Course Catalog / Subject / NIST

NIST

We offer a series of 5 courses aimed at guiding organizations seeking to architect and engineer a data security process for new IT Systems. This series is designed to help organizations implement a unified information security program by aligning with enterprise architecture through the selection of security controls to protect against resources, assets, and operational risk. With over 125+ courses mapped to the National Institute of Standards and Technology Special Publications, our compliance mapping displays courses that meet multiple compliance mandates.

Course Catalog / Subject / NIST

NIST

API 210 – Mitigating APIs Lack of Resources & Rate Limiting

API 211 – Mitigating APIs Broken Object Level Authorization

API 213 – Mitigating APIs Mass Assignment

API 214 – Mitigating APIs Improper Asset Management

API 250 – Controlling Access to the Kubernetes API

API 251 – Implementing Web Application and API Protection (WAAP)

ATK 201 – Using the MITRE ATT&CK Framework

COD 104 – Designing Secure Software

COD 105 – Secure Software Development

COD 106 – The Importance of Software Integration and Testing

COD 107 – Secure Software Deployment

COD 108 – Software Operations and Maintenance

COD 215 – Mitigating .NET Application Vulnerabilities (NEW)

COD 252 – Securing Google Platform Applications & Data

COD 288 – Java Public Key Cryptography

COD 309 – Securing ASP.NET MVC Applications (UPDATED)

CYB 210 – Cybersecurity Incident Response

CYB 211 – Identifying and Protecting Assets Against Ransomware

CYB 212 – Fundamentals of Security Information & Event Management (SIEM)

CYB 213 – Generative AI Privacy & Cybersecurity Risk (NEW)

CYB 250 – Cyber Threat Hunting: Tactics, Techniques, and Procedures (TTP)

CYB 301 – Fundamentals of Ethical Hacking

CYB 310 – Using Cyber Supply Chain Risk Management (C-SCRM) to Mitigate Threats to IT/OT

CYB 311 – Threat Analysis with AI

DES 207 – Mitigating OWASP API Security Top 10

DES 208 – Defending Against the CSA Top 11 Threats to Cloud Computing

DES 209 – Authentication and Lifecycle Management

DES 214 – Securing Infrastructure Architecture

DES 215 – Defending Infrastructure

DES 216 – Protecting Cloud Infrastructure

DES 217 – Securing Terraform Infrastructure and Resources

DES 218 – Protecting Microservices, Containers, and Orchestration

DES 219 – Securing Google’s Firebase Platform

DES 232 – Mitigating OWASP 2021 Injection

DES 233 – Mitigating OWASP 2021 Identification and Authentication Failures

DES 234 – Mitigating OWASP 2021 Cryptographic Failures

DES 235 – Mitigating OWASP 2021 Insecure Design

DES 236 – Mitigating OWASP 2021 Broken Access Control

DES 237 – Mitigating OWASP 2021 Security Misconfiguration

DES 238 – Mitigating OWASP 2021 Server-Side Request Forgery (SSRF)

DES 239 – Mitigating OWASP 2021 Software and Data Integrity Failures

DES 240 – Mitigating OWASP 2021 Vulnerable and Outdated Components

DES 241 – Mitigating OWASP 2021 Security Logging and Monitoring Failures

DES 261 – Securing Serverless Environments

DES 262 – Securing Enterprise Low-Code Applications Platforms

DES 313 – Hardening a Kubernetes Cluster

DES 314 – Hardening the Docker Engine

DES 361 – Mitigating LCNC (Low-Code/No-Code) Account Impersonation

DES 362 – Mitigating LCNC (Low-Code/No-Code) Authorization Misuse

DSO 201 – Fundamentals of Secure DevOps

DSO 212 – Fundamentals of Zero Trust Security

DSO 256 – DevSecOps in the Google Cloud Platform

ENG 110 – Essential Account Management Security

ENG 111 – Essential Session Management Security

ENG 112 – Essential Access Control for Mobile Devices

ENG 113 – Essential Secure Configuration Management

ENG 114 – Essential Risk Assessment

ENG 115 – Essential System & Information Integrity

ENG 116 – Essential Security Planning Policy & Procedures

ENG 117 – Essential Information Security Program Planning

ENG 118 – Essential Incident Response

ENG 119 – Essential Security Audit & Accountability

ENG 120 – Essential Security Assessment & Authorization

ENG 121 – Essential Identification & Authentication

ENG 122 – Essential Physical & Environmental Protection

ENG 123 – Essential Security Engineering Principles

ENG 124 – Essential Application Protection

ENG 125 – Essential Data Protection

ENG 126 – Essential Security Maintenance Policies

ENG 127 – Essential Media Protection

ENG 251 – Risk Management Foundations

ENG 320 – Using Software Composition Analysis (SCA) to Secure Open-Source Components

ENG 351 – Preparing the Risk Management Framework

ENG 352 – Categorizing Systems and Information within the RMF

ENG 353 – Selecting, Implementing and Assessing Controls within the RMF

ENG 354 – Authorizing and Monitoring System Controls within the RMF

ICS 210 – ICS/SCADA Security Essentials

ICS 310 – Protecting Information and System Integrity in Industrial Control System Environments