Adversaries may passively watch your organizational activities to derive sensitive information about your organization, plans, and mission activities. The OPSEC course is designed to equip the students with a systematic and proven process intended to deny to potential adversaries’ information about organizational capabilities and intentions by identifying, controlling, and protecting information and evidence related to sensitive activities.

Sometimes the most harmful and damaging threats originate from inside the organization itself. An insider threat can use her/his authorized access to compromise sensitive data and systems, or to do harm to the security of organizational operations, assets, or even individuals. The Insider Threat Mitigation course is designed to prepare organizations to deter, detect, and mitigate insider threat activities and prevent the unauthorized disclosure of sensitive information.

The FBI defines an active shooter as one or more individuals actively engaged in killing or attempting to kill people in a populated area. Implicit in this definition is the shooter’s use of a firearm. The Active Shooter Mitigation course is designed to provide organizations with tactics, strategies, and plans designed to quickly respond and protect the organization’s most precious resource…its people.

Advanced cyber threats attempt to use human interactions in the early phases of cyber attack planning in order to increase the likelihood of attack success. Human interactions go well beyond just “clicking the link” phishing campaigns. These threats use other advanced tactics to deceive an individual into revealing sensitive information, obtaining unauthorized access, or committing fraud by associating with the individual to gain confidence and trust. The Social Engineering Mitigation course provides organizations with practical plans and strategies to quickly deter, detect, and prevent Social Engineering tactics.

Some cyber security professionals overlook the most important part of network security…the end user.  Unfortunately, the end user can’t just be patched or configured to prevent compromises from occurring. More cyber security compromises and safety incidents are caused by human error than any other factor. Quite literally, we can be our own worst enemy!

However, the root causes of human error go well beyond just an accidental click of a link or engineering misconfiguration. Research has shown that other organizational factors such as operations tempo, unrealistic milestones, limited resources, and other working environment stressors and constraints can increase the likelihood of human error significantly. The Human Error Mitigation course is designed for all managers and security professionals who are serious about reducing cyber security, safety, and other business risks. The course explores the root causes behind human error and provides detailed and practical guidance for how to reduce operational risk exposures caused by this unintended but serious threat.