Supply Chain Risk Management

Cybersecurity Awareness Training

U.S. Dept. of HSS Security Awareness Training

https://www.hhs.gov/about/agencies/asa/ocio/cybersecurity/security-awareness-training/index.html

Cybe​r Awareness Training

• Cybersecurity Awareness Training - Module 1
  
• Cybersecurity Awareness Training - Module 2
  
• Rules of Behavior Overview - Module 3
  
• Phishing Training

Role Based Training

• Cybersecurity Essentials Training
• Information Security for IT Administrators
• Role Based Training for Executives and Managers

CUI Training

DOD CUI Program Information

https://www.dodcui.mil/

Training Resources

• CUI Training Guide
  
• CUI Awareness Campaign
  
• DOD Mandatory Controlled Unclassified Information (CUI) Training IF141.06
  
• DoD Mandatory Controlled Unclassified Information (CUI) Training Student Guide

Additional CUI Resources

• CUI Limited Dissemination Controls
  
• CUI Registry
  
• CUI Notice 2019-03: Destroying Controlled Unclassified Information (CUI) in paper form
  
• CUI Markings Document
  
• CUI Marking Tips

CUI Marking Training & Resources

• CUI Marking Handbook
  
• DOD CUI Awareness and Marking
  
• NARA CUI Registry of Markings
  
• DOD CUI Registry
  
• DOD CUI Distribution Notice

Privileged User Training

CISA: Privileged Account Management Best Practices

Link: cisa.gov
What it covers: Key principles for managing privileged accounts, reducing risk of misuse.
Best for: Privileged users & admins.

SANS OUCH! Newsletter (Free)

Link: sans.org
What it covers: Easy-to-read monthly topics (e.g. password hygiene, insider threat, MFA). Can be adapted to privileged user training.
Best for: All privileged users, technical staff.

Cybrary: Privileged Access Management (Free Modules)

Link: cybrary.it
What it covers: Teaches PAM basics, secure use of privileged accounts, common risks.
Best for: Admins, MSP staff, elevated role holders.​

Alison: Identity & Access Management Fundamentals

Link: alison.com
​What it covers: IAM principles: user lifecycle, role-based access control, privilege management.
Best for: Admins, IAM practitioners.

DFIR Diva: Free IR & Admin Training Resources

Link: dfirdiva.com​
What it covers: Curated free materials on account security, access control, insider threats.
​Best for: Admins & IR teams.​

Incident Response (IR) Training

CISA: Incident Response and Awareness Training – webinars for general audiences (managers, business leaders, etc.)

Topics: Ransomware, Indicators of Compromise, log management, etc.
Link: cisa.gov
Level: Intro / awareness level

CISA Learning: Incident Response Training

CISA Learning: Incident Response Training – on demand modules, hands-on cyber range options, beginner to intermediate IR training. 
​Link: cisa.gov
Level: Beginner to Intermediate​

Cybrary: Incident Response Lifecycle Course

Cybrary: Incident Response Lifecycle Course – covers  planning an IR plan, triage & categorization, detection, response, recovery, communicating with stakeholders, after-action reporting.
​Link: cybrary.it
Level: Intermediate (some foundational knowledge helpful)​​

DFIR Diva: Free Incident Response Training Plan

DFIR Diva: Free Incident Response Training Plan – a self-paced curated plan dividing training into parts (for beginners, plus deeper IR/forensics/malware analysis etc.). ​Link: dfirdiva.com
​Level: Beginner → Intermediate / Aspiring IR roles

DFIR Diva: Incident Response (SOC, CSIRT, CERT, IRT)

DFIR Diva: Incident Response (SOC, CSIRT, CERT, IRT) – listing of free / affordable training / workshops, labs, etc., specifically in DFIR (Digital Forensics & IR) domain. ​Link: dfirdiva.com​
Level: All levels, but many are more technical

​Coursera: Cyber Incident Response

​Coursera: Cyber Incident Response – a short (~1 hour) module covering fundamentals: incident response phases, creating IR teams, incident playbooks, basics of technical detection & response.
Link: coursera.org
Level: ​Intro / beginner level

IR Training – Role Based Training

All Staff & General Users

Goal: Recognize incidents, report quickly, avoid unsafe actions. 

• cisa.gov : Covers ransomware basics, phishing indicators, reporting requirements. 
  
• coursera.org : Helps explain what an IR plan is, phases, and user responsibilities. 

Evidence: Completion records, attendance logs, signed acknowledgment of “how to report.”

Managers & Supervisors

Know escalation paths, approve/communicate during incidents, enforce policies. 

• cia.gov : modules on incident planning, tabletop exercises, communication with stakeholders. 
• cybrary.it : covers leadership responsibilities in preparation, response, recovery, after-action reporting. 

Evidence: Training certificates, tabletop exercise reports, documented participation. ​

IT/System Administrators

Detect, contain, recover from incidents, follow playbooks.​​

• dfirdiva.com : Step-by-step self-paced roadmap for admins and SOC-type staff.
  
• cisa.gov : Hands-on cyber range / exercise content available free for U.S. organizations.​

​Screenshots of completed labs, exercise reports, system log reviews.

Security, SOC Analysts, Incident Handlers

Full lifecycle IR handling, forensic triage, technical containment.

• training.dfirdiva.com : Curated free labs, capture-the-flag style scenarios, workshops.
  
• cybrary.it : Focused modules for those directly running investigations

​Completion certificates, captured logs from exercises, post-incident reports authored.

Compliance, Audit, Legal, & HR

Understand IR policy, evidence collection, breach notification, regulatory alignment. 

• coursera.org : Explains phases & roles; good non-technical overview.
  
• cisa.gov : Covers communications and compliance topics in incident response.

FIRST Training

FIRST – Forum of Incident Response and Security Teams​

 Link: https://www.first.org/about/

FIRST Training Resources

• FIRST CSIRT Basic Course
  
• FIRST Threat Intelligence Fundamentals Course
  
• FIRST Threat Intel Pipelines Course
  
• Malware Analysis
  
• DDoS Mitigation Fundamentals
  
• DNS: Prevention, Detection, Disruption and Defense
  
• Mastering CVSSv3.1
  
• Introduction to the Common Vulnerability Scoring System Version 4.0
  
• PSIRT Training
  
• Incident Handling for Policy Makers
  
• Breach Workshop
  
• Conducting Exercises to Improve IR
  
• IPv6 Security
  
• FIRST Security Bootcamp

Center for Development of Security Excellence

CDSE General Training

https://www.cdse.edu/
CDSE DoD Mandatory CUI Training (IF141.06)
CDSE eLearning Catalog & Toolkits
CDSE CUI Course Resources

Insider Threat Training

• Insider Threat Program
  
• Insider Threat Awareness INT101.16
  
• Insider Threat Awareness Student Guide
  
• Resources Insider Threat 

Security Awareness Training

• ​Suspicious Emails CI021.16
• Cybersecurity Awareness CS130.16
• DOD Annual Security Awareness Refresher IF142.06
• Security Posters

Role Based Training

• Cybersecurity for Security Personnel Course CS160.16
• Privileged User Cybersecurity Responsibilities DS-IA112.16
• CDSE Webinars and Conferences

Supply Chain Training

Supply Chain Threat Awareness CI102.16

HOME                     SERVICES                     ABOUT                     UPDATES                     CONTACT

Apicem Partners

Copyright 2026