DOE Cybersecurity Awareness Program
The OCIO supports a variety of cybersecurity awareness activities that impress upon DOE employees the importance of cybersecurity and the adverse consequences of its failure. The primary purpose of awareness activities is to enhance the 'general awareness and understanding' of current cyber threats and recommended mitigations as well as to cultivate a computing environment where cybersecurity behaviors and responses are automatic and consistent. Given the fact that general users are a primary target for malicious cyber activity, it is critical that users have the basic understanding of cybersecurity best practices and policies to immediately and consistently react to cyber incidents.
Our Thinking: Cyber Incident Awareness Training
Emergency managers are prepared to respond to disasters in the physical world but as critical infrastructure is increasingly dependent on cyber, first responders are confronted by a new set of challenges. Meanwhile, IT professionals understand these challenges, but are internally focused on protecting their systems and information rather than the broader repercussions that a cyber incident could have on their community. Since a significant cyber incident with impact on critical infrastructure could require a coordinated response by emergency management and IT professionals, it’s important that they know how to communicate with one another.
Norwich University Applied Research Institutes (NUARI) fills this training gap with two courses. One course introduces the emergency manager to cyber; the other introduces the IT professional to emergency management. Each course is composed of five lessons focused on building a common situational awareness between emergency managers and IT professionals in the event of a cyber event with impact on critical infrastructure.
Cyber Incident Awareness Training
- What Is Cyberspace?
- Threats and Vulnerabilities
- Where Cyberspace Meets Physical Space
- Best Practices for Network Security
- Introduction to Preparedness for Cyber Incidents
Emergency Management for IT Professionals
- Emergency Management for IT Professionals
- Systems and Frameworks of Emergency Management
- The All-Hazards Environment
- The IT Infrastructure of Emergency Management
- The Importance of Pre-Incident Planning
Course is online and free. No prerequisites. Open enrollment. Earn Certificate of Completion in less than two hours.