# Cybersecurity MaturationMethodology

## Where Product Security Meets Cybersecurity

A training course created by Boeing Phantom Works and CT Cubed Inc. covering embedded systems security, risk assessments, and defense-in-depth for defense platforms.

**Duration**  
Five-day program featuring hands-on labs, practical exercises, and a capstone competition

**Letter of Completion**  
Letter can be used by students to serve as proof when logging Continuing Professional Education (CPE) requirements for industry certifications.

**Audience**  
Product Security Engineers, Systems Security Engineers, Software Developers, and Boeing suppliers

## Upcoming Sessions

[Jun 15 – 19, 2026\
\
Puget Sound, Washington\
\
Boeing Only\
\
Register →Opens in new tab](https://buy.stripe.com/8x24gy959ckF0lHaJ7gA806)

## Academics

- BDS CMM Overview
- Security Architectures
- Embedded Systems
- Data Buses
- System Integrity
- Software Assurance
- Defense-In-Depth

## Labs

- Attack Surface Analysis
- Attack Trees
- Risk Assessment (1st Pass Risk Cubes)
- Security Controls Tailoring Part 1
- Security Controls Tailoring Part 2
- Residual Risk (2nd Pass Risk Cubes)

## Capstone

Live exercise with multi-round team competition in a resource-constrained environment. Teams apply the full CMM process - from attack surface analysis through residual risk assessment - in a realistic scenario.

## MOUSE Training Platform

Secure design of complex platforms requires understanding how subsystems interact and where vulnerabilities emerge. CMM training leverages the [MOUSE MKIII Drone](/content/training-platforms#mouse-mkiii/index.html) platform to teach secure design across a realistic system-of-systems environment.

- This course covers security in and between subsystems, including threat modeling, attack surface analysis, and risk assessment
- Security focus spans communications, navigation, and identification (CNI), storage, sensors, vehicle management, and mission computer subsystems

## Interested in CMM Training?

Contact us to learn more about course schedules and enrollment.

[Request Information](/#contact)

Want a custom course that addresses your organization's secure design needs? We can build something similar tailored to your requirements. [Contact us](mailto:training@ctcubed.com?subject=Custom%20Training%20Inquiry) for details.