Education
Build the knowledge and technical skills the work requires.
Our approachNCRF / 02
Readiness is a system, not a moment.
NCRF connects education, research, exercise, and evidence so that capability can develop—and continue to develop as the environment changes.
01From education to readiness
Knowledge is the beginning of the progression.
Cyber education gives people a foundation. Practice develops judgment. Credible exercises show whether individuals and teams can put both to work when conditions are difficult.
Practice
Apply those skills, develop judgment, and learn to work as a team.
Demonstration
Perform in credible conditions where decisions carry consequences.
Readiness
Sustain that capability, learn from evidence, and adapt as conditions change.
02The readiness loop
Research. Exercise. Operate. Learn. Adapt.
The loop closes when evidence changes the next round of education, technology, exercise design, and operational practice.
- ResearchStudy emerging threats, technologies, adversary capabilities, and changes in how cyber work is performed.
- ExerciseTurn that knowledge into credible scenarios, ranges, and programs with clear learning and measurement goals.
- OperateAsk people and teams to perform with real tools, limited time, and competing technical and organizational demands.
- LearnMeasure what happened and identify gaps in preparation, coordination, technology, and decision-making.
- AdaptApply the result to what comes next, then test again against a changing environment.
Evidence from exercise
An exercise should leave more than a score.
NCRF treats exercises as opportunities to produce useful evidence about readiness—not only to rank participants or mark an event complete.
The measures will vary by program, research question, grant, or contract. The common purpose is to understand what people, teams, and technologies can do, where capability breaks down, and what should improve next.
01Technical knowledge and judgment02Team coordination and communication03Curriculum and preparation gaps04Tool effectiveness and human–AI work05Performance against emerging tradecraft06Priorities for future exercises and research
03What becomes ready
Capability has to hold at more than one level.
Readiness belongs to individuals, but cyber operations are carried out by teams, supported by organizations, and relied on by the public.
Professional competence
A practitioner can apply technical knowledge, use the tools available, communicate clearly, and make sound decisions while the situation is still changing.
Coordinated performance
A team can divide work, share context, establish priorities, and adapt together rather than relying on isolated individual expertise.
Operational resilience
People, processes, and technology work together well enough to keep essential functions moving and recover when conditions deteriorate.
Collective readiness
A capable workforce, current institutions, credible programs, and durable technology strengthen the communities and systems that depend on them.
A credible operating picture
Readiness is not a defensive-only idea.
Effective exercises require an adversary that reflects current tradecraft. Effective cyber teams need experience with how capabilities are built, applied, detected, disrupted, and answered.
NCRF's work can include offensive and defensive research, adversary emulation, capability development, exercise design, and the study of performance. The point is to make the conditions credible enough for readiness to mean something.
04The result
Better-prepared people. More capable teams. More resilient systems.
NCRF works to improve education through evidence, develop workforce capability through experience, and help people and institutions understand whether emerging technologies are ready for the work expected of them.
Explore NCRF programs