Integration of Cybersecurity Personnel into the EOC for Cyber Incidents

MGT456 – 24.00 Hours


Details Buttons Dates Location Class Price Register Buttons
06/25/24 – 06/27/24 Richmond, VA FP MGT456 22 Register
07/16/24 – 07/18/24 Arlington, VA FP MGT456 14 Register
07/23/24 – 07/25/24 Portland, OR FP MGT456 12 Register
08/13/24 – 08/15/24 Orlando, FL FP MGT456 15 Register
08/27/24 – 08/29/24 Springfield, MO FP MGT456 16 Register
10/15/24 – 10/17/24 Charlotte, NC FP MGT456 19 Register
10/22/24 – 10/24/24 Riverside, CA FP MGT456 20 Register
11/05/24 – 11/07/24 Knoxville, TN FP MGT456 21 Register

This schedule is subject to change without notice. If you have not received confirmation of the class prior to the class start, please contact the division at (866) 878-8900 or [email protected] to get the latest schedule.

Course Description

This scenario-based course will guide emergency response organizations and critical infrastructure IT personnel through multiple simulated events to learn how to coordinate efforts during a cyber incident. These real-time exercises are designed to assist jurisdictions with managing cyber response efforts between traditional emergency responders and IT professionals. The use of expert instructors from IT and emergency response fields will offer participants real-world knowledge to successfully integrate cybersecurity personnel into the Emergency Operations Center (EOC).


There are no prerequisites for this course.

Course Completion Requirements

A FEMA SID is required to register for and participate in any training provided by FEMA. The FEMA SID will serve as your unique identifier and be used to maintain the record of FEMA trainings you attended.

Register for a FEMA SID at

Participants Must Provide

  • Photo identification is required on the first day of class. See the Participant Handbook for approved forms of identification and additional guidelines.
  • Participants will need to bring a device such as a smartphone, tablet, or laptop to complete the course evaluation and take the post-test in class.

Attendance Requirements

To meet attendance requirements, participants must attend
each training module and complete all required course assignments, activities, pre-test,
and post-test. The pre-test needs to be completed prior to the course.
All participants must
sign the attendance roster for each day of the course and complete the
evaluation at the end of the course in order to receive a certificate of


Upon successful completion, you will be able to:

  • Define cyber-related terminology.
  • Identify characteristics of cyber incidents.
  • Explain the impacts of various cyber incidents.
  • Discuss integrating cybersecurity into community preparedness.
  • Explain the purpose of the Emergency Operations Center (EOC).
  • Compare the organizational models of the EOC.
  • Identify the functions within the EOC.
  • Determine the integration of a cyber component within the EOC management structure
  • Discuss preparation methods that help protect organizations from cyber incidents
  • Explain activities that help the occurrence of a cyber incident.
  • Describe response activities to cyber incidents.
  • Describe actions that help an organization recover from cyber incidents.
  • Interpret the Emergency Operations Center (EOC) management processes.
  • Manage information to maintain internal EOC and external situational awareness.
  • Mange the process for acquiring recourses.
  • Mange the continual execution, evaluation and revision of the plan.

Suggested Audience

  • Emergency Management
  • Information security and cybersecurity personnel
  • Chief Information Officer
  • Chief Information Security Officer
  • Elected and/or appointed Officials
  • Law Enforcement
  • Fire Service
  • Emergency Medical Services
  • Public Health
  • Public Works
  • Hospital/Medical Centers
  • Non-Governmental Organizations
  • Transportation Authority
  • Critical infrastructure representatives

Other Information

As part of a Department of Homeland Security/Federal Emergency Management Agency (DHS/FEMA) funded Homeland Security National Training Program Cooperative Agreement, this course is available at no direct cost to state, local, tribal, and territorial agencies/entities.

Course Size

  • Maximum 40 participants
  • Minimum 26 participants

Course Length

  • 3 days (24 Hours)


  • 8:00 a.m. to 5:00 p.m. daily

Government Programs

  • GSA contract number: GS-07F-0357V. GSA customers, to register please contact [email protected] or call (866) 878-8900. GSA Schedule logo
  • For DHS/FEMA Funded Courses, please contact [email protected] or call (866) 878-8900

Contact Information

James Burghard

Phone: (307) 286-0370
Email: [email protected]