Cybersecurity Training & Exercises

CISA looks to enable the cyber-ready workforce of tomorrow by leading training and education of the cybersecurity workforce by providing training for federal employees, private-sector cybersecurity professionals, critical infrastructure operators, educational partners, and the general public. CISA is committed to supporting the national cyber workforce and protecting the nation's cyber infrastructure.

Federal Employees

CISA Learning

CISA Learning is the go-to learning platform for CISA staff, contractors, and external partners. CISA Learning replaces the Federal Virtual Training Environment (FedVTE). The platform offers no cost online cybersecurity training on topics such as cloud security, ethical hacking and surveillance, risk management, malware analysis, and more. CISA Learning https://niccs.cisa.gov/education-training/cisa-learningwill provide a more adaptable and engaging training experience, enabling users to access courses at their convenience, whether from an office, at home, or in the field.

Enhanced Capabilities to Support Growth

CISA Learning offers a range of scalable training solutions, including: 

Classroom-Based Courses

Virtual Instructor-Led Training

Self-Paced Online Modules

Centralized Learning Hub for Streamlined Education

All training programs will now be housed under one unified system. This will foster a more seamless and holistic user experience. CISA Learning enables: 

Improved Student Administration: Simplified processes for course enrollment, tracking, and reporting.

Enhanced Reporting Capabilities: Detailed insights into course completion and student progress, enabling data-driven decisions for training program development.

Federal Cyber Defense Skilling Academy

The Federal Cyber Defense Skilling Academy is a 12-week cohort program created for federal employees to develop the baseline knowledge, skills, and abilities of a Cyber Defense Analyst (CDA).

Incident Response Training

CISA’s no-cost Incident Response Training curriculum provides a range of training offerings for beginner and intermediate cyber professionals encompassing basic cybersecurity awareness and best practices for organizations and hands-on cyber range training courses for incident response.

Workforce Training Guide

CISA’s Cybersecurity Workforce Training Guide is for current and future federal and state, local, tribal, and territorial (SLTT) cybersecurity and IT professionals looking to expand their cybersecurity skills and career options. This is a downloadable, interactive guide meant to be used with the Cyber Career Pathways Tool. Start planning your next cyber career move today!

Cybersecurity Exercises

CISA conducts cyber and physical security exercises with government and industry partners to enhance security and resilience of critical infrastructure. These exercises provide stakeholders with effective and practical mechanisms to identify best practices, lessons learned, and areas for improvement in plans and procedures.

Exercise Planning and Conduct Support Services

INCREASE YOUR RESILIENCE

Contact: cisa.exercises@mail.cisa.dhs.gov

CISA provides end-to-end exercise planning and conduct support to assist stakeholders in examining their cybersecurity and physical security plans and capabilities.

Go to CISA Exercises

A group of people in a course sitting in seats listening to an instructor up front

CISA Tabletop Exercise Packages

INCREASE YOUR RESILIENCE

Contact: cisa.exercises@mail.cisa.dhs.gov

A comprehensive set of resources designed to assist stakeholders in conducting their own exercises and initiating discussions within their organizations about their ability to address a variety of threat scenarios.

Cyber Storm

INCREASE YOUR RESILIENCE

Contact: cyberstorm@mail.cisa.dhs.gov

CISA-sponsored cybersecurity exercise that simulates a large-scale, coordinated cyber-attack impacting critical infrastructure

Cyber Storm: Securing Cyber Space

Tabletop the Vote

OTHER

Tabletop the Vote is CISA’s yearly national election security exercise. Federal partners, state and local election officials, and vendors come together to identify and share best practices and areas for improvement related to election security.

Critical Infrastructure Operators

Assessment Evaluation and Standardization: The Assessment Evaluation and Standardization (AES) program is designed to enable organizations to have a trained individual that can perform several cybersecurity assessments and reviews in accordance with industry and/or federal information security standards.
Continuous Diagnostics and Mitigation: The Continuous Diagnostics and Mitigation (CDM) program supports government-wide and agency-specific efforts to provide risk-based, consistent, and cost-effective cybersecurity solutions to protect federal civilian networks across all organizational tiers.
CISA Tabletop Exercise Package: The CISA Tabletop Exercise Package (CTEP) is designed to assist critical infrastructure owners and operators in developing their own tabletop exercises to meet the specific needs of their facilities and stakeholders.
Industrial Control Systems: CISA offers free Industrial Control Systems (ICS) cybersecurity training to protect against cyber-attacks to critical infrastructure, such as power grids and water treatment facilities. CISA’s ICS training is globally recognized for its relevance and available virtually around the world.

Cybersecurity Professionals (Non-Federal)

CISA Learning: CISA Learning is a free, online, and on-demand cybersecurity and infrastructure security training system. With courses ranging from beginner to advanced levels, you can strengthen or build your knowledge and skillsets at your own pace and schedule!
Workforce Training Guide: CISA’s downloadable Cybersecurity Workforce Training Guide (.pdf, 3.53 MB) helps staff develop a training plan based on their current skill level and desired career path.

General Public

CISA Learning: CISA Learning is a free, online, and on-demand cybersecurity and infrastructure security training system. With courses ranging from beginner to advanced levels, you can strengthen or build your knowledge and skillsets at your own pace and schedule!
Incident Response Training: CISA’s no-cost Incident Response Training curriculum provides a range of training offerings for beginner and intermediate cyber professionals encompassing basic cybersecurity awareness and best practices for organizations and hands-on cyber range training courses for incident response.