Signed in as:
filler@godaddy.com
professional certifications
THE ACADEMY
The Cyber Defense Center Academy develops capable defenders through authentic training, measurable performance, and progressive certification. Our programs combine independent research, real world operational experience, applied science, and immersive learning to prepare professionals for the evolving challenges of cyber defense.
Unlike traditional certification programs that emphasize memorization and examinations, the Academy focuses on developing operational capability through practical application, consequence informed decision making, simulations, exercises, and continuous improvement. Every certification is designed to strengthen individuals, organizations, and communities while advancing the practice of collective defense.
Whether protecting critical infrastructure, securing operational technologies, safeguarding sensitive operations, or preparing organizations for wartime cyber conflict, the Cyber Defense Center Academy equips defenders with the knowledge, skills, and mindset needed to defend what matters most.
professional pathways
OTSEC™
COMING SOON
OTSEC™
OTSEC™ (Operational Technology Security) develops professionals to defend the operational technologies and industrial control systems that power modern society. Through research driven instruction, progressive certifications, immersive laboratories, and real world exercises, OTSEC prepares defenders to protect the critical infrastructure that communities depend upon every day.
OPSEC
COMING SOON
OTSEC™
OPSEC™ (Operational Security) develops professionals to protect missions through operational security, intelligence informed planning, and wartime readiness. Through research driven instruction, progressive certifications, advanced tabletop facilitation, and consequence informed methodologies, OPSEC prepares defenders to anticipate threa
OPSEC™ (Operational Security) develops professionals to protect missions through operational security, intelligence informed planning, and wartime readiness. Through research driven instruction, progressive certifications, advanced tabletop facilitation, and consequence informed methodologies, OPSEC prepares defenders to anticipate threats, preserve mission effectiveness, and strengthen organizational resilience.
COMING SOON
COMING SOON
COMING SOON
The Cyber Defense Center Academy is developing one of the most innovative professional certification programs ever introduced to the cybersecurity industry. Built upon years of independent research, applied science, gamification, and operational experience, this groundbreaking program will redefine how cyber defenders develop capability,
The Cyber Defense Center Academy is developing one of the most innovative professional certification programs ever introduced to the cybersecurity industry. Built upon years of independent research, applied science, gamification, and operational experience, this groundbreaking program will redefine how cyber defenders develop capability, demonstrate readiness, and earn professional recognition.
OTSEC™ CERTIFICATIONS
OTSEC TRAINING AND CERTIFICATION
OTSEC™ (Operational Technology Security) is the Cyber Defense Center’s flagship research and readiness program for securing critical infrastructure, industrial control systems (ICS), and exotic operational technologies. Beyond training and certification, OTSEC encompasses full-spectrum OT strategy, advisory services, advanced research, and live simulations designed to defend systems that move power, fuel, water, goods, and people.
The OTSEC™ program develops and tests defense capabilities across all major critical infrastructure sectors—beginning with the electricity subsector (generation, transmission, and distribution) and expanding into pipelines and oil & gas, water and wastewater, transportation (rail, ports, aviation, and logistics), chemical facilities, manufacturing, and other high-consequence industrial environments. Our work spans both conventional ICS and “exotic” or non-standard systems, including bespoke controls, legacy platforms, and emerging automation technologies.
OTSEC™ research and services include:
- Strategy & Architecture: Sector-specific OT security strategies, reference architectures, and consequence-informed engineering practices.
- Threat Modeling & Intelligence: Adversary modeling, campaign analysis, and OT-focused threat intelligence for nation-state, criminal, and insider threats.
- Defense Capability Development: Design, evaluation, and optimization of monitoring, detection, segmentation, and response capabilities across IT/OT/IoT boundaries.
- Simulations & Cyber Ranges: Realistic grid and plant simulations (e.g. GridSim), live lab environments, and multi-entity tabletop exercises for wartime and crisis readiness.
- Advisories & Incident Support: OT-focused advisories, early-warning insights, and support for complex investigations and recovery planning.
As OTSEC™ matures sector by sector, it provides a unified, consequence-aware approach to safeguarding critical infrastructure which provides operators, regulators, and communities a practical path to defend the physical world against increasingly sophisticated cyber threats.
CYBER DEFENSE ASSOCIATE CERTIFICATION
The Cyber Defense Associate Certification (CDAC) is the foundational certification within the OTSEC Academy. It prepares professionals to understand, evaluate, and apply cyber defense capabilities across Operational Technology (OT), Industrial Control Systems (ICS), and cyber-physical environments.
Unlike traditional OT security certifications that focus primarily on technologies or compliance requirements, the CDAC introduces a capability-based approach to cyber defense. Students learn how security technologies, engineering practices, governance, risk management, compliance, and operational performance work together to build resilient critical infrastructure.
The curriculum spans more than ten critical infrastructure sectors and industrial control system environments, providing a broad understanding of how cyber defense capabilities are applied across diverse operational technologies.
Upon completion, learners possess a foundation for engineering, assessing, and continuously improving cyber defense capabilities using the Cyber Defense Center's capability maturity model.
CYBER DEFENSE PROFESSIONAL CERTIFICATION
The Cyber Defense Professional Certification (CDPC) builds upon the foundational knowledge established through the Cyber Defense Associate Certification by advancing learners into industry specific cyber defense. While the Associate certification develops a broad understanding of cyber defense capabilities across multiple Operational Technology (OT), Industrial Control System (ICS), and cyber physical environments, the Professional certification requires candidates to select a critical infrastructure or industry sector in which to develop specialized expertise.
Each industry presents unique operational technologies, regulatory requirements, threat actors, engineering challenges, and mission priorities. The CDPC prepares professionals to apply cyber defense capabilities within these operational environments while considering the business, operational, safety, reliability, and compliance objectives unique to their selected industry.
Students develop a deeper understanding of capability based cyber defense by learning how technologies, engineering practices, governance, risk management, compliance, operational performance, and workforce readiness integrate to protect real world industrial operations.
Upon completion, learners demonstrate the ability to assess, implement, validate, and continuously improve cyber defense capabilities within a specific industry sector using the Cyber Defense Center's capability maturity model. This certification prepares professionals to move beyond general cyber security knowledge and become trusted practitioners capable of engineering resilient operational environments.
CYBER DEFENSE EXPERT CERTIFICATION (CDEC)
The Cyber Defense Expert Certification (CDEC) represents advanced capability within a selected critical infrastructure or industry sector. Building upon the Cyber Defense Professional Certification, candidates continue their development within the same industry, demonstrating mastery of the cyber defense capabilities, operational technologies, engineering principles, regulatory requirements, and threat landscape unique to that environment.
The Expert certification emphasizes the engineering, optimization, and continuous maturation of cyber defense capabilities. Learners develop the knowledge and practical skills required to design, assess, integrate, validate, and improve layered cyber defenses while balancing security, safety, reliability, and operational performance.
Upon completion, certified professionals demonstrate the expertise to lead the engineering and maturation of cyber defense capabilities within their chosen industry, preparing them for senior technical, architectural, consulting, and leadership roles supporting mission critical operations.
opsec CERTIFICATIONS
OPSEC™ Certification Path
Operational Security Through Demonstrated Capability
The OPSEC™ certification pathway recognizes professionals who design, facilitate, validate, and continuously improve cyber defense tabletop exercises that strengthen organizational readiness, operational resilience, and collective defense.
Unlike traditional certification programs that rely primarily on classroom instruction and written examinations, the OPSEC™ pathway emphasizes demonstrated capability. Certifications are earned by planning, conducting, observing, or leading realistic exercises that prepare organizations to make informed decisions during cyber incidents, operational disruptions, and wartime conditions.
The program builds upon the Cybersecurity and Infrastructure Security Agency (CISA) Tabletop Exercise Package (CTEP) framework and Homeland Security Exercise and Evaluation Program (HSEEP) methodology while extending these foundations through the Cyber Defense Center's independent research, operational security doctrine, wartime preparedness principles, consequence informed engineering methodologies, and collective defense models.
Organizations may submit existing tabletop exercises or planned exercises for certification review, allowing mature exercise programs to gain independent recognition without requiring participants to repeat work they have already completed.
The OPSEC™ pathway consists of three independent certifications that recognize different methods of demonstrating operational capability.
Operational Security Associate (OSA™)
Tabletop Exercise Certification
The Operational Security Associate (OSA™) certification recognizes individuals who successfully design and facilitate a qualifying cybersecurity tabletop exercise that meets Cyber Defense Center certification standards.
Rather than requiring attendance in a specific training program, this certification validates demonstrated capability through an independent review of a completed or planned exercise.
To qualify, the tabletop exercise must:
- Align with applicable CISA and DHS tabletop exercise guidance.
- Meet all Cyber Defense Center certification prerequisites.
- Include the required planning, facilitation, participant, and after action documentation.
- Demonstrate operational realism and measurable learning objectives.
Organizations may submit tabletop exercises conducted within the previous twelve months or submit materials for an upcoming exercise prior to delivery.
Following a successful review, certification is awarded to both:
- The Facilitator (Individual Certification)
- The Executive Sponsor or Exercise Sponsor (Individual Recognition)
This certification demonstrates the ability to plan and conduct structured operational security exercises that strengthen organizational preparedness and cyber resilience.
Operational Security Professional (OSP™)
Observed Exercise Certification
The Operational Security Professional (OSP™) certification builds upon the Associate certification by introducing independent observation and validation by the Cyber Defense Center.
Rather than relying solely on documentation, Professional certification requires Cyber Defense Center participation through observation, co-facilitation, or direct facilitation of the tabletop exercise.
Certification activities may include:
- Exercise planning review
- Scenario validation
- Live exercise observation
- Facilitation support
- Participant evaluation
- After Action Report validation
- Improvement Plan review
Following successful completion of the exercise and validation of all required materials, certification is awarded to both:
- The Lead Facilitator (Individual Professional Certification)
- The Executive Sponsor or Exercise Sponsor (Individual Recognition)
Professional certification demonstrates the ability to conduct high quality operational security exercises that meet Cyber Defense Center standards for realism, execution, and measurable organizational improvement. In addition, the Associate Certification is not a prerequisite for this certification.
WTF™ (Wartime Tabletop Facilitator)
Advanced Wartime Exercise Certification
The Wartime Tabletop Facilitator certification represents the Cyber Defense Center's most advanced tabletop facilitation credential. Unlike the Associate and Professional certifications, WTF™ includes a dedicated one week training and certification program focused on facilitating complex wartime cyber defense exercises involving critical infrastructure, government, supply chains, and collective defense operations.
Participants learn to customize and converge multiple CISA exercise packages into realistic organization specific scenarios while integrating current threat intelligence, cyber physical convergence, operational technology, supply chain compromise, and nation state attack scenarios.
Beyond CISA guidance, WTF™ prepares facilitators to incorporate the Cyber Defense Center's operational and wartime methodologies into every exercise, including:
- Jefferson Cyber Defense Doctrine
- Wartime Readiness Levels
- Wartime Escalation Framework
- National and Community Collective Defense Principles
- Consequence Informed Engineering
- Critical Infrastructure Protection
- Operational Security (OPSEC)
- Cyber Defense Center advisories, research, and emerging threat intelligence
- Lessons learned from current cyber conflicts and high consequence incidents
Facilitators learn to guide executive leadership, technical responders, legal counsel, emergency management, communications teams, public safety organizations, regulators, and operational personnel through realistic decision making under uncertainty.
Every exercise concludes with structured hotwash activities, participant evaluations, and a DHS aligned After Action Report and Improvement Plan that transforms observations into measurable organizational readiness improvements.
What Makes OPSEC™ Different
The OPSEC™ certification pathway is designed around demonstrated capability, not course completion.
Each certification recognizes a different method of proving operational excellence:
- OSA™ validates independently submitted tabletop exercises through document review and certification.
- OSP™ validates facilitation through Cyber Defense Center observation, mentorship, or participation.
- WTF™ prepares and certifies advanced facilitators to lead wartime cyber defense exercises for critical infrastructure, government, and collective defense organizations.
Together, these certifications provide organizations with a progressive framework for recognizing tabletop facilitators, strengthening exercise programs, and improving operational readiness through authentic, measurable practice.
What You'll Learn
The OPSEC™ certification pathway prepares facilitators, security professionals, and organizational leaders to:
- Design realistic cyber crisis and operational security tabletop exercises.
- Develop consequence informed exercise objectives aligned with organizational risk.
- Customize and integrate CISA tabletop exercise packages for organization specific scenarios.
- Incorporate current threat intelligence, operational technology, supply chain, insider threat, and nation state attack scenarios into exercises.
- Facilitate executive, technical, operational, and cross functional tabletop exercises.
- Guide productive discussions while maintaining exercise realism and participant engagement.
- Evaluate organizational performance, decision making, communication, and operational effectiveness.
- Conduct structured hotwash sessions and facilitate meaningful participant feedback.
- Develop DHS aligned After Action Reports and actionable Improvement Plans.
- Measure organizational readiness, operational maturity, and continuous improvement.
- Strengthen resilience through recurring exercise programs and measurable capability development.
- Apply Operational Security (OPSEC), consequence informed engineering, and collective defense principles throughout the exercise lifecycle.
- Prepare organizations to respond effectively to cyber incidents, operational disruptions, and wartime conditions.
realistic scenarios - real results
The Cyber Defense Center combines years of operational consulting, consequence informed engineering, cyber defense research, and collective defense methodologies to create exercises that reflect today's threat landscape rather than compliance checklists.
This course is designed for:
- Security Leaders
- CISOs
- Incident Response Leaders
- Emergency Managers
- Business Continuity Professionals
- Risk Managers
- Critical Infrastructure Operators
- Government Organizations
- Exercise Facilitators
- Cyber Defense Consultants
to learn to facilitate realistic exercises that incorporate:
- Nation state cyber operations
- Critical infrastructure attacks
- Supply chain compromise
- Insider threats
- Artificial intelligence
- Physical disruption
- Emergency management
- Executive decision making
- Public private coordination
- Wartime operational planning
Every exercise is designed for defenders that desire to improve readiness, not simply satisfy an annual requirement.