Build Your
Cybersecurity Career
or Protect Your Organization

IT staff, Cloud Administrators, CISOs, System Owners, and contractors whose cloud systems process or store federal government data.

• Navigate the FedRAMP authorization lifecycle from Readiness to ATO to Continuous Monitoring
• Understand FedRAMP Low, Moderate, and High impact levels and their requirements
• Apply the new FedRAMP 20x accelerated authorization process
• Read and act on FedRAMP security assessment packages
• Implement continuous monitoring to maintain your Authorization to Operate (ATO)
• Use the FedRAMP Marketplace to select and evaluate authorized cloud services

Security Architects, Network Engineers, IT Managers, System Administrators, and agency CISOs responsible for implementing Zero Trust mandates.

• Map and implement all five Zero Trust pillars: Identity, Devices, Networks, Applications, and Data
• Design a Zero Trust Architecture aligned with CISA's Zero Trust Maturity Model
• Implement least-privilege access control and continuous authentication
• Deploy micro-segmentation to contain lateral movement across networks
• Integrate Zero Trust with existing IAM, SIEM, and endpoint detection tools
• Assess your organization's maturity and build a multi-year implementation roadmap

Help Desk staff, IT Security teams, System Administrators, and anyone responsible for user provisioning, access control, and identity lifecycle management.

• Manage the full identity lifecycle — provisioning, modification, and deprovisioning
• Implement Role-Based Access Control (RBAC) and least-privilege principles
• Deploy Privileged Access Management (PAM) for high-risk accounts
• Configure phishing-resistant MFA including PIV/CAC smart cards and FIDO2
• Manage Single Sign-On (SSO) and federated identity protocols
• Conduct access reviews and entitlement audits

DoD Contractors, Program Managers, IT Staff handling Controlled Unclassified Information (CUI), and organizations pursuing CMMC Level 1, 2, or 3 certification.

• Understand CMMC 2.0 and 3.0 levels, domains, and certification requirements
• Map practices to NIST SP 800-171 and NIST SP 800-172 requirements
• Correctly identify, handle, store, and transmit Controlled Unclassified Information (CUI)
• Develop and maintain a System Security Plan (SSP) and POA&M
• Prepare for a Third-Party Assessment Organization (C3PAO) assessment
• Build a CMMC compliance roadmap for your organization

Cloud Engineers, IT staff transitioning to cloud roles, DevOps Engineers, and security professionals managing cloud environments in government or enterprise settings.

• Understand the Shared Responsibility Model for AWS GovCloud and Azure Government
• Configure security baselines and CIS Benchmarks for cloud workloads
• Manage Cloud IAM — roles, policies, and cross-account access
• Implement encryption at rest and in transit using cloud-native key management
• Deploy cloud logging, monitoring, and SIEM integration
• Secure containerized workloads and Kubernetes environments

All employees using AI tools, IT Security staff, Policy Officers, Program Managers, and leadership responsible for AI adoption and governance decisions.

• Recognize where AI introduces new security risks and attack surfaces
• Defend against AI-powered attacks — deepfakes, AI-generated phishing, adversarial inputs
• Protect AI and LLM deployments from prompt injection and data leakage
• Apply the NIST AI Risk Management Framework (AI RMF)
• Govern AI use responsibly with bias detection, audit trails, and human oversight
• Evaluate AI tools and vendors for security risk before adoption

All employees and staff — from frontline workers and administrative personnel to managers and executives. No IT background required. Perfect for organization-wide annual training.

• Recognize phishing, vishing, smishing, and social engineering attacks
• Identify suspicious emails, links, attachments, and impersonation attempts
• Create strong passwords and use Multi-Factor Authentication (MFA) safely
• Follow safe web browsing and mobile device security practices
• Protect Personally Identifiable Information (PII) and sensitive data
• Know exactly when and how to report a suspected cyber incident

Career changers entering cybersecurity, IT Help Desk staff moving into security roles, and junior analysts building hands-on detection and response skills.

• Operate SIEM platforms — Microsoft Sentinel and Splunk for log analysis and threat detection
• Apply the MITRE ATT&CK framework to identify and map threat actor behaviors
• Triage alerts — distinguish true positives from false positives and escalate appropriately
• Execute the incident response lifecycle from detection through recovery
• Perform basic digital forensics including memory analysis and log preservation
• Participate in realistic tabletop simulations — ransomware, data breach, insider threat

Information System Security Officers (ISSOs), ISSMs, Program Managers, and government employees responsible for FISMA reporting, ATO packages, and security control implementation.

• Navigate the NIST Risk Management Framework — all six steps from Categorize to Monitor
• Select and document NIST SP 800-53 Rev. 5 security controls for information systems
• Develop System Security Plans (SSPs), Security Assessment Reports, and POA&Ms
• Prepare for and support annual FISMA reporting requirements
• Categorize information systems using FIPS 199 and FIPS 200 standards
• Support the Authorization to Operate (ATO) process

Software Developers, DevOps Engineers, QA Engineers, and IT staff working in agile development environments who need to integrate security throughout the delivery pipeline.

• Embed security checkpoints throughout CI/CD pipelines with shift-left security practices
• Perform Static and Dynamic Application Security Testing (SAST/DAST)
• Manage secrets and API keys securely in code repositories and pipelines
• Secure container images and Kubernetes orchestration environments
• Apply OWASP Top 10 protections for web applications and APIs
• Comply with NIST SP 800-218 Secure Software Development Framework (SSDF)

Law Enforcement, IT Security Auditors, Inspector General staff, SOC Analysts, and professionals involved in cybercrime investigation and digital evidence handling.

• Apply legal requirements for digital evidence collection and chain of custody
• Perform forensically sound disk imaging using FTK, Autopsy, and standard tools
• Analyze memory dumps to identify malware and attacker artifacts
• Examine network traffic captures to reconstruct attack timelines
• Investigate email forensics, browser artifacts, and USB device history
• Prepare forensic reports suitable for legal proceedings and IG investigations

Agency Directors, CIOs, Elected Officials, County Executives, Department Heads, and Senior Managers who are accountable for cybersecurity risk decisions.

• Understand today's threat landscape and why leadership is a prime target
• Read and act on cybersecurity risk reports and briefings from your security team
• Make informed decisions about security investments and risk acceptance
• Know your legal liability and duty of care as a senior leader in a cyber incident
• Lead a culture of cybersecurity awareness across your entire organization
• Navigate cyber insurance, breach notifications, and crisis communications