Space Systems Are Critical Infrastructure. Defending Them Is a Community Mission.

Space systems are critical infrastructure. Satellites, ground stations, and mission networks are increasingly targeted, and the professionals responsible for securing them are operating without standardized credentials, shared frameworks, or a connected community built specifically for this domain.

D2 Team CORP was founded in 2020 to close that gap.

Why We Are Here

Click to expand or collapse

The Pentagon of Pain

Click to expand or collapse

Adversary framework

The Pentagon of Pain was developed so organizations can survive the METEORSTORM.

The Pentagon of Pain is an internal transformation across departments, mindsets, and priorities, ideally evolving toward a Space Collective Defense community where ISAC information sharing of threats, IOCs, IOAs, detection signatures, and resilience measures raises the bar for real‑world platform exploitation.

01 Decomposition 02 Threat Modeling 03 Detection 04 Exposure 05 Adversary

Select any node in the pentagon to explore the five areas of transformation.

METEORSTORM

Click to expand or collapse

Fly the METEORSTORM: a 3D visualization of the converged terrestrial, aquatic, aerial, orbital, and deep space environments the Pentagon of Pain prepares organizations to survive in.

Who We Are

Click to expand or collapse

Trusted Community for Space, Cybersecurity, Operations, and Resilience Platform Professionals.

We are a U.S.-based 501(c)(3) nonprofit advancing micro-credentialing, education, and workforce development across space cybersecurity, operations, and mission resilience, built by practitioners, for practitioners. Think of us as a space career academy: a practical pathway that helps space, cybersecurity, operations, and resilience platform professionals build the credentials and connections this domain has long been missing.

Our focus is anchored in the Space ISAC. For six years we have been tightly integrated with the Space ISAC Watch Center, the Information Sharing Working Group, and the Signals and Space Cell, and that engagement sets our priorities: continuously keeping pace with the workforce development and tooling requirements that bring the most value to the community. What the community defends with is what we train with.

Our founder, William O. Ferguson, is a recognized voice in the global space community: conference speaker, technical editor and subgroup lead for the IEEE Space Systems Cybersecurity Working Group, and co-chair of the Space ISAC Extended Bill of Materials (xBOM) working group. D2 Team CORP reflects the same standards-body rigor and operational focus William brings to those roles, translated into workforce programs that prepare professionals and organizations to meet real-world challenges across secure space systems and cyber-informed operations.

We also drive U.S.-based hackathons focused on cyber operations and resilience in the space domain, and advance transatlantic cooperation through the Ostrom Workshop at Indiana University, a leading center for governance and institutional analysis. Via Indiana University's Berlin Gateway, the Ostrom Workshop bridges U.S. and European efforts to align standards, develop the workforce, and strengthen security in practice.

Engaging Space CIOs, CISOs, senior decision-makers, and commercial sponsors, we work to build a more secure and resilient space ecosystem, delivering hackathons, micro-credential training, and resilience engineering workshops that develop talent, strengthen operational capability, and drive lasting impact across the sector. We operate on micro-grants to fund non-profit workforce development and tooling engagements. For more details, contact William O. Ferguson.

Our work bridges the distance between strategic ambition and practical capability. If you are a CISO, security engineer, mission operator, or researcher working at the intersection of space and cyber, this community was built for you.

How We Do It

Click to expand or collapse

Workforce Development.

This is our mission, and this is our purpose: equip the entire space community with Resilient Cyber Operations skills. Our Full Spectrum Space Cybersecurity micro-credentials, SCOR Associate (4 hours, 4 CPE) and SCOR Practitioner (8 hours, 8 CPE), are fueled by six years of Space ISAC collaboration and the hours of working group engagement behind it, distilled into a scoped scenario covering Executive Order 14144, the NIS2 Directive, and the implementation of Space ISAC information sharing, with the Practitioner track culminating in an incident response exercise flown on the Zendir spacecraft simulation platform. The training is community driven, with cost and frequency as the design priorities: cohorts run weekly from September 2026 as one or two four-hour sessions (13:00 to 17:00 EST) so teams are never pulled from mission operations for an extended period, and every seat is subsidized by D2 Team CORP to reduce the barrier of entry into the Space, Cybersecurity, Operations, and Resilience Platform Professional career path. Seats are limited to 15 per session. See Space Collective Defense below for course details and dates.

And the course never stands still. This is not a certification: it is a continuous workforce development and tooling solution. The curriculum is constantly updated from Space ISAC working group inputs and from student feedback, and Space ISAC member frameworks are welcome and encouraged into the scenario, so what you practice is what the community is defending with today.

Register today by reaching out to [email protected]. For sponsorship and micro-grant inquiries, contact William O. Ferguson.

Space Collective Defense

Full Spectrum Space Cybersecurity (SCOR)

Our Full Spectrum Space Cybersecurity micro-credential courses are an introduction to Resilient Cyber Operations for space platforms, taught through a scoped scenario built around Executive Order 14144, the NIS2 Directive, and the implementation of Space ISAC information sharing. This is workforce development and tooling: every deliverable you produce uses methods and tools you take straight back to your workplace, or into your next interview, ready to apply, including the community Threat Intelligence Taxonomy published in the official MISP taxonomies repository (github/misp/meteorstorm). The courses are listed in the CISA NICCS training catalog. This is not a certification: it is a continuous workforce development and tooling solution, constantly updated from Space ISAC working group inputs and student feedback, and Space ISAC member frameworks are welcome and encouraged.

SCOR Associate (4 hours, 4 CPE) is delivered as a single four-hour session designed for working professionals, so you earn the credential without being taken away from mission operations for an extended period. You work the scenario through five resilient cyber operations functions in order: Concept of Operations, Contextualized Threat Modeling, Converged Detection Engineering, Incident Response Preparation, and Adversary Management, closing with a 25 question workforce readiness assessment.

SCOR Practitioner (8 hours, 8 CPE) builds on the Associate with a second four-hour session, for eight hours in total, a format designed for working professionals that avoids taking teams out of mission operations for an extended period. Part One is the Associate curriculum: the scenario worked through the five resilient cyber operations functions, closing with the workforce readiness assessment. Part Two is the second session, which deploys a digital twin of the platform you defend on the Zendir spacecraft simulation platform, where you run five missions that build organizational reflexes, from standing up the team through observing and detecting, culminating in a full incident response exercise flown and scored in the simulation.

Space ISAC members receive member pricing: 150 USD for SCOR Associate and 1,500 USD for SCOR Practitioner. There is no code to enter and nothing to claim — tell us you are a member on the enrollment form and the member rate is applied to your invoice automatically.

Seats are limited. All pricing is already subsidized by D2 Team CORP to reduce the barrier of entry into the Space, Cybersecurity, Operations, and Resilience Platform Professional career path.

Catalog ID: CAT-SCOR-001

SKU: SKU-SCOR-AS-001

Price: 250.00 USD, subsidized by D2 Team CORP (150.00 USD for Space ISAC members, applied automatically from the enrollment form)

Additional Costs: None

Description:

A focused four-hour live instructor led session introducing Resilient Cyber Operations for space platforms through a scoped scenario covering Executive Order 14144, the NIS2 Directive, and Space ISAC information sharing, closing with a 25 question workforce readiness assessment. Delivered as a single four-hour session designed for working professionals, so participants are not taken away from mission operations for an extended period.

Includes:

  • Four hours of live instructor led training
  • All five resilient cyber operations functions, from Concept of Operations to Adversary Management
  • Workforce readiness assessment (25 question final exam)
  • 4 CPE credits

Catalog ID: CAT-SCOR-002

SKU: SKU-SCOR-PR-002

Price: 2,500.00 USD, subsidized by D2 Team CORP (1,500.00 USD for Space ISAC members, applied automatically from the enrollment form)

Additional Costs: None

Description:

An immersive eight-hour micro-credential delivered as two four-hour sessions, a format designed for working professionals that avoids taking teams out of mission operations for an extended period. Part One works a scoped Resilient Cyber Operations scenario covering Executive Order 14144, the NIS2 Directive, and Space ISAC information sharing, and completes the workforce readiness assessment. Part Two deploys a digital twin on the Zendir spacecraft simulation platform for five hands-on missions, culminating in a full incident response exercise flown and scored in the simulation.

Includes:

  • Eight hours of live instructor led training across two four-hour sessions
  • All five resilient cyber operations functions and the workforce readiness assessment
  • Five simulation missions on a Zendir digital twin, from standing up the team to running a full incident response
  • 8 CPE credits

Catalog ID: CAT-SCOR-003

SKU: SKU-SCOR-AS-ORG-003

Price: 3,750.00 USD for 15 seats, subsidized by D2 Team CORP

Additional Costs: None

Description:

The same SCOR Associate four-hour micro-credential, purchased as a group of fifteen seats for a single organization and delivered privately for your team, scheduled directly with you. A single four-hour session keeps your team together without taking them out of mission operations for an extended period.

Includes:

  • 15 seats of the SCOR Associate micro-credential
  • Four hours of live instructor led training
  • Workforce readiness assessment for every attendee
  • 4 CPE credits per attendee

Catalog ID: CAT-SCOR-004

SKU: SKU-SCOR-PR-ORG-004

Price: 37,500.00 USD for 15 seats, subsidized by D2 Team CORP

Additional Costs: None

Description:

The same SCOR Practitioner micro-credential, delivered as two four-hour sessions, purchased as a group of fifteen seats for a single organization and delivered privately for your team, scheduled directly with you. The two-session format keeps your team together without taking them out of mission operations for an extended period.

Includes:

  • 15 seats of the SCOR Practitioner micro-credential
  • Eight hours of live instructor led training across two four-hour sessions
  • Workforce readiness assessment and five Zendir digital twin missions for every attendee
  • 8 CPE credits per attendee
Session Schedule — September to October 2026

All sessions run 13:00 – 17:00 EST. Equivalent CET times are 19:00 – 23:00.

SCOR Associate — Tuesdays (complete in one session)
SessionDateDayTime (EST)
Session 18 SepTuesday13:00 – 17:00
Session 215 SepTuesday13:00 – 17:00
Session 322 SepTuesday13:00 – 17:00
Session 429 SepTuesday13:00 – 17:00
Session 56 OctTuesday13:00 – 17:00
SCOR Practitioner — Wednesdays and Thursdays (two-part cohort)
CohortPart One of Two (Wednesday)Part Two of Two (Thursday)Time (EST)
Cohort 19 Sep10 Sep13:00 – 17:00
Cohort 216 Sep17 Sep13:00 – 17:00
Cohort 323 Sep24 Sep13:00 – 17:00
Cohort 430 Sep1 Oct13:00 – 17:00
Cohort 57 Oct8 Oct13:00 – 17:00

Both parts of a SCOR Practitioner cohort must be attended in the same week. Seats are limited to 15 per session. Organizational (15 seat) purchases are delivered privately and scheduled directly with your organization.

What Our Students Say

SCOR PRACTITIONER
“A big thank you to William Ferguson and the ethicallyHackingspace (eHs) team for their outstanding work training Cyber Operators supporting U.S. Space Forces - Space (S4S). Their work is a testament to the importance of cybersecurity in both national security and the rapidly growing field of commercial space operations.”
Kyle Reidell
Security Leader & Cyber Warfare Officer
SCOR PRACTITIONER
“Thank you to William Ferguson for working diligently to provide such a great course that challenges you to think critically and comprehensively to enumerate and decompose the space platform through many elements and layers. The course is structured well and really allows you to get a hands on feel for and apply concepts critically to assess the threat and vulnerability for space platforms and space segments.”
Marcus Graham
Cross Domain Analyst
SCOR ASSOCIATE
“Space cybersecurity has one defining constraint: you can’t walk into a data center and reboot a satellite. Resilience has to be designed in, not patched on. Over a four-hour live session we worked a real space platform scenario through the five functions of the METEORSTORM framework, with Executive Order 14144, the NIS2 Directive and Space ISAC as the regulatory backdrop — a format built for people still running operations.”
Jose Fabio Navarro Mora
GRC & Security Compliance · ISO 27001 & SOC 2 Lead, CISA, CISM
SCOR ASSOCIATE
“A big thank you to D2 Team CORP Cohort for delivering such a relevant forward-looking experience fusion of MISP taxonomy, [METEORSTORM] and artificial satellites with SPARTA and Maltego. Many thanks for your time and the wealth of experience shared.”
Chadi Saliby
Director Consultant, Australian Phoenix CyberOps · DFIR, CTI
SCOR ASSOCIATE
“Thanks for putting the class together, making great practical [workbooks] and pushing the critical thinking behind space-focused cyber defense. Learning hands-on with my recently acquired flatsat, combined with field experience shared by others in the community, has made me even more excited to keep learning.”
Michelle Cersosimo
Information Security Analyst · GCFA, GCFR

Posted publicly on LinkedIn by graduates of the SCOR Associate and SCOR Practitioner micro-credentials.

Explore Our Other Initiatives

Click to expand or collapse
FRAMEWORK & SPONSORSHIP

METEORSTORM

METEORSTORM gives watch floors, fusion cells, ISAC/ISAO members, and space mission cyber operators a common language to describe, fuse, and share threats across complex multi-domain systems, upstreamed as an official MISP taxonomy.

SPACE + AI EDUCATION

Artificial Intelligence Infrastructure Academy (AI2A)

Building the workforce that builds AI: curriculum, faculty resources, and industry partnerships powering continuing-education AI programs across Georgia’s universities, and across the United States.

COMMUNITY

eHs Community Membership

Join the eHs community as an individual or organizational member and help support hackathons, micro-credential certification sessions, resilience engineering workshops, and training that strengthen workforce readiness across the space sector.

ENROLL

Book a Seat on Additional Training

Pay for a seat on CTIA v2, CEH v13, CSA TAISE, or eHs FS-SCP, or ask for a formal invoice payable by ACH or wire with purchase order support. Full Spectrum Space Cybersecurity (SCOR) is enrolled through the Center of Excellence instead.

ADDITIONAL TRAINING

Certified Threat Intelligence Analyst (CTIA v2)

EC-Council’s specialist-level threat intelligence program, delivered by our Authorized Training Center instructors. Open for full details, options, and cohort dates.

ADDITIONAL TRAINING

Certified Ethical Hacker v13 (CEH AI)

EC-Council’s flagship ethical hacking certification: 20 modules and more than 550 attack techniques, delivered across five weekends. Open for full details, options, and cohort dates.

ADDITIONAL TRAINING

Trusted AI Safety Expert (TAISE)

The Cloud Security Alliance and Northeastern University credential for safe, secure, and responsible AI development and deployment. Open for full details, options, and cohort dates.