Assessments

PR100

Cyber Defense Analyst

The CYBRScore® Cyber Defense Analyst assessments are designed to assess an individual’s knowledge, skills and abilities related to using data collected from cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purpose of mitigating threats.

The CYBRScore® PR100 Cyber Defense Analyst is comprised of the following assessments:

• Protocol Analysis
• Intrusion Detection
• Incident Handling Methodology
• Network Defense Analysis
• Network Attack Analysis

PR400

Vulnerability Assessment Analyst

The CYBRScore® Vulnerability Assessment Analyst assessments are designed to assess an individual’s knowledge, skills and abilities related to performing assessments of systems and networks within the network environment or enclave and identifying where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Measuring effectiveness of defense-in-depth architecture against known vulnerabilities.

The CYBRScore® PR400 Vulnerability Assessment Analyst is comprised of the following assessments:

• Intelligence Gathering
• Red Team
• Blue Team

IN300

Cyber Defense Forensics Analyst

The CYBRScore® Cyber Defense Forensics Analyst assessments are designed to assess an individual’s knowledge, skills and abilities related to analyzing digital evidence and investigating computer security incidents to derive useful information in support of system/network vulnerability mitigation.

The CYBRScore® IN300 Cyber Defense Forensics Analyst is comprised of the following assessments:

• Network Collection and Handling
• File Collection and Analysis
• Malware Analysis

PR300

Cyber Defense Incident Responder

The CYBRScore® Cyber Defense Incident Responder assessments are designed to assess an individual’s knowledge, skills and abilities related to investigating, analyzing, and responding to cyber incidents within the network environment or enclave.

The CYBRScore® PR300 Cyber Defense Incident Responder is comprised of the following assessments:

• File Collection and Analysis
• Reporting and Remediation

SP300

Secure Software Developer

The CYBRScore® Secure Software Developer assessments are designed to assess an individual’s knowledge, skills and abilities related to developing, creating, maintaining, and writing/coding new (or modifying existing) computer applications, software, or specialized utility programs.

The CYBRScore® Secure Software Developer assessments are available for the following programming languages: C#, C++, Java, Python, and PHP.

OM300

Technical Support Specialist

The CYBRScore® Technical Support Specialist assessment is designed to assess an individual’s knowledge, skills and abilities related to providing technical support to customers who need assistance utilizing client-level hardware and software in accordance with established or approved organizational process components (i.e., Primary Incident Management Plan, when applicable).

OM400

Network Operations Specialist

The CYBRScore® Network Operations Specialist assessment is designed to assess an individual’s knowledge, skills and abilities related to planning, implementing, and operating network services/systems, to include hardware and virtual environments.

OM500

System Administrator

The CYBRScore® System Administrator assessment is designed to assess an individual’s knowledge, skills and abilities related to setting up and maintaining a system or specific components of a system (e.g. for example, installing, configuring, and updating hardware and software; establishing and managing user accounts; overseeing or conducting backup and recovery tasks; implementing operational and technical security controls; and adhering to organizational security policies and procedures).