The three-day NIST Cybersecurity Bootcamp course is a combination of the NIST Cybersecurity Framework (NCSF) Foundation and Practitioner Training courses. The bootcamp provides a deep dive into the components of the NIST CSF and NIST Risk Management Framework (RMF) and how they align to risk management. The course will follow the principles of the NIST Cybersecurity Framework to design and implement (or improve) a cybersecurity program to protect critical assets. The bootcamp details defense in depth, creation of a Written Information Security Program, and implementing ongoing assessments for a continuous improvement plan. This course is suited for individuals working with and overseeing the cybersecurity of an organization, including CIOs, CISOs, IT Security workforce, and IT Directors/Managers/Personnel.
Pre-requisite(s):
- There are no prerequisites for this course. Basic computing skills and security knowledge will be helpful.
Course Outline:
Foundation Course
- Module 1: Course Introduction
- Module 2: The Basics of Cybersecurity
- Module 3: A Holistic Study of the NIST Cybersecurity Framework
- Module 4: Cybersecurity Activities: The Framework Core
- Module 5: Risk Management Considerations: Framework Implementation Tiers
- Module 6: Current and Desired Outcomes: Framework Profiles
- Module 7: A Primer on the Seven Step Framework Implementation Process
Practitioner Course
- Chapter 1: Course Introduction
- Chapter 2: The Components of the NIST Cybersecurity Framework
- Chapter 3: Risk Management in the NIST CSF and NIST RMF
- Chapter 4: Real World Attacks
- Chapter 5: Defense in Depth and the NIST Cybersecurity Framework
- Chapter 6: Assessing Security in the Subcategories
- Chapter 7: Creating a Written Information Security Program
- Chapter 8: A Practitioner’s Deep Dive into Creating or Improving a Cybersecurity Program\
- Step 1: Prioritize and Scope
- Step 2: Orient
- Step 3: Create a Current Profile
- Step 4: Conduct a Risk Assessment
- Step 5: Create a Target Profile
- Step 6: Determine, Analyze, and Prioritize Gaps
- Step 7: Implement Action Plan
- Chapter 9: Continuous Cybersecurity Improvement
This course is available for "remote" learning and will be available to anyone with access to an internet device with a microphone (this includes most models of computers, tablets). Classes will take place with a "Live" instructor at the date/times listed below.
Upon registration, the instructor will send along additional information about how to log-on and participate in the class.