Cybersecurity Resources - Workforce-Development

NATIONAL INITIATIVE 

FOR CYBERSECURITY CAREERS AND STUDIES

NICCS does not endorse specific organizations. The following resources and links are included for your information and convenience.

Cybersecurity Workforce Challenges

Below are a collection of three white papers sponsored by the Cybersecurity and Infrastructure Security Agency 

(CISA) and authored by Carnegie Mellon University (CMU) Software Engineering Institute (SEI) that explore 

critical challenges facing our nation’s cybersecurity workforce.

Executive Summary

• Cybersecurity Careers of the Future
  Provides a list of key cybersecurity skills needed to close the workforce gap, based off 
• workforce survey analysis, threat reports, service offerings, open job postings, applicable regulations, and emerging technologies to identify the required Knowledge, Skills, and Abilities 

(KSAs) and Work Roles.

• Cybersecurity Talent Identification and Assessment
  Explores how cybersecurity talent is identified, highlights current and future assessment capabilities, and provides recommendations on candidate recruitment and talent evaluation.
• Cybersecurity Career Paths and Progression
  Explores the current state of cybersecurity careers from the importance of early exposure, to methods of entry into the field, to career progression.

CISA Workforce Resources and Tools

• NICE Cybersecurity Workforce Framework
  The NICE Framework establishes at taxonomy and common lexicon that describes cybersecurity work and workers regardless of where or for whom the work is performed.  It is a nationally-focused and applies across public, private, and academic sectors.
• Cybersecurity Workforce Development Toolkit
  The Cybersecurity Workforce Development Toolkit provides organizations with information, tools and templates to plan, build, and advance their cybersecurity workforce.
• DHS PushButtonPD™ Tool
  This Human Resources and Manager tool was developed to help quickly draft Federal employee cyber position description(s). It is a no cost Microsoft Excel workbook file which makes drafting of the position description easier without any prior knowledge of the cyber position.
• NICE Framework Mapping Tool
  The Mapping Tool allow Human Resources offices and Managers to input positions required knowledge skills, and abilities to build cybersecurity profiles that are mapped to the NICE Framework.  This tool ensures that your organization is on the same page as hundreds of other organizations when it comes to talking about cybersecurity work in the same way.
• Cybersecurity Capability Maturity Model
  Enables organizations to evaluate their cybersecurity workforce planning readiness.
• Cybersecurity Workforce Planning Diagnostic PDF
  Helps organizations make decisions about resource allocation and human capital investments based on their willingness to take on risk.
• Best Practices for Planning a Cybersecurity Workforce White Paper
  As the nation seeks to build a skilled cybersecurity workforce, this paper serves as a starting point to highlight best practices for cybersecurity workforce planning and ultimately identifying an approach to address significant cybersecurity workforce gaps nationwide.

Education Resources

• Students’ Guide to Cybersecurity Careers
  A one-page flyer with information about cybersecurity careers for students (Grades 8-12).
• Teachers’ Guide to Engaging K-12 Students in Cybersecurity
  Use this guide to help you talk to your students about becoming the cybersecurity professionals of tomorrow.
• 5 Ways Cybersecurity is Like Gaming - but Better
  An engaging hand-out to interact with students who might be interested in cybersecurity careers. By linking gaming and cybersecurity, students will see a career that is enriching and rewarding (Grades 6-12).
• “How to Talk About Cybersecurity Careers”
  A tip card that assists educators in guiding discussions about cybersecurity in the classroom and at home. This tip card aligns to the posters below.
• Cybersecurity Careers Posters (2 poster series)
  Exciting posters illustrating cybersecurity careers in an easy to understand format (Grades K-8).
• Handout on Cybersecurity Education Resources
  Information on how to integrate cybersecurity into the classroom including access to free course materials (student workbooks, teacher and master notes, lessons plans, assessments, and other supporting materials) for Grades K-12.
• Cybersecurity Career Profiles - mapped to the NICE Cybersecurity Workforce Framework
  Exciting profiles of cybersecurity jobs designed to inspire and bring the cybersecurity career field to life for students (Grades 6-12).

Cybersecurity Training Resources

• The Federal Virtual Training Environment (FedVTE)
  FedVTE is a free online, on-demand cybersecurity training system providing cybersecurity training courses for government personnel and U.S. Veterans.
• NICCS Education and Training Catalog
  The NICCS Education and Training Catalog is the place to start for anyone interested in advancing their cybersecurity education including current cybersecurity employees looking to build skills, career changers seeking to forge a new path, or Veterans hoping to retrain for the next phase in life.

Community College Training Resources

• Introduction to Assured Software Engineering Course - Instructor Notes
  Downloadable course designed for Community College Professors to use as an introduction to assured software engineering. The course highlights software assurance challenges, foundations, and guiding principles, along with covering security models and methods.
• Introduction to Assured Software Engineering Course – Slide Deck
  The Introduction to Assured Software Engineering Course slide deck to be use in the classroom, along with the teacher instructions.

External Cybersecurity Resources

• Workforce Management Guidebook - Cybersecurity is Everyone's Job
  A publication that talks about cybersecurity from every business function and aspect of an organization’s operation. It is written for a general audience who may not be knowledgeable about cybersecurity and can be read as a complete guide or by each business function as standalone guides.
• CyberSeek
  To help close the cybersecurity skills gap, CyberSeek provides detailed, actionable data around supply and demand in the cybersecurity job market.
• STOP. THINK. CONNECT.™
  A global online safety awareness campaign to help all digital citizens stay safer and more secure online. Online are a wealth of resources, ranging from tip sheets to posters to videos and more, to help you stay safer and more secure online and better protect your personal information.

Last Published Date: 

May 21, 2019

Roger That | Military Network : Would You Pay Someone for Sleep?

Roger That | Military Network : Would You Pay Someone for Sleep?: NAVIGATING A CAREER PATH IN CYBERSECURITY Michael I. Kaplan is a Corporate Information Security Officer, certified Mile2 cybersecurity ...

Would You Pay Someone for Sleep?

NAVIGATING A CAREER PATH IN CYBERSECURITY

Michael I. Kaplan is a Corporate Information Security Officer, certified Mile2 cybersecurity instructor, and a passionate advocate for military veteran issues with 21 years of experience in the security industry.  After serving honorably in the US Army’s 11th Special Forces Group (Airborne) as an expert in Soviet Military Operations and Tactics, Michael was recruited as a Trainer and Lead Investigator for an International Fugitive Task Force based in Miami, Florida, with areas of responsibility in the Caribbean and Latin America. 

In 1994, Michael transitioned from international high-risk warrants into domestic corporate security, attended numerous formal training programs and pursued a career as an Executive Protection Specialist, operating in both corporate and high-threat environments. Throughout his experience, Michael was always (informally) designated as the “team technology geek,” a role he officially (and formally) embraced in 2011.

Michael I. Kaplan is now a Cyber Security Instructor, Information Systems Risk Manager, and Disaster Recovery Engineer. His technical areas of specialization are Cyber Security Architecture, IT Risk Assessment, and IT Program Audit / Compliance; his geographical areas of specialization are the United States, Eastern Europe, and Latin America / Caribbean. Michael also possesses a high degree of subject matter expertise regarding conformance to Cyber Security Frameworks (CSF) including HIPAA Compliance (HITECH, GAPP), NIST SP 800 Series, ISO 27000 Series, PCI-DSS, SSAE 16 (SOC1, SOC2), and FedRAMP (moderate, high). 

  

CYBER SECURITY TRAINING SCHEDULE
2019 Training Schedule

The courses listed below are instructor-led classroom format conducted at the Coastal Regional Commission of Georgia in Darien, Georgia.  We also conduct instructor-led online training via WebEx, and remote training at the client location upon request.  To discuss these options, or to find out about customized training solutions tailored specifically to your needs, please contact Michael Kaplan via email at michael@michaelikaplan.com.

Click Here to Request Information

2019 TRAINING SCHEDULE

​Certifications held by Michael

Michael’s career includes the US Army’s 11th Special Forces Group (Airborne), Lead Investigator on an international fugitive task force, an Executive Protection Specialist for Fortune 500 companies, and an IT security consultant for numerous companies both in the US and abroad.
Industry Training Certifications In the Phase2 Advantage role as an Authorized Training Center for Mile2, Michael I. Kaplan, a certified Cyber Security Instructor, is authorized to teach the following courses to students seeking Mile2 certifications:

​Certified Information Security Management Systems – Lead Implementer

Certificate: 783700

Expiration: 2021

Certified Information Security Management Systems – Lead Auditor

Certificate: 782800

Expiration: 2021

Information Systems Certification and Accreditation Professional

Certificate: 1032700

Expiration: 2021

Certified Healthcare Information Systems Security Practitioner

Certificate: 748300

Expiration: 2020

Certified Information Systems Security Manager

Certificate: 752100

Expiration: 2020

Certified Information Systems Security Auditor

Certificate: 780200

Expiration: 2021

Certified Information Systems Security Officer

Certificate: 739100

Expiration: 2020

Certified Information Systems Risk Manager

Certificate: 749600

Expiration: 2020

Certified Secure Web Application Engineer

Certificate: 756900

Expiration: 2020

Information Systems 20 Controls (IS20)

Certificate: 741400

Expiration: 2020

Certified Penetration Testing Engineer

Certificate: 763000

Expiration: 2020

Certified Network Forensics Examiner

Certificate: 933600

Expiration: 2021

Certified Disaster Recovery Engineer

Certificate: 725000

Expiration: 2020

Certified Professional Ethical Hacker

Certificate: 981700

Expiration: 2021

Certified Incident Handling Engineer

Certificate: 764100

Expiration: 2020

Certified Security Leadership Officer

Certificate: 743100

Expiration: 2020

Certified Digital Forensics Examiner

Certificate: 898000

Expiration: 2021

Certified Cyber Security Instructor

Certificate: 743500

Expiration: 2020

Certified Vulnerability Assessor

Certificate: 783700

Expiration: 2020

---

Would You Pay Someone for Sleep?At first glance that may seem like a ridiculous question; the obvious answer is “NO.” However, things are not always as obvious as they seem. A closer inspection reveals the need for a follow-up question: “Am I paying someone else so they can sleep, or so I can sleep?” That’s a great question to ask as it changes the initial perspective. Paying someone else so you can sleep may potentially change an obvious and immediate “NO” to a possible “YES.” It’s all about asking the right questions and forming the correct perspectives.

Successful cyber security consulting is based on asking the right questions. Without them, we have no way of providing a client with correct perspectives which may potentially lead to different, and more suitable, outcomes. It requires a tabula rasa mindset, a design thinking approach, and absolutely no preconceived or prepackaged solutions. That’s the perspective we bring to our clients to solve challenges. That’s not “thinking outside the box.” It’s realizing there is no box, and never has been.

“When a customer asks you for a ¼-inch drill bit, they don’t
really need a drill bit. They
need a ¼-inch hole.”
~ Theodore Levitt ~
Our Consulting Services No consulting company can be all things to all people, although many do put forward their best effort and try. Phase2 Advantage has three disciplines within the cyber security consulting realm at which it excels: IT Business Continuity, IT Disaster Recovery, and IT Risk Management.  We’ll never claim to be something we’re not, and we’ll always refer clients to companies with the capabilities they need when necessary.  Listed below are the three — and only three — consulting services we provide to our clients.

IT Business Continuity Planning Business Continuity and Disaster Recovery planning are not the same function and require different skill sets in order to be successful. Business continuity planning is a proactive plan to avoid and mitigate risks associated with a disruption of operations. While it does plan for actions to be taken after an event, it focuses on preventive and preemptive solutions to reduce the probability of a disaster occurring. In this type of planning the ability to ask the correct questions is critical, and we’re experts at asking correct questions based on the environment in which we’re located at the time.

IT Disaster Recovery Planning Unlike the preventive focus of Business Continuity planning, Disaster Recovery plans for actions which are responsive and reactive. As businesses face a wide range of daily risks – including cyber-attacks, human error, technical failures, and natural disasters – it’s vital they create practical plans to sustain their security posture, financial health, and industry / brand reputation to maintain long-term success. In this type of planning the ability to observe minute details is critical, and we’re experts at incorporating an attention to detail that affords our clients the capability of executing their plans with precision.

IT Risk Management Given the wide range of technology-enabled components comprising modern security programs, the potential for exposure to risk has grown exponentially. Laws governing regulatory and compliance requirements change rapidly as they attempt to keep pace with technology trends. Information security frameworks and models, once barely acknowledged and often ignored, are now expected responsibilities and strictly enforced. In this increasing regulatory environment, the ability to audit and assess potential risk is critical, and we’re experts at the type of risk identification, assessment, and mitigation that affords our clients the capability of sleeping well at night.

“The answer is “YES,” we can
do that for you. Now,
what’s the question?”
~ Michael I. Kaplan ~

Check out PHASE2's new cyber security training facility and 2019 schedule of courses.

REGISTER NOW FOR YOUR CYBER SECURITY CERTIFICATION

Electronic Registration & Payment

https://squareup.com/store/Michael_I_Kaplan/item/certified-disaster-recovery-engineer-1

Check / Purchase Order (Please contact Michael I. Kaplan via email or phone.)

- PHONE: (912) 244-0394

- EMAIL:  Michael@michaelikaplan.com

The  Certified Incident Handling Engineer vendor-neutral certification course is designed to help Incident Handlers, System Administrators, and any General Security Engineers understand how to plan, create, and utilize their systems in order to prevent, detect and respond to attacks. This course also provides numerous field component exercises that focus on topics such as reconnaissance, vulnerability assessments using Nessus, network sniffing, web application manipulation, malware, and scenarios for both IT and Physical Security environments.

       

Michael I. Kaplan‏ @MIKspeaker   Check out our new #cyber #security training facility and 2019 schedule of #courses. http://www.phase2advantage.com/schedule/

Electronic Registration & Payment

https://squareup.com/store/Michael_I_Kaplan/item/certified-incident-handling-engineer-1

REGISTER NOW FOR YOUR CYBER SECURITY CERTIFICATION

Check / Purchase Order (Please contact Michael I. Kaplan via email or phone.)  - PHONE: (912) 244-0394  - EMAIL:  Michael@michaelikaplan.com

Email michael@michaelikaplan.com to request a PDF course brochure with detailed training and registration information.