NIST Cyber Security Professional (NCSP) Practitioner

Price
$3,295.00

Duration
4 Days

Delivery Methods
Virtual Instructor Led
Private Group

Request More Information

Download Course Details

Course Details Only
Course Details & Schedule

Skip to Class Dates

Course Overview

This course is targeted at IT and Cybersecurity professionals looking to become certified on how to operationalize the NIST Cybersecurity Framework (NCSF) across an enterprise and its supply chain.

This course includes an exam voucher (Proof of NCSP Foundation certification required).

NCSP® Approved Partner

Course Objectives

This course looks at the impact of digital transformation on cybersecurity risks, an understanding of the threat landscape, and an approach to the application of cybersecurity controls. It provides guidance for students on the best approach to design and build a comprehensive cybersecurity program. Executives are keenly aware of the risks but have limited knowledge on the best way to mitigate these risks. This course also enables our executives to answer the critical question – Are we secure? The class includes lectures, informative supplemental reference materials, quizzes, exercises, and formal examination. The exercises are a critical aspect of the course; do not skip them. Outcomes and benefits from this class is a practical approach that students can use to build and maintain comprehensive cybersecurity and cyber-risk management programs.

Who Should Attend?

This course assumes the student has successfully taken and passed the NCSP Foundation 2.0 course based on the NIST Cybersecurity Framework version 1.1, release April 2018. Following the course introduction, the course provides an introduction to the intersection between digital transformation and cybersecurity, which is followed by an overview of the threat landscape. Following an approach to the implementation of cybersecurity controls, the course delves into an organizational approach to cybersecurity that starts governance, management, and a supportive culture. Finally, the course provides additional guidance for the cybersecurity practitioner to determine the current state, the desired state, and a plan to close the gap – and to do this over and over again to inculcate it into organizational DNA.

United Training is committed to working as a partner with our clients. Choose United Training and take advantage of the following benefits.

Robust Public Enrollment Schedule. Enjoy access to hundreds of Guaranteed to Run dates across a diverse catalog of course titles.
Private Group Training. Let our world-class instructors come to you to deliver training at your place of business or we can present to your team online using our Virtual Instructor-Led Training platform.
Custom Training Solutions. Our subject matter experts can customize the class to specifically address the unique goals of your team.
Free Re-Takes. Most completed United Training courses carry our unbeatable Learning Guarantee. This guarantee allows students to repeat most United Training courses, if they are the same version, FREE OF CHARGE, within six months of completion of the courses. Exceptions: Cisco, Citrix, VMware, Red Hat, and courses provided by affiliated 3rd party training providers.

Learning Credits: Learning Credits can be purchased well in advance of your training date to avoid having to commit to specific courses or dates. Learning Credits allow you to secure your training budget for an entire year while eliminating the administrative headache of paying for individual classes. They can also be redeemed for a full year from the date of purchase. If you have previously purchased a Learning Credit agreement with United Training, you may use a portion of your agreement to pay for this class.

Training Coupons: Previously purchased Training Coupons can be redeemed for eligible courses. If you have previously purchased a Technical or Application Training Coupon pool with United Training, you may use your coupons to pay for this class.

Corporate Tech Pass: Our Corporate Tech Pass includes unlimited attendance for a single person, in the following Virtual Instructor Led course types: Microsoft Office, Microsoft Technical, CompTIA, Project Management, SharePoint, ITIL, Certified Ethical Hacker, Certified Hacking Forensics Investigator, Java, Professional Development Courses and more. The full list of eligible course titles can be found at https://unitedtraining.com/eligible.

Training Passport: A Training Passport allows you to secure up to 20 days of training to use at any time over 12 months. Your training days can be used by one member of your organization or split up among multiple employees. This course can be taken as part of your previously purchased Training Passport.

If you have questions about Learning Credits, Technical or Application Coupons, our Corporate Tech Pass, or our Training Passport, please contact your Account Manager.

Course Prerequisites

There are no prerequisites for this course.

Agenda

1 - DIGITAL TRANSFORMATION

Explores what the Practitioner needs to know about the relationship between digital transformation and cybersecurity
Explain how to determine the impact of cybersecurity on DX.
Explain the relationships between culture and digital transformation from the perspective of a practitioner.
Explain the delivery of value to stakeholders in a DX & cybersecurity environment.
Illustrate the interdependent relationship between cybersecurity and DX.

2 - THREAT LANDSCAPE

The Practitioner needs to understand what threat actors do and their capabilities.
Compare the evolving attack type impact to the threat environment.
Apply knowledge about the threat landscape to maintain a readiness to respond.
Develop a risk profile based on business impact analysis
Establish the relationship between awareness and training in the continual improvement of cybersecurity posture.
Develop and treat training & awareness as a critical aspect of deterrence
Use knowledge about the threat landscape as a predicate to the adoption and adaptation of your cybersecurity posture.

3 - THE CONTROLS

This chapter provides a sample set of controls based on an informative reference.
Understand the purpose goals & objectives for each control.
Characterize & explain the informative reference controls
Discover how to apply the controls in an organizational context.

4 - ADOPT & ADAPT

Adopt is a decision about governance; adapt is the set of management decisions that result from the decision to adopt.
Distinguish Adopt, Adapt, Management & Governance.
Develop an approach to adoption & adaptation.
Distinguish & demonstrate the impact of organizational culture on developing cybersecurity as a capability.
Develop an assessment approach to define current state.

5 - ADAPTIVE WAY OF WORKING

Threat actors are agile and highly adaptive. The cybersecurity Practitioner must develop the same capabilities
Break down what constitutes an adaptive approach.
Characterize & apply the need for crossfunctional teams.
Recognize and prioritize the first steps (get started).
Demonstrate & establish cybersecurity phases.
Break down the impact of the flows.

6 - RAPID ADOPTION & RAPID ADAPTATION FASTTRACK

FastTrack™ is an approach to allow organizations to learn to adapt to an evolving threat landscape rapidly.
Approach: Establish what it takes to adopt CS.
Determine how that impacts management adaptation of CS.
Determine how that impacts the capability to assess.
CS Capability: Determine the gap between existing & needed capabilities.
Establish what must be developed.
Develop appropriate risk management profile.
Discover how cybersecurity impacts people, practice & technology impacts organization.
Differentiate CIS Implementation groups.
Determine appropriate implementation group & approach.
Develop appropriate phase approaches.

7 - CIIS PRACTICE

Cybersecurity is an ongoing game of cat and mouse. Organizations must learn how to inculcate cybersecurity improvement into their DNA.
Break down & develop mechanisms for ongoing cybersecurity improvement that includes developing a learning organization.
Illustrate an improvement plan based on the NIST 7-Step Approach.
Illustrate an improvement plan based on the Improvement GPS
Demonstrate understanding of Cybersecurity Maturity Model Certification
Break down the balancing loop & how it fits into the escalation archetype
Use the Fast Track™ (improvement & implementation) cycles.