The NIST cybersecurity framework reminds us that it takes more than ethical hackers to defend an organization from cyber attacks.

In order to support your company or government agency implement the NIST framework, here are the courses that TrainACE offers. If you're in the Washington DC area, improve your organization's cyber security by encouraging employees to pursue these NICE specialties. For your convenience, we've organized these courses into the appropriate NICE Category.

Analyze

In this NICE framework category, analysis is performed to review and evaluate incoming cybersecurity information to assess its utility for intelligence.

All-Source Analysis – Uses threat information analysis from numerous sources to contextualize findings and extricate important insights regarding possible implications.*
Exploitation Analysis – Analyzes collected data to find vulnerable areas and evaluate the potential for exploitation.
- CompTIA Pentest+ Training and Certification
- CPENT
Language Analysis – Uses language, technical, and cultural knowledge to collect and analyze intelligence data.*
Targets – Specializes in one or more countries, regions, entities, or technologies.
- Fundamentals of Malware Analysis
Threat Analysis – Monitors cybercriminal activity to gather data and produce findings to support law enforcement or counterintelligence investigations.

Collect and Operate

This section of the framework focuses on conducting denial and deception operations while collecting cybersecurity information to be used for intelligence.

Collection Operations – Gathering cybersecurity data using the collection management process.
- AWS Technical Essentials
- Fundamentals of Malware Analysis
Cyber Operational Planning – Performs planning at the strategic and operational levels to integrate cyber and information operations.
Cyber Operations – Collects intelligence on criminal and foreign entities to allow for planning and mitigation of potential threats.
- CPENT
- Advanced Malware Analysis
- Analyzing Vulnerability Scans and Responding to Attacks
- Evidence Collection and Hidden Data Live Monitoring
- Introduction to System Forensics and System Forensics Issues

Investigate

This category involves investigating cybersecurity crimes and events on IT networks and systems.

Cyber Investigation – Collecting cybersecurity intelligence using multiple strategies, techniques, and processes.
- CPENT
Digital Forensics – Collecting, processing, preserving, analyzing, and presenting evidence to support network vulnerability mitigation, as well as fraud, criminal, counterintelligence, or law enforcement investigations.
- CHFI-Computer Hacking Forensic Investigator Training and Certification
- CEH + CHFI Certification Training Combo
- CPENT
- Analyzing Vulnerability Scans and Responding to Attacks
- Evidence Collection and Hidden Data Live Monitoring
- Introduction to System Forensics and System Forensics Issues

Operate and Maintain

The Operate and Maintain section focuses on the administration, maintenance, and support for IT system security and performance.

Customer Service and Technical Support – Assisting and educating clients with technical issues related (but not limited) to installations, configurations, and troubleshooting.
Data Administration – Overseeing data management systems and databases for the security of query, storage, and use of data.
Knowledge Management – Managing and administering tools and processes that allow the organization to classify, document, and access intellectual capital.
Network Services – Installing, configuring, operating, testing, maintaining, and managing networks and firewalls, including software and hardware.
Systems Administration – Installing, configuring, troubleshooting, and maintaining server configurations to ensure integrity, confidentiality, and availability, including software and hardware. Additionally, managing accounts, patches, firewalls, access control, account creation, and passwords.
Systems Analysis – Studying the organization's systems and procedures, and designing information systems solutions to operate more securely, effectively and efficiently by bringing business and IT together.
- CompTIA A+ Training & Certification
- CompTIA Network+ Training & Certification
- CompTIA A+/Network+ Training Combo
- CompTIA Security+ Training & Certification
- CompTIA Linux+ Training and Certification
- CompTIA Cloud+ Training and Certification
- CompTIA Advanced Security Practitioner (CASP+)
- CompTIA Cloud Essentials+ Training and Certification
- Security+ & Certified Ethical Hacker (CEH) Combo
- CND-Certified Network Defender Training
- CEH - Certified Ethical Hacker Training and Certification
- CHFI-Computer Hacking Forensic Investigator Training and Certification
- CEH + CHFI Certification Training Combo
- ECIH - Certified Incident Handler Training
- CCISO-Certified Chief Information Security Officer Training and Certification
- CISSP-Certified Information Systems Security Professional Training & Certification
- SSCP - Systems Security Certified Practitioner Training and Certification
- Reverse Engineering Malware
- RMF-CAP Certification Training
- Analyzing Vulnerability Scans and Responding to Attacks
- Evidence Collection and Hidden Data Live Monitoring
- Introduction to System Forensics and System Forensics Issues

Oversee and Govern

This category involves the direction, leadership, and advocacy of cybersecurity strategies, initiatives, and activities.

Cybersecurity Management – Organizing and managing cybersecurity programs for enterprise businesses.
- CCNP Enterprise (ENCOR + ENARSI)
- CCSE - Certified Cloud Security Engineer - Training and Certification
- CRISC-Certified in Risk and Information Systems Control Training
- AWS Technical Essentials
- SC-900T00 Microsoft Security, Compliance, and Identity Fundamentals
Executive Cyber Leadership – Overseeing and leading cyber-enabled teams.*
Legal Advice and Advocacy – Providing legal advice and recommendations to staff and leadership. Acting as an advocate regarding policy changes and representing clients in legal proceedings, briefs, and other activities.*
Program/Project Management and Acquisition – Managing acquisitions of software, hardware, and information systems, involving project management, auditing, and investment alignment.
- CompTIA Project+ Training and Certification
- CISM-Certified Information Security Manager Training and Certification
- CRISC-Certified in Risk and Information Systems Control Training
- PMP-Project Management Professional Training
- CAPM - Certified Associate in Project Management
- Evidence Collection and Hidden Data Live Monitoring
- Introduction to System Forensics and System Forensics Issues
Strategic Planning and Policy Development – Developing policies and processes for an organization’s cybersecurity initiatives.
Training, Education, and Awareness – Overseeing sourcing, planning, development, and implementing all cybersecurity training initiatives for staff.*

Protect and Defend

This category involves threat mitigation using careful analysis.

Cyber Defense Analysis – Integrates intelligence and defensive measures to analyze and report actual and potential cybersecurity threats within a network.
- CompTIA Cybersecurity Analyst+ (CySA+) Training
- CompTIA Pentest+ Training and Certification
- PMP-Project Management Professional Training
- RMF-CAP Certification Training
- Analyzing Vulnerability Scans and Responding to Attacks
- Evidence Collection and Hidden Data Live Monitoring
Cyber Defense Infrastructure Support – Implementing, maintaining, and testing infrastructure software and hardware, and monitoring the network for any suspicious activity.
Incident Response – Responding to potential threats on a network and mitigating them immediately to secure or recover data.
- CISM-Certified Information Security Manager Training and Certification
Vulnerability Assessment and Management – Performing assessments of vulnerabilities and threats, to develop countermeasures.

Securely Provision

This category focuses on conceptualizing, designing, procuring, and building secure IT systems. It also covers system and network development.

Risk Management – Responsible for all aspects of information security risk requirements to ensure compliance. This includes conducting risk assessments, deploying strategies for risk mitigation, and monitoring and documenting of risk management program.
- CISM-Certified Information Security Manager Training and Certification
- CCSP - Certified Cloud Security Professional Training and Certification
- PMP-Project Management Professional Training
- DevOps Engineering On AWS
- RMF-CAP Certification Training
- SC-900T00 Microsoft Security, Compliance, and Identity Fundamentals
Software Development – Creating, designing, implementing, and assessing software.
Systems Architecture – Developing system capabilities and concepts, ensuring technology and external conditions are integrated into cybersecurity processes and designs.
Systems Development – Focusing on the systems development lifecycle phases that involve development.
- CSSLP - Certified Secure Software Lifecycle Professional Training & Certification
- DevOps Engineering On AWS
Systems Requirements Planning – providing consultation to customers explaining how to convert business needs into technical solutions effectively.
Technology R&D – Assessing technology and integration processes, providing support, and evaluating prototype utility and capabilities.*
Test and Evaluation – Conducting regular systems testing to track specification and requirement compliance.
- CompTIA Pentest+ Training and Certification
- CISA-Certified Information Systems Auditor Training and Certification

*If TrainACE does not currently offer a course related to a specific NICE framework that you need in your organization, please speak with one of our program managers- we still might be able to help.

TrainACE Classes by NICE Category and Specialty