Certified Human-Rated Spacecraft Threat Modeling Professional (CHRSTMP)

Certified Human-Rated Spacecraft Threat Modeling Professional (CHRSTMP) Certification Program by Tonex

The Certified Human-Rated Spacecraft Threat Modeling Professional (CHRSTMP) Certification Program by Tonex prepares professionals to identify, analyze, prioritize, and communicate cyber threats affecting human-rated spacecraft, mission systems, supporting ground infrastructure, and connected operational environments. Participants learn how structured threat modeling supports secure spacecraft design, mission assurance, safety engineering, risk management, and verification activities throughout the system lifecycle.

The program applies a practical training approach that includes exercises, real-world case studies, and examples of processes and documentation used in human-rated spacecraft cybersecurity projects. Participants examine attack surfaces, trust boundaries, data flows, threat actors, mission dependencies, software and hardware interfaces, communication links, and operational constraints relevant to crewed space systems.

Cybersecurity is critical to human-rated spacecraft because compromise can affect mission continuity, command authority, crew safety, navigation, communications, and critical onboard functions. Effective cybersecurity threat modeling enables engineering teams to identify weaknesses earlier, improve security requirements, prioritize mitigations, and strengthen resilience before vulnerabilities become operational risks.

Learning Objectives

Upon successful completion of this program, participants will be able to:

• Explain threat modeling principles for human-rated spacecraft and associated mission systems.
• Identify assets, attack surfaces, trust boundaries, interfaces, and mission dependencies.
• Analyze threat actors, attack paths, vulnerabilities, and potential mission consequences.
• Apply structured threat identification and risk prioritization methods to spacecraft systems.
• Develop threat scenarios and security requirements aligned with lifecycle engineering activities.
• Integrate cybersecurity threat modeling into safety, assurance, verification, and risk management processes.
• Document threat models, mitigation decisions, residual risks, and engineering recommendations.

Audience

This certification program is designed for:

• Spacecraft Systems Engineers
• Space Cybersecurity Engineers
• Mission Assurance Professionals
• Space Systems Architects
• Safety and Reliability Engineers
• Verification and Validation Professionals
• Risk Management Professionals
• Security Architects
• Threat Modeling Specialists
• Cybersecurity Professionals
• Human Spaceflight Engineering Professionals
• Technical Managers and Engineering Leaders

Program Modules

Module 1: Human-Rated Spacecraft Threat Modeling Foundations

• Human-rated spacecraft cybersecurity concepts
• Threat modeling purpose and lifecycle value
• Mission objectives and security dependencies
• Safety-critical and mission-critical assets
• System boundaries and operational environments
• Threat modeling roles and responsibilities
• Threat model documentation fundamentals

Module 2: Assets Interfaces and Trust Boundaries

• Critical spacecraft asset identification
• Hardware and software interface analysis
• Ground and space segment relationships
• Data flow and communication mapping
• Trust boundary identification techniques
• External dependency and supplier considerations
• Attack surface documentation practices

Module 3: Threat Actors Paths and Scenarios

• Space mission threat actor categories
• Adversary objectives and capability assessment
• Attack vector identification methods
• Multi-stage attack path development
• Insider and supply chain threats
• Mission-specific threat scenario construction
• Threat scenario prioritization practices

Module 4: Risk Analysis and Threat Prioritization

• Threat likelihood assessment principles
• Mission consequence evaluation methods
• Safety and security impact relationships
• Risk ranking and prioritization approaches
• Vulnerability and exposure considerations
• Residual risk evaluation practices
• Threat decision documentation requirements

Module 5: Security Requirements and Risk Mitigation

• Threat-driven security requirement development
• Preventive and detective control selection
• Architectural mitigation strategy development
• Defense-in-depth for spacecraft systems
• Resilience and graceful degradation concepts
• Mitigation verification planning practices
• Security requirement traceability methods

Module 6: Assurance Verification and Threat Governance

• Threat model review and validation
• Security assurance integration practices
• Verification and validation alignment
• Configuration and change impact assessment
• Cybersecurity risk acceptance processes
• Threat model maintenance and governance
• Lifecycle reporting and evidence management

Exam Domains

1. Space Mission Threat Identification Principles
2. Spacecraft Asset and Exposure Analysis
3. Adversary Behavior and Attack Path Assessment
4. Mission Risk Evaluation and Prioritization
5. Security Control Selection and Requirement Development
6. Threat Assurance, Governance, and Lifecycle Integration

Course Delivery

The course is delivered through a combination of lectures, interactive discussions, hands-on workshops, case studies, practical exercises, and project-based learning facilitated by experts in human spaceflight cybersecurity, spacecraft engineering, threat modeling, and mission assurance. Participants will have access to supporting readings, case studies, threat analysis methods, engineering examples, and tools for practical exercises.

The course follows a practical training approach that includes exercises, real-world case studies, and examples of processes and documentation used in human-rated spacecraft cybersecurity projects. Participants work through representative scenarios involving spacecraft assets, interfaces, trust boundaries, threat actors, attack paths, mission impacts, mitigation strategies, verification activities, and threat model documentation.

Assessment and Certification

Participants will be assessed through quizzes, assignments, practical exercises, case-based activities, and a capstone project focused on spacecraft threat modeling. Assessment activities evaluate the participant’s ability to identify threats, analyze attack paths, evaluate mission consequences, prioritize risks, develop security requirements, recommend mitigations, and document threat modeling results.

Upon successful completion of the course requirements and certification examination, participants will receive the Certified Human-Rated Spacecraft Threat Modeling Professional (CHRSTMP) certification.

Question Types

• Multiple Choice Questions (MCQs)
• Scenario-Based Questions

Passing Criteria

To pass the Certified Human-Rated Spacecraft Threat Modeling Professional (CHRSTMP) Certification Training exam, candidates must achieve a score of 70% or higher.

Take the Next Step

Strengthen your ability to identify and reduce cyber risk across crewed spacecraft, mission systems, and supporting infrastructure with the Certified Human-Rated Spacecraft Threat Modeling Professional (CHRSTMP) Certification Program by Tonex. Develop practical expertise in threat analysis, mission risk prioritization, security requirements, mitigation planning, and cybersecurity assurance for human spaceflight environments.