Cybersecurity Skills & Standards
DVMS Cyber Resilience Professional Practitioner
Put cyber resilience into practice.
4 daysIntermediate28 modules
About this course
Put cyber resilience into practice. Over four days you will adopt a practitioner's mindset, apply a three-dimensional knowledge model, use systems thinking to integrate strategy, risk and operations, and turn the NIST framework into an operating capability.
Curriculum
28 modules
1Practitioner Foundations
- Differentiate between compliance-driven and practitioner (strategy-risk-aligned) mindsets.
- Understand adaptive, proactive decision-making in cybersecurity operations.
- Identify behaviors and mindsets that enable value creation.
- Describe X and Y axes of the model for mapping knowledge and dependencies.
- Apply both axes to enhance decision-making and resilience.
- Explore culture and leadership as drivers of practitioner effectiveness.
- Evaluate how culture influences resilience and governance.
- Develop strategies for building generative culture.
- Formulate practitioner-level diagnostic and strategic questions.
- Use inquiry to uncover hidden risks, dependencies, and assumptions.
- Embed questioning as a foundation for proactive cybersecurity.
- Explain the unity of strategy and risk.
- Apply the space-time analogy to decision-making.
- Evaluate the consequences of siloed strategy and risk management.
7Systems Thinking and Operational Integration
- Understand system structure, behavior, and culture in cybersecurity.
- Apply systems tools (causal loops, iceberg, BOT graphs).
- Identify feedback loops and leverage points for resilience.
- Integrate strategy-risk thinking into daily cybersecurity practices.
- Design cross-functional collaboration processes for alignment.
- Analyze workflows through the CPD (Create-Protect-Deliver) Model.
- Map assurance loops and feedback mechanisms.
- Describe how CPD loops enable Minimum Viable Capabilities (MVC).
- Map NIST CSF core functions to CPD and MVC for execution alignment.
- Apply use and misuse cases to anticipate threats.
- Integrate adversarial modeling into assurance and measurement planning.
13Governance, Capabilities, and Measurement
- Understand DVMS as a system overlay linking governance, strategy, and execution.
- Map workflows to MVCs and assess governance loops.
- Explain and apply the seven MVCs across workflows.
- Use the 3D Knowledge Model (Z-axis) to identify cultural barriers.
- Apply GQM (Goal–Question–Metric) and QO–QM frameworks.
- Align metrics with strategic outcomes and continuous improvement.
- Sequence capability deployment based on maturity and culture.
- Use governance feedback and cultural diagnostics for dynamic adaptation.
- Design and assess cross-functional risk teams.
- Integrate DVMS, MVC, and QO–QM in governance and decision-making.
19Innovation, Maturity, and Adaptation
- Distinguish incremental, sustaining, adaptive, and disruptive innovation.
- Apply systems thinking to identify innovation leverage points.
- Contrast linear and nonlinear adoption models.
- Map feedback loops that drive adaptation and cultural learning.
- Define DVCMM levels (0–3) across MVCs.
- Benchmark maturity and link Govern/Assure to capability deployment.
- Integrate systems thinking, governance, culture, and measurement.
- Formulate a capstone action plan for cyber resilience improvement.
24Integration, Improvement, and Mastery
- Design feedback mechanisms for single- and double-loop learning.
- Embed continuous improvement into operations and culture.
- Unify DVMS governance, GQM/QO–QM measurement, and cultural diagnostics.
- Design feedback loops for adaptive improvement and resilience.
- Apply all course models to a real-world cybersecurity challenge.
- Develop an actionable improvement plan aligned with strategy-risk priorities.
- Reflect on practitioner growth and continuous learning.
- Format: Online, proctored, open-book examination.
- Duration: 150 minutes (2.5 hours).
- Questions: 65 multiple-choice (1 correct answer each).
- Weighting: 65 total points; passing score = 39 (60%).
- Focus: Application, analysis, and evaluation (Bloom’s Levels 3–5).
- Resources: Book, slides, and case study materials (unaltered).
- Outcome: Pass/Fail.
Who it's for
Security and risk practitioners ready to build on foundation-level knowledge.
Before you start
No formal prerequisites. Bring curiosity and a willingness to practise.
Related courses
More in Cybersecurity Skills & Standards →Advanced
Cyber Security for the End User - Identifying and Preventing Advanced Threats - Intermediate
Cybersecurity Skills & Standards
View course →Foundation
DVMS Cyber Resilience Professional Awareness
Cybersecurity Skills & Standards
View course →Foundation
DVMS Cyber Resilience Professional Foundation
Cybersecurity Skills & Standards
View course →Intermediate
Ethical Hacker Bootcamp
Cybersecurity Skills & Standards
View course →Intermediate
Hacking & Defending Active Directory
Cybersecurity Skills & Standards
View course →Foundation
Introduction to OSINT
Cybersecurity Skills & Standards
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.