Senior Military College Students Enhance Cybersecurity Skills through Incident Response Exercises

A series of three exercises conducted by Norwich University Applied Research Institutes (NUARI) in support of the initiatives of the DoD Senior Military College Cyber Institutes have provided students from Norwich University, Virginia Tech, and The Citadel with hands-on experience in cybersecurity incident response. The National Security Agency (NSA) National Center of Academic Excellence in Cybersecurity (NCAE-C) funded the exercises to enhance the students' readiness for real-world cybersecurity incidents.

The DoD Senior Military College Cyber Institutes is a pilot program formally launched in October 2020 and funded with DOD appropriation grants from the NCAE-C. Norwich University is the lead institution in a consortium of the six senior military colleges designed to grow the nation's pipeline of cybersecurity talent, filling crucial work roles in the Department of Defense.

The DoD Senior Military College Cyber Institutes program combines classroom and experiential learning, focusing on the whole student. Based on the Cyber Leadership Development Program (CLDP) framework, it provides a holistic approach to building competencies in cyber academics, critical thinking, leadership, and communication.

The three exercises, which took place in November, utilized NUARI's DECIDE® Platform and followed a Homeland Security Exercise Evaluation Program (HSEEP)-based planning process. The tabletop exercises (TTX) were designed to align with the competencies, tasks, and skills defined in the Department of Defense Cybersecurity Workforce Framework (DCWF).

During the exercises, students were presented with a simulated scenario in which an advanced persistent threat (APT) targeted a company using phishing, malware, and a supply-chain attack. The students were required to follow a mock Incident Response Plan (IRP), applying theoretical knowledge in a dynamic, scenario-based setting.

The exercises aimed to achieve several objectives, including:

• Enhancing incident response capabilities
• Developing key work-role skills
• Fostering effective communication and collaboration
• Improving readiness for real-world cybersecurity incidents

By participating in these exercises, the students from the participating SMCs gained valuable experience in cybersecurity incident response, preparing them for future careers in the field.