ISC2’s Learning Pathways Cloud Security Training

FirstNet purchased cloud security training to improve their staff knowledge of cybersecurity readiness as we advance into a Zero Trust Architecture (ZTA) and in accordance with the OMB Memorandum 22-09 Federal Zero Trust Strategy. FirstNet's OCIO identified six cloud security domains as part of the cloud security training. These domains are as following:

Domain 1. Cloud Concepts, Architecture, and Design

Domain 2. Cloud Data Security

Domain 3. Cloud Platform & Infrastructure Security

Domain 4. Cloud Application Security

Domain 5. Cloud Security Operations

Domain 6. Legal, Risk and Compliance

OCIO was looking for a vendor to provide a bundle training package where the CIO staff can access a portal and assign training without requiring separate training for each staff member. Additionally, the cloud security training had to be comprehensive and cover the six domains of cloud security concepts and aid in offering continuing professional education credits and exam credentialing for those seeking certification.

Sole Source Justification:

ISC is the sole proprietary owner of the memberships, site licenses, pre-assessments, test vouchers, practice tests and all other materials related to the ISC2 certification training. ISC2 is the only vendor to provide authorized recordings of ISC2 live online sessions and bundle training in cloud security and the only certifying body to offer vendor-agnostic Cloud Security Training addressing security concepts and industry best practices included in the Cloud Security Professional Common Body of Knowledge.

ISC2 has created a robust on-line learning pathways training for cloud security that enables the trainees to tailor their learning to their individual needs. The learning pathways training includes interactive study materials, robust search functionality to topics, analytics dashboards to track the progress, email support and 24/7 course availability. This training allow the trainee a 180 days of access to the course. The bundle courses provide a review of information systems security concepts and industry best practices in six security domains which are 

1- Cloud Concepts, Architecture and Design 
2- Cloud Data Security 
3- Cloud Platform and Infrastructure Security 
4- cloud Application Security 
5- cloud Security Operations 
6- Legal, Risk and compliance  

The OCIO requires Cloud Security Training for their staff to improve their cybersecurity readiness knowledge as we advance into a Zero Trust Architecture (ZTA), in accordance with the OMB Memorandum 22-09 Federal Zero Trust Strategy. The training will meet the OCIO staff annual mandatory training for FY24.  The bundle training will offer the staff flexibility to sign up for their required training via the bundle training on-line portal  

To procure individual training classes from multiple vendors would not be a viable solution based on delays to procure and award each training and amount of man-hours required to procure and award single training classes when the need is for 30 staffs members.  Procuring through ISCE overcomes all of these issues by immediately providing access to the six cloud domains classes in addition to hours off on-demand training for each member through out the ISC2 learning pathways.

The ISC2 learning pathways training provides 

- 180 day access to official course contend 
- self-paced online adaptive learning journey
-Data drive analytics dashboard providing real time feedback on learning progress
- Digital textbook
- Knowledge checks
-Slider to gauge confidence with questions answers
-Key takeaway 
-24/7x7x365 chat technical support

Having access to the learning pathways classes will likely identify knowledge and training requirements to go into great detail for some topics.  Obtaining the foundational training for these areas through ISC2 training will reduce the cost of instructor led classes by reducing amount of training hours required and will ensure any training requirements are on target to meet training need.  

Procuring this training exclusively through ISC2; saves the government a significant amount of money, meets time requirement for staff in need of training and time to make procurements and, ensures currency of staff knowledge and enables staff to meet internal training hour requirements.  Not purchasing this training will cause staff knowledge to depreciate and negatively impact on the protecting the FirstNet Netwok and meet the Zero Trust Architecture decisions OMB mandate.