• Online, Instructor-Led
Course Description

The Cyber Operations Analyst course is designed to provide the knowledge and practical skills necessary for Cybersecurity personnel to defend, respond, report, mitigate, and restore enterprise systems before, during and after exploitation has occurred. In support of this objective, the course will contain theory, operation, defensive techniques, and corrective action instruction for the enterprise architecture. 5 days, Instructor-led, On-Site or Off-Site. Training takes place within Metova's Cyberoperations Enhanced Network and Training Simulators (CENTS) realistic, immersive training emulator.

Learning Objectives

1. Review current information available in publicly-available sources, from other more sensitive sources, and from US and International regulation, and identify how attacks are occurring and how to classify an attack. 2. Identify the National Cyber Chain of Command, the missions of the Cyber Mission Forces (CMFs). 3. Describe the fundamental principles of Cybersecurity and the risks to the Enterprise from vulnerabilities, threats, and adversarial actors. Prevent cybersecurity incidents from occurring within the group of employees you are responsible for. 4. Describe the architecture, components, management, administration, operation, and maintenance of the Enterprise Network IAW with best practices and higher authority's direction. 5. Describe how data bits are assembled into programming languages which form applications that ride on the operating system. 6. Explain and install group policies and other access controls IAW the security baseline using systems provided. 7. Describe how a network communicates, the principles behind network engineering, and security features of devices on the network using tools and devices found in the network environment IAW best practices. 8. Identify, analyze, and report on application risks and vulnerabilities using tools provided within the network environment. 9. Use network security tools and techniques to mitigate risk and eliminate threats. 10. Use Incident Response procedures IAW the Incident Response Plan.

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Competency Areas

Feedback

If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@hq.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.