Free Cybersecurity Training: U.S. Government Sources by Michael Erbschloe - HTML preview

PLEASE NOTE: This is an HTML preview only and some elements such as links or page numbers may be incorrect.
Download the book in PDF, ePub, Kindle for a complete version.

 

Cyber Security and Information Systems Information
Analysis Center (CSIAC)

 

The Cyber Security and Information Systems Information Analysis Center (CSIAC) is a Department of Defense (DoD) Information Analysis Center (IAC) sponsored by the Defense Technical Information Center (DTIC). The CSIAC is a consolidation of three predecessor IACs: the Data and Analysis Center for Software (DACS), the Information Assurance Technology IAC (IATAC) and the Modeling & Simulation IAC (MSIAC), with the addition of the Knowledge Management and Information Sharing technical area.

The CSIAC, one of three IACs sponsored by DTIC, performs the Basic Center of Operations (BCO) functions necessary to fulfill the mission and objectives applicable to the DoD Research, Development, Test and Evaluation (RDT&E) and Acquisition communities’ needs. These activities focus on the collection, analysis, synthesizing/processing and dissemination of Scientific and Technical Information (STI).

The BCO functions, specifically the collection and dissemination of STI, produce several valuable resources (e.g., reports, tool databases, data collections, etc.) in the CSIAC’s core technology areas (Cybersecurity, Software Engineering, Modeling & Simulation, and Knowledge Management/Information Sharing). In addition to providing access to these resources, the CSIAC also performs up to four hours of support (free of charge) in response to Technical Inquiries. The CSIAC can also provide services as Core Analysis Tasks (CATs) procured and funded through the issuance of Delivery Orders (DO).

The CSIAC is chartered to leverage best practices and expertise from government, industry, and academia on cyber security and information technology. The CSIAC’s mission is to provide the DoD with a central point of access for Information Assurance and Cybersecurity to include emerging technologies in system vulnerabilities, R&D, models, and analysis to support the development and implementation of effective defense against information warfare attacks.

Go to DTIC Online to search DTIC’s publicly accessible collections and read or download scientific and technical information.  DTIC also makes available sensitive and classified information to eligible users who register for DTIC services.  Go register for a DTIC account: https://reg.dtic.mil/DTICRegistration/. Once registered, you can access DTIC Online at https://www.dtic.mil.

CSIAC Training: The CSIAC offers a variety of training resources in order to provide instruction in a manner that suits different users’ needs. The materials have been developed for a range of audiences, including professionals from government, industry and academia, and discuss concepts at varying levels of depth to accommodate all CSIAC users, from novices to the experienced practitioners. The content covers a range of topics within the CSIAC’s technical domain (Software Engineering, Cybersecurity, Modeling & Simulation, and Knowledge Management), and are provided as different media types. To learn more about a particular offering, select from the options below:

  • CSIAC Reports: Results of topic-specific analyses performed by CSIAC (or legacy IAC) subject matter experts are documented in the CSIAC reports.
  • CSIAC Podcasts: This collection of 5-15 minute videos provides a summarized overview of recent events, emerging vulnerabilities and/or best practices to mitigate the risk of intrusion. A special series also takes a deeper look into some of the most popular articles from the Cyber Security (CS) Digest, as selected by member of the CSIAC community.
  • CSIAC Webinars: These one hour presentations are provided by a member of the CSIAC team or another industry professional to take an in-depth look at a particular topic of interest to the CSIAC community. Some of the most popular topics of late include webinars covering the vulnerabilities of cloud computing, techniques for estimating software development costs and lessons learned from recent data breaches. Users can subscribe to CSIAC Webinars to receive announcements for upcoming presentations, although each webinar is also recorded and posted on the CSIAC website.

The CSIAC’s community of practice (CoP) is a feature that adds an additional element to the IAC’s traditional capabilities. In addition to providing access to a wealth of reports, resources and related STI, the CSIAC website now provides social networking functionality that allows practitioners to directly communicate with one another on a variety of topics relevant to the CSIAC technical domain.

The actual community is comprised of CSIAC staff members, team members, the wider-reaching network of subject matter experts (SMEs) and the CSIAC’s registered users. The site allows users to start new discussions, comment on specific documents and resources, and pose questions and/or opinions to an entire community of practitioners. The combination of technical content and social networking capabilities maximizes the CSIAC’s ability to disseminate information while overcoming the limitations of similar online communities.

Products:

  • State of the Art Report (SOAR): Measuring Cyber Security and Information Assurance Free!
  • State of the Art Report (SOAR): Security Risk Management for the Off-the-Shelf (OTS) Information and Communications Technology (ICT) Supply Chain Free!
  • State of the Art Report (SOAR): Software Security Assurance Free!
  • State of the Art Report (SOAR): The Insider Threat to Information Systems Free!
  • CSIAC Journal Collection Free!
  • Handbook of Software Reliability and Security Testing $75.00

 

Link: https://www.csiac.org/services/csiac-training/