Cyber Fluency: Advanced
Lead a practical security program for your team or small organization
This course from the Enterprise Technology Association (ETA) is for people who lead security for a team, department or small organization, often without "security" in their job title. You'll learn to run a practical security program: organize it with the NIST Cybersecurity Framework 2.0, write policies people follow, report progress to leaders, manage assets, vendors and awareness, and plan, rehearse and recover from incidents. You'll finish with a capstone: a Cyber Fluent plan for your own team, reviewed by ETA.
What you'll learn
- How to use NIST CSF 2.0 and CISA's Cybersecurity Performance Goals to set priorities for a small organization
- How to write short, enforceable security policies and measure what matters
- How to inventory assets and data, keep a risk register and manage vendor and supply chain risk
- How to run an awareness program that changes behavior
- How to build an incident response plan, run a tabletop exercise and recover well
Who it's for
Office and operations managers, IT generalists, department heads, nonprofit and small business leaders and anyone accountable for security on a team. You should have finished Cyber Fluency: Practitioner or have equivalent experience.
How it works
Three modules and a capstone, with a hands-on Try it exercise in every lesson, a knowledge check at the end of each module and a final assessment that includes your capstone summary. An ETA reviewer grades the capstone before the course completes (3 credit hours). This course and Securing AI at Work: Advanced make up Level 3: Advanced of the ETA Certified Cyber Fluent Professional.
This course teaches security management practice. It is not legal advice, and your organization's obligations depend on its sector, location and contracts.