

AWR-381-W

• 8hrs

Establishing an Information Sharing and Analysis Organization

web-based training

The growing Information Sharing and Analysis Organization (ISAO) ecosystem provides an opportunity to empower the nation to become more educated and effective in preventing, detecting and responding to the increasingly sophisticated landscape of cyber threats. There are considerable challenges with the vast quantity of information, the complexities of analysis and the uncertainties of sharing data with a large network of organizations. This course assists communities of interest to establish an Information Sharing and Analysis Organization (ISAO).

CIAS (UTSA)

AWR-403-W

• 4hrs

Examining Advanced Persistent Threats

web-based training

Today’s advanced persistent threats (APTs) are increasingly sophisticated, varied, targeted, aggressive and successful. There is an increasing deployment of and dependence on Internet of Things (IoT) for remote access devices to National Critical Infrastructure Sectors and Services (NCISS). Inadequate deployment and maintenance of security on these systems could provide opportunities for attackers to harm to the American citizenry through NCISS infrastructure and associated resource disruption.

CflA (Memphis)

AWR-168-W

• 10hrs

Foundations of Cyber Crimes

web-based training

This course highlights a range of cyber crimes and the appropriate response by first responders and other local, state and federal agencies that may encounter them. Participants will identify legislative, organizational and suggested personal efforts to control or prevent cyber crimes. This course examines cyber and cyber facilitated non-violent white-collar crimes, fraud and financial crimes, and violent crimes. The broad landscape of the cyber crimes discussed in this course illustrates the fact that almost all crimes can either be directly committed or indirectly facilitated through the cyber domain-a result of society’s increasing integration and dependence on the Internet and computers into nearly every aspect of daily life.

TEEX NERRTC (Texas A&M)

AWR-389-W

• 2hrs

Incident Response for Municipal, Police, Fire and EMS Information Technology Personnel

web-based training

This course is the second training in a two-part course. It is intended to introduce the basics of the incident response process to the Information Technology personnel in Police, Fire or EMS departments. This web-based course focuses on the steps involved in being aware of common cyber incidents, as well as steps in developing an incident response plan. The participants will apply this knowledge by developing a response plan specific to their jurisdiction. The content of the course includes: common cyber incidents occurring in Police, Fire and EMS IT departments, developing a response plan for common cyber incidents, distinguishing tasks for police, fire and EMS IT departments, and processes for future improvements to response plans.

NUARI (Norwich)

AWR-177-W

• 13hrs

Information Risk Management

web-based training

This Information Risk Management course addresses topics related to information assets, identifying risks and management processes. Receive training on information risk-related tools and technologies for better understanding of potential threats and vulnerabilities in online business. Learn best practices and how to apply levels of security measures.

TEEX NERRTC (Texas A&M)

AWR-173-W

• 13hrs

Information Security Basics

web-based training

This Information Security Basics course provides entry and mid-level IT staff a technical overview of information security, focusing on the knowledge to identify and stop various cyber threats. In addition to providing an introduction to information assurance, general concepts and topics covered include TCP/IP protocol, introductory network security, introductory operating system security and basic cryptography.

TEEX NERRTC (Texas A&M)

AWR-368-W

• 8hrs

Introduction to Basic Vulnerability Assessment Skills

web-based training

This introductory course is intended to help prepare learners for the technical challenges associated with conducting vulnerability assessments and/or penetration testing. The six course modules introduce the basic skills learners will need to begin mastering in order to conduct or manage vulnerability assessments. These skills range from the “soft skills” of the ethics involved in vulnerability assessments, to the more technical skills of network scanning and packet analysis. In addition, learners are provided with an introduction to a common, open source tool, Metasploit, which is used by red teams, as well as blue teams to test networks.

NUARI (Norwich)

AWR-169-W

• 10hrs

Introduction to Cyber Incident Management

web-based training

This course provides practical guidelines on responding to incidents effectively and efficiently as part of an incident response program. Primary topics include detecting, analyzing, prioritizing, and handling cyber incidents. Real-world examples and scenarios to help provide knowledge, understanding, and capacity for effective cyber incident analysis and response. This advanced level course is designed to teach students the fundamental of cyber incident analysis and responses.

TEEX NERRTC (Texas A&M)

AWR-398-W

• 2hrs

Introduction to Information Sharing and Analysis Organizations

web-based training

This course introduces the basics of the cybersecurity information sharing processes. Participants will gain knowledge of cybersecurity information sharing and an understanding of how to join or establish an Information Sharing and Analysis Organization (ISAO) or Information Sharing and Analysis Center (ISAC). This course introduces elected officials at multiple levels (State, Local, Tribal, Territorial), as well as senior management and decision-makers (including for commercial entities), to the value proposition of sharing cybersecurity information.

NUARI (Norwich)

AWR-402-W

• 2hrs

Introduction to Internet of Things

web-based training

The national and economic security of the United States depends on the reliable functioning of critical infrastructure and community stability. This course provides participants from throughout the various levels of government, private industry, and community an understanding of how they are all affected by the Internet of Things (IoT). The purpose of this course is to provide an understanding of the history, definitions and components that make up IoT. It addresses the different applications of IoT, as well as applicable laws and policies, technologies, emerging threats, best practices, security and a variety of existing and developing technologies.

TEEX NERRTC (Texas A&M)

AWR-385-W

• 7hrs

Mobile Device Security and Privacy

web-based training

This course is designed to provide a better understanding of security and privacy issues associated with mobile devices and infrastructure; including benefits and challenges of designing, implementing, and maintaining Bring Your Own Device (BYOD) Programs.

CflA (Memphis)

AWR-138-W

• 5hrs

Network Assurance

web-based training

The Network Assurance course covers secure network practices to protect networked systems against attacks and exploits. Topics include authentication, authorization and accounting (AAA), as well as firewalls, intrusion detection/prevention, common cryptographic ciphers, server and client security, and secure policy generation. This course also includes information on securing cloud-based networks and applications.

TEEX NERRTC (Texas A&M)

AWR-396-W

• 2hrs

Network Security for Homes and Small Businesses

web-based training

The Internet (the world’s largest network) allows us to accomplish tasks more conveniently and efficiently at home, work and on the road! However, there are security risks with networks, and users must be aware and remain vigilant about these risks and how to secure their home or small business network. This course will introduce students to the basics of networks for homes and small businesses and provide them with best practices to secure their networks in order to protect their personal information as well as other (friends, family, customers, vendors, etc.)

TEEX NERRTC (Texas A&M)

AWR-327-W

• 4hrs

Organizational Cybersecurity Policy Essentials

web-based training

The Organizational Cybersecurity Policy Essentials course is designed to provide students with a process for development of cybersecurity policies. Students will learn six key tasks to consider when developing policies, basic structure of a cybersecurity policy, and the types of cybersecurity policies an organization should consider. In this course, students will understand how to develop and implement cybersecurity policies that address cybersecurity practices and controls needed for their organization.

CIAS (UTSA)

AWR-431-W

• 4hrs

Remote/Home-Office Cybersecurity Preparedness (RHC)

web-based training

The changing cybersecurity landscape and the Work from Home (WFH) strategies due to the COVID-19 pandemic affected the workforce worldwide. This unexpected pandemic opened the doors to vulnerable cyber-attacks in remote home office environments. Cybersecurity threats impacted WFH workers and some organizations, requiring them to use different cyber-enabled systems, devices and services.

CflA (Memphis)

AWR-178-W

• 9hrs

Secure Software

web-based training

This course covers secure programming practices necessary to secure applications against attacks and exploits. Topics covered include fundamental concepts of secure software development, defensive programming techniques, secure design and testing, and secure development methodologies. Network security administration topics include firewalls, intrusion detection/prevention, common cryptographic ciphers, AAA (authentication, authorization and accounting), server and client security, and secure policy generation.

TEEX NERRTC (Texas A&M)

In Development

• 8hrs

Security in Operational Technology and Distributed Energy Resources: Tools and Applications

web-based training

This performance level course designed to provide hands-on content/labs. The hands-on activities will cover some topics from the security in operational technology (OT) course and some topics from cybersecurity in distributed energy resource (DER) course. This is important for state and local professionals and employees in specific sectors to transition theory to practice to more effectively deal with cybersecurity challenges.

CflA (Memphis)

AWR-367-W

• 8hrs

Understanding Social Engineering Attacks

web-based training

This course educates members of the public in the general understanding and some common defense tactics that can be used to mitigate social engineering attacks. Designed for public and private personnel at all levels of government, law enforcement, the private sector and other stakeholders, this course provides students with an understanding of how social engineering attacks can be better mitigated by combining comprehensive security measures with an understanding and awareness of how such attacks can exploit human behaviors. Phishing, spear-phishing, water-holing, ransomware and other types of advanced persistent threats.

CflA (Memphis)

AWR-353-W

• 2hrs

Using the Community Cyber Security Maturity Model (CCSMM) to Develop a Cyber Security Program

web-based training

Using the Community Cyber Security Maturity Model (CCSMM) to develop a cybersecurity program will enable community leaders, network/security personnel and those individuals involved in developing or maintaining plans used for and throughout the community. This course assists participants to understand what is required to develop a coordinated, sustained and viable community cybersecurity program. The course introduces participants at all levels to the DHS-supported CCSMM and can be used to guide communities and states in developing their own CCSMM-consistent cybersecurity programs. Participants are introduced to different resources that can be used for a community program.

CIAS (UTSA)

AWR-351-W

• 5hrs

Zero Trust: Identity and Access Management (IAM)

web-based training

This course will address concepts related to Zero Trust and Access Control. Students will learn different forms of access control and their usages in practice, the concept of zero trust, the shift from perimeter-based security to Zero Trust, and Zero Trust implementation.

CflA (Memphis)

Share the Printed Course Catalog

The NCPC catalog is available as a brochure in PDF form. Get the latest edition here: