Professional skills

DVMS Institute - NIST Cybersecurity Framework

A 3-day course where you apply NIST CSF 2.0, assess gaps, design an improvement roadmap, and practise exam questions ahead of certification.

24 hours (3 days) Foundation to Practitioner APMG Certifications

THE BIG PICTURE

About this course

This course supports preparation for certifications aligned to the NIST Cybersecurity Framework, awarded by APMG International. It is intended for security, risk, IT and business leaders who need a structured approach to improving cyber resilience using CSF 2.0. Across three days you examine the Govern function and core functions, perform scoping, profiling and tiering, map current practices to CSF 2.0, and build a prioritised improvement roadmap with measures. Hands-on activities use a realistic case study to complete context, profile, gap and roadmap artefacts you can adapt for your organisation. Exams are set and administered by APMG International. You can book the exam directly with APMG or via a provider using an exam voucher. The course includes practice questions, a mock exam and guidance on arranging your exam. APMG International owns the certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner.

What you’ll learn

  • Explain the purpose, structure and terminology of NIST CSF 2.0
  • Describe the Govern function and relate it to organisational context, policy and risk appetite
  • Map existing controls and practices to the CSF 2.0 Core Functions and Categories
  • Create and compare Current and Target Profiles, and determine appropriate Implementation Tiers
  • Prioritise gaps and produce a practical, time-bound CSF improvement roadmap with owners and measures
  • Address supply chain considerations and integrate CSF activities with enterprise risk and assurance
  • Define meaningful metrics to monitor progress and support continual improvement
  • Practise exam-style questions, sit a mock exam, and build a personal study plan for the certification

A CLEAR PATH FORWARD

3-day course agenda

3 days · 24 contact hours · 09:00–17:30

3 instructor-led days (24 contact hours) mapped to the exam domains. Each day combines short concept sessions, hands-on practice on a running case study and exam-style questions.

Learning route
3 recommended days
Practical work
3 guided activities
Finish with
Mock exam + certification exam

Take a look at each day. Open a section to see the topics and practical work.

Day 1Foundations and Govern functionCSF 2.0 overview; Govern; context and scoping

What we’ll cover

  • 09:00–10:30 · Course orientation and CSF 2.0 overview: structure, terminology, and use cases
  • 10:45–12:15 · Govern Function: context, risk appetite, policy, roles and accountability
  • 13:15–14:15 · Scoping digital value streams and defining system boundaries
  • 14:15–15:15 · Establishing Current Profile and Implementation Tier: evidence and data sources
  • 15:30–16:15 · Mapping organisational objectives to CSF outcomes and categories
  • 16:15–17:00 · Exam-style practice questions: CSF basics and Govern scenarios
  • 17:00–17:30 · Daily debrief and action log

Put it into practice

Working in teams, define the organisational context for a case study, including value streams, stakeholders, and risk appetite. Produce a first-cut Current Profile and Tier rationale for one scope.

You’ll take away
Initial CSF 2.0 context and scoping pack

Day 2Core Functions: Identify to RecoverIdentify, Protect, Detect, Respond, Recover; profiles and tiers

What we’ll cover

  • 09:00–10:30 · Recap of Day 1 and case study set-up: value streams, stakeholders, and risk appetite
  • 10:45–12:15 · Identify and Protect: asset, risk, access, data security and baseline control mapping
  • 13:15–14:15 · Detect and Respond: monitoring, analysis, incident response planning and roles
  • 14:15–15:15 · Recover: recovery planning, communications and resilience considerations
  • 15:30–16:15 · Building the Target Profile and refining Tier selection
  • 16:15–17:00 · Exam-style practice questions: Core Functions and profile scenarios
  • 17:00–17:30 · Daily debrief and preparation for roadmap work

Put it into practice

Analyse the case study’s current practices against CSF Categories and Subcategories to produce a gap list. Draft a Target Profile and justify the chosen Implementation Tier.

You’ll take away
Baseline and Target Profiles with gap register

Day 3Roadmaps, measurement, and exam preparationProfiles, tiers, metrics; supply chain; exam readiness

What we’ll cover

  • 09:00–10:30 · Recap of Day 2 and prioritisation techniques for gap remediation
  • 10:45–12:15 · Supply chain risk: third-party considerations and contract levers
  • 13:15–14:15 · Metrics and measurement: selecting indicators for progress and effectiveness
  • 14:15–15:15 · Building a 90-day improvement roadmap: actions, owners, and assurance checks
  • 15:30–16:15 · Mock exam under timed conditions
  • 16:15–17:00 · Mock exam review and targeted revision by domain
  • 17:00–17:30 · Exam booking guidance, personal study plan and course close

Put it into practice

Convert the gap list into a prioritised roadmap with measurable outcomes and owners. Define a minimal metric set to monitor delivery and effectiveness over the next quarter.

You’ll take away
Prioritised improvement roadmap and exam study plan

Bring it all together

Certification exam: DVMS Institute - NIST Cybersecurity Framework, awarded by APMG International. Confirm the current exam format with the awarding body when you book. Every attendee also receives a MindClick certificate of completion for 24 contact hours.

Sample MindClick certificate of completion for DVMS Institute - NIST Cybersecurity Framework, marked SAMPLE

What you receive

You earn two separate credentials. The sample shows the MindClick training certificate.

  • MindClick certificate of completion: 3 days, 24 contact hours, issued to every attendee who completes the course.
  • DVMS Institute - NIST Cybersecurity Framework: issued by APMG International when you meet its requirements and pass the exam.
Before you choose your learning route

Session timings are indicative; the trainer may adjust them for the group. Exam details reflect the awarding body’s published information at the time of writing; confirm the current version when you book.

APMG International owns this certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner of APMG International.

Fees

Fee per learner outside India. Exam fee included.
Delivery formatFee per learnerExam fee
Live online $2,800 USD Included
Classroom $4,500 USD Included

One awarding-body certification exam attempt is included in the training fee. Confirm the current fee, any applicable tax and what the fee covers in writing before you pay.

Prerequisites

  • No formal prerequisites are required to attend. Recommended: familiarity with information security, risk management and your organisation’s context; bring a laptop with office applications for exercises.

Who is this course for?

  • Professionals working in cyber security and digital.
  • Managers and decision-makers responsible for delivery outcomes.
  • Practitioners seeking a globally recognized certification.

FIND YOUR START

Confirmed batch starts

Choose a published start, then review your offer in the same enrollment flow. A start date is not the full timetable or a seat reservation.

Choose your country & month
Oct242026
Confirmed by MindClickLive onlineWeekend start

Starts

Training location
Dubai, United Arab Emirates
Local timezone
Asia/Dubai

Joining details and full session timetable to be supplied.

Oct242026
Confirmed by MindClickLive onlineWeekend start

Starts

Training location
Vienna, Austria
Local timezone
Europe/Vienna

Joining details and full session timetable to be supplied.

Oct242026
Confirmed by MindClickLive onlineWeekend start

Starts

Training location
Sydney, Australia
Local timezone
Australia/Sydney

Joining details and full session timetable to be supplied.

Oct242026
Confirmed by MindClickLive onlineWeekend start

Starts

Training location
Brussels, Belgium
Local timezone
Europe/Brussels

Joining details and full session timetable to be supplied.

Oct242026
Confirmed by MindClickLive onlineWeekend start

Starts

Training location
Manama, Bahrain
Local timezone
Asia/Bahrain

Joining details and full session timetable to be supplied.

Oct242026
Confirmed by MindClickLive onlineWeekend start

Starts

Training location
São Paulo, Brazil
Local timezone
America/Sao_Paulo

Joining details and full session timetable to be supplied.

View all countries and dates

Frequently asked questions

How long is the course?

3 days, 24 contact hours, normally 09:00 to 17:30 with breaks. The agenda follows the exam domains and the final day includes a mock exam.

Is the exam included?

Yes. Outside India the fee includes one certification exam attempt. Retakes are booked and paid directly with the awarding body.

What does this course cost?

Outside India this 3-day course is listed at USD 2,800 per learner for live online delivery and USD 4,500 for classroom delivery. Both fees include one certification exam attempt. Pricing for India is confirmed separately by an advisor. Taxes and the final offer are confirmed in writing before you pay.

Are there prerequisites?

No formal prerequisites are required to attend. Recommended: familiarity with information security, risk management and your organisation’s context; bring a laptop with office applications for exercises.

What certificate will I receive?

Two credentials. MindClick issues a certificate of completion for 24 contact hours to every attendee. APMG International issues the DVMS Institute - NIST Cybersecurity Framework certification when you pass the exam and meet its requirements.

Is MindClick an accredited training partner for this certification?

MindClick provides training and exam preparation and is not an accredited or authorised partner of APMG International. APMG International administers the certification exams.

Where is classroom training delivered?

Singapore and Dubai are the priority classroom markets for this catalog. Classroom delivery is also available in the other listed countries, and live online delivery is available everywhere. Venues are confirmed per booking; a listed city is a training market, not an owned campus.

KEEP EXPLORING

More ways to move forward.

Related training from the course catalog.

WhatsApp us