--- title: "Courses « National Cybersecurity Preparedness Consortium" description: "NCPC's no-cost courses may be web-based (self-paced) or instructor-led (live)." language: "en-US" canonical_url: "https://new.nationalcpc.org/courses/" source_url: "https://new.nationalcpc.org/courses/" content_type: "text/markdown" --- [Skip to content](#content) # Courses NCPC's no-cost courses may be web-based (self-paced) or instructor-led (live). [ # Community Cybersecurity Information Sharing Integration This course will introduce foundational cybersecurity information sharing concepts that can be leveraged to build a community information sharing collaborative. It will establish the purpose and value of community information sharing; and will explore how sharing can assist communities with cyber incident preparedness and response before, during and after a cyber incident occurs. ](https://new.nationalcpc.org/course/mgt-478/) [ ** ** ** ## MGT-478 ](https://new.nationalcpc.org/course/mgt-478/) ## [](https://new.nationalcpc.org/course/mgt-478/)[CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/) ** ## [16 hours](https://new.nationalcpc.org/course/mgt-478/) [ Learn More ](https://new.nationalcpc.org/course/mgt-478/) [ # Community Cybersecurity Preparedness Simulation This course is designed as a tabletop activity simulating a community-wide cybersecurity event. Using a gamification approach, participants will strategize with a diverse group of stakeholders to plan for and respond from a cybersecurity incident that could have cascading effects across a community. Specifically, this training will encourage participants to discuss budgeting and planning strategies; coordinate with other community stakeholders to respond to a cyber incident; and will inform participants of various recovery aspects that may be included in a cybersecurity program. ](https://new.nationalcpc.org/course/mgt-301/) [ ** ** ** ## MGT-301 ](https://new.nationalcpc.org/course/mgt-301/) ## [](https://new.nationalcpc.org/course/mgt-301/)[CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/) ** ## [8 hours](https://new.nationalcpc.org/course/mgt-301/) [ Learn More ](https://new.nationalcpc.org/course/mgt-301/) [ # Community-Level Cybersecurity Planning and Training Gap Analysis Communities face an increasingly complex and evolving cyber threat landscape that no single organization can address alone. A resilient cybersecurity posture requires a whole community approach, where key organizations—including government, critical infrastructure, and private sector partners—work together to assess and strengthen their collective capabilities. This course brings stakeholders together to build shared understanding and coordinated strategies for reducing cyber risk. ](https://new.nationalcpc.org/course/mgt-362/) [ ** ** ** ## MGT-362 ](https://new.nationalcpc.org/course/mgt-362/) ## [](https://new.nationalcpc.org/course/mgt-362/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/), [CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/), [CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/), [NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/), [TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [16 hours](https://new.nationalcpc.org/course/mgt-362/) [ Learn More ](https://new.nationalcpc.org/course/mgt-362/) [ # Comprehensive Cybersecurity Defense Comprehensive Cybersecurity Defense (formerly: Comprehensive Cyberterrorism Defense) is a basic-level course designed for technical personnel who monitor and protect our nation’s critical cyber infrastructure. The course introduces students to cyber-defense tools that will assist them in monitoring their computer networks and implementing cybersecurity measures to prevent or greatly reduce the risk of a cyber-based attack. This course integrates hands-on computer lab applications to maximize the student’s learning experience. ](https://new.nationalcpc.org/course/per-256/) [ ** ** ** ## PER-256 ](https://new.nationalcpc.org/course/per-256/) ## [](https://new.nationalcpc.org/course/per-256/)[CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ** ## [32 hours](https://new.nationalcpc.org/course/per-256/) [ Learn More ](https://new.nationalcpc.org/course/per-256/) [ Register ](https://cybersecuritydefenseinitiative.org/cdi-courses/) [ # Critical Thinking and Risk Management in a Cyber-Converged World This course enables leaders to define and assess business risks related to cybersecurity. Students are exposed to complex analysis and decision-making with consideration of converged catalysts (e.g., cyber, physical, informational) impacting operations. They will gain an appreciation for a standard taxonomy and methods to calculate risk. Instruction includes discussion of risk management frameworks outside of NIST (e.g., OCTAVE FORTE) and Factor Analysis of Information Risk (FAIR) for risk assessment. ](https://new.nationalcpc.org/course/mgt-328/) [ ** ** ** ## MGT-328 ](https://new.nationalcpc.org/course/mgt-328/) ## [](https://new.nationalcpc.org/course/mgt-328/)[NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/) ** ## [4 hours](https://new.nationalcpc.org/course/mgt-328/) [ Learn More ](https://new.nationalcpc.org/course/mgt-328/) [ Register ](https://nuari.org/ncpc-training-courses) [ # Cyber Ethics Cyber Ethics is designed to share the proper techniques for approaching the difficult ethical dilemmas arising from use of the modern Internet. Develop the skills to assess future ethical dilemmas by examining some of the more pressing concerns related to Internet usage today. ](https://new.nationalcpc.org/course/awr-174-w/) [ ** ** ** ## AWR-174-W ](https://new.nationalcpc.org/course/awr-174-w/) ## [](https://new.nationalcpc.org/course/awr-174-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [13 hours](https://new.nationalcpc.org/course/awr-174-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-174-w/) [ Register ](https://teex.org/class/AWR174/) [ # Cyber Identity and Authentication This course addresses different forms of authentication, such as two-factor, multi-factor and other authentication products protections addressing identity compromise. Designed for public and private personnel at all levels of government, law enforcement, the private sector and other stakeholders, CIAA provides a broad-base of knowledge connecting the underlying concepts of digital identity to how people, devices and systems are authorized to access digital resources and services. This course also covers “best practices” for using identity management and access control techniques and mechanisms to develop authentication standards. ](https://new.nationalcpc.org/course/awr-384-w/) [ ** ** ** ## AWR-384-W ](https://new.nationalcpc.org/course/awr-384-w/) ## [](https://new.nationalcpc.org/course/awr-384-w/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ## [6 hours](https://new.nationalcpc.org/course/awr-384-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-384-w/) [ Register ](https://teex.org/class/AWR384/) [ # Cyber Security Awareness for Municipal, Police, Fire and EMS IT Personnel This course covers basic cyber awareness for Municipal, Police, Fire and EMS Information Technology personnel. Participants will have an increased knowledge of threats specific to their jurisdiction and an understanding of the processes and procedures needed to develop a cyber-awareness program. This course will focus on the steps involved in being aware of cyber threats and effectively communicating the processes and procedures to protect users against common cyber threats. The participants will apply this knowledge by developing processes and procedures to integrate cyber awareness into routine operations. ](https://new.nationalcpc.org/course/awr-388-w/) [ ** ** ** ## AWR-388-W ](https://new.nationalcpc.org/course/awr-388-w/) ## [](https://new.nationalcpc.org/course/awr-388-w/)[NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/) ## [2 hours](https://new.nationalcpc.org/course/awr-388-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-388-w/) [ Register ](https://teex.org/class/AWR388/) [ # Cyber Threat Intelligence The purpose of analysis is to produce intelligence that decreases uncertainty in decision making and therefore reduces risk. This course introduces the information analysis process and how an organization can use it to identify, define and mitigate cybersecurity threats. The intent is to provide participants with a general understanding of the tools and processes needed for an analysis team to create cybersecurity information and intelligence within their organization. ](https://new.nationalcpc.org/course/per-412/) [ ** ** ** ## PER-412 ](https://new.nationalcpc.org/course/per-412/) ## [](https://new.nationalcpc.org/course/per-412/)[CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/), [CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ** ## [16 hours](https://new.nationalcpc.org/course/per-412/) [ Learn More ](https://new.nationalcpc.org/course/per-412/) [ # Cybercrime Insight and Introduction to Digital Evidence Identification This course introduces state, local, tribal and territorial first responders with limited or no prior knowledge of computer crime and cyber investigations to the importance of identifying evidence related to suspected criminal activity, and how to incorporate the evidence into an investigation. This is an awareness level course that will help first responders reduce cybersecurity risks and response impacts to critical infrastructure. ](https://new.nationalcpc.org/course/awr-427/) [ ** ** ** ## AWR-427 ](https://new.nationalcpc.org/course/awr-427/) ## [](https://new.nationalcpc.org/course/awr-427/)[CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ** ## [8 hours](https://new.nationalcpc.org/course/awr-427/) [ Learn More ](https://new.nationalcpc.org/course/awr-427/) [ Register ](https://cybersecuritydefenseinitiative.org/cdi-courses/) [ # Cybersecurity First Responder This is an intermediate-level course designed for technical personnel who are first responders to any type of cyber-based attack against our nation’s critical cyber infrastructure. Blended learning methods are utilized, to include a balance of classroom lecture, hands-on laboratory exercises, and the use of cyberterrorism response tools against real world simulated cyber-attacks. Students learn the proper steps of an incident response to include incident assessment, detection and analysis, and the containing, eradicating, and recovering process from a system or network-based attack. ](https://new.nationalcpc.org/course/per-257/) [ ** ** ** ## PER-257 ](https://new.nationalcpc.org/course/per-257/) ## [](https://new.nationalcpc.org/course/per-257/)[CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ** ## [32 hours](https://new.nationalcpc.org/course/per-257/) [ Learn More ](https://new.nationalcpc.org/course/per-257/) [ Register ](https://cybersecuritydefenseinitiative.org/cdi-courses/) [ # Cybersecurity for Educational Leaders This is an awareness-level, non-technical course that is focused on educational institutions with training to assist them in addressing cybersecurity threats. Educational institutions of all sizes (including universities, colleges and K-12 school districts) are data rich making them targets for cyber-attacks. Cybersecurity readiness is not solely a technology issue; it includes managing student safety, well-being and digital risks. The leadership are responsible for managing the cybersecurity risk for our schools. ](https://new.nationalcpc.org/course/awr-301/) [ ** ** ** ## AWR-301 ](https://new.nationalcpc.org/course/awr-301/) ## [](https://new.nationalcpc.org/course/awr-301/)[CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/), [CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/), [NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/) ** ## [8 hours](https://new.nationalcpc.org/course/awr-301/) [ Learn More ](https://new.nationalcpc.org/course/awr-301/) [ # Cybersecurity for Everyone Computers, mobile devices and the Internet of Things (IoT) are a part of our daily lives. By using all of this technology, which makes our lives easier, we have opened ourselves up to the risks of cyber-attacks. This course will introduce you to the basics of protecting your computer and the data it stores as well as protecting yourself when you are online, on social media and while using your mobile or smart devices. ](https://new.nationalcpc.org/course/awr-397-w/) [ ** ** ** ## AWR-397-W ](https://new.nationalcpc.org/course/awr-397-w/) ## [](https://new.nationalcpc.org/course/awr-397-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [4 hours](https://new.nationalcpc.org/course/awr-397-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-397-w/) [ Register ](https://teex.org/class/awr397/) [ # Cybersecurity Fundamentals Cybersecurity Fundamentals is an introductory level course designed for new and transitioning Information Technology professionals. Students learn preferred network topologies and the uses of Intrusion Detection/Prevention systems; the use and maintenance of firewalls and anti-virus software; to recognize various types of network based attacks; to recognize social engineering attacks, both remote and in-person; and the importance of establishing policies, and disaster planning. ](https://new.nationalcpc.org/course/awr-418-w/) [ ** ** ** ## AWR-418-W ](https://new.nationalcpc.org/course/awr-418-w/) ## [](https://new.nationalcpc.org/course/awr-418-w/)[CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ## [4 hours](https://new.nationalcpc.org/course/awr-418-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-418-w/) [ Register ](https://teex.org/class/awr418/) [ # Cybersecurity in the Workplace The use of computers and networked systems in the workplace has opened businesses and organizations to a variety of risks. Every employee using a computer connected to the organization’s network is a potential point of entry for a cyber-attack. For this reason, cybersecurity and protecting the organization’s data/information is every employee’s responsibility. This course will help students understand the different types of cyber-attacks their company may face, the type of information that is at risk, how to recognize cyber-attacks and why it is important for everyone in the organization to participate in cybersecurity. ](https://new.nationalcpc.org/course/awr-395-w/) [ ** ** ** ## AWR-395-W ](https://new.nationalcpc.org/course/awr-395-w/) ## [](https://new.nationalcpc.org/course/awr-395-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [2 hours](https://new.nationalcpc.org/course/awr-395-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-395-w/) [ Register ](https://teex.org/class/awr395/) [ # Cybersecurity Incident Response and Management This course is designed to address the gap in specific technical skills needed for an effective cyber response. It will also help improve the limited availability of targeted hands-on IT and security training focused on cyber-attacks. This training focuses on government and private sector technical personnel who have intermediate and advanced knowledge of network operations and/or the responsibility for network security. ](https://new.nationalcpc.org/course/per-371/) [ ** ** ** ## PER-371 ](https://new.nationalcpc.org/course/per-371/) ## [](https://new.nationalcpc.org/course/per-371/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [24 hours](https://new.nationalcpc.org/course/per-371/) [ Learn More ](https://new.nationalcpc.org/course/per-371/) [ Register ](https://teex.org/class/per371/) [ # Cybersecurity Proactive Defense Cybersecurity Proactive Defense (CPD) is an advanced-level course designed for technical personnel who monitor and protect our nation’s critical cyber infrastructure. This course prepares cyber defenders to recognize their own weaknesses by providing advanced attack vectors, sequential and escalating attack steps, and hands-on attack execution experience. CPD provides context behind a cyberterrorism attack by illustrating each attack step, the tools used to conduct the step, and the resulting impact on targeted systems. ](https://new.nationalcpc.org/course/per-377/) [ ** ** ** ## PER-377 ](https://new.nationalcpc.org/course/per-377/) ## [](https://new.nationalcpc.org/course/per-377/)[CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ** ## [32 hours](https://new.nationalcpc.org/course/per-377/) [ Learn More ](https://new.nationalcpc.org/course/per-377/) [ Register ](https://cybersecuritydefenseinitiative.org/cdi-courses/) [ # Cybersecurity Resiliency for Industrial Control Systems The national and economic security of the United States depends on the reliable functioning of critical infrastructure and community stability. This course provides participants from throughout various levels of government, private industry and community an understanding of cybersecurity resiliency in industrial control systems (ICS). Additionally, this course provides an understanding of cybersecurity resiliency in industrial control systems (ICS) and will review the Internet of Things (IoT), vulnerabilities within Operational Technology (OT) and Supervisory Control and Data Acquisition (SCADA) systems, methods of detecting and responding to cyber attacks in the systems, as well as actions that can be taken by non-technical personnel to mitigate or minimize the effects of cyber attacks. ](https://new.nationalcpc.org/course/per-398/) [ ** ** ** ## PER-398 ](https://new.nationalcpc.org/course/per-398/) ## [](https://new.nationalcpc.org/course/per-398/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [8 hours](https://new.nationalcpc.org/course/per-398/) [ Learn More ](https://new.nationalcpc.org/course/per-398/) [ Register ](https://teex.org/class/per398/) [ # Cybersecurity Risk Awareness for Officials and Senior Management This is a non-technical course designed to develop awareness of cybersecurity risks for elected officials, appointed officials and other senior managers so that they are better informed to properly protect the jurisdiction/organization during a cybersecurity incident. It is designed to help officials and senior management work more effectively with their Information Technology (IT) departments to mitigate cyber threats. Upon successful completion of the course, participants shall have a better understanding of the cybersecurity risks that their jurisdiction or organization faces and how to work with their IT teams and other departments to mitigate those risks. ](https://new.nationalcpc.org/course/awr-383/) [ ** ** ** ## AWR-383 ](https://new.nationalcpc.org/course/awr-383/) ## [](https://new.nationalcpc.org/course/awr-383/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [4 hours](https://new.nationalcpc.org/course/awr-383/) [ Learn More ](https://new.nationalcpc.org/course/awr-383/) [ Register ](https://teex.org/class/awr383/) [ # Cybersecurity Vulnerability Assessment and Remediation This course is designed to address specific technical and professional skills needed to assess, document, remediate and report on cybersecurity vulnerability assessments within organizations through a series of lectures and hands-on activities. Activities include examining, analyzing, and prioritizing assets, risks and vulnerabilities to develop a vulnerability assessment report that could be delivered to organizational leadership. This course utilizes active discussions and activities to extend the participant’s understanding of vulnerability assessments.   ](https://new.nationalcpc.org/course/mgt-303/) [ ** ** ** ## MGT-303 ](https://new.nationalcpc.org/course/mgt-303/) ## [](https://new.nationalcpc.org/course/mgt-303/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [16 hours](https://new.nationalcpc.org/course/mgt-303/) [ Learn More ](https://new.nationalcpc.org/course/mgt-303/) [ Register ](https://teex.org/class/mgt303/) [ # Demystifying Cyber Attacks This course, through discussion, pre-recorded attacks and live example attacks, will demystify common cyber attacks for non-technical participants. Participants will also learn how common cyber attacks can be disrupted at various points of the cyber kill chain using various mitigation and response strategies. Upon successful completion of this course, participants will have a better understanding of the progression of common cyber attacks; and, where and how they can be prevented or disrupted. ](https://new.nationalcpc.org/course/awr-421/) [ ** ** ** ## AWR-421 ](https://new.nationalcpc.org/course/awr-421/) ## [](https://new.nationalcpc.org/course/awr-421/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [8 hours](https://new.nationalcpc.org/course/awr-421/) [ Learn More ](https://new.nationalcpc.org/course/awr-421/) [ Register ](https://teex.org/class/AWR421/) [ # Detecting and Responding to a Cyber Attack As computers and mobile devices become a part of most people’s everyday lives, the challenges of protecting computers and mobile devices and the data on them increases. Part of protecting computers and mobile devices is understanding how to recognize when they are compromised, the steps to take to respond to compromised computers and devices, and how to recover once they have been rid of any infection. This course will introduce students to various types of cyber-attacks and how to detect and respond to them in order to protect their data and information. ](https://new.nationalcpc.org/course/awr-399-w/) [ ** ** ** ## AWR-399-W ](https://new.nationalcpc.org/course/awr-399-w/) ## [](https://new.nationalcpc.org/course/awr-399-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [4 hours](https://new.nationalcpc.org/course/awr-399-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-399-w/) [ Register ](https://teex.org/class/awr399/) [ # Developing a Cybersecurity Annex for Incident Response Cyber-attacks occur more frequently and have become increasingly sophisticated. Cybersecurity events now have the potential to significantly disrupt the business operations of government and critical infrastructure services. Public and private sectors, in the United States, are at increasing and continual risk of surprise attacks from nation-state and non-state actors. (Burgess, 2018) The National Response Framework describes how preparedness can be achieved by developing an incident annex for each hazard. Incident annexes describe coordinating structures used to deliver core capabilities and support response missions unique to a specific type of incident. ](https://new.nationalcpc.org/course/mgt-367-w/) [ ** ** ** ## MGT-367-W ](https://new.nationalcpc.org/course/mgt-367-w/) ## [](https://new.nationalcpc.org/course/mgt-367-w/)[CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/) ## [6 hours](https://new.nationalcpc.org/course/mgt-367-w/) [ Learn More ](https://new.nationalcpc.org/course/mgt-367-w/) [ Register ](https://teex.org/class/AWR366/) [ # Developing Cybersecurity Resiliency for Everyone This discussion-based, non-technical course is an introduction to cybersecurity that provides individuals, community leaders and first responders with information on how cyber attacks can impact, prevent and/or stop operations and emergency responses in a community. The Developing Cybersecurity Resiliency for Everyone course provides a cursory introduction to cybersecurity vulnerabilities, risks, threats and countermeasures and introduces actions communities can take to establish a cybersecurity program. It introduces the Community Cybersecurity Maturity Model (CCSMM) as a framework for understanding community cybersecurity and offers a brief introduction to low or no-cost approaches to securing a community against cybersecurity threats and attacks; setting the stage for further efforts in which a community can build a cybersecurity program. ](https://new.nationalcpc.org/course/awr-136/) [ ** ** ** ## AWR-136 ](https://new.nationalcpc.org/course/awr-136/) ## [](https://new.nationalcpc.org/course/awr-136/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [8 hours](https://new.nationalcpc.org/course/awr-136/) [ Learn More ](https://new.nationalcpc.org/course/awr-136/) [ Register ](https://teex.org/class/AWR136/) [ # Digital Forensics Basics This course explains investigative methods and standards for the acquisition, extraction, preservation, analysis, and deposition of digital evidence from storage devices. Using realistic forensics situations, learn how to find traces of illegal or illicit activities using computer forensics tools and manual techniques. Also, learn how to recover data intentionally hidden or encrypted by perpetrators. ](https://new.nationalcpc.org/course/awr-139-w/) [ ** ** ** ## AWR-139-W ](https://new.nationalcpc.org/course/awr-139-w/) ## [](https://new.nationalcpc.org/course/awr-139-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [10 hours](https://new.nationalcpc.org/course/awr-139-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-139-w/) [ Register ](https://teex.org/class/AWR139/) [ # Disaster Recovery for Information Systems Disaster Recovery for Information Systems trains business managers to respond to varying threats that might impact their organization’s access to information. The course provides requisite background theory and recommended best practices needed by managers to keep their offices running during incidents of different types. Topics include an overview of business continuity planning; disaster recovery planning; guides for implementing and managing disaster recovery plans, a discussion of technical vulnerabilities faced by organizations and an examination of legal issues that may confront an organization. ](https://new.nationalcpc.org/course/awr-176-w/) [ ** ** ** ## AWR-176-W ](https://new.nationalcpc.org/course/awr-176-w/) ## [](https://new.nationalcpc.org/course/awr-176-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [1 hours](https://new.nationalcpc.org/course/awr-176-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-176-w/) [ Register ](https://teex.org/class/AWR176/) [ # End-User Security and Privacy (ESP) This course will focus primarily on the end-user’s perspective. In particular, various security-related challenges faced by end-users and their impact on data privacy. The course will also include content concerning online content providers and local ISPs on access rights, unintentional data sharing, mobile apps and how to be compliant to a NIAP Protection Profile (PP), etc. ](https://new.nationalcpc.org/course/awr-300-w/) [ ** ** ** ## AWR-300-W ](https://new.nationalcpc.org/course/awr-300-w/) ## [](https://new.nationalcpc.org/course/awr-300-w/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ## [5 hours](https://new.nationalcpc.org/course/awr-300-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-300-w/) [ Register ](https://teex.org/class/AWR300/) [ # Establishing an Information Sharing and Analysis Organization The growing Information Sharing and Analysis Organization (ISAO) ecosystem provides an opportunity to empower the nation to become more educated and effective in preventing, detecting and responding to the increasingly sophisticated landscape of cyber threats. There are considerable challenges with the vast quantity of information, the complexities of analysis and the uncertainties of sharing data with a large network of organizations. This course assists communities of interest to establish an Information Sharing and Analysis Organization (ISAO). ](https://new.nationalcpc.org/course/awr-381-w/) [ ** ** ** ## AWR-381-W ](https://new.nationalcpc.org/course/awr-381-w/) ## [](https://new.nationalcpc.org/course/awr-381-w/)[CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/) ## [8 hours](https://new.nationalcpc.org/course/awr-381-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-381-w/) [ Register ](https://teex.org/class/AWR381/) [ # Examining Advanced Persistent Threats Today’s advanced persistent threats (APTs) are increasingly sophisticated, varied, targeted, aggressive and successful. There is an increasing deployment of and dependence on Internet of Things (IoT) for remote access devices to National Critical Infrastructure Sectors and Services (NCISS). Inadequate deployment and maintenance of security on these systems could provide opportunities for attackers to harm to the American citizenry through NCISS infrastructure and associated resource disruption. ](https://new.nationalcpc.org/course/awr-403-w/) [ ** ** ** ## AWR-403-W ](https://new.nationalcpc.org/course/awr-403-w/) ## [](https://new.nationalcpc.org/course/awr-403-w/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ## [4 hours](https://new.nationalcpc.org/course/awr-403-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-403-w/) [ Register ](https://teex.org/class/awr403/) [ # Foundations of Cyber Crimes This course highlights a range of cyber crimes and the appropriate response by first responders and other local, state and federal agencies that may encounter them. Participants will identify legislative, organizational and suggested personal efforts to control or prevent cyber crimes. This course examines cyber and cyber facilitated non-violent white-collar crimes, fraud and financial crimes, and violent crimes. The broad landscape of the cyber crimes discussed in this course illustrates the fact that almost all crimes can either be directly committed or indirectly facilitated through the cyber domain-a result of society’s increasing integration and dependence on the Internet and computers into nearly every aspect of daily life. ](https://new.nationalcpc.org/course/awr-168-w/) [ ** ** ** ## AWR-168-W ](https://new.nationalcpc.org/course/awr-168-w/) ## [](https://new.nationalcpc.org/course/awr-168-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [10 hours](https://new.nationalcpc.org/course/awr-168-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-168-w/) [ Register ](https://teex.org/class/AWR168/) [ # Identifying, Prioritizing, and Assessing High Value Assets Every organization has critical information and technology assets that are essential to its business operations and require enhanced security. Organizational resources that can be dedicated to cybersecurity are finite; therefore, those resources should be applied deliberately and strategically, focusing on the most important assets. ](https://new.nationalcpc.org/course/per-342/) [ ** ** ** ## PER-342 ](https://new.nationalcpc.org/course/per-342/) ## [](https://new.nationalcpc.org/course/per-342/)[CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/) ** ## [8 hours](https://new.nationalcpc.org/course/per-342/) [ Learn More ](https://new.nationalcpc.org/course/per-342/) [ # Incident Response for Municipal, Police, Fire and EMS Information Technology Personnel This course is the second training in a two-part course. It is intended to introduce the basics of the incident response process to the Information Technology personnel in Police, Fire or EMS departments. This web-based course focuses on the steps involved in being aware of common cyber incidents, as well as steps in developing an incident response plan. The participants will apply this knowledge by developing a response plan specific to their jurisdiction. The content of the course includes: common cyber incidents occurring in Police, Fire and EMS IT departments, developing a response plan for common cyber incidents, distinguishing tasks for police, fire and EMS IT departments, and processes for future improvements to response plans. ](https://new.nationalcpc.org/course/awr-389-w/) [ ** ** ** ## AWR-389-W ](https://new.nationalcpc.org/course/awr-389-w/) ## [](https://new.nationalcpc.org/course/awr-389-w/)[NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/) ## [2 hours](https://new.nationalcpc.org/course/awr-389-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-389-w/) [ Register ](https://teex.org/class/AWR389/) [ # Information Risk Management This Information Risk Management course addresses topics related to information assets, identifying risks and management processes. Receive training on information risk-related tools and technologies for better understanding of potential threats and vulnerabilities in online business. Learn best practices and how to apply levels of security measures. ](https://new.nationalcpc.org/course/awr-177-w/) [ ** ** ** ## AWR-177-W ](https://new.nationalcpc.org/course/awr-177-w/) ## [](https://new.nationalcpc.org/course/awr-177-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [13 hours](https://new.nationalcpc.org/course/awr-177-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-177-w/) [ Register ](https://teex.org/class/AWR177/) [ # Information Security Basics This Information Security Basics course provides entry and mid-level IT staff a technical overview of information security, focusing on the knowledge to identify and stop various cyber threats. In addition to providing an introduction to information assurance, general concepts and topics covered include TCP/IP protocol, introductory network security, introductory operating system security and basic cryptography. ](https://new.nationalcpc.org/course/awr-173-w/) [ ** ** ** ## AWR-173-W ](https://new.nationalcpc.org/course/awr-173-w/) ## [](https://new.nationalcpc.org/course/awr-173-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [13 hours](https://new.nationalcpc.org/course/awr-173-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-173-w/) [ Register ](https://teex.org/class/AWR173/) [ # Integrating Cyber Hazard Response into Exercise Planning This is an awareness-level course that is designed to teach exercise planners the importance of incorporating cyber into all hazard emergency management. While most exercise planners know cyber-hazards exists, they may have not been taught how to incorporate those hazards into their exercise planning. Furthermore, exercise planners may not know the extent to which cyber hazards impact critical infrastructure. This course will ensure exercise planners are aware of the hazards related to cyber-enabled threats and how to address those hazards within their exercises. ](https://new.nationalcpc.org/course/awr-432/) [ ** ** ** ## AWR-432 ](https://new.nationalcpc.org/course/awr-432/) ## [](https://new.nationalcpc.org/course/awr-432/)[NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/) ** ## [4 hours](https://new.nationalcpc.org/course/awr-432/) [ Learn More ](https://new.nationalcpc.org/course/awr-432/) [ Register ](https://nuari.org/ncpc-training-courses) [ # Integration of Cybersecurity Personnel into the Emergency Operations Center for Cyber Incidents Traditionally, cybersecurity is the responsibility of each organization individually using their own information security and technology personnel to manage threats. However, the physical consequences of a cyber incident are a shared responsibility that involves all levels of government, law enforcement, the private sector and other “stakeholders”. With this shared responsibility, there is a clear need to bring IT professionals and traditional emergency management personnel together to prepare for, respond to, and recover from the impacts of a cyber incident. ](https://new.nationalcpc.org/course/mgt-456/) [ ** ** ** ## MGT-456 ](https://new.nationalcpc.org/course/mgt-456/) ## [](https://new.nationalcpc.org/course/mgt-456/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [24 hours](https://new.nationalcpc.org/course/mgt-456/) [ Learn More ](https://new.nationalcpc.org/course/mgt-456/) [ Register ](https://teex.org/class/mgt456/) [ # Internet of Things Security Designed to provide knowledge and skills to a targeted audience of information technology practitioners about the importance of IoT in society, the current components of typical IoT implementations and trends for the future. The course will cover IoT design considerations, constraints and interfacing between the physical world and a very large variety of devices that have not traditionally been considered as part of the IT Security problem. It will also cover key components of networking to ensure that students understand how IoT devices can be properly and securely connected to the Internet. ](https://new.nationalcpc.org/course/per-301/) [ ** ** ** ## PER-301 ](https://new.nationalcpc.org/course/per-301/) ## [](https://new.nationalcpc.org/course/per-301/)[CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ** ## [32 hours](https://new.nationalcpc.org/course/per-301/) [ Learn More ](https://new.nationalcpc.org/course/per-301/) [ Register ](https://cybersecuritydefenseinitiative.org/cdi-courses/) [ # Introduction to Cyber Incident Management This course provides practical guidelines on responding to incidents effectively and efficiently as part of an incident response program. Primary topics include detecting, analyzing, prioritizing, and handling cyber incidents. Real-world examples and scenarios to help provide knowledge, understanding, and capacity for effective cyber incident analysis and response. This advanced level course is designed to teach students the fundamental of cyber incident analysis and responses. ](https://new.nationalcpc.org/course/awr-169-w/) [ ** ** ** ## AWR-169-W ](https://new.nationalcpc.org/course/awr-169-w/) ## [](https://new.nationalcpc.org/course/awr-169-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [10 hours](https://new.nationalcpc.org/course/awr-169-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-169-w/) [ Register ](https://teex.org/class/AWR169/) [ # Introduction to Internet of Things The national and economic security of the United States depends on the reliable functioning of critical infrastructure and community stability. This course provides participants from throughout the various levels of government, private industry, and community an understanding of how they are all affected by the Internet of Things (IoT). The purpose of this course is to provide an understanding of the history, definitions and components that make up IoT. It addresses the different applications of IoT, as well as applicable laws and policies, technologies, emerging threats, best practices, security and a variety of existing and developing technologies. ](https://new.nationalcpc.org/course/awr-402-w/) [ ** ** ** ## AWR-402-W ](https://new.nationalcpc.org/course/awr-402-w/) ## [](https://new.nationalcpc.org/course/awr-402-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [2 hours](https://new.nationalcpc.org/course/awr-402-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-402-w/) [ Register ](https://teex.org/class/awr402/) [ # Malware Prevention, Discovery, and Recovery Malware Prevention, Discovery, and Recovery (MPDR) is an intermediate-level course is designed for technical personnel who monitor and protect our nation’s critical cyber infrastructure. Students learn how to recognize, identify, and analyze malware; the remediation process to eliminate the malware; and proper procedures to recover from the attack and regain network connectivity in a timely manner. This course integrates hands-on computer lab applications to maximize the student’s learning experience. ](https://new.nationalcpc.org/course/per-382/) [ ** ** ** ## PER-382 ](https://new.nationalcpc.org/course/per-382/) ## [](https://new.nationalcpc.org/course/per-382/)[CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ** ## [32 hours](https://new.nationalcpc.org/course/per-382/) [ Learn More ](https://new.nationalcpc.org/course/per-382/) [ Register ](https://cybersecuritydefenseinitiative.org/cdi-courses/) [ # Mobile Device Security and Privacy This course is designed to assist individuals better understand security and privacy issues associated with mobile devices and infrastructure; including benefits and challenges of designing, implementing, and maintaining Bring Your Own Device (BYOD) Programs. Using scenarios, thought challenges and exercises as a framework, students will learn about: - The purpose of Enterprise Mobile Management platforms - Elements that make mobile networks and operating systems different - Mobile malware classifications and detection strategies - Mobile architecture data leakage detection and prevention strategies. ](https://new.nationalcpc.org/course/awr-385-w/) [ ** ** ** ## AWR-385-W ](https://new.nationalcpc.org/course/awr-385-w/) ## [](https://new.nationalcpc.org/course/awr-385-w/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ## [5 hours](https://new.nationalcpc.org/course/awr-385-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-385-w/) [ Register ](https://teex.org/class/AWR385/) [ # Network Assurance The Network Assurance course covers secure network practices to protect networked systems against attacks and exploits. Topics include authentication, authorization and accounting (AAA), as well as firewalls, intrusion detection/prevention, common cryptographic ciphers, server and client security, and secure policy generation. This course also includes information on securing cloud-based networks and applications. ](https://new.nationalcpc.org/course/awr-138-w/) [ ** ** ** ## AWR-138-W ](https://new.nationalcpc.org/course/awr-138-w/) ## [](https://new.nationalcpc.org/course/awr-138-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [5 hours](https://new.nationalcpc.org/course/awr-138-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-138-w/) [ Register ](https://teex.org/class/AWR138/) [ # Network Security for Homes and Small Businesses The Internet (the world’s largest network) allows us to accomplish tasks more conveniently and efficiently at home, work and on the road! However, there are security risks with networks, and users must be aware and remain vigilant about these risks and how to secure their home or small business network. This course will introduce students to the basics of networks for homes and small businesses and provide them with best practices to secure their networks in order to protect their personal information as well as other (friends, family, customers, vendors, etc.) ](https://new.nationalcpc.org/course/awr-396-w/) [ ** ** ** ## AWR-396-W ](https://new.nationalcpc.org/course/awr-396-w/) ## [](https://new.nationalcpc.org/course/awr-396-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [2 hours](https://new.nationalcpc.org/course/awr-396-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-396-w/) [ Register ](https://teex.org/class/awr396/) [ # Network Traffic Analysis This course will train students to conduct traffic analysis on their internal networks by doing a “deep-dive” into network traffic analysis using Wireshark and other tools to identify regular and anomalous network traffic. It will teach techniques necessary to identify network attacks by context and type. You will be introduced to a wide variety of network traffic analysis information and methods. This course is delivered in a mobile training lab, using laptops that are preconfigured with hands-on exercises that immerse students in real-world examples. ](https://new.nationalcpc.org/course/per-418/) [ ** ** ** ## PER-418 ](https://new.nationalcpc.org/course/per-418/) ## [](https://new.nationalcpc.org/course/per-418/)[CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ** ## [24 hours](https://new.nationalcpc.org/course/per-418/) [ Learn More ](https://new.nationalcpc.org/course/per-418/) [ Register ](https://cybersecuritydefenseinitiative.org/cdi-courses/) [ # Organizational Cybersecurity Information Sharing This course introduces fundamental cyber information sharing concepts that can be incorporated into a cybersecurity program for both inside and outside an agency or organization. It introduces the purpose and value of information sharing and how sharing can assist with cyber incident preparedness and response before, during and after a cyber incident occurs. ](https://new.nationalcpc.org/course/mgt-473/) [ ** ** ** ## MGT-473 ](https://new.nationalcpc.org/course/mgt-473/) ## [](https://new.nationalcpc.org/course/mgt-473/)[CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/) ** ## [16 hours](https://new.nationalcpc.org/course/mgt-473/) [ Learn More ](https://new.nationalcpc.org/course/mgt-473/) [ # Organizational Cybersecurity Policy Essentials Organizations have increasingly been the target of cyberattacks that are preventable. One of the first steps to preventing cybersecurity incidents is developing and implementing cybersecurity policies in the organization. Developing robust cybersecurity policies is crucial for organizations to safeguard their digital assets and maintain operational resilience. Policies provide clear guidelines, define security standards, and establish procedures to protect against cyber threats such as data breaches, ransomware attacks, and unauthorized access. Organizations can mitigate risks, ensure compliance, and foster a security-conscious culture by implementing effective policies. ](https://new.nationalcpc.org/course/mgt-333-w/) [ ** ** ** ## MGT-333-W ](https://new.nationalcpc.org/course/mgt-333-w/) ## [](https://new.nationalcpc.org/course/mgt-333-w/)[CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/) ## [4 hours](https://new.nationalcpc.org/course/mgt-333-w/) [ Learn More ](https://new.nationalcpc.org/course/mgt-333-w/) [ Register ](https://teex.org/class/MGT333/) [ # Physical and Cybersecurity for Critical Infrastructure The national and economic security of the United States depends on the reliable functioning of critical infrastructure. This course encourages collaboration efforts among individuals and organizations responsible for both physical and cybersecurity toward development of integrated risk management strategies that lead to enhanced capabilities necessary for the protection of our Nation’s critical infrastructure. Participants will identify physical and cybersecurity concerns impacting overall infrastructure security posture, examine integrated physical and cybersecurity incidents and the evolving risks and impacts they pose to critical infrastructure, and explore resources that can be applied to improve security within an organization, business, or government entity. ](https://new.nationalcpc.org/course/mgt-452/) [ ** ** ** ## MGT-452 ](https://new.nationalcpc.org/course/mgt-452/) ## [](https://new.nationalcpc.org/course/mgt-452/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [8 hours](https://new.nationalcpc.org/course/mgt-452/) [ Learn More ](https://new.nationalcpc.org/course/mgt-452/) [ Register ](https://teex.org/class/MGT452/) [ # Practical Internet of Things (IoT) Security This classroom-based activity will be designed to introduce students to identify and describe the components of an IoT system and associated security concerns. The course will cover the elements of an IoT system including programmable logic controllers, sensors and network interfaces. Topics will include PLC functions and programming, common IoT network protocols and security concerns related to IoT systems. Students will explore IoT vulnerabilities using common vulnerability assessment tools such as Kali Linux. Lecture and exercises will culminate in a laboratory experience where teams of students will build an IoT system and examine security considerations, vulnerabilities, and threats. ](https://new.nationalcpc.org/course/awr-428/) [ ** ** ** ## AWR-428 ](https://new.nationalcpc.org/course/awr-428/) ## [](https://new.nationalcpc.org/course/awr-428/)[NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/) ** ## [8 hours](https://new.nationalcpc.org/course/awr-428/) [ Learn More ](https://new.nationalcpc.org/course/awr-428/) [ Register ](https://nuari.org/ncpc-training-courses) [ # Preparing for Cyber Attacks and Incidents Preparing for Cyber Attacks and Incidents is a two-day, non-technical course designed to provide organizations and communities with strategies and processes to increase cyber resilience. During this course, participants will analyze cyber threats and initial and cascading impacts of cyber incidents, evaluate the process for developing a cyber preparedness program, examine the importance and challenges of cyber related information sharing and discover low to no-cost resources to help build cyber resilience. ](https://new.nationalcpc.org/course/mgt-384/) [ ** ** ** ## MGT-384 ](https://new.nationalcpc.org/course/mgt-384/) ## [](https://new.nationalcpc.org/course/mgt-384/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [16 hours](https://new.nationalcpc.org/course/mgt-384/) [ Learn More ](https://new.nationalcpc.org/course/mgt-384/) [ Register ](https://teex.org/class/MGT384/) [ # Recovering from Cybersecurity Incidents The Recovering from Cybersecurity Incidents course is designed to provide guidance to a jurisdiction on the actions necessary to effectively recover from a cybersecurity attack. It discusses the pre- and post-incident programmatic activities needed for short-term and long-term recovery. The course bridges the different worlds of information technology and emergency management. This training is particularly pertinent to IT management, emergency management personnel, as well as any other government, critical infrastructure, or private sector personnel who has the responsibility for recovering after a cyber incident. ](https://new.nationalcpc.org/course/mgt-465/) [ ** ** ** ## MGT-465 ](https://new.nationalcpc.org/course/mgt-465/) ## [](https://new.nationalcpc.org/course/mgt-465/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [16 hours](https://new.nationalcpc.org/course/mgt-465/) [ Learn More ](https://new.nationalcpc.org/course/mgt-465/) [ Register ](https://teex.org/class/mgt465/) [ # Remote/Home-Office Cybersecurity Preparedness (RHC) The changing cybersecurity landscape and the Work from Home (WFH) strategies due to the COVID-19 pandemic affected the workforce worldwide. This unexpected pandemic opened the doors to vulnerable cyber-attacks in remote home office environments. Cybersecurity threats impacted WFH workers and some organizations, requiring them to use different cyber-enabled systems, devices and services. ](https://new.nationalcpc.org/course/awr-431-w/) [ ** ** ** ## AWR-431-W ](https://new.nationalcpc.org/course/awr-431-w/) ## [](https://new.nationalcpc.org/course/awr-431-w/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ## [5 hours](https://new.nationalcpc.org/course/awr-431-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-431-w/) [ Register ](https://teex.org/class/awr431/) [ # Secure Software This course covers secure programming practices necessary to secure applications against attacks and exploits. Topics covered include fundamental concepts of secure software development, defensive programming techniques, secure design and testing, and secure development methodologies. Network security administration topics include firewalls, intrusion detection/prevention, common cryptographic ciphers, AAA (authentication, authorization and accounting), server and client security, and secure policy generation. ](https://new.nationalcpc.org/course/awr-178-w/) [ ** ** ** ## AWR-178-W ](https://new.nationalcpc.org/course/awr-178-w/) ## [](https://new.nationalcpc.org/course/awr-178-w/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ## [9 hours](https://new.nationalcpc.org/course/awr-178-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-178-w/) [ Register ](https://teex.org/class/AWR178/) [ # Understanding Social Engineering Attacks This course educates members of the public in the general understanding and some common defense tactics that can be used to mitigate social engineering attacks. Designed for public and private personnel at all levels of government, law enforcement, the private sector and other stakeholders, this course provides students with an understanding of how social engineering attacks can be better mitigated by combining comprehensive security measures with an understanding and awareness of how such attacks can exploit human behaviors. Phishing, spear-phishing, water-holing, ransomware and other types of advanced persistent threats. ](https://new.nationalcpc.org/course/awr-367-w/) [ ** ** ** ## AWR-367-W ](https://new.nationalcpc.org/course/awr-367-w/) ## [](https://new.nationalcpc.org/course/awr-367-w/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ## [8 hours](https://new.nationalcpc.org/course/awr-367-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-367-w/) [ Register ](https://teex.org/class/awr367/) [ # Understanding Targeted Cyber Attacks This course provides participants with specific information regarding targeted cyber attacks, including advanced persistent threats. This information will place them in a better position to plan and prepare for, respond to and recover from targeted cyber attacks. Understanding Targeted Cyber Attacks will fill the gap in threat-specific training for cybersecurity as a community-driven course that focuses on the phases of targeted cyber attacks and the attacker methods used during each phase. Participants will also receive valuable information on cyber attack prevention, mitigation and response. ](https://new.nationalcpc.org/course/awr-376/) [ ** ** ** ## AWR-376 ](https://new.nationalcpc.org/course/awr-376/) ## [](https://new.nationalcpc.org/course/awr-376/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [8 hours](https://new.nationalcpc.org/course/awr-376/) [ Learn More ](https://new.nationalcpc.org/course/awr-376/) [ Register ](https://teex.org/class/AWR376/) [ # Using the Community Cyber Security Maturity Model (CCSMM) to Develop a Cybersecurity Program Using the Community Cyber Security Maturity Model (CCSMM) to develop a cybersecurity program will enable community leaders, network/security personnel and those individuals involved in developing or maintaining plans used for and throughout the community. This course assists participants to understand what is required to develop a coordinated, sustained and viable community cybersecurity program. The course introduces participants at all levels to the DHS-supported CCSMM and can be used to guide communities and states in developing their own CCSMM-consistent cybersecurity programs. Participants are introduced to different resources that can be used for a community program. ](https://new.nationalcpc.org/course/mgt-364-w/) [ ** ** ** ## MGT-364-W ](https://new.nationalcpc.org/course/mgt-364-w/) ## [](https://new.nationalcpc.org/course/mgt-364-w/)[CIAS (UTSA)](https://new.nationalcpc.org/developer/utsa-cias/) ## [2 hours](https://new.nationalcpc.org/course/mgt-364-w/) [ Learn More ](https://new.nationalcpc.org/course/mgt-364-w/) [ Register ](https://teex.org/class/MGT364/) [ # Zero Trust: Identity and Access Management (IAM) The intent of this course is to increase the learners’ understanding of Zero Trust methodology, principles, and implementation. The goal of this course is to prepare organizations to face existing threats and adapt to new threats in the future. This course addresses concepts related to Zero Trust and Identity and Access Management. Some of the topics covered include: ](https://new.nationalcpc.org/course/awr-351-w/) [ ** ** ** ## AWR-351-W ](https://new.nationalcpc.org/course/awr-351-w/) ## [](https://new.nationalcpc.org/course/awr-351-w/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ## [5 hours](https://new.nationalcpc.org/course/awr-351-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-351-w/) [ Register ](https://teex.org/class/AWR351/) [COMING SOON](https://new.nationalcpc.org/course/community-engagement/) [ # Community Engagement A distributed Community Engagement Training Event designed for the Whole Community and offered as a capstone event following certification pathways in the Community Cyber Security Maturity Model (CCSMM). Participants (organizational and individual) practice and refine cybersecurity skills and procedures developed independently, within a coordinated training environment. Attendees work collaboratively to enhance preparedness, response, and recovery capabilities in an All-Hazards event. ](https://new.nationalcpc.org/course/community-engagement/) [ ** ** ** ## In Development ](https://new.nationalcpc.org/course/community-engagement/) ## [](https://new.nationalcpc.org/course/community-engagement/)[NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/) ** ## [8 hours](https://new.nationalcpc.org/course/community-engagement/) [ Learn More ](https://new.nationalcpc.org/course/community-engagement/) [ Register ](https://nuari.org/ncpc-training-courses) [COMING SOON](https://new.nationalcpc.org/course/per-366/) [ # Cyber Threat Hunting Computers and servers in the United States are the most aggressively targeted systems in the world, commonly threatened by terrorists, nation states or terrorist sympathizers. Despite this growing threat level, training to counter these attacks has failed to increase in response, leaving critical information technology infrastructure exposed and vulnerable to attack. This Cyber Threat Hunting (CTH) course utilizes a blended learning approach that balances classroom lecture, hands-on laboratory exercises and supplemental material to provide technical personnel with a strategy to proactively recognize and mitigate adversarial cyber events before they cause harm, unlike incident management, which is reactive. ](https://new.nationalcpc.org/course/per-366/) [ ** ** ** ## PER-366 ](https://new.nationalcpc.org/course/per-366/) ## [](https://new.nationalcpc.org/course/per-366/)[CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ** ## [32 hours](https://new.nationalcpc.org/course/per-366/) [ Learn More ](https://new.nationalcpc.org/course/per-366/) [COMING SOON](https://new.nationalcpc.org/course/per-341/) [ # Cybersecurity for Artificial Intelligence This course will explore the ever-changing ChatGPT ecosystem, which is an interactive Artificial Intelligence (AI) Machine Learning (ML) system that generates human-readable text to interact with us. ChatGPT can be a valuable tool for organizations and individuals who want to find and fix security vulnerabilities. However, in the wrong hands, the service can become a dangerous tool for hackers. ](https://new.nationalcpc.org/course/per-341/) [ ** ** ** ## PER-341 ](https://new.nationalcpc.org/course/per-341/) ## [](https://new.nationalcpc.org/course/per-341/)[CJI (Arkansas)](https://new.nationalcpc.org/developer/arkansas-cji/) ** ## [24 hours](https://new.nationalcpc.org/course/per-341/) [ Learn More ](https://new.nationalcpc.org/course/per-341/) [COMING SOON](https://new.nationalcpc.org/course/per-338/) [ # Cybersecurity in a Resource Constrained Environment for Public and Rural Utilities This course examines cybersecurity in the context of community and critical infrastructure protection. It bridges policy, operations, and technology to help decision-makers and technology professionals understand how digital risk affects essential services and how to strengthen resilience through informed planning and investment. ](https://new.nationalcpc.org/course/per-338/) [ ** ** ** ## PER-338 ](https://new.nationalcpc.org/course/per-338/) ## [](https://new.nationalcpc.org/course/per-338/)[NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/) ** ## [16 hours](https://new.nationalcpc.org/course/per-338/) [ Learn More ](https://new.nationalcpc.org/course/per-338/) [ Register ](https://nuari.org/ncpc-training-courses) [COMING SOON](https://new.nationalcpc.org/course/awr-361-w/) [ # Cybersecurity in Cloud Environments The proliferation of cloud computing continues to grow as organizations look to reduce the cost of operating and maintaining traditional information technology (IT) data centers and associated IT resources. Cloud computing service providers, such as Amazon Web Services, Microsoft Azure and Google Cloud, focus on securing their underlying infrastructure, but it is the responsibility of each organization and user to provide security protections for the payloads they deploy. ](https://new.nationalcpc.org/course/awr-361-w/) [ ** ** ** ## AWR-361-W ](https://new.nationalcpc.org/course/awr-361-w/) ## [](https://new.nationalcpc.org/course/awr-361-w/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ## [4 hours](https://new.nationalcpc.org/course/awr-361-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-361-w/) [COMING SOON](https://new.nationalcpc.org/course/awr-374-w/) [ # Cybersecurity in Operational Technology Awareness level course designed to address the technical needs of future workforce and industry professionals in various sectors including electric vehicle charging stations (EVCS). General topics to be covered in the course are: understanding various cyberattacks and their negative impacts on OTs and charging systems, OT threat actors, OT security measures for both Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA), detecting cyberattacks on the OTs, exploring mitigation solutions for cyberattacks on OTs, OT and security best practices. ](https://new.nationalcpc.org/course/awr-374-w/) [ ** ** ** ## AWR-374-W ](https://new.nationalcpc.org/course/awr-374-w/) ## [](https://new.nationalcpc.org/course/awr-374-w/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ## [6 hours](https://new.nationalcpc.org/course/awr-374-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-374-w/) [COMING SOON](https://new.nationalcpc.org/course/mgt-354/) [ # Cybersecurity in Supply Chain Operations In today’s interconnected world, the integration of technology into supply chains has significantly enhanced operational efficiency and global reach. However, this integration has simultaneously introduced considerable cybersecurity risks that necessitate urgent attention. Supply chains are increasingly targeted by sophisticated cyberattacks due to their complexity and the valuable of the data they handle, making cybersecurity a critical concern for ensuring the continuity and resilience of supply chain operations. Integrating cybersecurity training into supply chain management is critical to safeguarding against the increasing threat of cyberattacks. ](https://new.nationalcpc.org/course/mgt-354/) [ ** ** ** ## MGT-354 ](https://new.nationalcpc.org/course/mgt-354/) ## [](https://new.nationalcpc.org/course/mgt-354/)[TEEX NERRTC (Texas A&M)](https://new.nationalcpc.org/developer/teex-nerrtc/) ** ## [8 hours](https://new.nationalcpc.org/course/mgt-354/) [ Learn More ](https://new.nationalcpc.org/course/mgt-354/) [COMING SOON](https://new.nationalcpc.org/course/awr-373-w/) [ # Cybersecurity Issues in Distributed Energy Resources (DER’s) Awareness level course designed to provide Distributed Energy Resources related cybersecurity training, education and outreach program in order to address the technical needs of future workforce and industry professionals in energy/utility. This course will assess the current state of cybersecurity standards and develop methods for the grid-connected DERs under cyber threats for enhanced resiliency by applying appropriate physics-driven real-time monitoring and advanced data analytics, including machine learning and artificial intelligence on observed data. ](https://new.nationalcpc.org/course/awr-373-w/) [ ** ** ** ## AWR-373-W ](https://new.nationalcpc.org/course/awr-373-w/) ## [](https://new.nationalcpc.org/course/awr-373-w/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ## [6 hours](https://new.nationalcpc.org/course/awr-373-w/) [ Learn More ](https://new.nationalcpc.org/course/awr-373-w/) [COMING SOON](https://new.nationalcpc.org/course/cybersecurity-threats-and-systems-in-maritime-environments/) [ # Cybersecurity Threats and Systems in Maritime Environments The course emphasizes execution-level interaction with maritime IT and OT systems and focuses on cybersecurity conditions that may arise during routine operations and abnormal events. Instruction is designed to be accessible to non-technical maritime personnel and emphasizes recognizing cyber-relevant conditions, assessing potential operational impacts, and determining appropriate response or escalation actions rather than performing technical system configuration or analysis. ](https://new.nationalcpc.org/course/cybersecurity-threats-and-systems-in-maritime-environments/) [ ** ** ** ## In Development ](https://new.nationalcpc.org/course/cybersecurity-threats-and-systems-in-maritime-environments/) ## [](https://new.nationalcpc.org/course/cybersecurity-threats-and-systems-in-maritime-environments/)[NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/) ** ## [16 hours](https://new.nationalcpc.org/course/cybersecurity-threats-and-systems-in-maritime-environments/) [ Learn More ](https://new.nationalcpc.org/course/cybersecurity-threats-and-systems-in-maritime-environments/) [COMING SOON](https://new.nationalcpc.org/course/mgt-368/) [ # Maritime Cybersecurity Compliance Fundamentals This course provides management-level instruction on maritime cybersecurity compliance requirements for personnel with responsibilities involving Information Technology (IT) and Operational Technology (OT) systems within the domain of the Marine Transportation System (MTS). The course is designed to enable participants to interpret and apply federal cybersecurity requirements established under 33 CFR § 101.650(d), the Maritime Transportation Security Act (MTSA), MARSEC Directive 105 and U.S. Coast Guard Policy Letter 01-25. ](https://new.nationalcpc.org/course/mgt-368/) [ ** ** ** ## MGT-368 ](https://new.nationalcpc.org/course/mgt-368/) ## [](https://new.nationalcpc.org/course/mgt-368/)[NUARI (Norwich)](https://new.nationalcpc.org/developer/nuari/) ** ## [8 hours](https://new.nationalcpc.org/course/mgt-368/) [ Learn More ](https://new.nationalcpc.org/course/mgt-368/) [COMING SOON](https://new.nationalcpc.org/course/mgt-363/) [ # Security in Operational Technology and Distributed Energy Resources: Tools and Applications This course is designed to provide hands-on content/labs. The hands-on activities will cover some topics from the security in operational technology (OT) course and some topics from cybersecurity in distributed energy resource (DER) course. This is important for state and local professionals and employees in specific sectors to transition theory to practice to more effectively deal with cybersecurity challenges. ](https://new.nationalcpc.org/course/mgt-363/) [ ** ** ** ## MGT-363 ](https://new.nationalcpc.org/course/mgt-363/) ## [](https://new.nationalcpc.org/course/mgt-363/)[CfIA (Memphis)](https://new.nationalcpc.org/developer/memphis-cfia/) ** ## [8 hours](https://new.nationalcpc.org/course/mgt-363/) [ Learn More ](https://new.nationalcpc.org/course/mgt-363/) ## Share the Printed Course Catalog The NCPC catalog is available as a brochure in PDF form. Get the latest edition here: [ Download PDF ](https://dub.sh/ncpc-courses-brochure-latest) [Archive Map](https://new.nationalcpc.org/courses/?show_retired=1) 597 [ ](#elementor-action%3Aaction%3Dpopup%3Aclose%26settings%3DeyJkb19ub3Rfc2hvd19hZ2FpbiI6IiJ9) ## Join the NCPC mailing list [ Open Signup Page ](https://lp.constantcontactpages.com/sl/qSFiSMh/ncpc)