Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Certificate
Course Outline
DOMAIN 1: CYBERSECURITY CONCEPTS
- 1.1 Understanding of information assurance (IA) principles utilized to manage risks associated with the use, processing, storage, and transmission of information or data for government operations.
- 1.2 Understanding of security management frameworks.
- 1.3 Understanding of risk management processes, including steps and methods for assessing risk within federal environments.
- 1.4 Understanding of the organization’s enterprise information technology (IT) goals and objectives aligned with public sector mandates.
- 1.5 Understanding of varying operational threat environments (e.g., first generation [script kiddies], second generation [non-nation state sponsored] and third generation [nation state sponsored]).
- 1.6 Understanding of information assurance (IA) principles and organizational requirements that are relevant to confidentiality, integrity, availability, authentication and non-repudiation.
- 1.7 Understanding of common adversary tactics, techniques, and procedures (TTPs) in assigned area of responsibility (e.g., historical country-specific TTPs, emerging capabilities).
- 1.8 Understanding of different classes of attacks (e.g., passive, active, insider, close-in, distribution).
- 1.9 Understanding of relevant laws, policies, procedures and governance requirements for government entities.
- 1.10 Understanding of relevant laws, policies, procedures or governance as they relate to work that may impact critical infrastructure.
DOMAIN 2: CYBERSECURITY ARCHITECTURE PRINCIPLES
- 2.1 Understanding of network design processes, to include understanding of security objectives, operational objectives and tradeoffs for federal systems.
- 2.2 Understanding of security system design methods, tools and techniques.
- 2.3 Understanding of network access, identity and access management (e.g., public key infrastructure [PKI]) within government contexts.
- 2.4 Understanding of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
- 2.5 Understanding of current industry methods for evaluating, implementing and disseminating information technology (IT) security assessment, monitoring, detection and remediation tools and procedures, utilizing standards-based concepts and capabilities.
- 2.6 Understanding of network security architecture concepts, including topology, protocols, components and principles (e.g., application of defence in depth).
- 2.7 Understanding of malware analysis concepts and methodology.
- 2.8 Understanding of intrusion detection methodologies and techniques for detecting host-and network- based intrusions via intrusion detection technologies.
- 2.9 Understanding of defence in depth principles and network security architecture.
- 2.10 Understanding of encryption algorithms (e.g., internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE]).
- 2.11 Understanding of cryptology.
- 2.12 Understanding of encryption methodologies.
- 2.13 Understanding of how traffic flows across the network (e.g., Transmission Control Protocol and Internet Protocol [ITCP/IP], Open System Interconnection model [OSI]).
- 2.14 Understanding of network protocols (e.g., Transmission Control Protocol and Internet Protocol)
DOMAIN 3: SECURITY OF NETWORK, SYSTEM, APPLICATION AND DATA
- 3.1 Understanding of computer network defence (CND) and vulnerability assessment tools, including open source tools, and their capabilities for government use.
- 3.2 Understanding of basic system administration, network and operating system hardening techniques.
- 3.3 Understanding of risk associated with virtualizations in federal infrastructures.
- 3.4 Understanding of penetration testing principles, tools and techniques (e.g., metasploit, neosploit).
- 3.5 Understanding of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring) and tools.
- 3.6 Understanding of remote access technology concepts for secure government connectivity.
- 3.7 Understanding of systems administration concepts.
- 3.8 Understanding of Unix command line interfaces.
- 3.9 Understanding of system and application security threats and vulnerabilities.
- 3.10 Understanding of system lifecycle management principles, including software security and usability.
- 3.11 Understanding of local specialized system requirements (e.g., critical infrastructure systems that may not use standard information technology [IT]) for safety, performance and reliability.
- 3.12 Understanding of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
- 3.13 Understanding of social dynamics of computer attackers in a global context.
- 3.14 Understanding of secure configuration management techniques for federal systems.
- 3.15 Understanding of capabilities and applications of network equipment including hubs, routers, switches, bridges, servers, transmission media and related hardware.
- 3.16 Understanding of communication methods, principles and concepts that support the network infrastructure.
- 3.17 Understanding of the common networking protocols (e.g., Transmission Control Protocol and Internet Protocol [TCP/IP]) and services (e.g., web, mail, Domain Name System [DNS]) and how they interact to provide network communications.
- 3.18 Understanding of different types of network communication (e.g., Local Area Network [LAN], Wide Area Network [WAN], Metropolitan Area Network [MAN], Wireless Local Area Network [WLAN], Wireless Wide Area Network [WWAN]).
- 3.19 Understanding of virtualization technologies and virtual machine development and maintenance.
- 3.20 Understanding of application vulnerabilities in government environments.
- 3.21 Understanding of information assurance (IA) principles and methods that apply to software development for government applications.
- 3.22 Understanding of risk threat assessment methodologies.
DOMAIN 4: INCIDENT RESPONSE
- 4.1 Understanding of incident categories, incident responses and timelines for responses within federal frameworks.
- 4.2 Understanding of disaster recovery and continuity of operations plans.
- 4.3 Understanding of data backup, types of backups (e.g., full, incremental) and recovery concepts and tools.
- 4.4 Understanding of incident response and handling methodologies for government agencies.
- 4.5 Understanding of security event correlation tools.
- 4.6 Understanding of investigative implications of hardware, operating systems and network technologies.
- 4.7 Understanding of processes for seizing and preserving digital evidence (e.g., chain of custody) in compliance with legal standards.
- 4.8 Understanding of types of digital forensics data and how to recognize them.
- 4.9 Understanding of basic concepts and practices of processing digital forensic data.
- 4.10 Understanding of anti-forensics tactics, techniques, and procedures (TTPS).
- 4.11 Understanding of common forensic tool configuration and support applications (e.g., VMWare, Wireshark).
- 4.12 Understanding of network traffic analysis methods.
- 4.13 Understanding of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files for government investigations.
DOMAIN 5: SECURITY OF EVOLVING TECHNOLOGY
- 5.1 Understanding of new and emerging information technology (IT) and information security technologies relevant to federal adoption.
- 5.2 Understanding of emerging security issues, risks, and vulnerabilities.
- 5.3 Understanding of risk associated with mobile computing in government workforces.
- 5.4 Understanding of cloud concepts around data and collaboration for public sector use.
- 5.5 Understanding of risk of moving applications and infrastructure to the cloud for government agencies.
- 5.6 Understanding of risk associated with outsourcing IT services.
- 5.7 Understanding of supply chain risk management processes and practices for federal procurement.
Requirements
No specific prerequisites are required for enrollment in this course.
28 Hours
Testimonials (3)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.
Jack - CFNOC- DND
Course - Micro Focus ArcSight ESM Advanced
The way to receive the information from the trainer
