Professional skills
DVMS Institute - NIST Cybersecurity Framework
A 3-day course where you apply NIST CSF 2.0, assess gaps, design an improvement roadmap, and practise exam questions ahead of certification.
THE BIG PICTURE
About this course
This course supports preparation for certifications aligned to the NIST Cybersecurity Framework, awarded by APMG International. It is intended for security, risk, IT and business leaders who need a structured approach to improving cyber resilience using CSF 2.0. Across three days you examine the Govern function and core functions, perform scoping, profiling and tiering, map current practices to CSF 2.0, and build a prioritised improvement roadmap with measures. Hands-on activities use a realistic case study to complete context, profile, gap and roadmap artefacts you can adapt for your organisation. Exams are set and administered by APMG International. You can book the exam directly with APMG or via a provider using an exam voucher. The course includes practice questions, a mock exam and guidance on arranging your exam. APMG International owns the certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner.
What you’ll learn
- Explain the purpose, structure and terminology of NIST CSF 2.0
- Describe the Govern function and relate it to organisational context, policy and risk appetite
- Map existing controls and practices to the CSF 2.0 Core Functions and Categories
- Create and compare Current and Target Profiles, and determine appropriate Implementation Tiers
- Prioritise gaps and produce a practical, time-bound CSF improvement roadmap with owners and measures
- Address supply chain considerations and integrate CSF activities with enterprise risk and assurance
- Define meaningful metrics to monitor progress and support continual improvement
- Practise exam-style questions, sit a mock exam, and build a personal study plan for the certification
A CLEAR PATH FORWARD
3-day course agenda
3 instructor-led days (24 contact hours) mapped to the exam domains. Each day combines short concept sessions, hands-on practice on a running case study and exam-style questions.
- Learning route
- 3 recommended days
- Practical work
- 3 guided activities
- Finish with
- Mock exam + certification exam
Take a look at each day. Open a section to see the topics and practical work.
Day 1Foundations and Govern functionCSF 2.0 overview; Govern; context and scoping
What we’ll cover
- 09:00–10:30 · Course orientation and CSF 2.0 overview: structure, terminology, and use cases
- 10:45–12:15 · Govern Function: context, risk appetite, policy, roles and accountability
- 13:15–14:15 · Scoping digital value streams and defining system boundaries
- 14:15–15:15 · Establishing Current Profile and Implementation Tier: evidence and data sources
- 15:30–16:15 · Mapping organisational objectives to CSF outcomes and categories
- 16:15–17:00 · Exam-style practice questions: CSF basics and Govern scenarios
- 17:00–17:30 · Daily debrief and action log
Put it into practice
Working in teams, define the organisational context for a case study, including value streams, stakeholders, and risk appetite. Produce a first-cut Current Profile and Tier rationale for one scope.
You’ll take away
Initial CSF 2.0 context and scoping pack
Day 2Core Functions: Identify to RecoverIdentify, Protect, Detect, Respond, Recover; profiles and tiers
What we’ll cover
- 09:00–10:30 · Recap of Day 1 and case study set-up: value streams, stakeholders, and risk appetite
- 10:45–12:15 · Identify and Protect: asset, risk, access, data security and baseline control mapping
- 13:15–14:15 · Detect and Respond: monitoring, analysis, incident response planning and roles
- 14:15–15:15 · Recover: recovery planning, communications and resilience considerations
- 15:30–16:15 · Building the Target Profile and refining Tier selection
- 16:15–17:00 · Exam-style practice questions: Core Functions and profile scenarios
- 17:00–17:30 · Daily debrief and preparation for roadmap work
Put it into practice
Analyse the case study’s current practices against CSF Categories and Subcategories to produce a gap list. Draft a Target Profile and justify the chosen Implementation Tier.
You’ll take away
Baseline and Target Profiles with gap register
Day 3Roadmaps, measurement, and exam preparationProfiles, tiers, metrics; supply chain; exam readiness
What we’ll cover
- 09:00–10:30 · Recap of Day 2 and prioritisation techniques for gap remediation
- 10:45–12:15 · Supply chain risk: third-party considerations and contract levers
- 13:15–14:15 · Metrics and measurement: selecting indicators for progress and effectiveness
- 14:15–15:15 · Building a 90-day improvement roadmap: actions, owners, and assurance checks
- 15:30–16:15 · Mock exam under timed conditions
- 16:15–17:00 · Mock exam review and targeted revision by domain
- 17:00–17:30 · Exam booking guidance, personal study plan and course close
Put it into practice
Convert the gap list into a prioritised roadmap with measurable outcomes and owners. Define a minimal metric set to monitor delivery and effectiveness over the next quarter.
You’ll take away
Prioritised improvement roadmap and exam study plan
Bring it all together
Certification exam: DVMS Institute - NIST Cybersecurity Framework, awarded by APMG International. Confirm the current exam format with the awarding body when you book. Every attendee also receives a MindClick certificate of completion for 24 contact hours.

What you receive
You earn two separate credentials. The sample shows the MindClick training certificate.
- MindClick certificate of completion: 3 days, 24 contact hours, issued to every attendee who completes the course.
- DVMS Institute - NIST Cybersecurity Framework: issued by APMG International when you meet its requirements and pass the exam.
Before you choose your learning route
Session timings are indicative; the trainer may adjust them for the group. Exam details reflect the awarding body’s published information at the time of writing; confirm the current version when you book.
APMG International owns this certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner of APMG International.
Fees
| Delivery format | Fee per learner | Exam fee |
|---|---|---|
| Live online | $2,800 USD | Included |
| Classroom | $4,500 USD | Included |
One awarding-body certification exam attempt is included in the training fee. Confirm the current fee, any applicable tax and what the fee covers in writing before you pay.
Prerequisites
- No formal prerequisites are required to attend. Recommended: familiarity with information security, risk management and your organisation’s context; bring a laptop with office applications for exercises.
Who is this course for?
- Professionals working in cyber security and digital.
- Managers and decision-makers responsible for delivery outcomes.
- Practitioners seeking a globally recognized certification.
FIND YOUR START
Confirmed batch starts
Choose a published start, then review your offer in the same enrollment flow. A start date is not the full timetable or a seat reservation.
Choose your country & monthStarts
- Training location
- Dubai, United Arab Emirates
- Local timezone
- Asia/Dubai
Joining details and full session timetable to be supplied.
Starts
- Training location
- Vienna, Austria
- Local timezone
- Europe/Vienna
Joining details and full session timetable to be supplied.
Starts
- Training location
- Sydney, Australia
- Local timezone
- Australia/Sydney
Joining details and full session timetable to be supplied.
Starts
- Training location
- Brussels, Belgium
- Local timezone
- Europe/Brussels
Joining details and full session timetable to be supplied.
Starts
- Training location
- Manama, Bahrain
- Local timezone
- Asia/Bahrain
Joining details and full session timetable to be supplied.
Starts
- Training location
- São Paulo, Brazil
- Local timezone
- America/Sao_Paulo
Joining details and full session timetable to be supplied.
Frequently asked questions
How long is the course?
3 days, 24 contact hours, normally 09:00 to 17:30 with breaks. The agenda follows the exam domains and the final day includes a mock exam.
Is the exam included?
Yes. Outside India the fee includes one certification exam attempt. Retakes are booked and paid directly with the awarding body.
What does this course cost?
Outside India this 3-day course is listed at USD 2,800 per learner for live online delivery and USD 4,500 for classroom delivery. Both fees include one certification exam attempt. Pricing for India is confirmed separately by an advisor. Taxes and the final offer are confirmed in writing before you pay.
Are there prerequisites?
No formal prerequisites are required to attend. Recommended: familiarity with information security, risk management and your organisation’s context; bring a laptop with office applications for exercises.
What certificate will I receive?
Two credentials. MindClick issues a certificate of completion for 24 contact hours to every attendee. APMG International issues the DVMS Institute - NIST Cybersecurity Framework certification when you pass the exam and meet its requirements.
Is MindClick an accredited training partner for this certification?
MindClick provides training and exam preparation and is not an accredited or authorised partner of APMG International. APMG International administers the certification exams.
Where is classroom training delivered?
Singapore and Dubai are the priority classroom markets for this catalog. Classroom delivery is also available in the other listed countries, and live online delivery is available everywhere. Venues are confirmed per booking; a listed city is a training market, not an owned campus.
KEEP EXPLORING
More ways to move forward.
Related training from the course catalog.
Five Case Solution (5CS)
Three days of guided practice building a full Five Case business case in an online platform, collaborating in teams and trying exam-style tasks.
Adaptive Kanban Framework Certification
Three-day course to apply an adaptive Kanban approach in projects and operations through hands-on practice, simulations and exam preparation.
Agile Business Analysis (AgileBA) Certification
A 3-day course to apply agile business analysis techniques through case-based exercises and exam practice, preparing for Foundation/Practitioner.
Agile Change Certifications
Three-day course covering agile-led change principles and practice, with hands-on tools and coaching drills to prepare for Agile Change exams.