Appendix 1 - Basic Officer Leaders Course (BOLC).pdf

Basic Officer Leaders Course (BOLC)

Appendix 1 - Basic Officer Leaders Course (BOLC)

1 | P a g e

Implement Basic Cloud Service Oversight and Consumption Description:

This course is designed to provide participants with a comprehensive overview of the fundamental concepts, principles, and technologies that define the world of cloud computing. Learners will be equipped with a solid foundation in cloud computing and empower them to make informed decisions regarding cloud adoption and utilization within their organizations.

Cloud Foundations: (2 hour) Provide learners with an introduction to cloud computing and the Army Cloud Plan with an understanding of how it provides a comprehensive framework for managing cloud technologies in support of Army operations. Identify the benefits and challenges associated with implementing cloud technologies and the learner’s role in leveraging cloud for mission success.

• Discuss cloud computing

• Define key terms and concepts in cloud computing

• Define the key components of the Army Cloud Plan

• Recognize ECMA and its role within the Army cloud ecosystem

• Compare advantages of cloud computing vs traditional data centers

• Discuss Cloud Architecture & Service Models

• Identify Cloud Deployment Models

• Explore Cloud Security and tools

• Describe Cloud Migration and Integration

• Recognize the elements of the Shared Responsibility Model (AWS, Azure)

• Compare cloud products (AWS, Google, Microsoft, Oracle)

• Define FinOps

• Discuss Emerging Trends in Cloud Computing

Cloud Infrastructure and Networking (2 hour) Introduce the fundamentals of cloud infrastructure and networking through the discussion of virtual machines along with filtering and routing network traffic. This section covers the concepts necessary to increase learners understanding of network services and to make informed decisions about solutions that meet mission requirements.

• Identify Cloud Infrastructure Components

• Describe Virtual Networks

• Describe Network Management and Security

Data Storage and Management in the Cloud (2 hour) This module is designed to provide participants with a cloud agnostic overview of storage options, data management, and cloud security. In this module participants will assess cloud security principles, storage, and data protection measures in the cloud.

• Review Cloud Storage Options o Object storage o File storage o Database storage

• Review Data Management o Data backup and recovery o Data replication

• Review Data Security o Encryption o Compliance o Security Measures

2 | P a g e

PE: Hands-on with cloud service providers (2 hour) With organizations embracing a multi-cloud approach, this PE is designed to demonstrate to participants the various DoD cloud service providers. Additionally, it showcases the similarities and differences between the providers but how they all accomplish the same cloud technology.

AWS Foundations: Getting Started with the AWS Cloud Essentials https://explore.skillbuilder.aws/learn/course/external/view/elearning/482/aws-foundations-getting-started-with-the-aws-cloud-essentials?trk=c87ae749-9cf6-4cd0-ab40-c9e447c26b82&sc_channel=el

Microsoft Azure Fundamentals: Describe cloud concepts https://learn.microsoft.com/en-us/training/paths/microsoft-azure-fundamentals-describe-cloud-concepts/

Oracle Cloud Infrastructure Foundations https://mylearn.oracle.com/ou/learning-path/become-an-oci-foundations-associate/108448/

Google Cloud Computing Foundations https://learndigital.withgoogle.com/digitalgarage/course/gcloud-computing-foundations https://explore.skillbuilder.aws/learn/course/external/view/elearning/482/aws-foundations-getting-started-with-the-aws-cloud-essentials?trk=c87ae749-9cf6-4cd0-ab40-c9e447c26b82&sc_channel=el https://explore.skillbuilder.aws/learn/course/external/view/elearning/482/aws-foundations-getting-started-with-the-aws-cloud-essentials?trk=c87ae749-9cf6-4cd0-ab40-c9e447c26b82&sc_channel=el https://learn.microsoft.com/en-us/training/paths/microsoft-azure-fundamentals-describe-cloud-concepts/ https://learn.microsoft.com/en-us/training/paths/microsoft-azure-fundamentals-describe-cloud-concepts/ https://mylearn.oracle.com/ou/learning-path/become-an-oci-foundations-associate/108448/ https://learndigital.withgoogle.com/digitalgarage/course/gcloud-computing-foundations

3 | P a g e

Implement Basic Data Oversight & Consumption (BOLC)

Day 1 Description:

This course is designed to provide participants with a comprehensive understanding of the data lifecycle, database capabilities, normalization, data science, big data, and data analytics. The course will cover the key concepts, techniques, and tools used in data operations and provide hands-on experience in managing and optimizing data for mission success.

Army Data Operations Foundation: (1 hour) Provide Soldiers with and overview of the Army Data Plan and an understanding of how it provides a comprehensive framework for managing data in support of Army operations. Identify the challenges associated with implementing the plan and their role in turning data strategy into action to leverage data for mission success.

• Discuss the importance of data in military operations.

• Review the key components of the Army Data Plan

• Describe how Signal professionals use information to support situational understanding

• Discuss how to collaborate with other data professionals

• Review Army Enduring Data Warehouses (Vantage, PDE, ARC, GabNim, cDATA)

Introduction to Data Fundamentals (2 hours) Introduce data terms and concepts involved in data operations and its importance in managing and maintaining data-driven systems. Discuss the processes and considerations involved in acquiring, generating, and collecting data. This section explores various methods, technologies, and best practices for effectively and ethically capturing data to ensure its quality and integrity. Soldiers will gain insights into the importance of data source evaluation, data capture techniques, and legal and ethical considerations in data collection.

• Discuss data types and structures

• Discuss data sources and collection methods (surveys, databases, APIs, and web scraping)

• Define and identify the stages of the data lifecycle.

• Discuss data quality and other considerations

• Describe storage options (on-premises, cloud, hybrid)

• Data security best practices and encryption methods

Database Fundamentals (2 hours) The Database Fundamentals course provides participants with a comprehensive understanding of the core principles and concepts of databases. Over the course, Soldiers will delve into the fundamentals of database design, explore different database models, learn about querying and manipulating data in SQL, and gain hands-on experience in manipulating databases.

• Discuss Relational Database Concepts

• Review Database Design and Normalization

• Review MySQL Workbench

• Database Creation

• Querying and Manipulating data

PE: Database Fundamentals (MySQL Workbench) (2 hours)

• Database Creation

• Querying and Manipulating data

Big Data Essentials (1 hour) The Big Data module introduces participants to the concept of big data, its characteristics, and the challenges and opportunities it presents. This module aims to provide participants with a high-level understanding of big data and its impact on military operations.

4 | P a g e

• Define key concepts of big data

• The three Vs of big data: volume, velocity, and variety

• Compare data warehousing and big data

• Describe Apache and Hadoop (features, benefits, use cases)

• Review Big Data Technologies and Infrastructure

• Big Data Processing and Analytics

Day 2 Data Visualization & Reporting (2 hours) The Data Visualization & reporting course section is designed to equip Soldiers with the essential knowledge and skills to create effective and impactful visual representations of data. In this course, they will learn the fundamentals of data visualization, explore visualization techniques, and gain hands-on experience in designing and transforming complex data into visually meaningful insights that drive informed decision-making.

• Define data analysis

• Discuss key principles of data visualization

• Discuss data visualization tools (e.g., Tableau, Power BI)

• Review data exploration and preparation

• Review Identify patterns, relationships, and outliers in data

• Privacy and security considerations when working with data

• Ethical guidelines for data collection and visualization

• Data visualization exercises

PE: Data Visualization & Reporting (6 hours)

• Build visualization and reports in Army Vantage (3 hours) o Data Marketplace o https://vantage.army.mil/workspace/module/view/latest/ri.workshop.main.module.214

1940c-c247-406e-9c77-3ab0537934c6 o EDSC Analytics o /Army_NIPR/EDSC-DW/EDSC Analytics o Contour o https://vantage.army.mil/workspace/contour-app/splash o Quiver o https://vantage.army.mil/workspace/quiver/splash o Reports o https://vantage.army.mil/workspace/report/splash

• Build Power BI visuals and reports (3 hours) o https://learn.microsoft.com/en-us/training/paths/build-power-bi-visuals-reports/ https://vantage.army.mil/workspace/module/view/latest/ri.workshop.main.module.2141940c-c247-406e-9c77-3ab0537934c6 https://vantage.army.mil/workspace/module/view/latest/ri.workshop.main.module.2141940c-c247-406e-9c77-3ab0537934c6 https://vantage.army.mil/workspace/contour-app/splash https://vantage.army.mil/workspace/quiver/splash https://vantage.army.mil/workspace/report/splash https://learn.microsoft.com/en-us/training/paths/build-power-bi-visuals-reports/

5 | P a g e

Implement Basic Zero Trust Principles Description:

This course is designed to provide participants with a comprehensive overview of the fundamental knowledge and skills required to design, implement, and maintain a secure and resilient network environment. In this course, Soldiers will explore the core principles and concepts of Zero Trust and explore a range of topics, including identity and access management, network segmentation, data protection, continuous monitoring, and incident response within the context of Zero Trust.

Introduction to Zero Trust Architecture (1 hr) This module explores the core principles, components, and significance of this modern security approach. In this module, Soldiers will gain a comprehensive understanding of Zero Trust, its key tenets, and pillars, and how it differs from traditional defense-in-depth strategies. Throughout this module, participants will gain a deeper understanding of each aspect of Zero Trust architecture and learn how to implement its principles effectively.

• Define Zero Trust

• Identify Zero Trust Five Tenets

• Identify Zero Trust Seven Pillars

• Compare Defense in Depth and Zero Trust

• Discuss the importance of Zero Trust

• Review Zero Trust Access Flow

Pillar 1: Users (1 hour) This module focuses specifically on securing user identities and ensuring that only authorized individuals gain access to sensitive resources and systems. Participants will be able to recognize why traditional perimeter-based security measures are no longer sufficient in an increasingly interconnected and dynamic digital landscape. Additionally, they will develop a high-level understanding of why each user and device is treated as potentially untrusted, regardless of their location or network. It emphasizes to participants the principle of "never trust, always verify."

• Review Zero Trust Access Flow

• Define the User Inventory

• Describe Conditional User Access

• Describe Multi-Factor Authentication (MFA)

• Describe Privileged Access Management (PAM)

Pillar 2: Devices (1 hour) This module focuses on defining and implementing access controls for devices. Participants will be equipped with the knowledge and skills necessary to implement and maintain a zero-trust architecture focused on their organization’s security along with the protection of critical assets from unauthorized access.

• Define Device Inventory

• Describe Device Detection and Compliance

• Describe Device Authorization with Real time Inspection

• Review Remote Access

• Discuss Partially & Fully Automated Asset, Vulnerability and Patch Management

• Discuss Unified Endpoint Management (UEM) and Mobile Device Management (MDM)

Pillar 3: Applications and Workload (1 hour) The Application and Workload Pillar module is designed to provide participants with specialized knowledge and skills in securing applications and workloads within a Zero Trust architecture.

Throughout the module, participants will gain a deep understanding of the unique challenges and considerations associated with securing applications and workloads in a Zero Trust environment. They will explore various concepts, strategies, and technologies specifically tailored to this pillar.

• Define Application Inventory

• Discuss Secure Software Development and Integration

• Explain Software Risk Management

6 | P a g e

• Explain Resource Authorization and Integration

• Explain Continuous Monitoring and Ongoing Authorizations

Pillar 4: Data (1 hour) The data pillar module focuses on safeguarding sensitive information, implementing data protection measures, and ensuring data integrity throughout its lifecycle. Throughout this module, participants will gain an understanding of the principles, technologies, and best practices specifically tailored to protecting data assets. They will explore various data protection techniques, such as data loss prevention (DLP), data masking, tokenization, and encryption. Additionally, they will gain insights into data-centric auditing and monitoring strategies to ensure compliance and detect unauthorized access or data breaches.

• Define Data Catalog Risk Alignment

• Review DoD Enterprise Data Governance

• Discuss Data Labeling and Tagging

Pillar 5: Network and Environment (1 hour) The Network and Environment Pillar focuses on gaining comprehensive visibility into network traffic, user behavior, and security events, as well as utilizing advanced analytics techniques for proactive threat detection and response. Throughout the module, participants will gain an understanding of the principles, methodologies, and technologies tailored to this focus area.

• Define Data Flow Mapping

• Define Software Defined Networking (SDN)

• Define Macro Segmentation

• Define Micro Segmentation

Pillar 6: Automation and Orchestration (1 hour) The Automation and Orchestration Pillar module is designed to provide participants with specialized knowledge and skills in leveraging automation and orchestration techniques to enhance the effectiveness and efficiency of Zero Trust architectures. This pillar focuses on automating security processes, integrating security tools, and streamlining security operations. Participants will learn the benefits of automating repetitive security tasks and the advantages of orchestrating various security tools and technologies.

• Define Policy Decision Point (PDP) & Policy Orchestration

• Discuss Critical Process Automation

• Discuss Artificial Intelligence & Machine Learning

Pillar 7: Visibility and Analytics (1 hour) The Visibility and Analytics Pillar module is designed to provide students with specialized knowledge and skills in leveraging visibility and analytics tools to enhance the monitoring, detection, and response capabilities within a Zero Trust architecture. Participants will learn the importance of continuous monitoring, log management, and security event correlation in maintaining a secure environment. They will understand the benefits of real-time visibility into network traffic, user activity, and security events.

• Review Traffic Logs (Network, Data, Apps, Users)

• Review Security Information and Event Management (SIEM)

• Identify Common Security and Risk Analytics

• Identify User and Entity Behavior Analytics

• Discuss Threat Intelligence Integration

• Discuss Automated Dynamic Policies