Cybersecurity Critical Infrastructure Certification

MGT-328 Critical Thinking and Risk Management in a Cyber Converged World (4-hrs)

MGT-365 Developing a Resilient Cybersecure Community (8-hrs) Split between Day 1/2

AWR-432 Integrating Cyber Hazard Response into Exercise Planning (4-hrs)

The course, MGT-365, is titled Developing a Resilient Cybersecure Community. 

The course design will provide flexibility to tailor training based on the community’s current capabilities, functions and roles represented, and C2M2 maturity level. It will meet organizations where they currently are, emphasizing whole-of-community coordination, collaboration, and planning. The course will work within the National Preparedness System’s preparedness cycle, focusing on Plan, Train, and Exercise. At the end of this course, participants will be able to measure their current preparedness, identify gaps, and experience role-playing through a community-level response scenario of an event that has either a cyber root cause or a cyber-attack that degrades response. The result of this training would be a more aware, resilient cybersecure community.    The primary audience that should attend this interactive, cybersecurity-focused resilience and response training are leaders or managers, their teams, and response partners who perform planning, training, or exercising critical and business functions within their community or organization as part of its Community Lifelines (FEMA):  -Safety and Security   -Food, Hydration, Shelter   -Health and Medical   -Energy (Power & Fuel)   -Communications   -Transportation   -Hazardous Materials   -Water Systems

Critical Thinking and Risk Management in a Cyber Converged World: This course enables leaders to define and assess business risks related to cybersecurity. Students are exposed to complex analysis and decision-making with consideration of converged catalysts (e.g., cyber, physical, informational) impacting operations. They will gain an appreciation for a standard taxonomy and methods to calculate risk. Instruction includes discussion of risk management frameworks outside of NIST (e.g., OCTAVE FORTE) and Factor Analysis of Information Risk (FAIR) for risk assessment.

It also teaches leaders methods to identify, define and measure risk to their organization from multi-faceted threats incorporating cyber, physical and other means. They begin with a module on critical thinking to open their minds to later modules, which discuss concepts outside standard risk management frameworks. The final modules familiarize students with common language taxonomies, various risk management frameworks and FAIR.

Target audience: Business, IT, and OT leadership and operations staff at varying experience levels, with a focus on exposing Risk Management and Assessment thought processes to resource-constrained SLTT populations.

Integrating Cyber Hazard Response into Exercise Planning: This course is designed to teach exercise planners the importance of incorporating cyber into all hazard emergency management. While most exercise planners know cyber-hazards exist, they may have not been taught how to incorporate those hazards into their exercise planning. Furthermore, exercise planners may not know the extent to which cyber hazards impact critical infrastructure. This course will ensure exercise planners are aware of the hazards related to cyber-enabled threats and how to address those hazards within their exercises.