Appendix 7 - Cyberspace Defense Warrant Officer 255S WOBCWOAC.pdf

Appendix 7 – 255S WOBC_WOAC

Cyberspace Defense Warrant Officer Basic Course

Section 1 - Cloud

TLO: Implement Basic Cloud Security Solutions and Services (24 hours)

Learning Outcomes:

• Identify and understand fundamental concepts and principles of cloud security, including cloud security architecture, threats, encryption, and identity and access management

• Recognize different cloud service models (IaaS, PaaS, SaaS) and their respective security considerations

• Understand regulations and compliance standards relevant to cloud security

Section 2 - Data

TLO: Implement Basic Data Security Solutions and Services (48 hours)

Learning Outcomes:

• Identify the key concepts and principles of data-centric network security, including but not limited to encryption, authentication, access controls, and data integrity

• Discuss the various data technologies used in network architecture, their roles, and associated security considerations

• Recognize the roles and responsibilities of security professionals in creating, maintaining, and securing a data-centric network

• Explain how different data technologies can be secured and the role of network security protocols in this context

Section 3 – Zero Trust

TLO: Implement Basic Zero Trust Principles (24 hours)

Learning Outcomes

• Recall and list the key principles and concepts of Zero Trust in dense of the network, including the shift from traditional perimeter-based security models.

• Explain the components and architecture of a Zero Trust network, including identity and access management, network segmentation, data protection, continuous monitoring, and incident response.

• Design and implement a Zero Trust environment, incorporating strategies for authentication, authorization, and access control based on Zero Trust principles.

• Assess network connectivity and access control policies within a Zero Trust network, identifying potential vulnerabilities and recommending mitigation strategies.

Section 4 – Programming/Scripting (72 hours)

Learning Outcomes

• Demonstrate the basic techniques used to create scripts for automating system administrative tasks.

• Design, code, and test applications using scripts. (e.g. Python)

• Construct web scraping scripts to programmatically obtain data and content from web pages.

Cyberspace Defense Warrant Officer (WOAC)

Section 1 - Cloud

TLO: Implement Advanced Cloud Security Solutions and Services (52 hours)

Learning Outcomes:

• Design a comprehensive cloud security strategy, considering factors such as data protection, threat prevention, access control, and regulatory compliance

• Develop incident response plans for potential security incidents in the cloud

• Propose solutions for identified vulnerabilities or security gaps in the cloud environment

• Employ cloud-native and third-party tools for managing cloud security

Section 2 - Data

TLO: Implement Advanced Data Security Solutions and Services (72 hours)

Learning Outcomes:

• Interpret best practices for securing data in transit and at rest within a network

• Implement security measures in collaboration with data engineers to protect data and network infrastructure

• Apply principles of secure data management in a network context, ensuring data integrity, confidentiality, and availability.

• Use network security tools to monitor and mitigate potential threats

• Analyze a data-centric network architecture for potential vulnerabilities, consider the roles of different data technologies

Section 3 – Zero Trust

TLO: Implement Advanced Zero Trust Principles (24 hours)

Learning Outcomes:

• Design and develop a comprehensive incident response plan specifically tailored to a

Zero Trust solution, including real-time monitoring, and automated incident response workflows

• Analyze advanced data protection techniques in a Zero Trust environment, such as data loss prevention (DLP), data encryption at rest and in transit, and data rights management, to ensure data security and privacy.

• Design and implement secure remote access solutions within a Zero Trust network, Section 4 – Programming/Scripting

TLO: Employee Advanced scripting to secure network resources (40hours)

Learning Outcomes

• Develop Application Programmable Interfaces to enable advanced network security operations.

• Perform prescriptive analysis on Security Event and Incident Management (SEIM) data.

• Design and implement iterators and generators.

• Design and develop advanced data structures: collections, arrays, queues, sets, dictionaries.