IT training built for government

• ✓CMMC (Cybersecurity Maturity Model Certification): readiness training for DoD contractors, with a dedicated CMMC Readiness course
• ✓NIST SP 800-171: protecting controlled unclassified information on contractor systems
• ✓NIST SP 800-53: security and privacy controls for federal systems, including the awareness and training family
• ✓FedRAMP: the federal cloud security authorization framework
• ✓DoD 8570/8140: the baseline certifications it requires for cyber workforce roles, including CompTIA Security+, SecurityX (formerly CASP+), and CISSP

CBT Nuggets is a training platform. Our courses build the skills these frameworks depend on, and our completion records document the workforce training many of them require. Training supports a compliance program; it does not by itself make an organization compliant. Your compliance program and its assessors decide what counts as evidence.

• CompTIA

  CompTIA Security+ (SY0-701)

  This CompTIA Security+ (SY0-701) training prepares your team for a widely recognized entry-level cybersecurity certification. It covers network security fundamentals, cryptography basics, threat detection and mitigation, risk management, and compliance frameworks, and it builds the skills the SY0-701 exam tests: assessing the security posture of an enterprise environment and recommending solutions, monitoring and securing hybrid cloud and on-premises environments, responding to security incidents, and working within applicable regulations and governance policies. For an IT Director in a regulated industry, Security+ is the baseline many hiring rubrics and compliance programs expect of help desk analysts, network administrators, and security specialists alike. Individuals starting a security specialty earn the same credential on the same path.

  See the course

• Cybersecurity

  CMMC Readiness & Compliance Training

  Manage CMMC 2.0 compliance for your organization with this CMMC readiness training. DoD contractors need professionals who can turn compliance requirements into action, and this CMMC training breaks the framework into plain language that explains what compliance really means. InfoSec expert Bob Salmans walks you through a complete CMMC 2.0 compliance checklist, helping you master the CMMC levels, explore all 14 domains, practice documentation standards, and spot common audit pitfalls. When you've taken this CMMC training, you’ll know how to lead a self-assessment and build a compliance roadmap that keeps contracts secure and your organization eligible.

  See the course

• CompTIA

  CompTIA SecurityX (CAS-005)

  Senior security staff often understand the technology but struggle to turn it into governance, risk, and budget decisions leadership will fund. This CompTIA SecurityX (CAS-005) training helps IT Directors close that gap by moving security architects and technical leads from implementation thinking to executive-level oversight. Learners work through governance frameworks like COBIT 2019 and ITIL, configuration and change management, GRC, data governance, threat modeling, cloud and zero trust architecture, threat hunting, and incident response. Realistic scenarios include evaluating an RFC for a subcontractor FTP share and framing a Windows 11 licensing rollout in budget terms. Your team comes away able to vet changes for risk before they reach production and present security proposals in language the C-suite will act on. SecurityX is DoD 8140/8570-approved, which makes this course a practical fit for government teams and contractors with role-based certification requirements. Virtual labs cover sandboxing in Active Directory, infrastructure as code with Terraform and PowerShell, and threat intelligence work in MISP. At about 26 hours across 32 skills, most under an hour each, the course fits weekly study blocks alongside normal workloads. Training Managers can use team reporting to follow per-learner progress and completion and export completion records for audit evidence.

  See the course

• ISC2

  (ISC)² CISSP – Certified Information Systems Security Professional

  Get ready to earn your ISC2 CISSP certification. This course covers all eight CISSP domains in clear, easy-to-follow lessons. Learn governance frameworks, secure design principles, and incident response while sharpening risk analysis, policy writing, and business continuity planning. Along the way, you’ll access unlimited CISSP practice exams and our downloadable CISSP study guide PDF to stay organized and on track. Whether you prefer a structured CISSP bootcamp-style, or flexible self-paced learning, this training helps you prepare smarter, stay focused, and get certified with confidence.

  See the course

• Cybersecurity

  CompTIA Cybersecurity Analyst CySA+ (CS0-003)

  This intermediate-level CySA+ course prepares cybersecurity professionals to pass the CompTIA Cybersecurity Analyst (CySA+) CS0-003 exam. Learn how to proactively monitor systems, detect threats, and respond to incidents with confidence. This hands-on training dives into real-world tools and techniques used in vulnerability management, threat intelligence, and security operations. You’ll practice using SIEM tools, analyzing indicators of compromise (IoCs), performing risk assessments, and strengthening cloud and hybrid environments. Ideal for SOC analysts, security engineers, and IT pros looking to advance their careers, this course aligns with the official CompTIA exam blueprint and industry best practices.

  See the course

• Cybersecurity

  Enterprise GRC: Risk Management and Compliance Programs

  This Governance, Risk and Compliance training covers how to manage your organization's compliance-related requirements and balance them with operational risks to provide cost-efficient and in-compliance results. For systems administrators and security professionals, compliance is much more than ensuring that the right people are getting the right data — this training shows you how to prove your work, verify data integrity, and more.

  See the course

• CompTIA

  CompTIA Pentest+ (PT0-003)

  In this PenTest+ course, cybersecurity expert Bob Salmas guides you through simulating real-world cyberattacks, uncovering network vulnerabilities, and sharpening your ethical hacking skills. Once you complete this course, you’ll be prepared to pass the PenTest+ PT0-003 exam with confidence. This PenTest+ training is ideal for junior cybersecurity pros ready to advance or seasoned pentesters looking to validate their skills. You’ll practice modern penetration testing techniques in realistic virtual labs, document your findings in industry-standard reports, and prepare for exam day with unlimited PenTest+ practice tests.

  See the course

• Cybersecurity

  Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)

  Cloud adoption spreads security, identity, and compliance work across help desk staff, sysadmins, and compliance stakeholders who often lack a shared vocabulary. When terms like Zero Trust, least privilege, and the shared responsibility model mean different things to different people, risk discussions stall and audit conversations take longer than they should. This entry-level SC-900 course gives IT Directors and Training Managers a single baseline to assign across the team. Learners cover Microsoft Entra ID (Azure AD) identity concepts, authentication and self-service password reset, Microsoft Defender threat protection, Intune endpoint security, and Microsoft Purview capabilities such as sensitivity labels, DLP, eDiscovery, audit, data lifecycle management, and insider risk. The course stays conceptual, with walkthroughs in Azure, Microsoft 365, Intune, and Purview, so new hires, help desk technicians, and non-technical risk stakeholders can all take part. After completion, your team can explain Microsoft security terminology to technical and non-technical audiences, identify which Microsoft tool fits a given identity, threat, or compliance use case, and route questions to the right platform capability or specialist team. The course also provides a structured review of the fundamentals covered by the SC-900 certification exam. At about 21.7 hours across 25 skills, the course fits an onboarding cohort or a team certification push. Team Leads can bundle it into Playlists, and Training Managers can track per-learner progress and completion with Team Reporting before moving the team on to role-based Microsoft security training.

  See the course

• Azure

  Microsoft Certified: Azure Security Engineer Associate (AZ-500)

  This intermediate Microsoft Azure Security Engineer Associate training prepares you for the AZ-500 exam, which is required to earn the Microsoft Certified: Azure Security Engineer Associate certification. Become an Azure security engineer associate by learning the skills needed to secure Azure-based networks by implementing security controls.

  See the course

• ISC2

  (ISC)² CC – Certified in Cybersecurity

  This ISC2 CC - Certified in Cybersecurity course is designed to lay the foundation for a professional cybersecurity career, and help you study for your ISC2 CC certification. You'll learn to understand the ethical and risk-based frameworks that define the industry, then dive into business continuity and incident response to learn how organizations survive and recover from disruption. From there, you'll explore cybersecurity topics such as access control and network security, and understand the mechanics of protecting digital borders and managing identities. Finally, you'll explore security operations for real-world system defense. To make sure you're ready for exam day, the course includes unlimited ISC2 Certified in Cybersecurity practice exams to build your confidence and reinforce skills.

  See the course

• ISACA

  ISACA Cybersecurity Fundamentals (ITCA)

  This ITCA - Cybersecurity Fundamentals training covers how to perform the basic, professional tasks required of an entry-level IT professional in a cybersecurity capacity. Although earning the ITCA Cybersecurity Fundamentals certification is valuable for cybersecurity hopefuls, the training is also excellent for non-IT professionals and teams who need a well-rounded understanding of the threats that exist in the modern world, how best to avoid them, and what to do if there is a successful attack against your network.

  See the course

• Cisco

  CCNA Cybersecurity (200-201 CCNACBR) v1.2

  This CCNA Cybersecurity training prepares you for the Understanding Cisco Cybersecurity Operations Fundamentals (200-201 CCNACBR) v1.2 exam (formerly called Cisco CyberOps). With virtual labs and unlimited practice exams included, you’ll gain experience with SIEM, NetFlow, tcpdump, malware analysis, access control models, and incident response workflows based on NIST.SP800‑61. You'll also learn how to detect network, application, and endpoint threats, investigate attacks like DDoS or man‑in‑the‑middle, and apply defense‑in‑depth. This course is deal for entry‑level security analysts or engineers ready to earn their CCNA Cybersecurity certification and launch an SOC career.

  See the course

8 more courses in this path. Every one is included in a team subscription. Browse all training

• Cybersecurity training path
• Networking training path
• Cloud Platforms training path

• US Military

  Active-duty Service Members and command IT teams — DoD 8140-aligned training that supports Army, Navy, Air Force, Marine Corps, and Coast Guard Credentialing Assistance.

  Explore US Military training

Government teams using CBT Nuggets

Real outcomes from government IT teams.