Cybersecurity Considerations For K-12 Schools and School Districts (REMS)

This course has been designed to help you understand cybersecurity considerations that K-12 schools and school districts need to keep in mind to inform your school emergency operations plans (EOPs) and safety, security, emergency management, and preparedness (school safety) programs. Learn about the types of evolving cyber threats facing school and school district networks and systems; the before, during, and after aspects of preparing for, responding to, and recovering from cyber threats; and how cybersecurity can be integrated into new and existing EOPs. This course is recommended for members of school and school district information technology teams; core school and school district safety planning teams; and school, school district, and community partner personnel with a role and/or responsibility in school safety.

Security Awareness and Training Service: Education Edition (Fortinet)

Tied to the White House's Cyber Education and Workforce Initiatives, Fortinet is making significant progress in deploying its Security Awareness and Training Service, which was customized for the education sector and made available at no cost to all K-12 school districts and systems across the United States. The expansion of its free training provides the potential to help more than 8 million staff and faculty members and over 55 million K-12 students become more cyber-informed and improve their skillsets to avoid breaches at school, at home, and everywhere they go. This curriculum also includes teacher guides, ready-to-teach lesson plans, lesson slides, student handouts, and multimedia assets for teachers to pass their knowledge onto their students. All is free-of-charge to all K-12 school districts.

Cybersecurity Courses by the Texas A&M Engineering Extension Service (TEEX)

AWR383 - Cybersecurity Risk Awareness for Officials and Senior Management: This 4-hour non-technical course is meant to develop awareness of cybersecurity risks so that elected officials, appointed officials, and other senior managers are better informed to properly protect the jurisdiction/organization during a cybersecurity incident. It is designed to help officials and senior management work more effectively with their Information Technology (IT) departments to mitigate cyber threats. The training is tailored to government, critical infrastructure, and private sector personnel who have the responsibility for directing and developing policy within their organization.

AWR383 - Cybersecurity Risk Awareness for Officials and Senior Management: This 4-hour non-technical course is meant to develop awareness of cybersecurity risks so that elected officials, appointed officials, and other senior managers are better informed to properly protect the jurisdiction/organization during a cybersecurity incident. It is designed to help officials and senior management work more effectively with their Information Technology (IT) departments to mitigate cyber threats. The training is tailored to government, critical infrastructure, and private sector personnel who have the responsibility for directing and developing policy within their organization.

AWR421 - Demystifying Cyber Attacks: This 8-hour course provides non-technical students a better understanding of various cyber attacks and how they occur. Cyber attacks will be demonstrated through discussion, videos, pre-recorded attacks, and live example attacks. Students will be introduced to the Cyber Kill Chain and the common processes cyber criminals use when conducting cyber attacks. Through a better understanding of the Cyber Kill Chain, students will learn how to mitigate, disrupt, and stop cyber attacks.

MGT303 - Cybersecurity Vulnerability Assessment: This 16-hour course addresses specific technical and professional skills needed to assess, document, remediate, and present cybersecurity vulnerability assessments within organizations through a series of lectures and hands on activities. Activities include examining scans and analyzing simulated private sector, public sector, and critical infrastructure networks to develop a vulnerability assessment report and participate in a mock presentation to senior executives. This course utilizes active discussions and activities to extend participants' understanding of vulnerability assessments.

MGT-465 - Recovering from Cybersecurity Incidents: This 16-hour course is designed to provide guidance for the implementation of an effective cybersecurity incident recovery program from a pre-incident and post-incident perspective. The training focuses on connecting IT with emergency management and is intended for government, critical infrastructure, and private sector personnel who have the responsibility for recovering after a cyber incident. Short term tactical and long-term strategic activities are discussed culminating in the development of an action plan.

PER-398 - Cyber Resiliency in Industrial Control Systems: This 8-hour instructor-led online course is designed to enhance understanding of the critical nature of Industrial Control System environments and the associated risks, threats, and defenses within an organization, business, or government entity. The course utilizes activities to demonstrate attacks on Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) devices. This course is designed for state, local, regional, tribal, and territorial government officials; owners and operators of businesses and non-profits ; and community members and other individuals interested in developing a greater understanding of developing cybersecurity resiliency in ICS.

PER371 - Cybersecurity Incident Response and Management: This 3-day course utilizes NIST 800-61r2 to introduce participants to the cyber incident lifecycle. Through the use of a cyber range, participants will acquire hands-on experience responding to simulated, real-world cyber attacks and gain a better understanding of the importance of information sharing during cyber incidents. This course is resident in College Station, TX, however TEEX will cover the cost of flights, lodging and meals for all qualified participants.

AWR136 - Developing Cybersecurity Resiliency for Everyone: AWR136 is an eight (8) hour, non-technical introduction to cybersecurity. This awareness-level course will explore cybersecurity and cyber hygiene, and demonstrate how cyber attacks can impact, prevent, and/or stop business operations and emergency responses. Participants are introduced to common cybersecurity terminology, fundamental cyber threats and vulnerabilities that can impact individuals and organizations, and best practices and cyber hygiene techniques for securing personal and organizational data, software, and hardware.

AWR376 - Understanding Targeted Cyber Attacks: This 8-hour course will fill the gap in threat-specific training for cybersecurity as a community-driven course that focuses on the phases of targeted cyber-attacks and the attacker methods used during each phase. Participants will also receive valuable information on cyber-attack prevention, mitigation, and response.

MGT384 - Preparing for Cyber Attacks & Incidents: This 16-hour course is designed to prepare organizations and communities for the next cyber-attack. During this 16-hour course, participants will analyze cyber threats, vulnerabilities, and initial and cascading impacts of cyber-attacks, evaluate the process for developing a cyber preparedness program, examine the importance and challenges of cyber related information sharing and discover low to no-cost resources to help build cyber resilience.

MGT452 - Physical and Cybersecurity for Critical Infrastructure: This 8-hour course encourages collaboration efforts among individuals and organizations responsible for both physical and cybersecurity toward development of integrated risk management strategies that lead to enhanced capabilities necessary for the protection of our Nation's critical infrastructure.