Description
A self-paced course on the technical work that sits underneath a DoD authorisation: scanning with the Assured Compliance Assessment Solution, hardening systems against Defense Information Systems Agency Security Technical Implementation Guides, and reporting the results. Six modules cover the DoD vulnerability management landscape, operating ACAS scans and Tenable.sc, reading and applying STIGs, automating compliance checks with SCAP and Evaluate-STIG, remediation and exception handling, and building the continuous monitoring reporting that feeds the authorising official.
Written for system administrators, information system security officers and vulnerability analysts who own scanning and hardening on Department of Defense or defence contractor networks. Tech Skills Library is independent and issues no certification, credential or licence.
What is included
Self-paced online course with 6 modules and 18 lessons, lifetime access to the course content, and a Certificate of Completion badge when every lesson is marked complete.
Curriculum
Module One — The DoD Vulnerability Management Landscape
- How ACAS and STIGs Fit Together on a DoD Network
- Reading IAVMs and Vulnerability Severity Ratings
- Building an Asset List the Scanner Can Trust
Module Two — Operating ACAS Scans
- Tenable.sc Architecture and Scan Zones
- Credentialed Scanning and Why Unauthenticated Results Mislead
- Scheduling and Tuning Scans for Full Coverage
Module Three — Reading and Applying STIGs
- Anatomy of a DISA STIG Rule
- Working with STIG Viewer and Checklist Files
- Applying STIG Settings Through Group Policy and Configuration Management
Module Four — Automating Compliance with SCAP and Evaluate-STIG
- Running SCAP Benchmarks and Interpreting Results
- Evaluate-STIG for Rules SCAP Cannot Reach
- ACAS Compliance Audits Using STIG Audit Files
Module Five — Remediation and Exception Handling
- Prioritising Remediation Across Thousands of Findings
- Patching Timelines and Verification Scans
- Documenting Deviations and Risk Acceptance for STIG Findings
Module Six — Continuous Monitoring Reporting
- Defining Metrics the Authorising Official Will Read
- Building Tenable.sc Dashboards and Scheduled Reports
- Feeding Scan and STIG Evidence into the RMF Package
One-time purchase. Education and skill-building only; completion does not guarantee a job, promotion, security clearance or clearance eligibility, and no certification, credential or licence is issued.
