Welcome to Lunarline School of Cybersecurity (SCS) - Providing Excellence in Cybersecurity Training and Certifications Since 2008
Contact SCS
School of Cybersecurity
To get started, contact us today at 571-481-9307
LinkedIn
YouTube
shopping_cart
Product was added to your cart

Cart

Certified Expert Continuous Monitoring (CECM)®

Home Cyber Certified Experts (CCE)® Program Available Certifications Certified Expert Continuous Monitoring (CECM)®
*Read our disclaimer
Disclaimer
Each certification is mapped to the National Cybersecurity Workforce Framework (NCWF). The Framework organizes cybersecurity into seven high-level Categories, each comprised of several specialty areas, work roles, knowledge, skills, abilities, and tasks. These seven high-level Categories are aligned directly to the CCE® Program’s certification Concentration Areas. Candidates often prepare for an exam by using a variety of resources that familiarize them with the authoritative sources and the exam’s concentration area.

Third-party products and services, including course instructors have helped many candidates to close knowledge and skill gaps. Lunarline does not endorse any particular provider and encourages candidates to use a variety of tools and resources that will enhance their understanding of relevant principles and the exam’s concentration area.

Certification Description

Successful completion of this exam will demonstrate a candidate’s understanding of the application of the Information Security Continuous Monitoring (ISCM) to federal information systems and organizations. The candidate shall demonstrate knowledge of security and privacy controls related to continuous monitoring and shall exercise their understanding of the six-steps of continuous monitoring in accordance with NIST Special Publication 800-137.
It is critical for the candidate to understand ISCM definitions, roles, and responsibilities, and supporting NIST Special Publications such as NIST SP 800-37, 800-53, 800-53A, and NIST SP 800-55. The candidate shall demonstrate their ability to follow procedures for conducting assessments of the security and privacy controls that support organizational risk management processes.​​
Authoritative Sources
  1. NIST SP 800-137 - Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations
  2. NIST SP 800-37 Rev. 1 – Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach
  3. NIST SP 800-55 Rev. 1 - Performance Measurement Guide for Information Security
Requirements

​Candidates must possess at least 3 years of experience in Information Security Continuous Monitoring, Security Operations, and/or Security Assessments and Authorization (SA&A) in order to obtain the expert level credential.  The associate level credential will be awarded to those who pass the exam, but do not have the required experience.  The credential can be elevated to expert level upon attaining the required experience.  Simply email [email protected] to start the experience verification process.

Mapping to the NICE Framework

NICE Work Role Name:

Vulnerability Assessment Analyst

NICE Framework Category
CCE® Concentration Area:
Protect and Defend (PR)
NICE Specialty Area:
Vulnerability Assessment and Management (VAM)
NICE Work Role ID:
PR-VAM-001
OPM Code | DCWF Code:
541
NICE Work Role Description:

Performs assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Measures effectiveness of defense-in-depth architecture against known vulnerabilities.

Lunarline Training Courses:
*Read our disclaimer
Disclaimer
Independence: The Lunarline SCS Training Program and Certification Program are independent from one another. Although they may target the same NICE category, specialty area, work role, and/or authoritative sources, certification exams are not based on any SCS training. Taking SCS training is NOT required and Lunarline does not guarantee that an individual will pass nor have any advantage based on participation with SCS training. The following training offerings are intended to show linkage only to the same NICE category, and not linkage to the certification or exam content.

Continuing Education: The Lunarline SCS Training Program and other third-party vendors offer activities, products and services across the country that qualify as Professional Development Credits (PDCs) that target the same NICE category, specialty area, work role, and/or authoritative sources as our certifications. We encourage candidates to use a variety of tools and resources that will enhance their understanding of relevant principles and reflect their learning styles and needs.  ​

  1. Continuous Monitoring and Security Operations (CO266)
  2. Counterintelligence for IT and Cybersecurity Professionals (AN209)
  3. Counterintelligence for IT and Cybersecurity Professionals - SP (AN209-SP)
  4. Information Systems Continous Monitoring for Philips (CO131-PHI)
  5. Information Systems Continuous Monitoring (CO212)
  6. Insider Threat Awareness - WBT (AN002-WBT)
  7. Vulnerability Assessment Analyst (PR202-RBT)
  8. Vulnerability Assessment and Analysis (AN202)
Menu