Micro-Credential Survey

ethicallyHackingspace (eHs)® and our Alliance Partners are developing a standardized micro-credentialing solution that integrates the National Institute of Standards and Technology (NIST), National Initiative for Cybersecurity Education (NICE), Consultative Committee for Space Data Systems (CCSDS), as well as other sub-frameworks to address the following workforce development objectives:

Create an industry-wide consensus on the baseline range and categories of knowledge, skills, abilities, and tasks that a space cybersecurity professional should be able to demonstrate in a measurable framework with 3rd party credentialing.

Release globally accessible training based on industry consensus that includes real-world exercises and tools to help align emerging space workforce opportunities with millions of new potential participants who need an industry-recognized credential and may otherwise not have access.

This survey is your voice to help shape the Space Cybersecurity Operations and Resilience Platform Professional (SCOR-P2)™ workforce of the future.

Name

First NameLast Name

Email

example@example.com

Would you like to be listed as a contributor?

YesNo

Would you like to be a beta tester for the credentials?

YesNo

Would you like to become an alliance member?

YesNo

Survey Options

More about our Vision and Execution:

The ethicallyHackingspace(eHs)® project is working with industry partners to launch four CCSDS, NIST NICE-aligned, and other subframeworks Space Cybersecurity Operations and Resilience Platform Professional (SCOR-P2)™ micro-credentials.

About Us

ethicallyHackingspace(eHs)® is a non-profit project supported by:

303 Overwatch A.S.B.L (Luxembourg) RCS F13274
D2 Teamcorp 501(c)(3) (United States) EIN 86-2609529

ethicallyHackingspace(eHs)® is also an approved non-profit project on:

Benevity

Our Current Alliance Members

CyberRTS
Proof Labs

Offensive Space Cybersecurity Professional (SCP)™

	Strongly Agree	Agree	Neutral	Disagree	Strongly Disagree
Knowledge of Space Data Systems: The candidate should understand the architecture and operational protocols of space data systems as per CCSDS guidelines.
Exploitation Techniques: The candidate is expected to demonstrate proficiency in exploiting vulnerabilities in space data systems, including satellite communication links and ground control systems.
Penetration Testing of Space Systems: The candidate must be skilled in conducting structured penetration tests against space systems following NIST guidelines.
Application of Cryptographic Controls: The candidate must effectively apply cryptographic controls, as recommended by CCSDS, to protect information in space data systems.
Threat Modeling of Space Environments: The candidate should be capable of creating threat models for space operations that align with NIST NICE frameworks.
Anomaly and Intrusion Detection: The candidate needs to have skills in detecting anomalies and intrusions specific to space systems and their unique operational characteristics.
Development of Offensive Cybersecurity Tools: The candidate should be experienced in developing tools and methods for offensive cybersecurity that are tailored to the needs of space systems.
Integration of CCSDS and NIST Practices: The candidate must integrate NIST NICE and CCSDS security practices into their offensive strategies effectively.
Continuous Learning in Space Cybersecurity: Continuous professional development in space cybersecurity technologies and methods is crucial.
Collaborative Offensive and Defensive Strategies: The candidate should collaborate with defensive and purple teams to enhance security measures.

Defensive Space Cybersecurity Professional (SCP)™

	Strongly Agree	Agree	Neutral	Disagree	Strongly Disagree
Understanding of Space System Security: Our organization expects a defensive space cybersecurity professional to have a deep understanding of security protocols specific to space systems as outlined by CCSDS.
Incident Response Expertise: We expect a defensive space cybersecurity professional to be highly skilled in incident response management, capable of quickly mitigating threats to minimize damage to our space assets.
Compliance with Standards: It is crucial for the defensive space cybersecurity professional we hire to ensure that all our space systems operations comply with NIST and CCSDS security standards.
Advanced Threat Detection: We require a defensive space cybersecurity professional to implement advanced threat detection mechanisms that meet or exceed the current NIST recommendations for space systems.
Vulnerability Management: Our organization believes that continuous vulnerability assessment and timely patch management are essential skills for any defensive cybersecurity professional.
Network Security Skills: We expect the defensive space cybersecurity professional to have expertise in securing networks that connect space-based and terrestrial systems, adhering to both NIST and CCSDS guidelines.
Effective Cryptographic Practices: The application of cryptographic controls to protect data integrity and confidentiality in space operations is a critical skill we look for in cybersecurity professionals.
Security Training Leadership: A defensive space cybersecurity professional should be capable of leading security awareness and training initiatives to ensure all staff are informed and vigilant against potential cyber threats.
Proactive Security Measures: We believe that a defensive space cybersecurity professional should be proactive in updating and refining our security measures to combat emerging cyber threats effectively.
Collaborative Security Approach: It is important for the cybersecurity professional to effectively collaborate with other cybersecurity teams, including offensive (red) teams, to strengthen our overall security posture.

Purple Team Space Cybersecurity Professional (SCP)™

	Strongly Agree	Agree	Neutral	Disagree	Strongly Disagree
Integration of Red and Blue Team Activities: We believe that a purple team consultant should effectively integrate red and blue team activities to enhance our security operations. How important is this integration for your organization?
Skills in Both Offensive and Defensive Tactics: It is crucial for purple team consultants to have expert-level knowledge in both offensive and defensive cybersecurity tactics. Do you agree that this dual expertise is essential?
Continuous Security Improvement: We expect purple team consultants to lead initiatives that continuously improve our security posture through iterative testing and feedback. How critical is ongoing improvement to your cybersecurity strategy?
Workforce Development Focus: A key role of purple team consultants should be to develop the cybersecurity skills of our existing staff. How important is workforce development in your security operations?
Incident Response Enhancement: Purple team consultants should enhance our incident response capabilities by facilitating effective collaboration between the red and blue teams. Do you view this as a vital function of the purple team?
Adaptability to Emerging Threats: We believe that purple team consultants need to be highly adaptable and forward-thinking to respond to emerging threats promptly. How essential is adaptability in your cybersecurity needs?
Custom Security Solutions: Purple team consultants should be capable of developing customized security solutions that address the unique challenges of space systems. Is tailor-made security a priority for your organization?
Knowledge Sharing and Training: We expect purple team consultants to conduct regular knowledge-sharing sessions to keep all team members updated on the latest security trends and tactics. How important is this continual learning for your team?
Effective Use of Cybersecurity Tools: It is crucial for purple team consultants to utilize a comprehensive suite of cybersecurity tools to diagnose and mitigate vulnerabilities effectively. How critical is tool proficiency for your cybersecurity consultants?
Strategic Security Planning: Purple team consultants should play a strategic role in planning and executing our long-term cybersecurity vision. How important is strategic planning in your cybersecurity efforts?

Full Spectrum Space Cybersecurity Professional (SCP)™

	Strongly Agree	Agree	Neutral	Disagree	Strongly Disagree
Comprehensive Security Knowledge: We expect a full spectrum space cybersecurity consultant to have extensive knowledge of both offensive and defensive cybersecurity strategies tailored to space systems.
End-to-End Security Implementation: It is critical that the consultant can implement end-to-end security solutions that cover all aspects of our space platform operations, from ground systems to satellites.
Resilience Planning: Our organization believes that developing and implementing resilience plans to maintain operations during and after cyber attacks is a fundamental requirement for a full spectrum consultant.
Integrated Risk Management: We require the consultant to have expertise in integrating risk management practices throughout our space platform's entire lifecycle, aligning with NIST and CCSDS guidelines.
Regulatory Compliance Assurance: Ensuring compliance with all relevant international and national cybersecurity standards and regulations is a key expectation for our full spectrum cybersecurity consultant.
Threat Intelligence Capabilities: The consultant should be proficient in leveraging threat intelligence to predict and mitigate potential threats before they impact our space operations.
Advanced Monitoring and Response Systems: We expect the consultant to implement advanced monitoring systems that detect, alert, and respond to security incidents in real-time.
Crisis Management Skills: A full spectrum cybersecurity consultant should be capable of leading crisis management efforts in the event of significant cyber incidents affecting our space assets.
Technological Adaptability: The consultant must stay abreast of the latest cybersecurity technologies and trends to continuously improve our security measures and system capabilities.
Collaborative Approach with Stakeholders: We believe it is important for the cybersecurity consultant to effectively collaborate with all relevant stakeholders, including engineering, IT, and external partners, to ensure holistic security.