Domain 1 : Fundamentals of IT Security

A walkthrough of fundamental IT concepts and foundations

• Understand and Apply Concepts of Confidentiality, Integrity, Availability, and Anonymity
• Security Governance Principles
• Principles of Security
• Identification, Authentication, Authorization, and Accounting
• Cryptography and Asset Protection Techniques

Domain 2 : Governance, Risk, and Compliance

An exploration of organizational concepts, risk management, and legal/regulatory concerns.

• Concepts of Governance
• Tools of Governance
• Understand Legal and Regulatory Issues that Pertain to Information Security in a Global Context
• The Dark Web and International Privacy Regulations
• Understand and Apply Dark Web Threat Modeling
• Forensics Investigations and the Dark Web
• Integrate Deep & Dark Web Risk Considerations into Enterprise-wide Security Architecture
• Understand Business Continuity / Disaster Recovery Plans in relation to Dark Web attacks
• Conducting a Business Impact Analysis
• Understand and Implement Dark Web Professional Ethics
• Establish and Manage Security Education, Training, and Awareness of CIAA Topics

Domain 3 - History of the Internet, Deep Web and Dark Web

A historical account of modern networking and the origins and definitions of the Web

• Definitions
• History of the Internet
• History of the Deep Web
• Understanding the Deep Web
• History of the Dark Web

Domain 4 - Networking and Routing on the Dark Web

A technical account of modern networking and the role of TOR and Dark Net infrastructure.

• Communication Models
• Routing the Internet Protocol (IP)
• Observing Traffic Across a Network
• About TOR—The Onion Router

Domain 5 - Anonymity, the Dark Web, and You

A discussion and explanation of technical and organizational implications for anonymity.

• Anonymity
• Dark Web Content
• Your Presence on the Dark Web
• Installing and Using Subgraph OS
• Cryptocurrency

Domain 6 - Crawlers and Data Discovery in the Dark Web

A high-level framework of analysis including GRC implications and praxis.

• Information Discovery Framework
• Incident Response and Controls Introduction
• Crawlers

The Dark Web Council Certified Dark Web Analyst (CDWA) certification is the primary foundational certification, which includes the history of the Deep and Dark Web, governance, risk and compliance, networking, Dark Web surfing, and Dark Web discovery and data analysis.  The Certified Dark Web Analyst is a prerequisite exam for additional Dark Web Council certifications

CDWA was established in 2016, in part, to aggregate, standardize, and maintain the Dark Web Council CBK for information security professionals worldwide in response to the burgeoning field regarding the Dark Web and online anonymity considerations.

Domains from the Dark Web Council credentials are drawn from various topics within the (CDWA) CBK. The CDWA uses the CBK domains to assess a candidate's level of mastery with the most critical domains regarding the practice of information security.

This training course designed primarily for corporate and IT security management staff, cyber security team members, and cyber security network practitioners. Specifically, those who perform job functions related to protecting information systems and enterprise assets by ensuring their availability, integrity, capacity to facilitate or engage in authentication, confidentiality, and non-repudiation where applicable, will derive particular benefit.

Though the focus is predominately IT security, other entities throughout an organization may benefit from the provided information including financial institutions, law enforcement agencies, threat intelligence communities, compliance officers, and regulatory agencies.

Exam:

Certified Dark Web Analyst

Duration:

180 minutes (three hours)

Questions:

Maximum of 125  multiple-choice questions

Skills measured:

• Fundamentals of IT Security
• Governance, Risk, and Compliance
• History of the Internet, Deep Web, Dark Web
• Networking and Routing
• Anonymity
• Data Discovery and Analytics on the Dark Web

While our Training Camp boot camps were developed with the expectation that students do not have enough time to complete a rigorous self-study syllabus prior to attending class, we offer students that feel that extra preparation would be helpful a targeted list of self-study objectives that can be completed.

Candidates for this certification should at least two years (non-mandatory) of experience in computer network security technology or a related field, the ability to recognize information security vulnerabilities and threats in the context of risk management, and competency with some of the common operating systems for typical computing environments.