Cyber Stars (Critical National Infrastructure) Training in Canada

No Prerequisites.

Regardless of prior knowledge and exposure to cyber security threats, the programmes focus specifically on user behaviour, how to identify, mitigate and effectively respond to cyber threat in both a personal and working environment.

Key learning topics include:

• The Scale and Evolution of Cyber Threat
• Threat Actors and Motivations
• Threat Techniques (Social Engineering, Malware, Network Attack, Physical Access)
• Home and Mobile Working Threats (Wifi, VPN, Encryption, USB, password security)
• Social Media Safety (Digital footprint leakage and protection)
• Incident Response and Business Continuity (in scoping with organisation
• for messaging)
• Supply Chain Threat (if relevant to business model)
• Policy Development and Implementation (in scoping with organisation for messaging)

Cyber Stars (Critical National Infrastructure)

Cyber Stars is the first education and awareness programme with an official qualification in cyber security awareness for those working within Critical National Infrastructre. As the cyber threats to CNI continue to increase and evolve it is essential that those with access to and responsibility for keeping Operational Technology secure, to fully understand cyber security threats within the relevant and specific context. Generic IT based cyber awareness training often misses the requirement for those working in more operational technology roles and our curriculum has been developed with leading providers of CNI in the United Kingdom to ensure complete relevance to those working in role. Cyber Stars CNI curriculums are specific to individual sector risks and support NIST Directive requirements associated with cyber security awareness within CNI.

Topics covered:

• Defining the difference between IT and OT
• Evolution of cyber threats
• Threat groups (inc insider threat)
• Defining vulnerabilities (regular and zero-day)
• OT Cyber risk assessment
• Vulnerability identification and cyber attack chain
• Social Engineering attacks
• Network attacks
• Supply chain and Third Party
• Systems and Data and the consequences of their loss
• Compliance and Regulatory Frameworks