CSfC Trusted Integrator Training Workshop:

NSA Commercial Solutions for Classified (CSfC) Trusted Integrator Training - Program Overview

This program provides comprehensive training for individuals seeking to become Trusted Integrators for NSA's Commercial Solutions for Classified (CSfC) program. The 14 modules cover the essential knowledge and skills required to design, implement, and maintain secure CSfC solutions. Each module combines theoretical concepts with practical exercises and real-world scenarios to ensure a thorough understanding of the material.

Program Objectives: Upon completion of this program, students will be able to:

• Understand the principles and requirements of the CSfC program.
• Design and architect secure CSfC solutions using approved components.
• Implement and configure CSfC solutions according to best practices.
• Troubleshoot and maintain CSfC solutions.
• Understand the legal and ethical considerations related to CSfC.
• Prepare and submit required documentation for CSfC accreditation.

Target Audience: This program is designed for IT professionals, system engineers, security engineers, and other individuals involved in the design, implementation, and maintenance of secure communication systems within the U.S. Government and its contractors.

Program Structure: The program consists of 14 modules, each focusing on a specific aspect of CSfC. The modules are structured to build upon each other, providing a progressive learning experience.

---

Module Breakdown:

Phase 1: Foundations of CSfC (Modules 1-3)

• Module 1: Introduction to CSfC: Overview of the CSfC program, its goals, and its importance in securing national security information. Introduces key concepts, terminology, and the roles of various stakeholders.
• Module 2: CSfC Architecture and Components: Detailed examination of the different architectural models within CSfC, including the use of Commercial Off-The-Shelf (COTS) products, the two-layer and other approved architectures, and the requirements for each.
• Module 3: Security Principles and Best Practices: Covers fundamental security concepts relevant to CSfC, including cryptography, authentication, authorization, access control, and vulnerability management. Emphasizes secure configuration and hardening techniques.

---

Phase 2: Implementation and Configuration (Modules 4-9)

• Module 4: Selecting and Evaluating COTS Products: Guidance on selecting appropriate COTS products for CSfC solutions, including evaluating security features, performance, and interoperability. Covers the process of obtaining approvals and certifications.
• Module 5: Building the Inner Tunnel (Layer 1): Hands-on training on configuring and implementing the inner tunnel, including VPNs, firewalls, and other security appliances. Focuses on secure configuration and best practices.
• Module 6: Building the Outer Tunnel (Layer 2): Practical experience in configuring and implementing the outer tunnel, including secure routing, encryption, and access control. Addresses the integration with the inner tunnel.
• Module 7: Key Management and Certificate Services: Covers the principles of key management and the use of certificate services in CSfC solutions. Includes hands-on exercises on generating, distributing, and managing certificates.
• Module 8: Intrusion Detection and Prevention Systems (IDPS): Explores the role of IDPS in CSfC solutions and provides practical experience in configuring and managing IDPS devices.
• Module 9: Endpoint Security: Covers the importance of endpoint security in CSfC and provides training on implementing and managing endpoint protection software, including anti-malware, host-based firewalls, and data loss prevention (DLP) tools.

---

Phase 3: Operation, Maintenance, and Compliance (Modules 10-14)

• Module 10: System Hardening and Vulnerability Management: Deep dive into system hardening techniques for various operating systems and applications used in CSfC solutions. Covers vulnerability scanning, penetration testing, and remediation procedures.
• Module 11: Monitoring and Logging: Focuses on the importance of security monitoring and logging in CSfC solutions. Provides training on configuring and managing security information and event management (SIEM) systems.
• Module 12: Incident Response and Recovery: Covers incident response procedures for CSfC solutions, including detection, containment, eradication, and recovery. E mphasizes the importance of planning and preparation.
• Module 13: Documentation and Accreditation: Provides detailed guidance on preparing and submitting the required documentation for CSfC accreditation. Covers the accreditation process and the roles of various stakeholders.
• Module 14: Legal and Ethical Considerations: Explores the legal and ethical considerations related to CSfC, including data privacy, intellectual property, and export control regulations.

Assessment: Each module will include quizzes and practical exercises to assess student understanding. A final comprehensive exam will be administered at the end of the program to evaluate overall knowledge and competency.

Certification: Upon successful completion of the program and the final exam, students will receive a certificate of completion, demonstrating their knowledge and skills as a CSfC Trusted Integrator. This certification may be required for individuals involved in implementing and maintaining CSfC solutions for government agencies and contractors.

---

DoD Workforce Mapping

1. Cybersecurity Fundamentals: KSAT #2210 – Information Technology Management

• Understanding of cybersecurity principles, threats, vulnerabilities, and risk management.
• Coverage: Modules 1, 3, 8, 9, 10, 12. These modules lay the groundwork for secure CSfC solutions, covering core security concepts, attack vectors, and risk mitigation strategies.
• Knowledge of cryptography and its application in securing communications.
• Coverage: Modules 3, 5, 6, 7. CSfC heavily relies on encryption, so these modules delve into cryptographic principles, key management, and secure implementation of encryption technologies.
• Ability to implement and manage security controls, such as firewalls, intrusion detection systems, and access control mechanisms.

Coverage: Modules 5, 6, 8, 9. Hands-on configuration and management of these security tools are crucial for CSfC implementation.

• Understanding of security architecture and design principles.
• Coverage: Modules 2, 4, 5, 6. Designing secure CSfC solutions requires knowledge of architectural patterns, component selection, and integration best practices.

2. CSfC Specific KSATs: KSAT #0332- Computer Operations

• Knowledge of the CSfC program, its objectives, and its components.
• Coverage: Module 1. This module provides the foundational knowledge of the CSfC program itself.
• Ability to select, evaluate, and integrate COTS products for CSfC solutions.
• Coverage: Module 4. Choosing the right components and ensuring their interoperability within a CSfC architecture is a key skill.

Understanding of CSfC architectural models and their implementation.

• Coverage: Modules 2, 5, 6. This includes the two-layer security architecture and other approved models.
• Ability to configure and manage CSfC security components, including inner and outer tunnels.
• Coverage: Modules 5, 6, 7, 8, 9. This is where the practical, hands-on skills are developed.
• Knowledge of CSfC key management and certificate services.
• Coverage: Module 7. Secure key management is essential for CSfC, and this module covers the necessary KSATs.
• Ability to troubleshoot and maintain CSfC solutions.
• Coverage: Modules 10, 11, 12. This involves monitoring, identifying issues, and implementing corrective actions.
• Knowledge of CSfC documentation and accreditation requirements.
• Coverage: Module 13. Understanding the documentation process is crucial for successful CSfC accreditation.

3. General IT and Security KSAT #1550 Computer Science

• KSAT: Strong understanding of networking concepts and protocols.
• Coverage: Modules 5, 6. CSfC solutions rely heavily on networking, so this foundational knowledge is essential.
• KSAT: Proficiency in operating system administration and security hardening.
• Coverage: Module 10. Securing the underlying operating systems is crucial for CSfC.
• KSAT: Knowledge of incident response and recovery procedures.
• Coverage: Module 12. Preparing for and responding to security incidents is a critical skill for any security professional.
• KSAT: Understanding of legal and ethical considerations related to cybersecurity.
• Coverage: Module 14. This ensures that CSfC implementations comply with relevant regulations and ethical guidelines.

---

Registration Information

securexperts.talentlms.com/catalog