Training Mission: On Training the US Army to Use the Army Endpoint Security Solution

The Challenge

A Massive Training Need for a Massive Security Environment

U.S. Army soldiers, government civilians, and contractors needed training on TYCHON, Elastic Search, ThreatQuotient, and Trellix — integrated tools within the Army Endpoint Security Solution (AESS). ECS provides the AESS for Army Cyber Command (ARCYBER) and Network Enterprise Technology Command (NETCOM). One of the world’s largest endpoint security environments, the AESS protects up to 800,000 desktops, servers, virtual machines, and other endpoints across the Army’s global infrastructure.

INTENSIVE ONLINE TRAINING

days

hours per day

lab exercises

The Solution

Combine the Latest Pedagogy and Learning Tools With Deep Subject-matter Expertise

ECS had been training Army analysts through multiple in-person courses since 2019 when the COVID-19 pandemic required a pause in live training in 2020. ECS then redesigned its training for remote delivery and alignment with the Army’s new automated continuous endpoint monitoring (ACEM) mission.

For its new ACEM training course, ECS set up a learning management system and course platform and built a cyber range that simulates the AESS production environment. Then we created content for technical lectures, use-case demonstrations, and lab exercises.

Staff Sgt. Jones works with a cyber warfare trainer of 3rd Infantry Division

Using VMware technology, ECS created virtualized workstations and a networking solution that allows instructors and students to access the cyber range from their personal computers. In combination with the Army’s Teams environment, this technology has allowed ECS to deliver its ACEM course to students around the world. To keep course content and the cyber range current with the latest release of AESS software, ECS follows a continual service improvement process.

ECS trainers also built a follow-on training component. Consisting of 37 course videos, continued use of the cyber range, and access to subject matter experts, this component allows students to refresh their learning after course completion.

1,000

personnel trained in
94 classes over 30 months

4.84/5

satisfaction rating

spin-off courses

The Results

1,000 Trained to Defend the United States Against Threats

When ECS trainers began offering the intensive, remote instructor-led ACEM course, they thought they would train no more than 200 students. Adoption of the AESS platform across the Army has been steady and continuous, however, and course graduates have spread the word about the course, driving a massive training demand. With the completion of its 94th ACEM course in May of 2023, ECS issued its 1,000th ACEM completion certificate.

Rave Reviews, Spin-off Courses, a Model for Future Training

Army students have given ACEM training an average satisfaction rating of 4.84 out of 5, and classes are in high demand and fill quickly. Organizers of various Army and multi-force cybersecurity training programs regularly integrate the course into their curricula.

This training success has inspired three additional ECS training courses (Site Reviewer, Forescout Comply-to-Connect, and Data Reviewer) that provide specialized AESS training for several distinct Army cybersecurity roles. ECS is also now using the ACEM course as a model for the design of future training solutions.

TRAINING MISSION