FISCAL YEAR 2025 CYBERSECURITY AWARENESS CHALLENGE:
CLASSIFICATION: UNCLASSIFIED//
ROUTINE
R 151859Z OCT 24 MID120001464464U
FM CNO WASHINGTON DC
TO NAVADMIN
INFO CNO WASHINGTON DC
BT
UNCLAS
NAVADMIN 214/24
MSGID/NAVADMIN/CNO WASHINGTON DC/N2N6/OCT//
SUBJ/FISCAL YEAR 2025 CYBERSECURITY AWARENESS CHALLENGE//
REF/A/MSG/CNO WASHINGTON DC/061837Z OCT 23//
REF/B/DOC/SECNAVINST 5239.3C/2MAY16//
REF/C/MSG/CNO WASHINGTON DC/071510Z OCT 24//
NARR/REF A IS NAVADMIN 241/23 PROVIDES GUIDANCE FOR THE FISCAL YEAR 2024
CYBERSECURITY AWARENESS TRAINING.
REF B IS THE SECRETARY OF THE NAVY INSTRUCTION DEPARTMENT OF THE NAVY (DON)
CYBERSECURITY POLICY WHICH ESTABLISHES DON POLICY FOR CYBERSECURITY.
REF C IS NAVADMIN 209/24, COMMON MILITARY TRAINING REQUIREMENTS.//
POC/COTTERELL/CIV/OPNAV N2N6D7/TEL: (703) 695-1858/E-MAIL:
dawn.d.cotterell.civ@us.navy.mil//
RMKS/1. This NAVADMIN supersedes reference (a) and provides guidance for the
Fiscal Year 2025 (FY25) Cybersecurity Awareness Challenge (CAC) training
requirement.
2. Per references (b) and (c), Navy personnel, civilians, and contractors
with access to unclassified or classified networks must complete the
Department of Defense (DoD) employee version of CAC by 1 September 2025.
3. Personnel who completed CAC 2024 after 30 September 2024 but before CAC
2025 version is available, will receive credit for their annual FY25
training.
4. Total Workforce Management Services (TWMS) is the readiness platform used
to track CAC completion percentages for the Navy. Commands and training
platforms must confirm TWMS is capturing all CAC completions under the
overarching requirement ID set by CNIC/TWMS Administration (TWMS Requirement
ID: 76689 FY25 DoD Cyber Awareness Challenge) to receive credit. Commands
are prohibited from creating additional CAC training requirements to set
command specific training metrics. This requirement cannot be waived. The
options below are the authorized methods for training delivery:
a. Commands can elect to complete CAC training using instructor-led
delivery. A command designated cyber security professional such as the
Information Systems Security Manager (ISSM) or Cyber Workforce Program
Manager(CWF-PM) must provide the instruction.
b. Total Workforce Management Service(TWMS), https://twms.dc3n.navy.mil;
c. Navy e-Learning (NEL), https://learning.nel.navy.mil/;
(Note: The My Navy Portal, https://learning.nel.navy.mil/ELIAASv2p/
redirects users to the NEL link));
d. Defense Information Systems Agency (DISA)
website, https://cyber.mil/training/cyber-awareness-challenge/;
e. Waypoints, https://don.csod.com;
f. Other approved training sources, DISA Digital Video Discs (DVDs).
5. Ships can access the annual training from the NEL application hosted on
the Navy Information/Application Product Suite (NIAPS) server, eliminating
the need to reach back to shore hosted NEL websites. The CAC 2025 course is
available via the NEL Afloat Learning Management System Pub Amendment 112 for
download by the NIAPS Administrator using the normal manual NIAPS distance
support update process. If unable to download Learning Management System Pub
Amendment 112, ships can request a DVD with these files to be mailed by
submitting a support request to Navy 311.
6. Although CAC training is an individual responsibility, commanders and
commanding officers are accountable for completion by 100 percent of their
personnel. Effective 1 September 2020, the DoD Cybersecurity Hardening
Scorecard collects information on the number of users who completed annual
Cybersecurity Awareness training and the scorecard is briefed on a quarterly
basis to the Deputy Secretary of Defense. Training officers are responsible
for ensuring their personnel complete and properly document the required
training.
7. Command training officers must validate training via TWMS or Fleet
Training Management and Planning System (FLTMPS)
(https//ntmpsweb.ncdc.navy.mil/fltmps/) authoritative databases. Training
officers will manually record training completed via the DISA website, DISA
DVDs, or instructor-led. Manually record training in FLTMPS using the
Learning Event Completion Form. Report any discrepancies to the Navy
Training Management Planning System Operational Support office at
ntmps.support@navy.mil or 1-866-438-2898/DSN 922-1867.
8. The Command ISSM is responsible for reporting compliance to meet Federal
Information Security Modernization Act of 2014 requirements. Command ISSMs
will disable accounts of users who do not complete training by 1 September
2025 and maintain non-compliance list of accounts that were disabled.
9. This NAVADMIN will remain in effect until cancelled or superseded.
10. Released by VADM Karl O. Thomas, Deputy Chief of Naval Operations for
Information Warfare, OPNAV N2N6.//
BT
#0001
NNNN
CLASSIFICATION: UNCLASSIFIED//