Security Awareness and Cybersecurity Hygiene
Bootcamps
Security Awareness and Cybersecurity Hygiene
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-01",
    "courseTitle": "Security Awareness and Cybersecurity Hygiene",
    "authorOwner": "AU",
    "contactPerson": [
        "Zlatan Morić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "LMS"
    ],
    "proficiencyLevel": "Basic",
    "eqfLevel": "4-",
    "trainingType": [
        "Cross‑skilling"
    ],
    "deliveryMethod": "Online self-paced",
    "durationIntensity": "3",
    "expectedWeeklyTimeCommitment": "3",
    "traineeGroupSize": "Unlimited",
    "courseAvailability": "2026-06-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Identify needs in cybersecurity awareness, training and education",
        "Develop evaluation programs for the awareness, training and education activities",
        "Build a cybersecurity risk-aware environment",
        "Influence an organisation’s cybersecurity culture",
        "Motivate and encourage people",
        "Identify threat actors TTPs and campaigns"
    ],
    "ecsfRoles": [
        "Cybersecurity Educator"
    ],
    "targetAudience": [
        "Employees in SMEs, public institutions and educational organisations",
        "Non-technical staff",
        "Administrative personnel"
    ],
    "prerequisitesEntryReq": [
        "nan"
    ],
    "learningObjectives": [
        "Explain fundamental cybersecurity concepts (threat, vulnerability, risk, impact).",
        "Recognise common cyber attack vectors affecting organisations.",
        "Identify unsafe digital behaviours and associated organisational risks.",
        "Apply basic cybersecurity hygiene principles in everyday work activities."
    ],
    "suggestedLearningObjLOS": [
        "23"
    ],
    "learningOutcomes": [
        "Distinguish between threat, vulnerability and risk using practical examples.",
        "Identify phishing attempts and common social engineering indicators.",
        "Select appropriate secure behaviours when handling passwords, devices and email.",
        "Recognise situations requiring reporting to IT/security teams."
    ],
    "courseDesc": "This introductory training offers essential cybersecurity knowledge and practical digital hygiene instruction for non-technical personnel in SMEs, public institutions, and educational organisations.\nThe curriculum presents fundamental cybersecurity concepts such as threats, vulnerabilities, risk, and impact, and elucidates how daily activities affect organisational security posture.\nParticipants are instructed on prevalent attack scenarios, including phishing, social engineering, and credential misuse, and acquire skills to identify warning signs and respond effectively.\nThe course highlights personal responsibility, secure digital practices, and organised incident reporting procedures. The training emphasises behavioural awareness over technical depth and encourages the regular use of fundamental cybersecurity hygiene concepts in everyday job tasks.",
    "detailedContentOutlineTopic": [
        "Introduction to Cybersecurity Fundamentals: Definition of cybersecurity and organisational digital risk, Explanation of key concepts: threat, vulnerability, risk and impact, Why cybersecurity is a shared responsibility, Overview of common organisational attack surfaces",
        "Common Cyber Threats and Attack Techniques: Phishing and spear-phishing attacks, Social engineering techniques, Malware and ransomware basics, Credential theft and password misuse, Real-world examples of common attack scenarios",
        "Secure Digital Behaviour and Cyber Hygiene: Strong password practices and multi-factor authentication, Safe email usage and link verification, Secure browsing habits, Safe use of organisational devices and remote work considerations, Data handling and basic privacy awareness",
        "Recognising and Reporting Security Incidents: Identifying suspicious emails, messages and system behaviour, When and how to report security concerns, Internal reporting channels and escalation logic, Importance of timely reporting and organisational response",
        "Individual Accountability and Organisational Security Culture: Role of employees in protecting organisational assets, Consequences of unsafe behaviour, Building a security-aware mindset, Continuous improvement of personal cyber hygiene"
    ],
    "reqPlatformsInfra": [
        "LMS platform"
    ],
    "langDeliveryMaterial": "English (with optional local translation for trainers)",
    "assessmentMethod": [
        "LMS quiz: 100%"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Infographics"
    ],
    "ectsCredsEquivalent": "",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-01 Owner: AU
Available for training June 2026
Duration 3 hours
Platform Category LMS (online self-paced)
Proficiency Level Basic
Training Type Cross‑skilling
Delivery Method Online self-paced
ECSF Roles View Roles ▾
Cybersecurity Educator
ECSF Skills View Skills ▾
  • Identify needs in cybersecurity awareness, training and education
  • Develop evaluation programs for the awareness, training and education activities
  • Build a cybersecurity risk-aware environment
  • Influence an organisation’s cybersecurity culture
  • Motivate and encourage people
  • Identify threat actors TTPs and campaigns
Description View Description ▾
A short self-paced course that introduces the core principles of cyber hygiene and safe digital behaviour. Participants learn how to recognise online threats, protect accounts, avoid phishing, use secure passwords, apply MFA and safely handle data in everyday activities.
Secure Coding
Bootcamps
Secure Coding
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-02",
    "courseTitle": "Secure Coding",
    "authorOwner": "AU",
    "contactPerson": [
        "Aleksandar Radovan"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "LMS",
        "CR"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "6",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "16",
    "expectedWeeklyTimeCommitment": "16",
    "traineeGroupSize": "10-24",
    "courseAvailability": "2026-09-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Review codes assess their security",
        "Decompose and analyse systems to identify weaknesses and ineffective controls",
        "Identify and solve cybersecurity-related issues",
        "Implement cybersecurity recommendations and best practices",
        "Develop code, scripts and programmes",
        "Conduct user and business security requirements analysis"
    ],
    "ecsfRoles": [
        "Cybersecurity implementer",
        "Secure Coder / Secure Software Developer (proposed addition to ECSF framework)"
    ],
    "targetAudience": [
        "Software developers working in C/C++, .NET/C#, Java, Python or mobile application environments",
        "Application security engineers involved in secure SDLC implementation",
        "DevOps and DevSecOps engineers responsible for integrating security controls into CI/CD pipelines",
        "Technical leads and software architects seeking to strengthen secure-by-design development practices",
        "Quality assurance and code review professionals involved in secure code validation"
    ],
    "prerequisitesEntryReq": [
        "Practical programming experience in at least one of the supported languages (C/C++, .NET/C#, Java, Python, or mobile development platforms).",
        "Working knowledge of software development lifecycle (SDLC) processes and version control systems.",
        "Understanding of fundamental programming concepts, including memory management, input validation, authentication mechanisms and error handling.",
        "Familiarity with common software architectures (e.g., client-server, web-based applications, APIs).",
        "Basic awareness of common application security vulnerabilities (e.g., OWASP Top 10).",
        "Ability to read and interpret source code independently."
    ],
    "learningObjectives": [
        "Explain secure-by-design and secure-by-default principles within modern software development environments.",
        "Analyse common software vulnerability classes and their root causes across different programming paradigms.",
        "Apply structured secure coding methodologies aligned with OWASP and industry best practices.",
        "Perform systematic secure code reviews using vulnerability identification techniques.",
        "Integrate security controls into the software development lifecycle (SDLC).",
        "Select and justify appropriate mitigation strategies for identified application security weaknesses.",
        "Apply language-agnostic defensive programming patterns prior to specialization in a selected CR module."
    ],
    "suggestedLearningObjLOS": [
        "16",
        "21",
        "22"
    ],
    "learningOutcomes": [
        "Identify and classify software vulnerabilities (e.g., injection, memory corruption, authentication flaws, insecure deserialization).",
        "Decompose application components to detect weak input validation, insecure data handling and ineffective access controls.",
        "Conduct structured secure code analysis and document security findings.",
        "Propose and implement secure coding improvements consistent with recognised best practices.",
        "Evaluate the effectiveness of remediation strategies against defined threat models.",
        "Integrate secure development principles into practical coding exercises within the selected CR specialization (C/C++, .NET/C#, Java, Python or Mobile)."
    ],
    "courseDesc": "This course teaches participants how to design and write secure code, prevent vulnerabilities, and integrate security into the software development lifecycle. Combining LMS modules with practical labs, the training emphasizes secure programming techniques, vulnerability identification, and remediation.",
    "detailedContentOutlineTopic": [
        "Secure-by-Design Foundations and OWASP Risk Framework: Secure-by-design and secure-by-default principles, Introduction to OWASP Top 10 as a secure coding workflow model, Mapping vulnerability classes to root causes, Threat modelling fundamentals aligned with OWASP categories, Developer responsibility within secure SDLC",
        "OWASP Top 10 – Vulnerability Classes and Secure Coding Patterns: Injection flaws and secure input validation, Broken authentication and secure identity controls, Access control weaknesses and authorization enforcement, Cryptographic failures and secure data protection, Insecure design and architectural anti-patterns, Security misconfiguration and defensive configuration practices, Vulnerable and outdated components (dependency risks), Identification and authentication failures, Software and data integrity failures, Logging and monitoring considerations at development level, Each category includes:, Root cause analysis, Insecure code example, Secure coding remediation pattern, Prevention guidelines",
        "Secure Code Review Methodology (OWASP-aligned): Systematic review based on OWASP risk categories, Manual secure code inspection techniques, Introduction to static analysis (SAST) tools, Root-cause remediation and refactoring strategies, Documenting findings and communicating risk",
        "Secure Component Integration & SBOM (Supporting – LOS 21): OWASP perspective on vulnerable and outdated components, Third-party library risk assessment, Introduction to SBOM concepts (SPDX, CycloneDX), Software Composition Analysis (SCA) fundamentals, Dependency update and patch governance",
        "DevSecOps and Secure Deployment Practices (Supporting – LOS 22): Integrating OWASP-based controls into SDLC, Embedding SAST and SCA into CI/CD pipelines, Secure pipeline validation gates, Continuous security testing workflow, Developer feedback loops and remediation tracking",
        "Applied Secure Coding Workshop (OWASP-driven): Vulnerability identification in sample code aligned with OWASP categories, Refactoring insecure patterns into secure implementations, Applying structured mitigation workflows, Group-based review and remediation validation"
    ],
    "reqPlatformsInfra": [
        "LMS",
        "CR environment"
    ],
    "langDeliveryMaterial": "English (with optional local translation for trainers)",
    "assessmentMethod": [
        "Cyber Range (70%)",
        "Final quiz (30%)"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Instructor-led presentation materials covering secure-by-design principles and OWASP Top 10 vulnerability classes",
        "OWASP Top 10 structured mapping worksheets (vulnerability → root cause → mitigation → validation)",
        "Secure coding reference guides for language-agnostic defensive programming patterns",
        "Sample vulnerable code repositories aligned with OWASP categories",
        "Secure code review checklists and remediation tracking templates",
        "SBOM reference documentation (SPDX, CycloneDX examples)",
        "CI/CD security integration examples (pipeline configuration samples with security gates)",
        "Cyber Range environments for CR-12 to CR-16 language-specific specialization modules",
        "Knowledge assessment question bank (OWASP-based case scenarios)"
    ],
    "ectsCredsEquivalent": "5",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "This course comprises a modular secure development program featuring an 8-hour instructor-led core module, succeeded by one chosen 8-hour language-specific Cyber Range specialisation (CR-12 to CR-16). The instructor-led core emphasises secure coding practices in accordance with the OWASP Top 10 (LOS 16 – Secure Coding & Design). It creates a systematic procedure for identifying and remediating vulnerabilities that is adaptable across many programming languages and development environments. Supporting elements pertain to secure component integration and software supply chain considerations (LOS 21), along with the incorporation of security controls into development pipelines and DevSecOps processes (LOS 22). These aspects offer contextual support for secure coding methods but do not supplant the primary emphasis on code-level security. The Cyber Range specialisation allows learners to implement safe coding practices inside designated programming language environments (C/C++, .NET/C#, Java, Python, or Mobile). Practical examination is automated by established validation checkpoints, test suites, and security verification scripts. The course excludes offensive penetration testing, red team simulations, malware analysis, and organisational audit frameworks. The focus is exclusively on defensive software development and vulnerability mitigation at the code level.",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-02 Owner: AU
Available for training September 2026
Duration 16 hours
Platform Category LMS Cyber Range
Proficiency Level Intermediate
Training Type Upskilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Cybersecurity implementer Secure Coder / Secure Software Developer (proposed addition to ECSF framework)
ECSF Skills View Skills ▾
  • Review codes assess their security
  • Decompose and analyse systems to identify weaknesses and ineffective controls
  • Identify and solve cybersecurity-related issues
  • Implement cybersecurity recommendations and best practices
  • Develop code, scripts and programmes
  • Conduct user and business security requirements analysis
Description View Description ▾
This course teaches participants how to design and write secure code, prevent vulnerabilities, and integrate security into the software development lifecycle. Combining LMS modules with practical labs, the training emphasizes secure programming techniques, vulnerability identification, and remediation.
Basics of Security Hardening of Networking Devices
Bootcamps
Basics of Security Hardening of Networking Devices
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-03",
    "courseTitle": "Basics of Security Hardening of Networking Devices",
    "authorOwner": "AU",
    "contactPerson": [
        "Karlo Josić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "Cyber Range",
        "LMS"
    ],
    "proficiencyLevel": "Basic",
    "eqfLevel": "4-5",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "8 (2 ILT + 6 CR)",
    "expectedWeeklyTimeCommitment": "8",
    "traineeGroupSize": "10-25",
    "courseAvailability": "2026-06-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Implement cybersecurity recommendations and best practices",
        "Work on operating systems, servers, clouds and relevant infrastructures",
        "Assess the security and performance of solutions",
        "Decompose and analyse systems to identify weaknesses and ineffective controls"
    ],
    "ecsfRoles": [
        "Cybersecurity Implementer"
    ],
    "targetAudience": [
        "Entry-level and junior network administrators responsible for configuring routers and switches",
        "System administrators managing small to medium-sized network infrastructures",
        "IT support and technical operations staff involved in network device configuration",
        "Cybersecurity implementers focusing on basic network hardening practices",
        "Students and early-career professionals seeking practical skills in secure configuration of networking devices",
        "Technical staff in SMEs and public sector organisations responsible for maintaining secure network connectivity"
    ],
    "prerequisitesEntryReq": [
        "Basic understanding of computer networking concepts (IP addressing, subnetting, OSI model)",
        "Familiarity with fundamental routing and switching concepts",
        "Basic knowledge of TCP/IP protocols and common network services",
        "Ability to use command-line interfaces for basic device configuration",
        "Foundational understanding of cybersecurity principles such as access control and network segmentation",
        "Basic troubleshooting skills for network connectivity issues"
    ],
    "learningObjectives": [
        "Identify common security risks affecting network infrastructure devices.",
        "Apply basic network segmentation principles using VLAN configuration.",
        "Configure fundamental Layer 2 security mechanisms to reduce switching vulnerabilities.",
        "Implement secure management access controls on routers and switches.",
        "Configure and validate dynamic routing protocols in small network environments.",
        "Apply standard and extended Access Control Lists (ACLs) to enforce traffic filtering policies.",
        "Evaluate the impact of hardening measures on network functionality and connectivity."
    ],
    "suggestedLearningObjLOS": [
        "3"
    ],
    "learningOutcomes": [
        "Configure VLAN-based segmentation and verify traffic isolation between network segments.",
        "Implement and test basic Layer 2 protections, including port security and loop prevention mechanisms.",
        "Secure device management interfaces through authentication, password policies and restricted remote access.",
        "Configure and validate RIP and OSPF routing protocols in controlled lab environments.",
        "Create and apply standard and extended ACLs to control inbound and outbound traffic.",
        "Perform basic verification and troubleshooting to confirm correct implementation of network security controls.",
        "Document implemented configurations and demonstrate functional validation of applied security measures."
    ],
    "courseDesc": "This Bootcamp course introduces the fundamental concepts of network switching, routing, and security at Layers 2 and 3. Participants will learn how switching operates within network infrastructure and explore its security implications. Through hands-on practice, they will configure VLANs, trunk links, and inter-switch connections, apply port security, and implement Spanning Tree Protocol to maintain network stability. The course also covers essential hardening techniques, such as securing management interfaces, isolating unused ports and VLANs, and enabling SSH for secure remote access with password encryption.\nOn the routing side, learners will configure static and dynamic routing protocols and apply standard and extended Access Control Lists (ACLs) to control traffic and enhance security.",
    "detailedContentOutlineTopic": [
        "Fundamentals of Network Security Hardening: Overview of common threats affecting network infrastructure devices, Importance of secure configuration for routers and switches, Basic principles of network segmentation and traffic isolation, Introduction to defence-in-depth within network environments",
        "VLAN Configuration and Network Segmentation: VLAN concepts and logical network separation, VLAN configuration on switches, Trunking and access port configuration, Inter-VLAN routing fundamentals, Verification of VLAN isolation and connectivity",
        "Layer 2 Security Mechanisms: Overview of common Layer 2 vulnerabilities (VLAN hopping, MAC flooding, loops), Spanning Tree Protocol (STP) fundamentals and loop prevention, Port security configuration and MAC address restrictions, Disabling unused ports and securing physical interfaces, Validation and testing of Layer 2 protections",
        "Securing Management Access to Network Devices: Securing console and remote access (SSH configuration), Password policies and local authentication mechanisms, Disabling insecure management protocols, Restricting management access using access control mechanisms, Verification of secure remote access configuration",
        "Basic Routing Security and Configuration: Introduction to dynamic routing protocols (RIP, OSPF), Secure configuration of routing processes, Passive interfaces and routing authentication concepts, Verification of routing tables and neighbour relationships",
        "Access Control Lists (ACLs) and Traffic Filtering: Standard and extended ACL concepts, Inbound and outbound traffic filtering strategies, Applying ACLs to interfaces, Testing and validating ACL effectiveness, Troubleshooting misconfigured ACLs",
        "Validation and Troubleshooting of Hardening Measures: Connectivity testing and verification techniques, Identifying configuration errors affecting security or availability, Basic troubleshooting of segmentation and routing issuesDocumentation of applied security configurations"
    ],
    "reqPlatformsInfra": [
        "4 × Cisco IOSvL2 virtual switches (Layer 2 configuration) (GNS3)",
        "4 × Cisco IOSvL3 virtual router (Layer 3 configuration) (GNS3)",
        "2 × Ubuntu VMs (as endpoint simulation)"
    ],
    "langDeliveryMaterial": "English (with optional local translation for trainers)",
    "assessmentMethod": [
        "Practical lab performance: 100% (completion and verification of configurations)"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Trainer slide deck, digital content, Instructions",
        "CIS Cisco Switch IOSvL2S and Cisco Router IOSvL3"
    ],
    "ectsCredsEquivalent": "",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-03 Owner: AU
Available for training June 2026
Duration 8 hours
Platform Category Cyber Range LMS
Proficiency Level Basic
Training Type Upskilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Cybersecurity Implementer
ECSF Skills View Skills ▾
  • Implement cybersecurity recommendations and best practices
  • Assess the security and performance of solutions
  • Decompose and analyse systems to identify weaknesses and ineffective controls
  • Work on operating systems, servers, clouds and relevant infrastructures
Description View Description ▾
This Bootcamp course introduces the fundamental concepts of network switching, routing, and security at Layers 2 and 3. Participants will learn how switching operates within network infrastructure and explore its security implications. Through hands-on practice, they will configure VLANs, trunk links, and inter-switch connections, apply port security, and implement Spanning Tree Protocol to maintain network stability. The course also covers essential hardening techniques, such as securing management interfaces, isolating unused ports and VLANs, and enabling SSH for secure remote access with password encryption. On the routing side, learners will configure static and dynamic routing protocols and apply standard and extended Access Control Lists (ACLs) to control traffic and enhance security.
Network Security Hardening & Defense
Bootcamps
Network Security Hardening & Defense
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-04",
    "courseTitle": "Network Security Hardening & Defense",
    "authorOwner": "AU",
    "contactPerson": [
        "Karlo Josić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "ILT",
        "LMS",
        "CyberRange"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "5-6",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "40 hours",
    "expectedWeeklyTimeCommitment": "8-20",
    "traineeGroupSize": "12-24",
    "courseAvailability": "2027-03-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Design systems and architectures based on security and privacy by design and by defaults cybersecurity principles",
        "Analyse and implement cybersecurity policies, certifications, standards, methodologies and frameworks",
        "Identify and exploit vulnerabilities",
        "Assess the security and performance of solutions",
        "Identify, analyse and correlate cybersecurity events",
        "Implement cybersecurity recommendations and best practices",
        "Decompose and analyse systems to identify weaknesses and ineffective controls",
        "Manage and analyse log files"
    ],
    "ecsfRoles": [
        "Cybersecurity Implementer",
        "Cybersecurity Architect",
        "Cyber Incident Responder"
    ],
    "targetAudience": [
        "Network administrators responsible for configuring and maintaining enterprise network infrastructure",
        "IT infrastructure engineers involved in secure network design and implementation",
        "Cybersecurity implementers responsible for hardening switches, routers and firewalls",
        "SOC and network security analysts seeking deeper understanding of defensive network configurations",
        "Technical staff in SMEs, public sector and critical infrastructure environments responsible for network resilience",
        "Advanced-level students or early-career professionals preparing for roles in network security operations"
    ],
    "prerequisitesEntryReq": [
        "Solid understanding of TCP/IP networking fundamentals (OSI model, routing, switching concepts)",
        "Practical experience with configuring network devices (basic switch and router configuration)",
        "Familiarity with VLANs, IP addressing and subnetting",
        "Basic knowledge of firewall concepts and access control mechanisms",
        "Foundational understanding of cybersecurity principles (network threats, attack vectors, common vulnerabilities)",
        "Ability to use command-line interfaces for device configuration",
        "Basic troubleshooting skills for network connectivity issues"
    ],
    "learningObjectives": [
        "Analyse enterprise network architectures and identify structural security weaknesses.",
        "Design and implement Layer 2 and Layer 3 hardening measures to mitigate common network threats.",
        "Configure and validate firewall policies and access control mechanisms aligned with security requirements.",
        "Assess network traffic behaviour and detect anomalous or malicious activity patterns.",
        "Apply defence-in-depth principles across switching, routing and perimeter security layers.",
        "Execute structured network hardening procedures in controlled lab environments.",
        "Evaluate the effectiveness of implemented security controls through integrated scenario-based testing."
    ],
    "suggestedLearningObjLOS": [
        "3",
        "6"
    ],
    "learningOutcomes": [
        "Implement secure VLAN segmentation, port security and Layer 2 protection mechanisms.",
        "Configure secure routing protocols and access control lists to reduce attack surface exposure.",
        "Deploy and validate firewall rule sets aligned with defined security policies.",
        "Analyse captured traffic to identify reconnaissance, scanning and unauthorised access attempts.",
        "Detect and mitigate misconfigurations that introduce lateral movement or privilege escalation risks.",
        "Integrate monitoring and logging mechanisms to enhance network visibility and defensive posture.",
        "Demonstrate coordinated hardening and defence actions within an integrated Cyber Range scenario."
    ],
    "courseDesc": "This Bootcamp provides an intensive, hands-on learning experience in network security, combining structured LMS learning, instructor-led sessions and four advanced Cyber Range modules. Participants harden switches, routers, and firewalls, implement segmentation, secure routing and apply advanced L2/L3 protection mechanisms. Using real-world network scenarios, learners identify misconfigurations, secure network devices and implement policies according to CIS benchmarks and industry best practices.",
    "detailedContentOutlineTopic": [
        "Network Security Architecture Foundations: Enterprise network architecture models (Core / Distribution / Access), Network segmentation and zoning principles, Attack surface mapping at Layer 2 and Layer 3, Common internal network threats (rogue devices, spoofing, flooding), Secure configuration frameworks (CIS Benchmarks, vendor hardening guides)",
        "VLAN Architecture and Secure Trunk Design: Deterministic VLAN segmentation models, Functional zoning (Management, Users, Servers, Guest, Voice), Secure trunk configuration principles (802.1Q, allowed VLAN lists), Native VLAN risks and mitigation strategies, VLAN hopping attack mechanics and prevention",
        "[CR] Secure VLAN and Trunk Implementation: VLAN creation and structured segmentation, Secure trunk link configuration, Removal of unused VLANs, Inter-VLAN routing validation, Configuration verification and persistence",
        "Spanning Tree Architecture and Deterministic Topology Control: STP operation fundamentals (Root Bridge, Port Roles, States), Risks of uncontrolled root bridge election, Structured root bridge placement strategy, Convergence behaviour and topology change handling, RSTP vs STP considerations",
        "[CR] STP Root Bridge Design and Convergence Analysis: Primary and secondary root bridge configuration, Root election validation, Topology change simulation, Convergence timing analysis, STP behaviour documentation",
        "STP Protection Mechanisms and Edge Port Security: Rogue switch insertion risks, BPDU Guard deployment strategy, Root Guard application logic, Loop Guard against unidirectional link failures, PortFast considerations and edge hardening",
        "[CR] STP Protection Enforcement: BPDU Guard configuration, Root Guard validation, Loop Guard deployment, Detection of inconsistent ports, Topology manipulation simulation",
        "Layer 2 Threat Mitigation Technologies: DHCP spoofing attack mechanics, ARP poisoning and MITM attacks, IP Source Guard principles, Storm control thresholds and broadcast containment, Management VLAN isolation",
        "[CR] DHCP Snooping and Binding Table Validation: Global and per-VLAN DHCP Snooping activation, Trusted vs untrusted port designation, Binding table validation",
        "[CR] IP Source Guard and Traffic Filtering: IP-to-MAC validation enforcement, Access port security testing",
        "[CR] Dynamic ARP Inspection (DAI): ARP validation against DHCP Snooping database, ARP spoofing detection",
        "[CR] Storm Control Configuration: Broadcast / Multicast / Unicast threshold enforcement, Flood simulation and mitigation",
        "Integrated Layer 2 Defensive Validation Scenario: Combined control stack validation methodology, Security control interaction analysis, Observing defensive behaviour under simulated attack, Validation of logging and monitoring indicators",
        "[CR] Final Integrated Defense Scenario: Rogue DHCP server attempt, ARP spoofing simulation, VLAN hopping attempt, STP root takeover attempt, Broadcast flood simulation, Full protection stack validation and documentation"
    ],
    "reqPlatformsInfra": [
        "LMS platform",
        "Cyber Range"
    ],
    "langDeliveryMaterial": "English (with optional local translation for trainers)",
    "assessmentMethod": [
        "Practical lab scoring: 50%",
        "LMS quiz: 50%"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Comprehensive trainer slide deck covering network security architecture, segmentation models and hardening principles",
        "Structured lab manuals for Layer 2, Layer 3 and firewall configuration exercises",
        "Secure baseline configuration templates for switches, routers and firewalls",
        "VLAN and trunk hardening configuration guides",
        "STP protection configuration reference (BPDU Guard, Root Guard, Loop Guard)",
        "DHCP Snooping, Dynamic ARP Inspection and IP Source Guard deployment guide",
        "Firewall policy design worksheet and rule lifecycle management template",
        "Sample network topology diagrams used in Cyber Range scenarios",
        "Network traffic analysis reference guide (NetFlow, SPAN/RSPAN, Syslog interpretation)",
        "Configuration validation checklist for secure device deployment",
        "Troubleshooting and misconfiguration detection guide",
        "MITRE ATT&CK reference mapping for network-layer defensive controls"
    ],
    "ectsCredsEquivalent": "5",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-04 Owner: AU
Available for training March 2027
Duration 40 hours
Platform Category ILT LMS CyberRange
Proficiency Level Basic-Intermediate
Training Type Upskilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Cybersecurity Implementer Cybersecurity Architect Cyber Incident Responder
ECSF Skills View Skills ▾
  • Analyse and implement cybersecurity policies, certifications, standards, methodologies and frameworks
  • Design systems and architectures based on security and privacy by design and by defaults cybersecurity principles
  • Identify and exploit vulnerabilities
  • Assess the security and performance of solutions
  • Identify, analyse and correlate cybersecurity events
  • Decompose and analyse systems to identify weaknesses and ineffective controls
  • Implement cybersecurity recommendations and best practices
  • Manage and analyse log files
Description View Description ▾
This Bootcamp provides an intensive, hands-on learning experience in network security, combining structured LMS learning, instructor-led sessions and four advanced Cyber Range modules. Participants harden switches, routers, and firewalls, implement segmentation, secure routing and apply advanced L2/L3 protection mechanisms. Using real-world network scenarios, learners identify misconfigurations, secure network devices and implement policies according to CIS benchmarks and industry best practices.
Operating System Security Hardening & Defense
Bootcamps
Operating System Security Hardening & Defense
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-05",
    "courseTitle": "Operating System Security Hardening & Defense",
    "authorOwner": "AU",
    "contactPerson": [
        "Zlatan Morić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "Bootcamp"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "6",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "40 hours",
    "expectedWeeklyTimeCommitment": "40 hours",
    "traineeGroupSize": "12-24",
    "courseAvailability": "2027-03-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Assess the security and performance of solutions",
        "Configure solutions according to the organisation’s security policy",
        "Identify and solve cybersecurity-related issues",
        "Select appropriate specifications, procedures and controls",
        "Implement cybersecurity recommendations and best practices",
        "Manage and analyse log files"
    ],
    "ecsfRoles": [
        "Cybersecurity Implementer",
        "Cybersecurity Architect",
        "Cyber Incident Responder"
    ],
    "targetAudience": [
        "System administrators responsible for Linux and Windows environments",
        "Security engineers implementing OS hardening and baseline validation",
        "IT infrastructure personnel managing enterprise endpoints"
    ],
    "prerequisitesEntryReq": [
        "Basic knowledge of Linux and Windows operating systems",
        "Familiarity with system administration concepts",
        "Understanding of fundamental cybersecurity concepts (authentication, access control, logging)"
    ],
    "learningObjectives": [
        "Explain principles of operating system hardening and attack surface reduction.",
        "Apply structured hardening methodologies across Linux, Windows and Android platforms.",
        "Implement configuration baselines aligned with recognised security standards.",
        "Configure logging, monitoring and access control mechanisms.",
        "Validate system compliance using structured security checks.",
        "Identify misconfigurations and security weaknesses in enterprise environments."
    ],
    "suggestedLearningObjLOS": [
        "3"
    ],
    "learningOutcomes": [
        "Harden Linux systems using secure configuration and service restriction techniques.",
        "Apply Windows and Active Directory security controls and policy-based restrictions.",
        "Configure and validate Android device security policies in enterprise contexts.",
        "Perform compliance validation against defined security baselines.",
        "Interpret system logs and security indicators to verify hardening effectiveness.",
        "Reduce operating system attack surface through systematic configuration management."
    ],
    "courseDesc": "This bootcamp offers organised, practical instruction in operating system hardening and safe configuration for Linux, Windows, and Android enterprise systems.\nParticipants follow a structured learning progression combining instructor-led sessions and Cyber Range exercises. The program emphasises minimising attack surfaces, enforcing secure configuration standards, and testing system compliance through actual implementation and verification efforts.\nThe seminar focuses on practical security engineering techniques, encompassing secure service configuration, enforcement of access control, establishment of logging and monitoring, patch management, and policy-driven configuration management. Participants perform hands-on hardening tasks in controlled lab environments.\nThe bootcamp focuses on enhancing practical skills in safeguarding enterprise endpoints and infrastructure components instead of providing abstract security theory. Upon completion of the training, participants will be proficient at thoroughly fortifying systems, identifying misconfigurations, and applying secure configuration methodologies in accordance with established technical standards and best practices.",
    "detailedContentOutlineTopic": [
        "Foundations of Operating System Hardening: Principles of attack surface reduction, Secure configuration baselines (CIS Benchmarks, vendor guidance), Service minimisation and secure default configuration, Patch management and update governance, Authentication models and least privilege enforcement, Logging, monitoring and auditability principles, Hardening lifecycle: assess → configure → validate → monitor",
        "Linux Operating System Hardening: Linux system architecture and security components, Secure service configuration and daemon restriction, File system permissions and privilege management, SSH hardening and remote access control, Firewall configuration and network exposure reduction, Auditd configuration and log validation, Baseline validation and compliance checks, Cyber Range (CR-05):, Harden a Linux host according to defined baseline, Disable unnecessary services and restrict ports, Configure logging and audit mechanisms, Validate compliance against security checklist",
        "Windows OS and Active Directory Defence (ILT + CR-06 – 8h): Windows security architecture and domain models, Group Policy Objects (GPO) for security enforcement, Account control, password policies and access restrictions, Active Directory hardening principles, Event logging and Windows audit policies, Service and role-based hardening, Cyber Range (CR-06):, Implement secure GPO configurations, Harden domain controllers and member servers, Configure audit and event logging policies, Validate AD security posture against defined controls",
        "Android Enterprise Device Hardening (ILT + CR-07 – 8h): Mobile threat landscape and device attack vectors, Android security architecture and sandboxing model, Device encryption and authentication policies, Application permission management, Enterprise device configuration controls, Mobile device compliance validation, Cyber Range (CR-07):, Configure Android security policies, Enforce encryption and authentication requirements, Restrict application permissions and insecure settings, Validate compliance with enterprise configuration baseline",
        "Cross-Platform Configuration Validation and Security Posture Review (ILT – 4h): Comparative analysis of Linux, Windows and Android hardening approaches, Common misconfiguration patterns across platforms, Log interpretation and security indicator validation, Hardening verification methodologies, Operational monitoring after baseline enforcement, Maintaining secure configuration over time"
    ],
    "reqPlatformsInfra": [
        "LMS platform",
        "Cyber Range environment for CR-05 (Linux)",
        "Cyber Range environment for CR-06 (Windows/AD)",
        "Cyber Range environment for CR-07 (Android)"
    ],
    "langDeliveryMaterial": "English with optional translation to other EU languages",
    "assessmentMethod": [
        "Cyber Range Practical Performance: 70%",
        "LMS Theoretical Assessment (Quiz): 30%"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Instructor-led technical slide decks",
        "Cyber Range scenario documentation (CR-05, CR-06, CR-07)",
        "Secure configuration baseline reference documents",
        "Attack surface reduction methodology reference sheet"
    ],
    "ectsCredsEquivalent": "5",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "This bootcamp facilitates LOS 3 – Basic Network & Endpoint Security and is structured as a technically rigorous, practical program featuring automatic configuration assessment in Cyber Range settings.\nThe training prioritises the practical use of secure configuration baselines across diverse operating systems and concentrates on quantifiable hardening results instead of theoretical compliance discourse.\nCyber Range tasks undergo automatic evaluation via setup verification scripts, guaranteeing an objective and reproducible assessment of participant performance.\nThe bootcamp can be tailored to align with enterprise, public sector, or SME infrastructure contexts, contingent upon organisational context and technical maturity level.",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-05 Owner: AU
Available for training March 2027
Duration 40 hours
Platform Category ILT LMS CyberRange
Proficiency Level Basic-Intermediate
Training Type Upskilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Cybersecurity Implementer Cybersecurity Architect Cyber Incident Responder
ECSF Skills View Skills ▾
  • Assess the security and performance of solutions
  • Configure solutions according to the organisation’s security policy
  • Identify and solve cybersecurity-related issues
  • Select appropriate specifications, procedures and controls
  • Implement cybersecurity recommendations and best practices
  • Manage and analyse log files
Description View Description ▾
This Bootcamp provides a comprehensive and practical immersion into operating system security across Linux, Windows and Android environments. Participants learn to harden OS configurations, apply CIS Benchmarks, secure identity and access mechanisms, validate compliance and defend against OS-level threats. Through LMS content, instructor-led workshops and three Cyber Range modules, learners obtain the skills required to secure workstation, server and mobile endpoints in enterprise environments.
Incident Response – Technical Operations
Bootcamps
Incident Response – Technical Operations
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-06",
    "courseTitle": "Incident Response - Technical Operations",
    "authorOwner": "AU",
    "contactPerson": [
        "Zlatan Morić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "Bootcamp"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "6",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "40 hours",
    "expectedWeeklyTimeCommitment": "40 hours",
    "traineeGroupSize": "12-24",
    "courseAvailability": "2026-09-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Practice all technical, functional and operational aspects of cybersecurity incident handling and response",
        "Identify, analyse and correlate cybersecurity events",
        "Collect information while preserving its integrity",
        "Identify threat actors TTPs and campaigns",
        "Manage and analyse log files",
        "Develop and communicate detailed and reasoned investigation reports",
        "Work under pressure"
    ],
    "ecsfRoles": [
        "Cyber Incident Responder",
        "Cyber Threat Intelligence Specialist"
    ],
    "targetAudience": [
        "SOC analysts",
        "Blue Team operators",
        "CSIRT members",
        "Incident response professionals seeking structured operational simulation experience"
    ],
    "prerequisitesEntryReq": [
        "Basic understanding of cybersecurity fundamentals",
        "Familiarity with network and endpoint concepts",
        "Basic experience with log analysis or security monitoring tools",
        "No advanced forensics expertise required, but prior SOC experience is recommended"
    ],
    "learningObjectives": [
        "Describe and apply the structured incident response lifecycle in operational environments.",
        "Analyse network and endpoint telemetry to detect and investigate malicious activity.",
        "Correlate logs and artefacts from multiple sources to reconstruct attack timelines.",
        "Apply containment and mitigation strategies during active security incidents.",
        "Preserve and document digital evidence according to incident response best practices.",
        "Identify adversary TTPs using structured analytical frameworks (e.g., MITRE ATT&CK).",
        "Produce clear and structured incident reports suitable for technical and management stakeholders.",
        "Operate effectively under time pressure during adversary simulation exercises."
    ],
    "suggestedLearningObjLOS": [
        "1",
        "3",
        "12"
    ],
    "learningOutcomes": [
        "Detect and analyse malicious activity using network and endpoint artefacts.",
        "Correlate multi-source telemetry to identify attack progression and adversary behaviour.",
        "Execute containment actions aligned with operational playbooks.",
        "Apply structured forensic handling procedures to preserve evidentiary integrity.",
        "Map observed attacker behaviour to known TTP frameworks.",
        "Produce a complete incident investigation report including findings, impact assessment and remediation recommendations.",
        "Demonstrate operational performance during a multi-phase adversary simulation (MARE).",
        "Coordinate effectively within an incident response team during high-pressure scenarios."
    ],
    "courseDesc": "This rigorous bootcamp offers systematic, practical training for incident response specialists in SOC, Blue Team, and CSIRT settings. The curriculum integrates instructor-led technical foundations, Cyber Range exercises, and an extensive adversary simulation (MARE) to cultivate and verify real-world incident handling competencies.\nParticipants apply the full incident response lifecycle in operationally realistic environments. The training focuses on multi-source telemetry correlation, analysis of endpoint and network artefacts, identification of adversary tactics, techniques, and procedures (TTPs), and systematic forensic handling protocols.\nThe Cyber Range component allows participants to rehearse technical investigation processes in a controlled setting, enhancing log analysis, artefact reconstruction, and containment decision-making. The bootcamp concludes with a multi-phase MARE adversary simulation, in which participants must work under time constraints to detect, assess, and respond to evolving attack scenarios.\nThe curriculum emphasises actual operational proficiency and team coordination abilities, equipping participants to respond effectively to real-world cybersecurity situations.",
    "detailedContentOutlineTopic": [
        "Incident Response Foundations and Operational Readiness: [ILT] Incident Response lifecycle (Preparation → Detection → Containment → Eradication → Recovery → Lessons Learned), [ILT] Role of SOC, CSIRT and IR coordination structures, [ILT] Severity classification, escalation thresholds and communication discipline, [ILT] Evidence handling principles and forensic soundness, [CR] Initial log review and alert triage within controlled environment, [CR] Identification of suspicious indicators across log sources",
        "Detection Engineering and Log Correlation: [ILT] Log sources (endpoint, network, authentication, application), [ILT] Correlation strategies and alert validation models, [ILT] Reducing false positives and prioritising high-confidence alerts, [CR] Multi-source log correlation exercise, [CR] Identification of attacker initial access and persistence indicators, [CR] Structured incident ticket creation and documentation",
        "Endpoint and Network Investigation: [ILT] Windows and Linux forensic artefacts, [ILT] Network flow analysis and traffic anomaly detection, [ILT] Timeline reconstruction and artefact correlation, [CR] Endpoint artefact extraction and validation, [CR] Network investigation of lateral movement patterns, [CR] Initial containment decision simulation",
        "Threat Actor Behaviour and MITRE Mapping: [ILT] Adversary behaviour modelling and TTP analysis, [ILT] MITRE ATT&CK as analytical framework, [ILT] Mapping technical findings to structured attack phases, [CR] TTP identification based on collected artefacts, [CR] Structured ATT&CK mapping exercise, [CR] Validation of attack chain reconstruction",
        "Incident Containment and Eradication Strategy: [ILT] Containment strategies (isolation, segmentation, credential reset), [ILT] Eradication planning and persistence removal, [ILT] Business impact balancing and operational trade-offs, [CR] Execution of containment decisions in simulated environment, [CR] Validation of eradication completeness, [CR] Residual risk evaluation",
        "Multi-Phase Adversary Campaign Simulation (MARE – Part I): [MARE] Initial compromise detection in dynamic scenario, [MARE] Investigation of lateral movement, [MARE] Identification of privilege escalation and persistence, [MARE] Real-time team coordination under incomplete visibility",
        "Advanced Campaign Escalation and Data Impact (MARE – Part II): [MARE] Detection of data staging and exfiltration indicators, [MARE] Ransomware or destructive payload activation simulation, [MARE] High-pressure decision-making under operational constraints, [MARE] Coordination between detection and response teams",
        "Incident Reporting, Lessons Learned and Defensive Improvement: [MARE] Final attack timeline reconstruction, [MARE] Structured incident report preparation, [MARE] Mapping findings to detection improvements, [ILT] Lessons learned methodology, [ILT] Playbook refinement and detection engineering improvement, [ILT] Continuous monitoring enhancement strategy",
        "Operational Readiness Evaluation and Professional Development: [MARE] Performance debrief and scoring, [ILT] Individual capability gap identification, [ILT] Development of responder growth roadmap, [ILT] Strengthening defensive posture based on simulation outcomes"
    ],
    "reqPlatformsInfra": [
        "LMS",
        "Cyber Range environment CR-11",
        "Malware Analasys platform – MARE-02"
    ],
    "langDeliveryMaterial": "English with optional translation to other EU languages",
    "assessmentMethod": [
        "Practical Cyber Range performance (CR-11 modules): 30%",
        "MARE multi-phase simulation performance: 30%",
        "LMS knowledge checks (ILT theory validation): 40%"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Instructor slide decks and structured IR playbooks",
        "Cyber Range CR-11",
        "MARE-02",
        "Incident reporting and AAR templates",
        "MITRE ATT&CK reference documentation"
    ],
    "ectsCredsEquivalent": "3",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "This bootcamp is structured as a career-track session for Incident Responders, emphasising operational preparedness and technical incident management skills.\nThe program integrates instructor-led theoretical education, organised Cyber Range exercises (CR-11), and a multi-phase MARE adversary simulation to systematically enhance detection, investigation, and reaction proficiency.\nThe MARE exercise serves as a culminating operational validation environment, necessitating participants to identify, assess, and mitigate a genuine multi-stage attack within time limitations and partial visibility.\nThe complexity of scenarios, availability of telemetry, and sophistication of attacks can be modified to correspond with varying organisational maturity levels (SME, enterprise SOC, national CSIRT).\nThe evaluation is predominantly performance-oriented, incorporating automated validation inside Cyber Range modules and implementing structured grading for MARE simulation results.",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-06 Owner: AU
Available for training September 2026
Duration 40 hours
Platform Category ILT - LMS Sisyfos CyberRange
Proficiency Level Intermediate
Training Type Upskilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Cyber Incident Responder Cyber Threat Intelligence Specialist
ECSF Skills View Skills ▾
  • Practice all technical, functional and operational aspects of cybersecurity incident handling and response
  • Identify, analyse and correlate cybersecurity events
  • Collect information while preserving its integrity
  • Identify threat actors TTPs and campaigns
  • Manage and analyse log files
  • Develop and communicate, detailed and reasoned investigation reports
  • Work under pressure
Description View Description ▾
This Bootcamp prepares learners to operate as technical incident responders in modern security operations. Through structured LMS lessons, trainer-led workshops and an intensive Cyber Range experience, participants learn to investigate real-world incidents including malware intrusions, lateral movement, data exfiltration and ransomware staging. The Bootcamp focuses on triage, forensics, analysis, containment and reporting - core skills for SOC Tier 2–3 and IR teams.
Incident Response – Crisis Leadership & Decision Management
Bootcamps
Incident Response – Crisis Leadership & Decision Management
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-07",
    "courseTitle": "Incident Response - Crisis Leadership & Decision Management",
    "authorOwner": "AU",
    "contactPerson": [
        "Zlatan Morić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "LMS"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "6",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Online self-paced",
    "durationIntensity": "8 hours",
    "expectedWeeklyTimeCommitment": "8 hours",
    "traineeGroupSize": "12-24",
    "courseAvailability": "2026-06-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Analyse and comply with cybersecurity-related laws, regulations and legislations",
        "Analyse and consolidate organisation’s quality and risk management practices",
        "Enable business assets owners, executives and other stakeholders to make risk-informed decisions to manage and mitigate risks",
        "Communicate, present and report to relevant stakeholders",
        "Build a cybersecurity risk-aware environment",
        "Understand legal framework modifications implications to the organisation’s cybersecurity and data protection strategy and policies"
    ],
    "ecsfRoles": [
        "Cyber Legal, Policy & Compliance Officer",
        "Chief Information Security Officer (CISO)",
        "Cybersecurity Risk Manager"
    ],
    "targetAudience": [
        "Senior management and executive board members responsible for organisational governance and regulatory oversight",
        "Directors and senior decision-makers overseeing risk, compliance and digital transformation",
        "Chief Information Security Officers (CISOs) and equivalent security leadership roles",
        "Cybersecurity risk managers supporting executive-level reporting",
        "Legal and compliance officers involved in regulatory supervision and NIS2 alignment"
    ],
    "prerequisitesEntryReq": [
        "Basic understanding of organisational risk management principles",
        "Familiarity with corporate governance and decision-making structures",
        "General awareness of cybersecurity and digital risk concepts",
        "No technical cybersecurity expertise required"
    ],
    "learningObjectives": [
        "Explain the governance and accountability obligations of management bodies under NIS2.",
        "Describe the principles of digital resilience and their relevance to organisational strategy.",
        "Interpret regulatory exposure and supervisory authority expectations.",
        "Analyse organisational cybersecurity posture from a management oversight perspective.",
        "Evaluate escalation, reporting and accountability structures during significant cyber incidents.",
        "Align cybersecurity governance with organisational risk appetite and strategic objectives."
    ],
    "suggestedLearningObjLOS": [
        "14",
        "18"
    ],
    "learningOutcomes": [
        "Identify management-level responsibilities and liabilities under NIS2.",
        "Distinguish between operational cybersecurity management and executive oversight roles.",
        "Interpret regulatory notification and supervisory reporting expectations.",
        "Assess organisational digital resilience maturity at a strategic level.",
        "Evaluate governance gaps and propose structured oversight improvements.",
        "Support risk-informed decision-making aligned with regulatory and resilience requirements."
    ],
    "courseDesc": "This executive-level LMS session offers a systematic overview of governance, accountability, and digital resilience requirements as stipulated by the NIS2 Directive.\nParticipants analyse the duties of management bodies in supervising cybersecurity risk, regulatory adherence, and organisational resilience. The training examines supervisory expectations, notification obligations, and liability ramifications for senior decision-makers, focusing on strategic oversight rather than operational implementation.\nParticipants engage in scenario-based analytical activities to evaluate governance frameworks, assess organisational exposure, and interpret digital resilience maturity from a managerial viewpoint. Special emphasis is placed on synchronising cybersecurity governance with corporate strategy, risk tolerance, and regulatory obligations.\nThe training enhances executive comprehension of regulatory requirements and resilience governance, empowering senior leaders to facilitate risk-informed decision-making and maintain compliance with changing cybersecurity laws.",
    "detailedContentOutlineTopic": [
        "NIS2 Governance Framework and Management Accountability: Overview of the NIS2 Directive and its governance implications, Responsibilities of management bodies and executive leadership, Liability exposure and supervisory authority expectations, Oversight obligations versus operational cybersecurity functions",
        "Digital Resilience Principles and Organisational Strategy: Concept of digital resilience and systemic risk, Relationship between cybersecurity governance and business continuity, Integration of resilience into corporate strategy, Aligning resilience objectives with organisational risk appetite",
        "Risk Governance and Supervisory Oversight: Executive interpretation of cybersecurity risk metrics, Role of the board in cybersecurity risk supervision, Internal reporting structures and escalation models, Interaction with supervisory authorities and regulators",
        "Regulatory Notification and Accountability Structures: Notification thresholds and reporting timelines under NIS2, Documentation and evidence responsibilities at management level, Governance-level review of incident reporting mechanisms, Managing regulatory scrutiny and supervisory audits",
        "Organisational Maturity and Resilience Assessment: Executive interpretation of resilience maturity models, Identifying governance gaps and oversight weaknesses, Benchmarking resilience posture at strategic level, Continuous improvement in governance structures",
        "Stakeholder Communication and Strategic Decision-Making: Communication responsibilities of senior leadership during cyber events, Managing reputational exposure and regulatory transparency, Coordinating with legal, compliance and security leadership, Supporting risk-informed strategic decisions",
        "Scenario-Based Governance Analysis (LMS Case Exercises): Executive-level evaluation of a digital resilience scenario, Identification of governance deficiencies, Assessment of regulatory exposure and reporting obligations, Selection of appropriate oversight and decision pathways",
        "Post-Scenario Reflection and Governance Improvement: Lessons learned from governance-level scenario analysis, Strengthening accountability frameworks, Enhancing resilience oversight structures, Future-oriented regulatory readiness planning"
    ],
    "reqPlatformsInfra": [
        "LMS"
    ],
    "langDeliveryMaterial": "English with optional translation to other EU languages",
    "assessmentMethod": [
        "Final Knowledge Assessment – 70%",
        "Scenario-Based Governance Case Analysis – 30%"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Executive-level NIS2 governance summary guide",
        "Digital resilience maturity reference framework (illustrative model)",
        "Regulatory notification flowchart (management perspective)",
        "Governance and escalation decision matrix template",
        "Board-level cybersecurity oversight checklist"
    ],
    "ectsCredsEquivalent": "",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "This executive module supports LOS 14 – Governance, Risk & Compliance Management and is presented as a structured LMS-based educational experience designed for senior management and board oversight positions. The course emphasises strategic accountability, regulatory exposure, and governance of digital resilience under NIS2, rather than the deployment of operational cybersecurity. Scenario-based analytical exercises aim to enhance executive decision-making and regulatory awareness in dynamic supervisory contexts.",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-07 Owner: AU
Available for training June 2026
Duration 8 hours
Platform Category ILT - LMS
Proficiency Level Intermediate-Advanced
Training Type Upskilling
Delivery Method Online self-paced, Hybrid, Physical
ECSF Roles View Roles ▾
Cyber Legal, Policy & Compliance Officer Chief Information Security Officer (CISO) Cybersecurity Risk Manager
ECSF Skills View Skills ▾
  • Analyse and comply with cybersecurity-related laws, regulations and legislations
  • Analyse and consolidate organisation’s quality and risk management practices
  • Enable business assets owners, executives and other stakeholders to make risk-informed decisions to manage and mitigate risks
  • Communicate, present and report to relevant stakeholders
  • Build a cybersecurity risk-aware environment
  • Understand legal framework modifications implications to the organisation’s cybersecurity and data protection strategy and policies
Description View Description ▾
This Bootcamp prepares executives and senior managers to lead major cyber incidents. Through a combination of LMS learning, scenario-based masterclasses and a full-day cross-functional TTX, participants learn how to coordinate organisational response efforts, manage crisis decisions, communicate with stakeholders and regulators, and provide executive leadership through uncertainty. The Bootcamp mirrors real-world crisis response including time pressure, incomplete information, regulatory deadlines and media scrutiny.
Incident Response – Cyber Legal, Compliance & Regulatory Response
Bootcamps
Incident Response – Cyber Legal, Compliance & Regulatory Response
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-08",
    "courseTitle": "Incident Response - Cyber Legal, Compliance & Regulatory Response",
    "authorOwner": "AU",
    "contactPerson": [
        "Zlatan Morić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "LMS"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "6-7",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Online self-paced",
    "durationIntensity": "5",
    "expectedWeeklyTimeCommitment": "5",
    "traineeGroupSize": "10-24",
    "courseAvailability": "2026-06-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Analyse and comply with cybersecurity-related laws, regulations and legislations",
        "Communicate, coordinate and cooperate with internal and external stakeholders",
        "Communicate, present and report to relevant stakeholders",
        "Identify and solve cybersecurity-related issues",
        "Practice all technical, functional and operational aspects of cybersecurity incident handling and response",
        "Work under pressure"
    ],
    "ecsfRoles": [
        "Cyber Legal, Policy & Compliance Officer",
        "Cyber Incident Responder",
        "Cybersecurity Risk Manager"
    ],
    "targetAudience": [
        "Security professionals involved in incident response coordination",
        "Cyber Incident Response Team (CIRT) members",
        "Compliance and legal officers responsible for regulatory reporting",
        "Cybersecurity risk managers",
        "IT/security staff supporting organisational incident response processes"
    ],
    "prerequisitesEntryReq": [
        "Basic understanding of cybersecurity concepts (incident, threat, vulnerability, impact)",
        "Familiarity with organisational incident response processes",
        "Basic awareness of regulatory and reporting obligations (e.g., NIS2 or equivalent national legislation)",
        "No advanced technical expertise required"
    ],
    "learningObjectives": [
        "Describe the structure and stages of an organisational cybersecurity incident response process.",
        "Explain regulatory notification and reporting obligations during a cybersecurity incident.",
        "Analyse escalation criteria and decision-making responsibilities across operational and legal functions.",
        "Apply structured communication principles for internal and external stakeholders during an incident.",
        "Interpret incident scenarios to determine appropriate response and reporting actions."
    ],
    "suggestedLearningObjLOS": [
        "1"
    ],
    "learningOutcomes": [
        "Identify the key phases of incident detection, escalation and regulatory reporting.",
        "Determine when regulatory notification obligations are triggered under applicable cybersecurity legislation.",
        "Distinguish operational, legal and managerial responsibilities during incident handling.",
        "Select appropriate stakeholder communication strategies based on incident severity.",
        "Evaluate incident scenarios and propose compliant response actions aligned with organisational procedures."
    ],
    "courseDesc": "This concise bootcamp program offers a systematic introduction to cybersecurity incident response governance and regulatory compliance within organisational contexts.\nParticipants analyse the phases of incident detection, escalation, and coordinated response, focusing on legal notification requirements, stakeholder communication, and cross-functional responsibility.\nThrough scenario-based analytical exercises provided via LMS, learners analyse incident developments, evaluate reporting thresholds, and identify suitable escalation pathways in accordance with relevant cybersecurity legislation.\nThe course emphasises practical decision-making and regulatory compliance in operational cyber incidents, enhancing participants' capacity to coordinate response operations, match actions with legal mandates, and facilitate risk-informed organisational decisions.\nThe session emphasises structured incident governance thinking instead of providing technical configuration instruction, allowing participants to function successfully within incident response and regulatory reporting frameworks.",
    "detailedContentOutlineTopic": [
        "Incident Response Governance Foundations: Overview of organisational incident response lifecycle (detection, analysis, containment, recovery, post-incident review), Roles and responsibilities across technical, legal and managerial functions, Escalation thresholds and decision authority structures, Accountability and documentation requirements",
        "Regulatory and Legal Notification Frameworks: Regulatory obligations under NIS2 and relevant national legislation, Notification timelines and reporting thresholds, Personal data exposure and GDPR implications, Documentation and evidence preservation principles",
        "Incident Escalation and Cross-Functional Coordination: Criteria for incident severity classification, Coordination between operational, legal and risk management functions, Executive escalation and reporting lines, Integration of incident response with organisational governance",
        "Stakeholder Communication and Public Disclosure: Internal communication during incident handling, External communication to regulators, partners and affected stakeholders, Managing reputational risk and information consistency, Structured preparation of incident communication summaries",
        "Scenario-Based Incident Analysis (LMS Case Exercises): Interpretation of evolving incident scenarios, Identification of regulatory reporting triggers, Determination of appropriate escalation paths, Selection of compliant response and communication actions",
        "Post-Incident Evaluation and Governance Improvement: Lessons learned and governance improvement principles, Documentation completeness review, Strengthening future incident readiness, Linking incident outcomes to risk management improvements"
    ],
    "reqPlatformsInfra": [
        "LMS platform"
    ],
    "langDeliveryMaterial": "English (with optional local translation for trainers)",
    "assessmentMethod": [
        "LMS quiz: 100%"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Instructor presentation slides (incident governance and regulatory alignment)",
        "Regulatory notification flowcharts (NIS2-focused)",
        "Incident escalation decision matrix template",
        "Stakeholder communication guidance templates",
        "Sample regulatory notification form"
    ],
    "ectsCredsEquivalent": "",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "This concise bootcamp module supports LOS 1 – Incident Response & Business Continuity and is presented as a systematic LMS-based educational experience featuring scenario-driven analytical exercises.\nThe course emphasises regulatory-compliant incident management and interdisciplinary collaboration instead of technical system configuration.\nAssessment is knowledge-driven and executed via automated LMS quizzes, guaranteeing objective evaluation of conceptual comprehension and decision-making precision.\nThe module can be modified to align with national regulatory frameworks and sector-specific reporting obligations.",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-08 Owner: AU
Available for training June 2026
Duration 5 hours
Platform Category ILT - LMS
Proficiency Level Intermediate-Advanced
Training Type Upskilling
Delivery Method Online self-paced, Hybrid, Physical
ECSF Roles View Roles ▾
Cyber Legal, Policy & Compliance Officer Cyber Incident Responder Cybersecurity Risk Manager
ECSF Skills View Skills ▾
  • Analyse and comply with cybersecurity-related laws, regulations and legislations
  • Communicate, coordinate and cooperate with internal and external stakeholders
  • Communicate, present and report to relevant stakeholders
  • Identify and solve cybersecurity-related issues
  • Practice all technical, functional and operational aspects of cybersecurity incident handling and response
  • Work under pressure
Description View Description ▾
This Bootcamp provides legal and compliance professionals with the skills needed to operate during a major cyber incident. Learners gain knowledge of regulatory frameworks, breach notification requirements, liability management and evidence handling. The programme includes trainer-led sessions and full participation in the Operation Nightfall Breach Tabletop Exercise, where legal teams must make rapid decisions, draft notifications, and guide the organisation through regulatory constraints.
Incident Response – HR & Organisational Support
Bootcamps
Incident Response – HR & Organisational Support
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-09",
    "courseTitle": "Incident Response - HR & Organisational Support",
    "authorOwner": "AU",
    "contactPerson": [
        "Zlatan Morić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "LMS"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "6",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Online self-paced",
    "durationIntensity": "4 hours",
    "expectedWeeklyTimeCommitment": "4 hours",
    "traineeGroupSize": "12-24",
    "courseAvailability": "2026-06-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Communicate, coordinate and cooperate with internal and external stakeholders",
        "Analyse and comply with cybersecurity-related laws, regulations and legislations",
        "Carry out working-life practices of data protection and privacy issues",
        "Influence an organisation’s cybersecurity culture"
    ],
    "ecsfRoles": [
        "Cyber Legal, Policy & Compliance Officer",
        "Cybersecurity Risk Manager"
    ],
    "targetAudience": [
        "Human Resources professionals involved in workforce management during cybersecurity incidents",
        "Compliance and legal support staff responsible for regulatory alignment and internal policy adherence",
        "Organisational governance personnel supporting incident response coordination",
        "Risk and business continuity support staff involved in non-technical crisis management processes",
        "Managers and team leaders responsible for employee communication during cybersecurity events",
        "Public sector and SME personnel providing administrative and organisational support to cybersecurity teams"
    ],
    "prerequisitesEntryReq": [
        "Basic understanding of cybersecurity concepts and common types of cyber incidents",
        "Familiarity with organisational structures and internal escalation procedures",
        "Foundational knowledge of data protection and privacy principles",
        "Basic awareness of regulatory and compliance requirements related to information security",
        "Experience in HR, governance, compliance or organisational support functions",
        "Ability to communicate within structured organisational processes"
    ],
    "learningObjectives": [
        "Analyse the role of Human Resources and organisational support functions within the cybersecurity incident response lifecycle.",
        "Evaluate regulatory, privacy and workforce implications arising from cybersecurity incidents.",
        "Assess internal communication and escalation processes during cyber crises.",
        "Apply structured coordination principles to support technical incident response teams.",
        "Identify organisational risks related to employee behaviour, insider threats and policy violations.",
        "Align HR response actions with legal, compliance and governance requirements."
    ],
    "suggestedLearningObjLOS": [
        "1",
        "18"
    ],
    "learningOutcomes": [
        "Map HR responsibilities to different phases of incident response and recovery.",
        "Assess workforce-related impacts of cybersecurity incidents and propose appropriate mitigation measures.",
        "Select and justify internal communication pathways during a cyber crisis.",
        "Support regulatory compliance processes related to employee data and breach notification.",
        "Develop structured HR action plans aligned with incident response procedures.",
        "Demonstrate coordinated organisational support for technical cybersecurity teams."
    ],
    "courseDesc": "This training prepares HR and organizational support functions to participate effectively in cybersecurity incident response processes.\nThe course introduces the incident response lifecycle from a governance and workforce perspective, focusing on communication alignment, regulatory exposure and organizational coordination.",
    "detailedContentOutlineTopic": [
        "HR Role in the Cybersecurity Incident Lifecycle: Overview of the incident response lifecycle (preparation, detection, containment, recovery, post-incident), Mapping HR responsibilities across each incident phase, Coordination between HR, management and technical response teams, Workforce-related impact during cybersecurity incidents",
        "Governance, Legal and Compliance Exposure: Organizational accountability during cyber incidents, Regulatory implications and reporting obligations, Documentation requirements and evidence preservation, Internal policy alignment and escalation logic",
        "Communication and Organizational Coordination: Internal communication during crisis situations, Managing workforce uncertainty and misinformation, Coordination with executive leadership, Stakeholder alignment and decision documentation",
        "Workforce Impact and Organizational Risk: Handling employee-related investigation scenarios, Managing insider risk considerations, Temporary operational adjustments and workforce continuity, Balancing confidentiality, transparency and compliance"
    ],
    "reqPlatformsInfra": [
        "LMS platform"
    ],
    "langDeliveryMaterial": "English (with optional local translation for trainers)",
    "assessmentMethod": [
        "LMS quiz"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Trainer slide deck covering HR roles and organisational coordination in incident response",
        "Incident response lifecycle overview adapted for non-technical stakeholders",
        "HR incident response responsibility matrix template",
        "Internal escalation and communication flow template",
        "Sample employee communication and notification templates",
        "Regulatory and compliance reference guide (e.g. data protection and breach notification considerations)",
        "Workforce risk and insider threat assessment checklist"
    ],
    "ectsCredsEquivalent": "",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-09 Owner: AU
Available for training June 2026
Duration 4 hours
Platform Category ILT - LMS
Proficiency Level Intermediate-Advanced
Training Type Upskilling
Delivery Method Online self-paced, Hybrid, Physical
ECSF Roles View Roles ▾
Cyber Legal, Policy & Compliance Officer Cybersecurity Risk Manager
ECSF Skills View Skills ▾
  • Communicate, coordinate and cooperate with internal and external stakeholders
  • Analyse and comply with cybersecurity-related laws, regulations and legislations
  • Carry out working-life practices of data protection and privacy issues
  • Influence an organisation’s cybersecurity culture
Description View Description ▾
This Bootcamp prepares HR and people-operations professionals to support cyber incident response activities. Participants learn how to manage insider investigations, employee communications, access governance, and workforce well-being during major incidents. The programme includes LMS content, role-based templates, and participation in the unified TTX Operation Nightfall Breach, where HR actions are essential for managing insider suspicion, employee morale, misinformation and internal communication.
Incident Response – Communications, Media Handling & Public Messaging
Bootcamps
Incident Response – Communications, Media Handling & Public Messaging
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-10",
    "courseTitle": "Incident Response - Communications, Media Handling & Public Messaging",
    "authorOwner": "AU",
    "contactPerson": [
        "Lovro Matković"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "LMS"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "6",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Online self-paced",
    "durationIntensity": "4",
    "expectedWeeklyTimeCommitment": "4",
    "traineeGroupSize": "12-24",
    "courseAvailability": "2026-06-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Communicate, coordinate and cooperate with internal and external stakeholders",
        "Communicate, present and report to relevant stakeholders",
        "Work under pressure",
        "Communicate, explain and adapt legal and regulatory requirements and business needs",
        "Enable business assets owners, executives and other stakeholders to make risk-informed decisions to manage and mitigate risks",
        "Influence an organisation’s cybersecurity culture"
    ],
    "ecsfRoles": [
        "Cyber Legal, Policy & Compliance Officer",
        "Cybersecurity Risk Manager"
    ],
    "targetAudience": [
        "Corporate communications managers and PR professionals",
        "Public affairs and media relations officers",
        "Cybersecurity risk and compliance managers",
        "CISO advisors and executive communications leads",
        "Public sector communication officers responsible for crisis messaging"
    ],
    "prerequisitesEntryReq": [
        "Basic familiarity with organizational governance and HR procedures",
        "Understanding of confidentiality, employment law, and internal communications",
        "Experience in organisational communications, risk management or public affairs functions"
    ],
    "learningObjectives": [
        "Explain the role and responsibilities of communications teams within the cyber incident response lifecycle.",
        "Develop structured crisis communication strategies aligned with legal, regulatory and executive constraints.",
        "Design audience-specific messaging for employees, customers, regulators, media and partners.",
        "Apply decision-making frameworks for public disclosure under time pressure and uncertainty.",
        "Coordinate communication workflows with Legal, Risk Management and Executive Leadership.",
        "Identify reputational risks and misinformation dynamics during cyber crisis scenarios.",
        "Structure post-incident communication strategies to support organisational recovery and trust rebuilding."
    ],
    "suggestedLearningObjLOS": [
        "1",
        "18"
    ],
    "learningOutcomes": [
        "Draft legally compliant and reputation-aware press statements under crisis conditions.",
        "Prepare structured communication packages including press releases, FAQs, executive talking points and internal notices.",
        "Respond to journalist inquiries and social media escalation scenarios in a controlled and consistent manner.",
        "Evaluate disclosure timing decisions in relation to legal exposure and regulatory obligations.",
        "Provide executive briefings with clear communication recommendations and risk considerations.",
        "Identify and mitigate misinformation spread across public channels.",
        "Produce a coordinated stakeholder communication plan aligned with organisational crisis governance procedures."
    ],
    "courseDesc": "This course offers a systematic introduction to crisis communication and stakeholder management during cybersecurity events. It emphasises the communicative aspect of incident response, highlighting governance alignment, legal implications, and executive advisory duties under time constraints.\nParticipants analyse the function of communications and public affairs teams in the event response lifecycle and formulate organised message strategies for employees, consumers, regulators, media representatives, and other stakeholders. The course covers disclosure timing, liability exposure, misinformation management, and collaboration with Legal, Risk Management, and Executive Leadership.\nParticipants engage in self-directed learning modules and a structured tabletop simulation (“Operation Nightfall”) to refine their skills in composing press statements, developing executive talking points, managing media enquiries, and creating coordinated communication packages in realistic crisis scenarios.\nThe curriculum focuses on communication governance, stakeholder alignment, and reputation risk management. It excludes technical inquiry, forensic analysis, and operational containment efforts. Upon completion, participants are able to formulate and execute legally informed, strategically coherent communication responses in cyber crisis situations.",
    "detailedContentOutlineTopic": [
        "The Role of Communications in Cyber Incident Governance: The position of PR and communications within the incident response lifecycle, Responsibilities during active cybersecurity crises, Coordination with executive leadership and cross-functional teams, Principles of crisis communication under uncertainty, Balancing transparency, accountability and risk exposure",
        "Crisis Messaging Strategy and Stakeholder Alignment: Designing structured message frameworks, Controlled and phased information disclosure, Audience segmentation: employees, customers, regulators, partners, investors and media, Aligning tone and content with organisational risk appetite, Integrating legal, regulatory and reputational considerations into messaging",
        "Media Relations and Public Narrative Management: Managing journalist pressure and speculative reporting, Responding to interviews and real-time inquiries, Monitoring, identifying and correcting misinformation, Social media escalation management, Establishing consistent and coordinated communication channels",
        "PR–Legal Coordination and Disclosure Decision-Making: Ensuring public statements do not increase liability exposure, Timing of disclosure in relation to regulatory obligations, Reviewing and validating draft communications prior to release, Supporting executive briefings with structured communication recommendations",
        "Simulation: Operation Nightfall – Crisis Communication Exercise: Real-time scenario progression during a cyber breach, Drafting press releases and holding statements under pressure, Producing executive talking points and stakeholder communication packages, Managing misinformation and escalation injects, Delivering a consolidated communication response package",
        "Post-Incident Reputation Management and Recovery: Communication strategies for trust rebuilding, Long-term stakeholder engagement after crisis resolution, Lessons learned and communication process improvement"
    ],
    "reqPlatformsInfra": [
        "LMS platform"
    ],
    "langDeliveryMaterial": "English (with optional local translation for trainers)",
    "assessmentMethod": [
        "LMS quiz: 100%"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Crisis communication framework templates (message architecture model, escalation matrix, stakeholder mapping tool)",
        "Press release templates (initial statement, holding statement, follow-up disclosure)",
        "Executive briefing templates (talking points, Q&A preparation sheets, board-level summary format)",
        "Media response and interview preparation guidelines",
        "Social media crisis response playbook (monitoring, escalation, misinformation management)",
        "Regulatory disclosure timing reference guide",
        "Stakeholder communication planning worksheets",
        "After Action Review (AAR) template for post-simulation reflection"
    ],
    "ectsCredsEquivalent": "",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "This four-hour program is structured as an executive-level training that concentrates on the communication and governance aspects of cybersecurity incident response. It integrates organised LMS-based theoretical instruction with a guided tabletop simulation exercise to enhance applied crisis communication decision-making.\nThe training focuses solely on stakeholder communication, legal compliance, executive advisory roles, and reputation risk management in the context of cyber events. It excludes technical investigations, digital forensics, containment operations, and system-level response activities.\nThe tabletop scenario (\"Operation Nightfall\") offers a regulated setting for participants to rehearse the development of organised communication packages under time constraints, address media escalation, collaborate with Legal and Executive Leadership, and navigate misinformation dynamics.\nThe curriculum is appropriate for communications professionals, public sector administrators, and executive advisors involved in organisational crisis response governance frameworks. Successful completion necessitates the exhibition of organised communication strategy and attainment of the minimal certification standard.",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-10 Owner: AU
Available for training June 2026
Duration 4 hours
Platform Category ILT - LMS
Proficiency Level Intermediate-Advanced
Training Type Upskilling
Delivery Method Online self-paced, Hybrid, Physical
ECSF Roles View Roles ▾
Cyber Legal, Policy & Compliance Officer Cybersecurity Risk Manager
ECSF Skills View Skills ▾
  • Communicate, coordinate and cooperate with internal and external stakeholders
  • Communicate, present and report to relevant stakeholders
  • Work under pressure
  • Communicate, explain and adapt legal and regulatory requirements and business needs
  • Enable business assets owners, executives and other stakeholders to make risk-informed decisions to manage and mitigate risks
  • Influence an organisation’s cybersecurity culture
Description View Description ▾
This Bootcamp equips Public Relations and Communications teams with the essential skills needed to handle cyber crisis scenarios. Participants learn how to develop strategic, accurate and aligned messaging under pressure, manage external communications and work closely with Legal and Management to protect organisational reputation. The programme includes expert-led workshops, LMS learning and active participation in the Operation Nightfall Breach Tabletop Exercise, where PR teams must respond to media pressure, misinformation and stakeholder demands in real time.
Threat Intelligence & Threat Hunting
Bootcamps
Threat Intelligence & Threat Hunting
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-11",
    "courseTitle": "Threat Intelligence & Threat Hunting",
    "authorOwner": "AU",
    "contactPerson": [
        "Zlatan Moric"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "ILT",
        "LMS",
        "CyberRange"
    ],
    "proficiencyLevel": "Intermediate-Advanced",
    "eqfLevel": "5-6",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "32 (ILT+CR)",
    "expectedWeeklyTimeCommitment": "8-32",
    "traineeGroupSize": "10-24",
    "courseAvailability": "2026-06-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Anticipate cybersecurity threats, needs and upcoming challenges",
        "Collect, analyse and correlate cyber threat information originating from multiple sources",
        "Communicate, coordinate and cooperate with internal and external stakeholders",
        "Conduct technical analysis and reporting",
        "Identify threat actors TTPs and campaigns",
        "Identify, analyse and correlate cybersecurity events",
        "Manage and analyse log files",
        "Model threats, actors and TTPs",
        "Use and apply CTI platforms and tools",
        "Organise and work in a systematic and deterministic way based on evidence"
    ],
    "ecsfRoles": [
        "Cyber Threat Intelligence Specialist"
    ],
    "targetAudience": [
        "SMEs",
        "public and education sector"
    ],
    "prerequisitesEntryReq": [
        "Understanding of cybersecurity fundamentals",
        "Basic SOC/IR knowledge recommended",
        "Familiarity with OS and Networks helpful"
    ],
    "learningObjectives": [
        "Describe the tactical threat intelligence lifecycle and its role in detection and response.",
        "Collect, enrich, validate, and manage indicators of compromise using TI platforms.",
        "Extract observables from logs, malware artefacts, and threat feeds.",
        "Perform threat hunting using structured methodologies and SIEM/SOC datasets.",
        "Map adversary activity to MITRE ATT&CK and Diamond Model structures.",
        "Develop detection logic based on intelligence-driven insights.",
        "Communicate threat findings in clear, actionable analyst-level reports."
    ],
    "suggestedLearningObjLOS": [
        "1",
        "7",
        "15"
    ],
    "learningOutcomes": [
        "Collect, normalise, and process IOCs using tools such as MISP, OpenCTI, and open-source feeds.",
        "Identify threats and suspicious activities through hands-on hunting across log datasets.",
        "Map detected adversary behaviours to ATT&CK techniques and campaigns.",
        "Perform enrichment using VirusTotal, Hybrid Analysis, Shodan, and whois tools.",
        "Create, update, and validate detection rules (Sigma, YARA, Suricata).",
        "Produce an intelligence report summarising threat trends, observed TTPs, and operational indicators.",
        "Collaborate with SOC and IR teams to operationalise intelligence findings."
    ],
    "courseDesc": "This Bootcamp provides a fully hands-on, Cyber Range-driven experience in tactical threat intelligence and threat hunting. Participants work with real datasets, malware artefacts, and open-source TI platforms (MISP, OpenCTI) to extract indicators, map TTPs, and hunt adversaries across simulated SOC environments.\nThe course emphasises practical skills across the threat intelligence lifecycle, preparing participants for real-world blue-team and threat analyst roles.",
    "detailedContentOutlineTopic": [
        "The Analyst Mindset: Thinking Like an Intelligence Professional: The role of the analyst in cybersecurity, Cognitive bias in intelligence analysis, Structured analytical thinking techniques, Analyst leadership and professional integrity, Understanding Cybersecurity Leadership concepts",
        "Introduction to Tactical Threat Intelligence: OSINT in Threat Intelligence Operations, Threat intelligence definitions and use cases, Tactical vs operational vs strategic intelligence, Intelligence consumers: SOC, IR, detection engineering",
        "Threat Intelligence Lifecycle: Collection, processing, analysis, dissemination, Intelligence requirements and prioritisation, Feedback loops and operational impact",
        "Threat Indicators and Observables: Types of indicators: hashes, IPs, domains, URLs, artefacts, observables vs indicators vs context, IOC validation, confidence scoring, and deconfliction, Extracting observables from malware reports and logs, Cyber Range (CR1): Identifying, Validating, and Contextualizing Threat Indicators",
        "Threat Intelligence Platform Operations: Introduction to MISP and OpenCTI, MISP event creation, tagging, sharing, correlation, OpenCTI entities, relationships, sightings, Feed ingestion and indicator enrichment workflows, Cyber Range (CR2): Building and Managing Intelligence in MISP and OpenCTI",
        "Threat Hunting Fundamentals: IOC-driven vs hypothesis-driven hunting, Intelligence-led hunting methodologies, ATT&CK-informed hunting approaches, Hunting playbooks and repeatability, Cyber Range (CR3): From IOCs to Hypotheses: Structured Threat Hunting",
        "Adversary Behavior Analysis: ATT&CK Navigator usage, Mapping techniques, tactics, and sub-techniques, Diamond Model: adversary, capability, infrastructure, victim, Kill Chain mapping of identified behavior, Cyber Range (CR4): Mapping Adversary Behavior Using ATT&CK and the Diamond Model",
        "Threat Intelligence Enrichment and Automation: Enrichment sources: VirusTotal, Shodan, GreyNoise, Abuse.ch, Indicator context building, Correlation across multiple sources, Introduction to automated enrichment pipelines, Cyber Range (CR5): From Raw Indicators to Contextual Intelligence",
        "Detection Engineering: Intelligence-driven detection concepts, Sigma rule creation and tuning, YARA rule examples for malware detection, Snort signatures for network-based detection, Cyber Range (CR6): Creating and Tuning Sigma, YARA, and Snort Rules",
        "Analyst Reporting and Dissemination: Tactical intelligence report structure, Threat bulletins and short-form intel notes, Communicating confidence, impact, and recommendations, Dissemination best practices for SOC and IR teams",
        "Cyber Range (CR7): Final Capstone Exercise: Multi-step hunting scenario, IOC extraction → enrichment → correlation, ATT&CK and Diamond Model mapping, Detection logic creation, Final analyst-level intelligence report"
    ],
    "reqPlatformsInfra": [
        "LMS platform",
        "Cyber Range"
    ],
    "langDeliveryMaterial": "English (with optional local translation for trainers)",
    "assessmentMethod": [
        "Practical lab performance: 40% (completion and verification of configurations)",
        "LMS quiz: 60%"
    ],
    "certOffered": "",
    "supportingMaterial": [
        "Trainer slide deck",
        "Cyber Range LAB",
        "Reporting templates (TI Note)"
    ],
    "ectsCredsEquivalent": "",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-11 Owner: AU
Available for training June 2026
Duration 32 hours
Platform Category ILT LMS CyberRange
Proficiency Level Intermediate-Advanced
Training Type Upskilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Cyber Threat Intelligence Specialist
ECSF Skills View Skills ▾
  • Anticipate cybersecurity threats, needs and upcoming challenges
  • Automate threat intelligence management procedures
  • Collect, analyse and correlate cyber threat information originating from multiple sources
  • Communicate, present and report to relevant stakeholders
  • Identify non-cyber events with implications on cyber-related activities
  • Identify threat actors TTPs and campaigns
  • Identify, analyse and correlate cybersecurity events
  • Manage and analyse log files
  • Model threats, actors and TTPs
  • Use and apply CTI platforms and tools
Description View Description ▾
This Bootcamp provides a fully hands-on, Cyber Range–driven experience in tactical threat intelligence and threat hunting. Participants work with real datasets, malware artefacts, and open-source TI platforms (MISP, OpenCTI) to extract indicators, map TTPs, and hunt adversaries across simulated SOC environments. The course emphasises practical skills across the threat intelligence lifecycle, preparing participants for real-world blue-team and threat analyst roles.
Cyber Security Auditor
Bootcamps
Cyber Security Auditor
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-12",
    "courseTitle": "Cyber Security Auditor",
    "authorOwner": "AU",
    "contactPerson": [
        "Zlatan Morić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "ILT - LMS",
        "TTX"
    ],
    "proficiencyLevel": "Intermediate-Advanced",
    "eqfLevel": "6-7",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "30 hours",
    "expectedWeeklyTimeCommitment": "8-30",
    "traineeGroupSize": "12-24",
    "courseAvailability": "2026-06-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Apply auditing tools and techniques",
        "Audit with integrity, being impartial and independent",
        "Follow and practice auditing frameworks",
        "Collect, evaluate, maintain and protect auditing information",
        "Organise and work systematically based on evidence",
        "Decompose and analyse systems to identify weaknesses",
        "Communicate, present and report to stakeholders",
        "Understand and adhere to ethical requirements",
        "Analyse business processes and review controls",
        "Work ethically and independently",
        "Work under pressure"
    ],
    "ecsfRoles": [
        "Cybersecurity Auditor",
        "Cyber Legal, Policy & Compliance Officer",
        "Cybersecurity Risk Manager"
    ],
    "targetAudience": [
        "Cybersecurity auditors and internal audit professionals responsible for evaluating security controls",
        "Compliance officers and regulatory specialists involved in NIS2, DORA, ISO 27001 or related frameworks",
        "Cybersecurity risk managers and governance professionals overseeing control effectiveness",
        "Public sector and critical infrastructure representatives responsible for cybersecurity compliance oversight",
        "Technical professionals transitioning into cybersecurity audit and assurance roles"
    ],
    "prerequisitesEntryReq": [
        "Foundational understanding of information security principles and control frameworks (e.g., ISO 27001, NIST CSF or equivalent).",
        "Basic knowledge of risk management concepts, including risk assessment and control evaluation.",
        "Familiarity with organisational governance structures and compliance obligations.",
        "Experience working within IT, cybersecurity, audit, compliance or risk management functions.",
        "Ability to analyse documentation, policies and procedural evidence critically.",
        "Professional communication skills suitable for audit reporting and stakeholder interaction."
    ],
    "learningObjectives": [
        "Apply structured cybersecurity audit methodologies aligned with recognised standards and regulatory frameworks (ISO 27001, NIS2, DORA, NIST CSF).",
        "Plan, scope and execute cybersecurity audits using risk-based approaches.",
        "Analyse organisational policies, technical controls and governance processes to assess control effectiveness.",
        "Collect, evaluate and preserve audit evidence in accordance with professional auditing standards.",
        "Identify control deficiencies and assess their impact on organisational risk posture.",
        "Develop structured audit findings and formulate evidence-based recommendations.",
        "Communicate audit results clearly and objectively to executive and technical stakeholders.",
        "Conduct simulated audit exercises under time constraints while maintaining independence and ethical integrity."
    ],
    "suggestedLearningObjLOS": [
        "5",
        "7",
        "9"
    ],
    "learningOutcomes": [
        "Design a risk-based cybersecurity audit plan aligned with regulatory and organisational requirements.",
        "Evaluate the adequacy and effectiveness of implemented technical and organisational security controls.",
        "Analyse compliance gaps against ISO 27001, NIS2, DORA and other applicable frameworks.",
        "Collect and document audit evidence using systematic and reproducible methodologies.",
        "Produce structured audit reports including findings, impact assessment and remediation recommendations.",
        "Defend audit conclusions during stakeholder discussions using objective evidence.",
        "Perform audit activities independently while adhering to ethical and professional standards.",
        "Execute a tabletop audit simulation and deliver validated audit outputs within defined timelines."
    ],
    "courseDesc": "This bootcamp provides structured, practice-oriented training in cybersecurity auditing and regulatory compliance. The course focuses on applying risk-based audit methodologies aligned with recognised standards and regulatory frameworks, including ISO/IEC 27001, NIS2, DORA and NIST CSF. Participants develop the capability to plan, scope and conduct cybersecurity audits using systematic and evidence-based approaches. The programme covers ISMS evaluation, compliance gap analysis, control effectiveness assessment, audit documentation practices and professional reporting standards. Emphasis is placed on evaluating technical and organisational security controls within governance and regulatory contexts. The bootcamp concludes with CADMUS-SGTTX-05 (Cyber Security Audit Simulation & Compliance Review), a facilitated tabletop simulation in which participants execute a full-cycle cybersecurity audit under time constraints. Upon completion, participants are able to conduct structured cybersecurity audits, evaluate compliance against major regulatory frameworks, and produce defensible audit findings aligned with risk-based governance principles.",
    "detailedContentOutlineTopic": [
        "Foundations of Cybersecurity Auditing (6 Hours): Role and responsibilities of the cybersecurity auditor, Principles of independence, impartiality and professional ethics, Risk-based audit methodology and lifecycle, Audit planning, scoping and engagement preparation, Types of cybersecurity audits (internal, external, regulatory, certification), Evidence-based auditing and documentation standards",
        "Security Management & ISMS Evaluation (6 Hours): Structure and components of an Information Security Management System (ISMS), ISO/IEC 27001 control domains and audit focus areas, Control effectiveness evaluation techniques, Policy, procedure and governance documentation analysis, Mapping technical controls to organisational policies, Preparing and validating audit evidence",
        "Regulatory & Compliance Framework Alignment (6 Hours): NIS2 obligations and supervisory expectations, DORA requirements and sector-specific implications, NIST Cybersecurity Framework (CSF) alignment, CIS Controls and practical benchmarking, Compliance gap analysis methodology, Mapping regulatory requirements to implemented controls",
        "Risk Assessment & Audit Reporting (6 Hours): Risk identification and analysis within audit engagements, Evaluating residual risk and control maturity, Identifying non-conformities and control deficiencies, Structuring audit findings and impact assessment, Drafting professional audit reports, Communicating audit results to executive and technical stakeholders, Handling objections and defending audit conclusions",
        "Cyber Security Audit Simulation & Compliance Review (6 Hours): Audit Preparation & Scope Definition, Evidence Collection & Control Review, Risk & Impact Evaluation, Audit Reporting & Stakeholder Briefing"
    ],
    "reqPlatformsInfra": [
        "LMS platform",
        "TTX Platform"
    ],
    "langDeliveryMaterial": "English (with optional local translation for trainers)",
    "assessmentMethod": [
        "Applied Audit Analysis Assignment 35% (Quiz)",
        "TTX completion 35%",
        "LMS quiz: 30%"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Instructor-led presentation materials covering cybersecurity audit methodology, ISMS evaluation, regulatory alignment and risk-based audit practices",
        "NIS2 and DORA regulatory requirement summaries with control-mapping templates",
        "NIST Cybersecurity Framework (CSF) and CIS Controls alignment matrices",
        "Audit planning templates (scope definition, engagement letters, audit checklists)",
        "Evidence collection and documentation templates",
        "Control effectiveness evaluation checklists",
        "Risk assessment and impact evaluation worksheets",
        "Audit reporting templates (findings structure, impact description, remediation recommendations)",
        "Sample audit case studies and scenario-based exercises",
        "CADMUS-SGTTX-05 tabletop simulation materials",
        "Knowledge assessment question bank (case-based and regulatory mapping scenarios)"
    ],
    "ectsCredsEquivalent": "5",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "This bootcamp is structured as an advanced, practice-focused cybersecurity audit curriculum in accordance with established internationally recognised standards and regulatory frameworks. It emphasises governance, compliance, and risk-oriented audit technique instead of technical penetration testing or system management tasks. The curriculum incorporates ISMS evaluation, regulatory compliance (including ISO/IEC 27001, NIS2, DORA, and NIST CSF), and systematic control assessment to enable participants to perform evidence-based cybersecurity audits in regulated settings. The incorporation of CADMUS-SGTTX-05 (Cyber Security Audit Simulation & Compliance Review) offers tangible verification of audit proficiency within realistic time and decision-making constraints. The tabletop simulation necessitates that participants employ methodical evidence gathering, compliance gap analysis, risk assessment, and professional reporting methodologies akin to actual audit engagements. Assessment is balanced between across theoretical knowledge verification, practical audit analysis, and simulation execution to guarantee the demonstration of both conceptual comprehension and professional competence. The curriculum prioritises independence, impartiality, and ethical integrity in alignment with established audit requirements, making it especially appropriate for professionals in regulated sectors, public administration, and critical infrastructure settings.",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-12 Owner: AU
Available for training September 2026
Duration 30 hours
Platform Category ILT - LMS TTX
Proficiency Level Intermediate-Advanced
Training Type Upskilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Cybersecurity Auditor Cyber Legal, Policy & Compliance Officer Cybersecurity Risk Manager
ECSF Skills View Skills ▾
  • Analyse business processes, assess and review software or hardware security, as well as technical and organisational controls
  • Apply auditing tools and techniques
  • Audit with integrity, being impartial and independent
  • Collect, evaluate, maintain and protect auditing information
  • Communicate, present and report to relevant stakeholders
  • Decompose and analyse systems to identify weaknesses and ineffective controls
  • Follow and practice auditing frameworks, standards and methodologies
  • Organise and work in a systematic and deterministic way based on evidence
  • Understand, practice and adhere to ethical requirements and standards
  • Work ethically and independently; not influenced and biased by internal or external actors
  • Work under pressure
Description View Description ▾
This Bootcamp prepares future cybersecurity auditors to plan, conduct, and report on security audits using recognised frameworks (ISO 27001, NIS2, SOC2, CIS Controls, DORA). Participants are trained in document review, control testing, evidence verification, stakeholder interviews, and audit report writing. The programme include TTX, where learners perform a complete end-to-end audit and present their findings to a simulated executive committee.
Business Continuity & Disaster Recovery
Bootcamps
Business Continuity & Disaster Recovery
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-13",
    "courseTitle": "Business Continuity & Disaster Recovery",
    "authorOwner": "AU",
    "contactPerson": [
        "Vedran Dakić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "ILT",
        "LMS",
        "CyberRange"
    ],
    "proficiencyLevel": "Advanced",
    "eqfLevel": "5-6",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "50  hours",
    "expectedWeeklyTimeCommitment": "4-24",
    "traineeGroupSize": "10-24",
    "courseAvailability": "2026-09-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Build resilience against points of failure across the architecture",
        "Integrate cybersecurity solutions to the organisation’s infrastructure",
        "Analyse business processes, assess and review software or hardware security, as well as technical and organisational controls",
        "Assess the security and performance of solutions",
        "Decompose and analyse systems to identify weaknesses and ineffective controls",
        "Organise and work in a systematic and deterministic way based on evidence"
    ],
    "ecsfRoles": [
        "Cybersecurity Implementer"
    ],
    "targetAudience": [
        "IT infrastructure engineers responsible for availability, resilience and service continuity",
        "System administrators (Windows/Linux) managing production environments",
        "Cloud and virtualization engineers implementing high-availability architectures",
        "Disaster Recovery specialists and backup administrators",
        "Cybersecurity professionals involved in operational resilience and incident recovery",
        "Business continuity coordinators working closely with technical teams",
        "Technical leads responsible for failover design, recovery validation and service restoration",
        "Critical infrastructure IT personnel managing mission-critical systems"
    ],
    "prerequisitesEntryReq": [
        "Solid understanding of enterprise IT infrastructure (servers, virtualization, networking fundamentals).",
        "Basic hands-on experience with Windows Server and/or Linux administration.",
        "Foundational knowledge of backup and restore concepts (full/incremental backups, replication, snapshots).",
        "Understanding of authentication, access control and system hardening principles.",
        "Familiarity with networking concepts relevant to service availability (DNS, routing basics, load balancing fundamentals).",
        "Ability to interpret system logs and troubleshoot service failures.",
        "Basic knowledge of cybersecurity incident response concepts."
    ],
    "learningObjectives": [
        "Describe the principles of business continuity management and disaster recovery.",
        "Analyse risks and impacts on critical business processes using structured methodologies.",
        "Design continuity and recovery strategies aligned with organisational resilience objectives.",
        "Configure high-availability, clustering, replication, and backup mechanisms in virtual lab environments.",
        "Execute continuity and recovery exercises in Cyber Range scenarios under time pressure.",
        "Apply structured testing, exercising, and maintenance approaches to BCDR plans.",
        "Communicate continuity and recovery decisions effectively to stakeholders and leadership."
    ],
    "suggestedLearningObjLOS": [
        "1",
        "5",
        "13"
    ],
    "learningOutcomes": [
        "Conduct a business impact analysis and identify critical processes in a simulated enterprise.",
        "Develop and document a complete Business Continuity Plan (BCP) for a defined scenario.",
        "Configure, execute, and evaluate disaster recovery procedures in Cyber Range environments.",
        "Restore services using backup, replication, failover, and orchestration mechanisms.",
        "Coordinate technical and organisational response activities during BCDR exercises.",
        "Present recovery strategies and results to decision-makers using structured reporting."
    ],
    "courseDesc": "This intensive Bootcamp offers a comprehensive, hands-on approach to Business Continuity and Disaster Recovery. Combining LMS-based theory, instructor-led workshops, and two full Cyber Range modules (BC + DR), participants develop the capability to design, execute, and evaluate continuity and recovery strategies.\nThe Bootcamp integrates risk analysis, BIA, continuity planning, technical HA configuration, disaster recovery restoration, and organisational crisis communication. The format supports both onsite and online delivery.",
    "detailedContentOutlineTopic": [
        "Business Impact Analysis (BIA) & Risk Prioritisation: Identification of critical business services and dependencies, Asset classification and service criticality mapping, Risk assessment methodologies applied to continuity planning, RTO (Recovery Time Objective) and RPO (Recovery Point Objective) definition, Quantification of operational and financial impact of service disruption, Mapping BIA results to technical resilience requirements",
        "Business Continuity Planning (BCP) Framework: Structure and components of a Business Continuity Plan, Roles, responsibilities and escalation models, Service continuity strategies (redundancy, replication, failover), Crisis communication and coordination models, Testing and maintenance of BCP documentation, Alignment with ISO 22301 and NIST resilience guidance",
        "High-Availability (HA) Architecture Design: Identification of single points of failure across infrastructure layers, Redundancy models (active-active, active-passive), Failover clustering principles (Windows Server Failover Clustering, Pacemaker), Storage replication and synchronization mechanisms, Load balancing and traffic distribution strategies, Network redundancy and DNS failover mechanisms",
        "Disaster Recovery (DR) Strategy & Architecture: Backup strategies (full, incremental, differential, snapshot-based), Replication models (synchronous vs asynchronous), Disaster Recovery site design (hot, warm, cold), Cloud-based disaster recovery and hybrid models, Orchestration of failover and failback procedures, Data integrity validation after restoration",
        "Monitoring, Validation & Recovery Governance: Recovery testing methodologies, RTO/RPO measurement and validation, Log analysis during failover events, Performance validation after restoration, Evidence-based recovery documentation, Continuous improvement of resilience posture",
        "[CR] High-Availability Configuration & Validation: Deployment of failover clustering environments, Configuration of redundancy mechanisms, Simulation of node failure, Validation of automatic failover, Measurement of recovery time against defined RTO",
        "[CR] Backup & Restoration Testing: Configuration of backup policies, Snapshot and replication validation, Simulated data loss scenario, Restoration of services from backup, Verification of data integrity against defined RPO",
        "[CR] Disaster Recovery Site Activation: Simulation of primary site outage, Activation of secondary site, Service redirection and DNS failover, Orchestrated recovery procedures, Post-recovery system validation",
        "[CR] Integrated Capstone: Full BCDR Execution Scenario: Combined BIA-driven decision making, Triggering incident simulation (e.g., ransomware or infrastructure failure), Execution of failover and restoration procedures, RTO/RPO validation and performance measurement, Documentation of recovery actions and lessons learned, Presentation of technical recovery report"
    ],
    "reqPlatformsInfra": [
        "LMS platform",
        "Cyber Range"
    ],
    "langDeliveryMaterial": "English (with optional local translation for trainers)",
    "assessmentMethod": [
        "Practical lab performance: 40% (completion and verification of configurations)",
        "LMS quiz: 60%"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Trainer slide deck",
        "BCP and DR plan templates",
        "Lab guides",
        "Case studies",
        "Sample risk register and BIA templates"
    ],
    "ectsCredsEquivalent": "5",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-13 Owner: AU
Available for training June 2026
Duration 50 hours
Platform Category ILT LMS CyberRange
Proficiency Level Advanced
Training Type Upskilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Cybersecurity Implementer
ECSF Skills View Skills ▾
  • Build resilience against points of failure across the architecture
  • Integrate cybersecurity solutions to the organisation’s infrastructure
  • Analyse business processes, assess and review software or hardware security, as well as technical and organisational controls
  • Assess the security and performance of solutions
  • Decompose and analyse systems to identify weaknesses and ineffective controls
  • Organise and work in a systematic and deterministic way based on evidence
Description View Description ▾
This intensive Bootcamp offers a comprehensive, hands-on approach to Business Continuity and Disaster Recovery. Combining LMS-based theory, instructor-led workshops, and two full Cyber Range modules (BC + DR), participants develop the capability to design, execute, and evaluate continuity and recovery strategies. The Bootcamp integrates risk analysis, BIA, continuity planning, technical HA configuration, disaster recovery restoration, and organisational crisis communication. The format supports both onsite and online delivery.
Cyber Security Manager (CISO)
Bootcamps
Cyber Security Manager (CISO)
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-14",
    "courseTitle": "CISO Leadership & Governance Bootcamp – Advanced Career Track",
    "authorOwner": "AU",
    "contactPerson": [
        "Zlatan Morić"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "Bootcamp"
    ],
    "proficiencyLevel": "Advanced",
    "eqfLevel": "7",
    "trainingType": [
        "Upskilling",
        "Cross-skilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "60 hours",
    "expectedWeeklyTimeCommitment": "60 hours",
    "traineeGroupSize": "12-24",
    "courseAvailability": "2026-06-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Develop, champion and lead the execution of a cybersecurity strategy",
        "Enable business assets owners, executives and other stakeholders to make risk-informed decisions",
        "Analyse and consolidate organisation’s quality and risk management practices",
        "Analyse and implement cybersecurity policies, certifications, standards and frameworks",
        "Define and apply maturity models for cybersecurity management",
        "Communicate, present and report to relevant stakeholders",
        "Manage cybersecurity resources",
        "Influence an organisation’s cybersecurity culture",
        "Collaborate with other team members and colleagues",
        "Work under pressure"
    ],
    "ecsfRoles": [
        "Chief Information Security Officer (CISO)",
        "Cybersecurity Risk Manager",
        "Cyber Legal, Policy & Compliance Officer",
        "Cybersecurity Auditor"
    ],
    "targetAudience": [
        "Technical cybersecurity professionals transitioning into leadership roles",
        "Security managers and IT managers strengthening executive oversight capabilities",
        "Newly appointed or acting CISOs",
        "Risk and compliance professionals expanding into governance responsibility",
        "Public and private sector professionals preparing for CISO-level accountability"
    ],
    "prerequisitesEntryReq": [
        "Solid understanding of cybersecurity fundamentals (threats, vulnerabilities, controls, risk)",
        "Familiarity with at least one recognised governance framework (e.g., ISO 27001 or NIST CSF)",
        "Professional experience in cybersecurity, IT management, risk, compliance or related domains",
        "No advanced penetration testing expertise required"
    ],
    "learningObjectives": [
        "Lead and structure organisational cybersecurity governance aligned with regulatory obligations.",
        "Translate technical security challenges into executive-level decision frameworks.",
        "Design and oversee risk management and compliance programs under NIS2 and related frameworks.",
        "Evaluate security program maturity and define prioritised remediation strategies.",
        "Integrate governance, finance, procurement and vendor oversight into cybersecurity strategy.",
        "Exercise executive decision-making during crisis and regulatory pressure scenarios."
    ],
    "suggestedLearningObjLOS": [
        "7",
        "9",
        "14",
        "18"
    ],
    "learningOutcomes": [
        "Establish and govern a cybersecurity program aligned with strategic and regulatory requirements.",
        "Define and oversee structured risk management processes and treatment strategies.",
        "Evaluate organisational security maturity and identify compliance gaps.",
        "Translate compliance deficiencies into prioritised executive-level risk decisions.",
        "Lead cross-functional coordination across legal, finance, procurement and technical domains.",
        "Communicate cybersecurity posture and exposure to executive leadership and supervisory authorities.",
        "Demonstrate decision-making capability under executive crisis simulation conditions."
    ],
    "courseDesc": "This advanced bootcamp is structured as a cross-functional CISO career-track program, equipping participants for executive-level cybersecurity governance and accountability.\nThe program connects technical cybersecurity proficiency with strategic leadership accountability. It incorporates instructor-led governance modules, Cyber Range practical exercises, and a concluding executive SG/TTX simulation to provide an authentic CISO-level educational experience.\nParticipants cultivate the capacity to formulate and manage cybersecurity strategies, oversee compliance and regulatory risks, establish risk governance frameworks, and direct decision-making under operational and supervisory pressures.\nThe bootcamp concludes with an executive simulation in which participants utilise governance, financial, regulatory, and crisis-management expertise within an organised, high-pressure setting that mirrors actual CISO duties.",
    "detailedContentOutlineTopic": [
        "Governance Foundations and Executive Accountability: [ILT] Regulatory architecture: NIS2 obligations, supervisory authority models, board-level accountability, [ILT] Legal exposure, liability implications and management body responsibility, [ILT] Governance structures: reporting lines, segregation of duties, independence of the CISO function, [ILT] Defining organisational security mandate, scope and authority, [CR] Creation of organisational governance model within CISO Assistant, [CR] Definition of compliance scope, ISMS applicability and executive accountability mapping",
        "Organisational Leadership and Security Culture: [ILT] Leadership models for cybersecurity executives (influence vs authority), [ILT] Building security culture across technical and business functions, [ILT] Executive communication strategies and stakeholder alignment, [ILT] Cross-functional governance coordination (Legal, HR, Finance, Procurement), [CR] Framework activation and alignment with organisational structure, [CR] Assignment of governance domains and control ownership",
        "Security Program Design and Control Oversight: [ILT] Designing a security program aligned with strategic business objectives, [ILT] Control domain architecture and accountability models, [ILT] KPIs, KRIs and executive performance dashboards, [ILT] Balancing operational security with governance oversight, [CR] Mapping organisational controls to regulatory frameworks, [CR] Identification of applicable vs non-applicable controls, [CR] Documentation of control implementation status",
        "Compliance Maturity, Exposure and Gap Prioritisation: [ILT] Maturity models (Initial → Optimised) and governance implications, [ILT] Defining compliance baseline and tolerance thresholds, [ILT] Regulatory exposure analysis and non-conformity impact assessment, [CR] Assigning maturity levels to mapped controls, [CR] Generating structured compliance gap register, [CR] Prioritising remediation actions according to business impact",
        "Risk Governance and Executive Risk Appetite: [ILT] Risk governance frameworks and executive accountability, [ILT] Likelihood × impact scoring and board-level risk interpretation, [ILT] Defining organisational risk appetite and tolerance, [ILT] Linking compliance gaps to strategic risk decisions, [CR] Creation of risk entries linked to compliance deficiencies, [CR] Application of scoring models and residual risk evaluation, [CR] Definition of treatment strategies (mitigate, transfer, accept, avoid)",
        "Financial Governance, Investment and Vendor Oversight: [ILT] Security budgeting and cost–benefit analysis of controls, [ILT] Strategic investment prioritisation and ROI justification, [ILT] Procurement governance and contract-level security clauses, [ILT] Third-party and supply chain risk management models, [ILT] Vendor oversight metrics and escalation mechanisms",
        "Audit Readiness and Supervisory Engagement: [ILT] Audit models, evidence standards and documentation traceability, [ILT] Preparing for supervisory inspections under NIS2, [ILT] Demonstrating control effectiveness and risk governance maturity, [CR] Uploading and mapping audit evidence to controls and risks, [CR] Verification of evidence completeness and traceability, [CR] Generation of compliance dashboards and risk summaries",
        "Executive Crisis Governance and Strategic Simulation (Capstone): [ILT] Crisis governance structures and executive escalation models, [ILT] Regulatory notification obligations and reputational risk management, [ILT] Media, stakeholder and supervisory communication strategies, [SG/TTX] Multi-phase executive crisis simulation, [SG/TTX] Cross-functional coordination (Legal, HR, Finance, Technical), [SG/TTX] Strategic decision-making under time and regulatory pressure",
        "Post-Simulation Strategic Evaluation and CISO Readiness Development: [SG/TTX] After-action review and governance performance evaluation, [ILT] Leadership reflection and accountability assessment, [ILT] Development of individual CISO readiness roadmap, [ILT] Identification of capability gaps and future development path"
    ],
    "reqPlatformsInfra": [
        "LMS",
        "CADMUS-CR-10",
        "CADMUS-SGTTX-10"
    ],
    "langDeliveryMaterial": "English with optional translation to other EU languages",
    "assessmentMethod": [
        "LMS quizzes (ILT theoretical modules): 50%",
        "Cyber Range practical performance: 30%",
        "SG/TTX executive simulation performance: 20%"
    ],
    "certOffered": [
        "certificate of course attendance (participation in ≥ 90% of total workload);",
        "certificate of successful course completion (50% ≤ GPA ≤ 64.9%);",
        "certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);",
        "certificate of successful course completion with excellent performance (85% ≤ GPA ≤ 100%)"
    ],
    "supportingMaterial": [
        "Instructor-led slide decks (Governance, Leadership, Security Program, Core Domains, Strategy & Finance)",
        "CADMUS-CR-10",
        "CADMUS-SGTTX-10",
        "LMS quizzes and case-based assessment bank"
    ],
    "ectsCredsEquivalent": "7",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "This advanced bootcamp incorporates instructor-led governance modules, organised Cyber Range laboratories, and a capstone SG/TTX executive simulation to deliver a thorough CISO career-transition experience. The curriculum aims to connect technical cybersecurity proficiency with executive governance responsibilities, allowing participants to engage at the board and supervisory authority level. Evaluation is primarily automated via LMS-based theoretical evaluations and Cyber Range validation methods, supplemented by systematic decision-based scoring within the SG/TTX simulation. The bootcamp facilitates the transfer to Chief Information Security Officer and top cybersecurity governance positions in private, public, and regulated sectors. This programme may serve as preparatory training for formal CISO appointment within regulated environments.",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-14 Owner: AU
Available for training September 2026
Duration 58 hours
Platform Category ILT LMS TTX CyberRange
Proficiency Level Advanced
Training Type Upskilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Chief Information Security Officer (CISO) - primary Cybersecurity Risk Manager Cyber Legal, Policy & Compliance Officer Cybersecurity Auditor
ECSF Skills View Skills ▾
  • Develop, champion and lead the execution of a cybersecurity strategy
  • Enable business assets owners, executives and other stakeholders to make risk-informed decisions to manage and mitigate risks
  • Analyse and consolidate organisation’s quality and risk management practices
  • Analyse and implement cybersecurity policies, certifications, standards, methodologies and frameworks
  • Define and apply maturity models for cybersecurity management
  • Communicate, present and report to relevant stakeholders
  • Manage cybersecurity resources
  • Influence an organisation’s cybersecurity culture
  • Collaborate with other team members and colleagues
  • Work under pressure
Description View Description ▾
The Cyber Security Manager Bootcamp is an intensive, practitioner-oriented program that develops organisational security leadership competencies. Participants combine LMS theory, guided trainer sessions, Cyber Range governance exercises using CISO Assistant, and a structured TTX game covering asset management, BIA, risk assessment, mitigation planning, and executive reporting. The bootcamp prepares participants to take on mid to senior-level cybersecurity management responsibilities.
Train the innovative cybersecurity pedagogy and curriculum design trainers course
Bootcamps
Train the innovative cybersecurity pedagogy and curriculum design trainers course
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-15",
    "courseTitle": "Train the innovative cybersecurity pedagogy and curriculum design trainers course",
    "authorOwner": "EUC",
    "contactPerson": [
        "Yianna Danidou"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "Bootcamp"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "7",
    "trainingType": [
        "Professional development"
    ],
    "deliveryMethod": "Hybrid (Online interactive lectures and offline curriculum design workshops)",
    "durationIntensity": "4 weeks (~40 total hours)",
    "expectedWeeklyTimeCommitment": "~10 hrs",
    "traineeGroupSize": "20-50 participants",
    "courseAvailability": "2026-09-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Collaborate with other team members and colleagues",
        "Communicate, coordinate and cooperate with internal and external stakeholders",
        "Communicate, present and report to relevant stakeholders",
        "Design, develop and deliver learning programmes to cover cybersecurity needs",
        "Develop evaluation programs for awareness, training and education activities",
        "Enable business assets owners, executives and other stakeholders to make risk-informed decisions to manage and mitigate risks",
        "Explain and communicate data protection and privacy topics to stakeholders and users",
        "Identify and select appropriate pedagogical approaches for the intended audience",
        "Identify needs in cybersecurity awareness, training and education",
        "Influence an organisation’s cybersecurity culture",
        "Motivate and encourage people",
        "Provide training towards cybersecurity and data protection professional certifications",
        "Utilise existing cybersecurity-related training resources"
    ],
    "ecsfRoles": [
        "Cybersecurity educator"
    ],
    "targetAudience": [
        "Public sector",
        "SMEs"
    ],
    "prerequisitesEntryReq": [
        "Basic knowledge of education elements, what is a course outline and the learning outcomes.",
        "At least some experience in teaching, training, mentoring, or delivering workshops. (Not necessarily formal teaching, but the ability to present and communicate technical or awareness topics.)",
        "Ability to work with digital platforms (e-learning tools, LMS such as Moodle/Canvas, video conferencing)."
    ],
    "learningObjectives": [
        "By the end of this course, participants will be able to:",
        "1. Explain and operationalise the role, responsibilities and professional expectations of a Cybersecurity Educator in alignment with ECSF competencies.",
        "(Aligns with: 21, 71)",
        "2. Identify cybersecurity awareness, training and education needs and design structured learning programmes that address those needs using recognised pedagogical approaches and existing training resources.",
        "(Aligns with: 34, 50, 52, 80)",
        "3. Design, develop and deliver innovative cybersecurity learning experiences (e.g., cyber ranges, labs, simulations, project-based and problem-based learning) appropriate for different audiences and stakeholders.",
        "(Aligns with: 34, 50, 65)",
        "4. Develop and evaluate cybersecurity awareness and training programmes, ensuring alignment with legal, regulatory, and data protection requirements, and communicate these effectively to stakeholders and learners.",
        "(Aligns with: 39, 44, 19, 21)",
        "5. Apply evaluation and feedback mechanisms to measure the effectiveness and impact of cybersecurity education activities and continuously improve learning outcomes.",
        "(Aligns with: 39)",
        "6. Promote and influence a strong cybersecurity culture by enabling stakeholders and learners to make risk-informed decisions and by embedding security and resilience principles within educational and organisational environments.",
        "(Aligns with: 42, 58, 15, 19, 65)"
    ],
    "suggestedLearningObjLOS": "",
    "learningOutcomes": [
        "Explain pedagogical principles, methodologies, and frameworks relevant to cybersecurity.",
        "Describe the relationship between cybersecurity awareness, education, and training programs and organizational resilience.",
        "Apply pedagogical standards (ADDIE, Bloom’s, Kirkpatrick, competency-based design) to cybersecurity curriculum development.",
        "Analyze different teaching and learning approaches (problem-based learning, simulations, gamification, cyber ranges, blended learning) for various audiences.",
        "Develop training goals and measurable learning outcomes aligned with professional certifications and standards.",
        "Design and deliver a cybersecurity training activity using innovative tools (virtual labs, cyber ranges, case studies).",
        "Create cybersecurity awareness content tailored to different audiences (executives, staff, students, technical teams).",
        "Integrate data protection, compliance, and ethics into cybersecurity curricula.",
        "Evaluate training effectiveness using frameworks such as Kirkpatrick’s model and learner feedback mechanisms.",
        "Design an end-to-end cybersecurity education program including needs assessment, content design, delivery, and evaluation.",
        "Propose innovative approaches to address emerging challenges (AI in cybersecurity education, continuous learning, micro-credentials, gamification, AR/VR, cyber ranges)."
    ],
    "courseDesc": "The programme is designed to equip educators and trainers with the competencies required to design, deliver and evaluate high-impact cybersecurity education aligned with the European Cybersecurity Skills Framework (ECSF).\nThe course focuses on training needs analysis, curriculum design, modern pedagogical methodologies (including simulations and cyber ranges), stakeholder communication, and the development of assessment and evaluation frameworks. Participants will learn to integrate legal, regulatory and certification requirements into structured learning programmes while promoting a strong cybersecurity culture within educational and organisational environments.\nThrough applied workshops and a capstone project, participants design a comprehensive cybersecurity training programme aligned with professional standards and industry needs.",
    "detailedContentOutlineTopic": [
        "Week 1 – Cybersecurity Educator Role & Pedagogical Foundations: Introduction to the ECSF and the Cybersecurity Educator role, Summary statement, mission, deliverables, tasks, skills, knowledge, Importance of cybersecurity awareness & training in organizational resilience, Overview of pedagogical standards and frameworks (Bloom’s Taxonomy, ADDIE, Kirkpatrick, Competency-Based Learning), Cybersecurity education standards & certifications (ISO 27001 awareness, GDPR training, NIS2, CISSP, CISM, etc.), actical Activity: Mapping ECSF competencies to current teaching practices and conducting a structured training needs analysis.",
        "Week 2 – Curriculum Design & Pedagogical Approaches: Principles of curriculum design in cybersecurity education, Aligning learning objectives, outcomes, and assessment, Teaching methodologies for cybersecurity:, Problem/project-based learning, Case studies, Flipped classroom, Gamification, Scenario-based learning, Designing for diverse audiences (technical staff, managers, non-technical employees, students), Integrating standards, laws, and best practices (GDPR, NIS2, ENISA recommendations), actical Activity: Develop a structured cybersecurity training module including learning outcomes, delivery methodology and assessment plan.",
        "Week 3 – Innovative Training & Delivery Methods: Using cyber ranges, labs, and simulations for hands-on learning, Building awareness campaigns & training (posters, videos, e-learning modules), Tools and platforms for cybersecurity education (Moodle, Canvas, immersive environments), Digital transformation of cybersecurity pedagogy (AI tutors, chatbots, AR/VR), Embedding ethical, cultural, and compliance perspectives in training, actical Activity: Design and deliver a short cybersecurity simulation, awareness intervention, or scenario-based exercise to peers.",
        "Week 4 – Evaluation, Certification & Future of Cybersecurity Education: Assessing and evaluating cybersecurity training programs, Kirkpatrick’s model (Reaction, Learning, Behavior, Results), Creating evaluation rubrics and reporting trainee performance, Linking training to certification pathways (CISSP, CompTIA Security+, ISO standards), Emerging trends in cybersecurity pedagogy: AI, micro-learning, gamification, continuous upskilling, pstone: Design and present a comprehensive cybersecurity training program with needs analysis, curriculum design, delivery plan, and evaluation model."
    ],
    "reqPlatformsInfra": [
        "Learning management system (LMS) access",
        "cyber range for practical exercise",
        "curriculum development software"
    ],
    "langDeliveryMaterial": "English",
    "assessmentMethod": [
        "Quizzes",
        "hands-on exercises"
    ],
    "certOffered": [
        "Certificate of successful course completion with very good performance (65% ≤ GPA ≤ 84.9%);"
    ],
    "supportingMaterial": [
        "Slides"
    ],
    "ectsCredsEquivalent": "2",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-15 Owner: EUC
Available for training June 2026
Duration 40 hours
Platform Category Bootcamp
Proficiency Level Intermediate
Training Type Professional development
Delivery Method Hybrid (Online interactive lectures and offline curriculum design workshops)
ECSF Roles View Roles ▾
Cybersecurity educator
ECSF Skills View Skills ▾
  • Collaborate with other team members and colleagues
  • Communicate, coordinate and cooperate with internal and external stakeholders
  • Communicate, present and report to relevant stakeholders
  • Design, develop and deliver learning programmes to cover cybersecurity needs
  • Develop evaluation programs for awareness, training and education activities
  • Enable business assets owners, executives and other stakeholders to make risk-informed decisions to manage and mitigate risks
  • Explain and communicate data protection and privacy topics to stakeholders and users
  • Identify and select appropriate pedagogical approaches for the intended audience
  • Identify needs in cybersecurity awareness, training and education
  • Influence an organisation’s cybersecurity culture
  • Motivate and encourage people
  • Provide training towards cybersecurity and data protection professional certifications
  • Utilise existing cybersecurity-related training resources
Description View Description ▾
An in-depth exploration of cutting-edge pedagogical techniques for cybersecurity education.
Digital Forensics
Bootcamps
Digital Forensics
JSON Metadata:
{
    "courseID": "CADMUS-BTCMP-16",
    "courseTitle": "Digital Forensics",
    "authorOwner": "CTI",
    "contactPerson": [
        "Grammati Pantziou"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "Bootcamp",
        "LMS",
        "Cyber Range (Forensic VM Images & Incident Simulation Environments)"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "5-6",
    "trainingType": [
        "Upskilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "40 hours (1-2 weeks)",
    "expectedWeeklyTimeCommitment": "40",
    "traineeGroupSize": "20",
    "courseAvailability": "2026-06-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Analyse and comply with cybersecurity-related laws, regulations and legislations",
        "Analyse business processes, assess and review software or hardware security, as well as technical and organisational controls",
        "Carry out working-life practices of the data protection and privacy issues involved in the implementation of the organisational processes, finance and business strategy",
        "Collect information while preserving its integrity",
        "Collect, analyse and correlate cyber threat information originating from multiple sources",
        "Communicate, coordinate and cooperate with internal and external stakeholders",
        "Communicate, explain and adapt legal and regulatory requirements and business needs",
        "Conduct technical analysis and reporting",
        "Decompose and analyse systems to identify weaknesses and ineffective controls",
        "Develop and communicate, detailed and reasoned investigation reports",
        "Explain and present digital evidence in a simple, straightforward and easy to understand way",
        "Identify threat actors TTPs and campaigns",
        "Identify, analyse and correlate cybersecurity events",
        "Implement cybersecurity recommendations and best practices",
        "Manage and analyse log files",
        "Model threats, actors and TTPs",
        "Organise and work in a systematic and deterministic way based on evidence",
        "Practice all technical, functional and operational aspects of cybersecurity incident handling and response",
        "Understand, practice and adhere to ethical requirements and standards",
        "Work ethically and independently; not influenced and biased by internal or external actors",
        "Work on operating systems, servers, clouds and relevant infrastructures"
    ],
    "ecsfRoles": [
        "Chief Information Security Officer (CISO)",
        "Cybersecurity Auditor",
        "Cyber Legal, Policy & Compliance Officer",
        "Digital Forensics Investigator",
        "Cyber Incident Responder",
        "Cyber Threat Intelligence Specialist",
        "Penetration Tester",
        "Cybersecurity Auditor",
        "Cybersecurity Researcher",
        "Penetration Tester",
        "Digital Forensics Investigator",
        "Cyber Legal, Policy & Compliance Officer"
    ],
    "targetAudience": [
        "SOC Analysts & Incident Responders",
        "IT Security Professionals",
        "Law Enforcement Cyber Units",
        "CERT/CSIRT members",
        "Cybersecurity analysts transitioning into DFIR",
        "Cloud & System Administrators"
    ],
    "prerequisitesEntryReq": [
        "Solid understanding of networking (TCP/IP, logs, protocols)",
        "Familiarity with Linux and Windows environments",
        "Basic knowledge of cybersecurity concepts",
        "Ability to work with CLI tools",
        "Recommended: Completion of a foundational Incident Response or SOC course"
    ],
    "learningObjectives": [
        "Perform end-to-end digital forensic investigations using industry-standard tools.",
        "Preserve, acquire, and verify digital evidence following legal and chain-of-custody procedures.",
        "Analyse Windows, Linux, and cloud artifacts to reconstruct incidents.",
        "Identify malware behaviours, artifacts, persistence, and forensic traces.",
        "Perform memory forensics, log analysis, and forensic triage on compromised systems.",
        "Present forensic findings in clear, defensible investigation reports suitable for legal and organisational processes.",
        "Handle incident data while respecting privacy, regulatory frameworks (GDPR, NIS2), and evidentiary integrity.",
        "Correlate threat intelligence with forensic artifacts to identify adversary TTPs."
    ],
    "suggestedLearningObjLOS": [
        "1",
        "7",
        "9",
        "11",
        "12",
        "14",
        "15",
        "18",
        "20"
    ],
    "learningOutcomes": [
        "Acquire disk and memory images with integrity verification.",
        "Analyse Windows artifacts (Registry, Prefetch, SRUM, AmCache, artifacts of execution).",
        "Analyse Linux artifacts (auth logs, bash history, systemd journals).",
        "Perform timeline and log correlation to reconstruct attacker activity.",
        "Extract IoCs and map actions to MITRE ATT&CK.",
        "Identify malware persistence, injection, and evasion patterns in forensic datasets.",
        "Produce legally sound, structured forensic reports.",
        "Communicate findings to technical and non-technical stakeholders."
    ],
    "courseDesc": "A highly practical, forensic-focused bootcamp designed to equip participants with advanced digital investigation capabilities. Through forensic VM images, compromised hosts, malware samples, and complete incident simulations, trainees learn how to acquire, preserve, analyse, and interpret digital evidence across Windows, Linux, and cloud environments. The program blends theory with intensive hands-on labs, preparing participants for real-world DFIR roles in enterprise, law enforcement, and national cybersecurity contexts.",
    "detailedContentOutlineTopic": [
        "Foundations of Digital Forensics",
        "Windows Forensics",
        "Linux Forensics",
        "Memory Forensics",
        "Malware & Intrusion Forensics",
        "Cloud & Virtualised Environment Forensics",
        "Timeline Analysis & Correlation",
        "Full Incident Simulation"
    ],
    "reqPlatformsInfra": [
        "Forensic VM images (Windows & Linux)",
        "Volatility 3, Autopsy/Sleuth Kit",
        "Plaso/log2timeline, Timesketch",
        "FTK Imager (free version)",
        "ELK Stack forensic datasets",
        "Custom malware triage images",
        "Cloud forensic log datasets"
    ],
    "langDeliveryMaterial": "English",
    "assessmentMethod": [
        "Quizzes on concepts (20%)",
        "Hands-on lab assignments (40%)",
        "Final capstone project (40%): team-based simulation with report.",
        "(Participants must achieve ≥70% aggregate to pass.)"
    ],
    "certOffered": [
        "An accreditation is offered to the participant for a combined (average) minimum score of ≥ 70 % over all exam methods"
    ],
    "supportingMaterial": [
        "Slide decks",
        "Forensic lab guides (step-by-step)",
        "Incident datasets",
        "Memory images",
        "Disk images",
        "Logs, IoCs, timelines",
        "Casebook templates in DOCX/PDF"
    ],
    "ectsCredsEquivalent": "2",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "Real-world forensic datasets updated annually. Bootcamp can be stacked with IR or Threat Intelligence modules. Optional extension into Malware Reverse Engineering.",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-16 Owner: CTI
Available for training June 2026
Duration 40 hours
Platform Category Bootcamp LMS Cyber Range (Forensic VM Images & Incident Simulation Environments)
Proficiency Level Intermediate
Training Type Upskilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Chief Information Security Officer (CISO) Cybersecurity Auditor Cyber Legal, Policy & Compliance Officer Digital Forensics Investigator Cyber Incident Responder Cyber Threat Intelligence Specialist Penetration Tester Cybersecurity Auditor Cybersecurity Researcher Penetration Tester Digital Forensics Investigator Cyber Legal, Policy & Compliance Officer
ECSF Skills View Skills ▾
  • Analyse and comply with cybersecurity-related laws, regulations and legislations
  • Analyse business processes, assess and review software or hardware security, as well as technical and organisational controls
  • Carry out working-life practices of the data protection and privacy issues involved in the implementation of the organisational processes, finance and business strategy
  • Collect information while preserving its integrity
  • Collect, analyse and correlate cyber threat information originating from multiple sources
  • Communicate, coordinate and cooperate with internal and external stakeholders
  • Communicate, explain and adapt legal and regulatory requirements and business needs
  • Conduct technical analysis and reporting
  • Decompose and analyse systems to identify weaknesses and ineffective controls
  • Develop and communicate, detailed and reasoned investigation reports
  • Explain and present digital evidence in a simple, straightforward and easy to understand way
  • Identify threat actors TTPs and campaigns
  • Identify, analyse and correlate cybersecurity events
  • Implement cybersecurity recommendations and best practices
  • Manage and analyse log files
  • Model threats, actors and TTPs
  • Organise and work in a systematic and deterministic way based on evidence
  • Practice all technical, functional and operational aspects of cybersecurity incident handling and response
  • Understand, practice and adhere to ethical requirements and standards
  • Work ethically and independently; not influenced and biased by internal or external actors
  • Work on operating systems, servers, clouds and relevant infrastructures
Description View Description ▾
A highly practical, forensic-focused bootcamp designed to equip participants with advanced digital investigation capabilities. Through forensic VM images, compromised hosts, malware samples, and complete incident simulations, trainees learn how to acquire, preserve, analyse, and interpret digital evidence across Windows, Linux, and cloud environments. The program blends theory with intensive hands-on labs, preparing participants for real-world DFIR roles in enterprise, law enforcement, and national cybersecurity contexts.
Executive Cybersecurity Leadership
Bootcamps
Executive Cybersecurity Leadership
JSON Metadata:

{
    "courseID": "CADMUS-BTCMP-17",
    "courseTitle": "Executive Cybersecurity Leadership",
    "authorOwner": "NCSA",
    "contactPerson": [
        "Costas Lambrinoudakis"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "Bootcamp (LMS preparation and consolidation activities with instructor-led sessions and a table-top exercise)"
    ],
    "proficiencyLevel": "Intermediate",
    "eqfLevel": "6",
    "trainingType": [
        "Upskilling (primary)",
        "Cross-skilling (secondary - for learners moving from non-cyber roles into cyber governance and crisis response)"
    ],
    "deliveryMethod": "-\tOnline instructor-led (synchronous)\n-\tOnline self-paced (asynchronous LMS preparation and consolidation)\nDelivery Mode Note: This bootcamp is delivered fully online to support working professionals. Live sessions run via secure videoconferencing and are supported by the CADMUS LMS for access to materials, submissions and tracking.",
    "durationIntensity": "Total duration is between 12 hours and 13 hours 55 minutes, delivered over 2 weeks, depending on (i) diagnostic routing and (ii) whether remediation/retake is required after the final quiz. \nThis total includes LMS preparation and consolidation, three (3) live instructor-led sessions, and a table-top exercise.\n\nA.\tLive instructor-led delivery (online synchronous): 9 hours total (3 sessions x 3 hours each) \n•\tWeek 1: 2 sessions x 3 hours = 6 live hours\n•\tWeek 2: 1 session x 3 hours = 3 live hours (includes the table-top exercise and debrief)\nLive sessions follow an executive incident workflow (briefing, decision-making, stakeholder communication, improvement planning) using facilitated group work and shared artefact production (decision log, executive briefing, communication drafts).\n\nB. LMS self-paced work: 3h - 3h55min, depending on routing and conditional remediation where applicable)\n•\tPre-bootcamp (before the first live session): 2h - 2h55 min (adaptive routing)\no\tOrientation and templates: 10 min\no\tEntry diagnostic quiz: 30 min\no\tRouting based on diagnostic score:\n\tStandard preparation micro-units: 90 min\n\tReadiness refresher (if diagnostic score <70%): +45 min (adds to standard preparation)\n\tAdvanced route (if diagnostic ≥85%): 80 min (advanced deepening case and board brief task, replacing the standard preparation micro-units)\n•\tPost-bootcamp: 1h\no\tAfter Action Review submission: 20 min\no\tFinal quiz: 30 min\no\tFeedback: 10 min\n    Remediation (only if final quiz score <50%): +1hr\nRemediation review: 30 min\nFinal quiz retake: 30 min\n\nIntensity: Part-time and condensed (2-week format)\n•\tWeek 1 workload: 8h - 8h55 min (6h live + 2h-2h and 55min LMS pre-work depending on routing)\n•\tWeek 2 workload: 4h (3h live + 1h LMS post-work)\no\tUp to 5h for learners requiring remediation and a quiz retake.",
    "expectedWeeklyTimeCommitment": "~6 –7 hours/week average (over 2 weeks)",
    "traineeGroupSize": "12-20",
    "courseAvailability": "2026-05-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Analyse and comply with cybersecurity-related laws, regulations and legislations",
        "Assess and enhance an organisation’s cybersecurity posture",
        "Collaborate with other team members and colleagues",
        "Communicate, present and report to relevant stakeholders",
        "Define and apply maturity models for cybersecurity management",
        "Design, apply, monitor and review Information Security Management System (ISMS) either directly or by leading its outsourcing",
        "Enable business assets owners, executives and other stakeholders to make risk-informed decisions to manage and mitigate risks",
        "Identify and solve cybersecurity-related issues",
        "Influence an organisation’s cybersecurity culture"
    ],
    "ecsfRoles": [
        "Chief Information Security Officer (CISO)",
        "Cyber Legal, Policy & Compliance Officer"
    ],
    "targetAudience": [
        "Managers and decision makers",
        "Sector focus: public sector and SMEs"
    ],
    "prerequisitesEntryReq": [
        "Basic cybersecurity awareness, no advanced technical skills required.",
        "Basic cybersecurity awareness. No advanced technical skills required."
    ],
    "learningObjectives": [
        "Evaluate and govern enterprise-wide cybersecurity efforts by aligning policies and practices with organizational strategy and regulatory requirements.",
        "Strengthen executive decision-making through strategic insights into risk management, threat landscapes, and emerging challenges in cybersecurity.",
        "Lead and influence organizational culture by fostering cross-functional collaboration, accountability, and resilience in cybersecurity initiatives.",
        "Practice executive-level cyber crisis decision-making (governance, communications, regulatory response) through a Table-Top Exercise."
    ],
    "suggestedLearningObjLOS": [
        "5",
        "14",
        "17",
        "18"
    ],
    "learningOutcomes": [
        "After successful completion of the course the participants will be able to:",
        "Apply governance frameworks to analyze a case study and recommend enterprise-wide cybersecurity policies.",
        "Demonstrate strategic decision-making by evaluating risk scenarios and presenting prioritized mitigation strategies.",
        "Model executive leadership by outlining approaches to drive organizational culture change and cross-functional cybersecurity collaboration.",
        "Lead an executive-level cyber incident coordination process (roles, escalation, decision logging)",
        "Produce an executive briefing (situation, impact, options, decision, next actions).",
        "Choose and justify a response strategy balancing legal, reputational, operational, and financial risk.",
        "Demonstrate stakeholder communication choices appropriate to regulators, media, customers and internal staff."
    ],
    "courseDesc": "Εxecutive Cybersecurity Leadership is a short, practice-oriented bootcamp for managers and decision makers in the public sector and small and medium sized enterprises. It blends self-paced preparation in the Learning Management System (LMS) with three live online instructor-led sessions on governance and oversight, risk-informed decision making, executive communication and crisis leadership. Learners start with onboarding and templates, then complete an entry diagnostic quiz that routes them to a readiness refresher, a standard preparation path, or an advanced deepening case and board brief task. Participants apply learning in a facilitated table-top exercise simulating the first seventy-two hours of a cyber incident, producing executive-ready outputs including a decision log, stakeholder communications and an after-action review. The bootcamp closes with a final quiz and learner feedback, with an optional remediation and retake path for learners who need it.",
    "detailedContentOutlineTopic": [
        "Cybersecurity in the Executive Agenda: Why cybersecurity is a board-level issue, Cybersecurity as a business enabler, not just an IT function, The evolving regulatory and geopolitical landscape",
        "Governing Enterprise-Wide Cybersecurity: Cybersecurity governance frameworks (NIST, ISO, CIS, etc.), Roles of the Board, Chief Information Security Officer (CISO), Chief Information Officer (CIO), and executive leadership, Accountability and reporting structures, Executive oversight metrics and Key Performance Indicators (KPIs), reporting cadence",
        "Risk Management and Strategic Decision-Making: Identifying and prioritizing enterprise risks, Translating cyber risk into financial, operational and reputational impact, Scenario planning and stress testing, Decision-making under uncertainty: balancing cost, security and innovation",
        "Crisis Management and Executive Response: Executive role in the “first 72 hours”, Incident response planning and tabletop simulations, Stakeholder communications: board, regulators, media, customers, Case study: executive missteps and best practices, Capstone Table-Top Exercise (TTX): decision log, communications artefacts, One-page After Action Review",
        "Building a Resilient Cybersecurity Culture: Executive influence on culture and employee behavior, Organization-wide awareness and accountability, Change management strategies for embedding cybersecurity in operations",
        "Emerging Trends and Strategic Foresight (Executive Implications): Artificial intelligence and machine learning: risk, governance, investment choices, Cloud, supply chain, and third-party risks, Digital transformation (Internet of Things, 5G, quantum): executive risk outlook, Preparing for the next decade of executive cyber risks"
    ],
    "reqPlatformsInfra": [
        "CADMUS LMS for modules, quizzes, tracking activities and submissions",
        "Secure videoconferencing for live delivery and breakout rooms",
        "Collaboration workspace for shared team artefacts",
        "Digital table-top exercise materials including scenario pack, inject deck, role cards, templates",
        "Optional: session recordings stored in LMS subject to consent and project policy"
    ],
    "langDeliveryMaterial": "English",
    "assessmentMethod": [
        "Diagnostic assessment (pre-bootcamp, not included in GPA): Instrument: Diagnostic Quiz AND Completion criterion: Attempt recorded in the LMS: uting rules: Learners scoring <70% unlock the readiness refresher before proceeding to the standard preparation micro-units AND Learners scoring between 70%-84% proceed to the standard preparation micro-units AND Learners scoring >=85% unlock the advanced deepening path after which the learner rejoins the standard bootcamp flow",
        "Formative assessment (not included in GPA): Instrument: Embedded self-check/κknowledge-check questions within preparation and refresher units (auto-feedback provided) AND Completion criterion: Attempt recorded",
        "Summative assessment 1 (Instructor-led, included in GPA): Table-Top Exercise (TTX) performance AND Instrument: Instructor-observed participation plus assessment of team artefacts using the TTX grading rubric (e.g. decision log and stakeholder communications pack, submitted via the LMS). AND Pass criterion: Participated and submitted required artefacts. Achieved at least 50% overall on the rubric, with no critical criterion below minimum (pass/fail gate).",
        "Summative assessment 2 (LMS end-of-course, included in GPA): Final Quiz AND Instrument: Final Quiz AND Pass criterion: Score at least 50%. If score is below 50% percent, remediation content is unlocked, followed by one retake.",
        "Course grade (GPA) definition (0–100): GPA = 60% × TTX score + 40% × Final Quiz score (diagnostic and formative assessment activities do not contribute to the GPA).",
        "Overall course pass/fail for successful completion: Pass requires GPA at least 50% and table-top exercise passed and final quiz passed.",
        "Notes: An attendance certificate may still be issued if the attendance threshold is met (even if assessment pass criteria are not achieved). Evidence capture (Audit trail): Assessment outcomes and learning analytics (e.g. quiz scores, completion status, rubric scoring and artefact submissions) are captured in the CADMUS LMS to support competence validation and programme monitoring."
    ],
    "certOffered": [
        "Attendance certificate: participation in ≥90% of total workload (regardless of score).",
        "Attendance evidence (online): videoconferencing attendance logs & LMS activity/submission records for required team/individual artefacts.",
        "Successful completion certificates (require attendance ≥90% AND overall Pass): a) Completion: 50 ≤ GPA ≤ 64.9 b) Very good performance: 65 ≤ GPA ≤ 84.9 c) Excellent performance: 85 ≤ GPA ≤ 100",
        "Micro-credential badge: Awarded when GPA ≥70, attendance ≥90%, and no critical TTX criterion is graded below minimum."
    ],
    "supportingMaterial": [
        "Live session slide decks",
        "Executive primer reading pack used across the three preparation micro-units",
        "Template pack including decision log, communications templates, board memo template, after-action review template",
        "Table-top exercise scenario pack and inject deck",
        "Role cards",
        "Table-top exercise grading rubric",
        "Facilitator guide for running the exercise"
    ],
    "ectsCredsEquivalent": "~0.5 ECTS (indicative)",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "Designed as a bootcamp pathway with adaptive routing at entry diagnostic and optional remediation after the final quiz. Alternative paths are hidden from learners not assigned to them, so each learner sees only their active path.",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-17 Owner: NCSA
Available for training May 2026
Duration 2 days
Platform Category Bootcamp (LMS preparation and consolidation activities with instructor-led sessions and a table-top exercise)
Proficiency Level Intermediate
Training Type Upskilling
Delivery Method Online, Instructor Led with Q&A Sessions
ECSF Roles View Roles ▾
Chief Information Security Officer (CISO) Cyber Legal, Policy & Compliance Officer
ECSF Skills View Skills ▾
  • Analyse and comply with cybersecurity-related laws, regulations and legislations
  • Assess and enhance an organisation’s cybersecurity posture
  • Collaborate with other team members and colleagues
  • Communicate, present and report to relevant stakeholders
  • Define and apply maturity models for cybersecurity management
  • Design, apply, monitor and review Information Security Management System (ISMS) either directly or by leading its outsourcing
  • Enable business assets owners, executives and other stakeholders to make risk-informed decisions to manage and mitigate risks
  • Identify and solve cybersecurity-related issues
  • Influence an organisation’s cybersecurity culture
Description View Description ▾
This intensive two-day program equips senior executives with the strategic insights and leadership tools needed to govern enterprise-wide cybersecurity. Through expert-led sessions, case studies, and interactive workshops, participants will learn how to oversee risk management, shape effective policies, and lead organizational culture toward resilience. Designed for board members, C-suite leaders, and top-level decision-makers, the course empowers executives to navigate complex cyber threats, make informed strategic decisions, and safeguard organizational trust in an increasingly digital world.
OSINT Bootcamp
Bootcamps
OSINT Bootcamp
JSON Metadata:

{
    "courseID": "CADMUS-BTCMP-18",
    "courseTitle": "OSINT Bootcamp",
    "authorOwner": "CTI",
    "contactPerson": [
        "Ioanna Kantzavelou"
    ],
    "cadmusCourseURL": "",
    "platformCategory": [
        "Bootcamp"
    ],
    "proficiencyLevel": "Basic",
    "eqfLevel": "4-5",
    "trainingType": [
        "Upskilling",
        "Cross-skilling"
    ],
    "deliveryMethod": "Hybrid & Physical",
    "durationIntensity": "20 hours (8 hours ILT + 12 hours Labs, 2 weeks)",
    "expectedWeeklyTimeCommitment": "10",
    "traineeGroupSize": "10-25",
    "courseAvailability": "2026-05-01 00:00:00",
    "ecsfKeySkillsTarget": [
        "Conduct ethical hacking",
        "Identify, analyse and correlate cybersecurity events",
        "Identify and exploit vulnerabilities",
        "Use penetration testing tools effectively",
        "Conduct technical analysis and reporting",
        "Decompose and analyse systems to identify weaknesses and ineffective controls",
        "Work on operating systems, servers, clouds and relevant infrastructures",
        "Communicate, present and report to relevant stakeholders",
        "Work ethically and independently; not influenced and biased by internal or external actors"
    ],
    "ecsfRoles": [
        "Cyber Threat Intelligence Specialist",
        "Cybersecurity Researcher",
        "Digital Forensics Investigator",
        "Penetration Tester",
        "Cyber Incident Responder"
    ],
    "targetAudience": [
        "Cybersecurity professionals and SOC analysts.",
        "Private investigators and intelligence researchers.",
        "Journalists and OSINT hobbyists.",
        "Law Enforcement Officers (LEOs) and digital forensics specialists."
    ],
    "prerequisitesEntryReq": [
        "Basic proficiency in web browsing and internet navigation.",
        "Foundational knowledge of networking concepts (IP addresses, Domains, DNS).",
        "Familiarity with various social media platforms and their structures."
    ],
    "learningObjectives": [
        "Master the Intelligence Lifecycle (Planning, Collection, Processing, Analysis, Dissemination).",
        "Learn advanced search engine techniques, including Google Dorking and advanced operators.",
        "Conduct deep-dive investigations into Social Media (SOCMINT) and the Dark Web.",
        "Utilize and configure automated OSINT tools and frameworks.",
        "Implement robust Operation Security (OPSEC) techniques to protect the investigator's identity and infrastructure."
    ],
    "suggestedLearningObjLOS": [
        "6",
        "11",
        "23"
    ],
    "learningOutcomes": [
        "Conduct complex, multi-layered investigations on individuals and organizations.",
        "Identify and verify sock puppets, fake accounts, and disinformation campaigns.",
        "Perform Geolocation and Chronolocation on images and videos to verify locations and timestamps.",
        "Deploy and master industry-standard tools such as Maltego, SpiderFoot, and Sherlock.",
        "Produce comprehensive, evidence-based investigative reports suitable for executive or legal review."
    ],
    "courseDesc": "The OSINT Bootcamp is an intensive, practitioner-led program designed to equip participants with the advanced skills required to navigate the vast landscape of publicly available information. In an era of data saturation, the ability to extract actionable intelligence from the \"noise\" is a critical capability for cybersecurity, investigative, and strategic roles.\nThrough a blend of theoretical modules, instructor-led workshops, and hands-on Cyber Range labs, learners will master the art and science of Open Source Intelligence. The curriculum covers the entire intelligence lifecycle—from planning and secure data collection (OPSEC) to advanced analysis and final reporting.\nParticipants will move beyond simple web searches, learning how to uncover hidden digital footprints across the Surface Web, Social Media platforms (SOCMINT), and the Dark Web. A significant portion of the bootcamp is dedicated to technical OSINT, including the investigation of network infrastructure, leaked datasets, and the use of automated tools to correlate complex entities.\n\nThe program culminates in a Capstone Investigative Challenge, where participants apply their skills to a real-world simulated case study. By the end of this bootcamp, graduates will be able to conduct defensible investigations, verify the authenticity of digital media through geolocation, and provide clear, evidence-based reports to support decision-makers.",
    "detailedContentOutlineTopic": [
        "Introduction to OSINT & OPSEC",
        "Advanced Web Searching (Google/Bing Dorking)",
        "People & Corporate Investigations",
        "SOCMINT (Social Media Intelligence)",
        "Geolocating & Chronolocation",
        "Technical OSINT [IPs, BGP, DNS, SSL Certificates and IoT searching (Shodan)]",
        "Dark Web & Breached Data",
        "Automated OSINT Tools",
        "Capstone CTF (Cyber Range)"
    ],
    "reqPlatformsInfra": [
        "Virtual Machines (Kali Linux or CSI Linux)",
        "Cloud-based OSINT tools",
        "API datasets"
    ],
    "langDeliveryMaterial": "English",
    "assessmentMethod": [
        "Hands-on Labs (40%)",
        "Weekly Quizzes (20%)",
        "Final Investigative Project/Report (40%) - Pass score: 70%."
    ],
    "certOffered": [
        "An accreditation is offered to the participant for a combined (average) minimum score of ≥ 70 % over all exam methods"
    ],
    "supportingMaterial": [
        "Lab guides",
        "OSINT mind-maps",
        "cheat sheets for dorking",
        "researching templates"
    ],
    "ectsCredsEquivalent": "",
    "skillBasedMicroCredECTSCred": "",
    "additionalNotesComments": "",
    "repoPath": "",
    "linkType": "",
    "digitalTechnology": "AI, cybersecurity, IoT, big data, blockchain, robotics, augmented reality, virtual reality, high performance computing, machine learning, cloud computing, 5G, telecommunications, WiFi, quantum computing, software, mobile application development, web development, microelectronics, digital skills, digital transformation, robotic process automation, edge computing, Cyber Skills Academy.",
    "endDate": "It is calculated indirectly from the start and duration.",
    "geographicScope": "European Union",
    "isThisCourseFree": "Yes",
    "typeOfFunding": "",
    "typeOfTrainingRecord": "",
    "linkeText": "",
    "fieldOfEducationandTraining": "",
    "permissionToDistributeRawEducationalMaterial": ""
}
ID: CADMUS-BTCMP-18 Owner: CTI
Available for training May 2026
Duration 20 hours
Platform Category Bootcamp (LMS Cyber Range)
Proficiency Level Basic
Training Type Upskilling / Cross-skilling
Delivery Method Hybrid & Physical
ECSF Roles View Roles ▾
Cyber Threat Intelligence Specialist Cybersecurity Researcher Digital Forensics Investigator Penetration Tester Cyber Incident Responder
ECSF Skills View Skills ▾
  • Conduct ethical hacking
  • Identify, analyse and correlate cybersecurity events
  • Identify and exploit vulnerabilities
  • Use penetration testing tools effectively
  • Conduct technical analysis and reporting
  • Decompose and analyse systems to identify weaknesses and ineffective controls
  • Work on operating systems, servers, clouds and relevant infrastructures
  • Communicate, present and report to relevant stakeholders
  • Work ethically and independently; not influenced and biased by internal or external actors
Description View Description ▾
The OSINT Bootcamp is an intensive, practitioner-led program designed to equip participants with the advanced skills required to navigate the vast landscape of publicly available information. In an era of data saturation, the ability to extract actionable intelligence from the "noise" is a critical capability for cybersecurity, investigative, and strategic roles. Through a blend of theoretical modules, instructor-led workshops, and hands-on Cyber Range labs, learners will master the art and science of Open Source Intelligence. The curriculum covers the entire intelligence lifecycle—from planning and secure data collection (OPSEC) to advanced analysis and final reporting. Participants will move beyond simple web searches, learning how to uncover hidden digital footprints across the Surface Web, Social Media platforms (SOCMINT), and the Dark Web. A significant portion of the bootcamp is dedicated to technical OSINT, including the investigation of network infrastructure, leaked datasets, and the use of automated tools to correlate complex entities. The program culminates in a Capstone Investigative Challenge, where participants apply their skills to a real-world simulated case study. By the end of this bootcamp, graduates will be able to conduct defensible investigations, verify the authenticity of digital media through geolocation, and provide clear, evidence-based reports to support decision-makers.
3-week Cybersecurity Bootcamp: Foundations to Capstone
Bootcamps
3-week Cybersecurity Bootcamp: Foundations to Capstone
ID: CADMUS-BTCMP-19 Owner: NCSA
Available for training
Duration 50 hours
Platform Category Online Lab Environment
Proficiency Level Basic
Training Type Upskilling
Delivery Method Online instructor-led (live webinars) with self-paced labs and virtual exercises
ECSF Roles View Roles ▾
Cybersecurity auditor Cybersecurity risk manager Penetration tester
ECSF Skills View Skills ▾
  • Conduct technical analysis and reporting
  • Decompose and analyse systems to identify weaknesses and ineffective controls
  • Identify and exploit vulnerabilities
  • Identify and solve cybersecurity-related issues
  • Use penetration testing tools effectively
  • Identify threat actors TTPs and campaigns
  • Follow and practice auditing frameworks, standards and methodologies
Description View Description ▾
This intensive 12-week program builds cybersecurity foundations and practical skills for beginners. The course is structured in three phases: Foundations (Month 1) covers core concepts like the CIA triad, basic networking and system administration, common threats, and an overview of cybersecurity roles. Tools & Techniques (Month 2) introduces hands-on use of security tools (network scanners, intrusion detection, logging/SIEM) and workflows (vulnerability scanning, incident response fundamentals). Capstone Simulation (Month 3) engages teams in realistic cyber-range exercises where students respond to simulated attacks (guided by instructors). The blended curriculum includes lectures, mentoring, labs, and practice challenges. Throughout, real-world scenarios and projects reinforce learning. Certification preparation and career guidance are integrated.