Strategic Planning and Policy Development (SPPD-201)
This is a closed class. It requires a contract. On-site for 22 people.
Days: 5 Days Labs: Yes –Local Cyber Range
Type of Course: Advanced Security / Managerial
Prerequisites: Introduction to Cybersecurity (CYBR-INT-MAN or CYBR-INT-TECH)
About this course: Maps to the NICE Oversight and Development specialty areas providing leadership, management, direction, and/or development and advocacy so that all individuals and the organization may effectively conduct cybersecurity work. Strategic Planning and Development focuses on applying knowledge of priorities to define an entity.
Goals: Using information technology supply chain security and risk management policies, requirements, and procedures be able to identify key industry indicators useful for identifying technology trends and risks. Apply information assurance principles and organizational requirements to protect confidentiality, integrity, availability, authenticity, and non-repudiation of the organizations assets will support an organization’s information classification program.
Topics: Relevant laws, policies, procedures, or governance related to work impacting critical infrastructure, technical information knowledge with respect to system and application security threats and vulnerabilities activities, cyber defense mitigation techniques and vulnerability assessment tools.
Methods of instruction: There are 8 different possible exercises that can be used in a module. Some examples include: threats and controls, case studies, risk analysis practice, and reading review. Technical labs will require basic skills in operating systems and virtualization. As soon as students become too comfortable, the instructor will switch methods.
Students are expected to have basic experience in the areas of networking and DoD Cybersecurity as well as knowledge of related Cybersecurity policies and procedures. Course support DISA responsibilities in DoD Cybersecurity Discipline Implementation Plan, DoD I 8551.01, the STIG’s and NIST SP800-53. The course covers topics in NICCS / NICE and ARTEP.