McAfee Institute
    • CCTA
    • DoD COOL
    • Missouri DHE
    • POST Approved for CLEE
    • NICCS aligned

    Certified Counterintelligence Threat Analyst (CCTA)

    Identify Counterintelligence Threats, Analyze Intent, and Protect What Adversaries Target.

    The Certified Counterintelligence Threat Analyst program prepares intelligence, security, investigative, and cyber professionals to identify insider and external threats, evaluate behavior and intent, analyze digital and open-source activity, and develop defensible mitigation recommendations.

    4.8
    10 reviews
    40
    Hours
    40
    CPE credits
    Lifetime
    Access
    1 Year
    Exam License
    Graduates work at
    • FBI
    • DHS
    • FedEx
    • Citi
    • Mossberg
    • DEA
    • DoD
    Scholarship rate
    $559$1,397
    Save $838 · or $140/mo × 4

    Scholarship rate shown

    • 3-Day Money-Back Guarantee
    • Full Lifetime Access
    • 1 Year Exam License
    • Official Study Manual
    • Official Online Training
    • Official Prep Review Quizzes
    Begin Enrollment

    or pay over time with Affirm · Sezzle

    Military / Gov COOL and TA eligible

    Self-paced online training
    Board-issued credential
    Proctored final examination
    Lifetime course access

    Counterintelligence threats rarely announce themselves—and individual warning signs often appear harmless until they are connected.

    Threat activity may emerge through unusual access, online behavior, deceptive communication, social relationships, shifting loyalties, digital indicators, or attempts to collect sensitive information. Analysts must evaluate these signals in context, distinguish legitimate activity from meaningful risk, document uncertainty, and coordinate protective action without relying on assumptions or profiling alone. CCTA is designed for professionals who need a structured framework for identifying, analyzing, documenting, and mitigating insider, cyber-enabled, and external counterintelligence threats.

    Threat indicators are missed when cyber activity, human behavior, social media, access patterns, and organizational information remain separated.

    Assessments lose credibility when intent, capability, opportunity, source reliability, and analytical uncertainty are not documented.

    Organizations remain exposed when intelligence findings do not lead to proportionate, lawful, and actionable mitigation recommendations.

    CCTA provides a structured approach to counterintelligence principles, threat identification, behavioral analysis, digital and open-source investigation, deception indicators, cyber-threat activity, legal considerations, and mitigation planning.

    What sets this program apart

    Integrated Threat Analysis

    Connects behavioral, digital, social-media, open-source, cyber, and organizational indicators within a unified counterintelligence assessment process.

    Intent, Capability, and Opportunity

    Develops the analytical judgment needed to evaluate what a subject may intend, what access or capability exists, and whether conditions support meaningful risk.

    Investigation Through Mitigation

    Moves from threat identification and intelligence collection into assessment, documentation, legal considerations, and protective recommendations.

    Professional Certification Assessment

    Certification requires completion of the applicable training, eligibility, assessment, and proctored examination requirements. Access to the program alone does not result in certification.

    Choose your enrollment path

    Self-pay, military/government funding, or employer sponsorship — we'll take you to the right option.

    What you earn

    A board-issued credential, recognized where it counts

    Board certificate
    Certified Counterintelligence Threat Analyst (CCTA) certificate sample
    Digital badge
    Certified Counterintelligence Threat Analyst (CCTA) digital badge
    Recognition
    • DoD COOL
    • Missouri DHE
    • POST Approved for CLEE
    • NICCS aligned

    Board certification programs: Students must submit all course quizzes, score 70% or better on all sections of the course and obtain a 70% or better on the final online examination, and submit proof eligibility up completion of your exam application. All fees must be paid in full. Upon successful completion of your program, the McAfee Institute will issue your board certification. Students who successfully complete the program before meeting the eligibility will be put into a holding pattern until the eligibility is met at which time the credentials will be issued.

    Completion of training does not guarantee employment, promotion, security clearance eligibility, or acceptance by any agency or third party.

    Eligible for military & government credentialing assistance

    DoD COOLArmy COOL / Credentialing AssistanceNavy COOL
    Coast Guard COOLAir Force COOLMarine Corps COOL

    Select certification programs may be eligible for use with military and government credentialing or tuition assistance benefits, subject to agency and individual eligibility requirements. Participation does not imply endorsement by any agency.

    State & Federal Regulatory Approvals

    Missouri DHEWD

    State-certified to operate under 6 CSR 10-5.010

    Dept. of Higher Education and Workforce Development

    NICCS Education & Training Catalog

    Listed training provider, NICCS Education & Training Catalog

    Mapped to NIST NICE framework · operated by CISA

    Missouri POST

    40 CLEE hours approved · Control #14976

    10 legal studies · 30 technical studies

    Officers should confirm acceptance with their licensing agency.

    Outcomes

    What You'll Learn

    • Comprehensive Counterintelligence Techniques

      Understand the fundamentals of counterintelligence, from intelligence gathering to analysis, enabling you to lead sophisticated cyber investigations.

    • Advanced Social Media Investigations

      Dive deep into social media platforms to uncover potential threats. Learn advanced tactics for analyzing social media content and identifying deception in online interactions.

    • Classified and Open-Source Intelligence (OSINT) Methodologies

      Acquire skills in both classified and open-source intelligence gathering, using real-world tools and techniques to support cyber investigations.

    • Deep Web and Advanced Search Strategies

      Explore the deep web for hidden information critical to investigations. Learn advanced search techniques to locate valuable data efficiently and securely.

    • Psychological Profiling and Threat Assessment

      Develop profiling skills to assess cyber threats, understanding the motivations and methods of cyber criminals and hackers.

    • Digital Forensics and Email Analysis

      Gain hands-on experience in digital forensics, including email header analysis, to trace and investigate cyber incidents effectively.

    • Legal and Ethical Aspects of Counterintelligence

      Navigate the legal and ethical challenges in cyber counterintelligence, ensuring compliance with industry standards while conducting complex investigations.

    • Cyber Terrorism Investigation Techniques

      Study cyber terrorism tactics and methodologies, equipping yourself to counter threats that impact national security.

    Student Reviews

    What Our Students Say

    Real feedback from professionals who've completed this program

    “Great course. I would recommend this for those who lack the knowledge for investigations using open source intelligence. The structure and progression of this course was very good.”

    CT

    Charles T.

    Verified Graduate

    “Outstanding program! I highly suggest any information security professional to sign up! The customer support was top notch as well!”

    KM

    Kenneth Mackiewicz

    Verified Graduate

    “This was a fantastic course!! I enjoyed learning new investigative methods/strategies and applying them immediately.”

    BM

    Brian Mills

    Verified Graduate

    Joshua A. McAfee, Founder & CEO, McAfee Institute
    Built & Led by the Founder

    Joshua A. McAfee · Founder & CEO, McAfee Institute

    15 years building credentials for the professionals who actually do the work. CCTA was developed alongside practitioners from federal, state, and corporate investigation teams.

    Meet Josh
    Who this is for

    Built for professionals responsible for identifying and assessing counterintelligence threats

    CCTA is designed for professionals whose work involves insider risk, counterintelligence, cyber threats, security investigations, intelligence analysis, organizational protection, digital evidence, or the assessment of adversarial behavior.

    This course is perfect for

    • Law Enforcement and Intelligence Officers who require advanced cyber investigation techniques to enhance their fieldwork and strategic counterintelligence operations.

    • Cybersecurity Professionals and IT Specialists eager to expand their skills in digital forensics, intelligence methodologies, and cyber threat analysis.

    • Corporate Security and Risk Management Experts looking to apply counterintelligence strategies to protect organizational assets and mitigate cyber threats.

    • Government and Military Personnel responsible for safeguarding national security, with a focus on understanding and countering cyber terrorism.

    • Private Investigators and Cyber Consultants seeking to gain specialized expertise in counterintelligence and improve investigation outcomes for high-profile cases.

    This course may not be for you if

    • You are seeking general cybersecurity or network-defense training without an intelligence or threat-analysis focus.

    • Your role does not involve intelligence, investigations, security, insider risk, cyber threats, fraud, compliance, or organizational protection.

    • You want a purely technical digital-forensics or penetration-testing certification.

    • You are looking for a brief awareness course rather than a structured professional certification with analytical and assessment requirements.

    • You are unwilling to distinguish evidence from inference, document uncertainty, test competing explanations, and make proportionate recommendations.

    Is this program right for you?

    Program-fit questions candidates ask before they enroll.

    No specialized counterintelligence background is required beyond the published eligibility standards. The program develops a structured understanding of threat identification, intelligence collection, behavioral analysis, digital investigation, legal considerations, and mitigation.

    Standards consistent with positions of public trust

    Eligibility & requirements

    McAfee Institute trains military, law enforcement, and investigative professionals. Eligibility reflects that. Verification is the reason the credential carries weight in the field.

    Education & experience

    Any one of the qualifying paths below. Experience must be in investigations, law enforcement, criminal justice, military, or similar fields with direct criminal investigation or intelligence responsibilities.

    • Path A Bachelor's or higher + 3 years experience

    • Path B Associate's degree + 4 years experience

    • Path C HS diploma or equivalent + 5 years experience

    Relevant fields include investigations, law enforcement, criminal justice, military, and/or another similar field with direct criminal investigation and/or intelligence responsibilities.

    Conduct requirements

    Applicants are not eligible with any felony conviction or pending felony charge, or any conviction or pending charge involving violence, dishonesty or breach of trust, or crimes against persons, or other disqualifying offenses. Criminal history must be disclosed at enrollment and may be verified.

    International enrollment

    McAfee Institute is a U.S.-based institution serving a primarily U.S. professional audience. International enrollments may be subject to additional review, identity verification, professional affiliation verification, and compliance screening. Applicants located in certain countries or regions, or associated with restricted persons or entities under U.S. law, may be ineligible for enrollment.

    Scholarship rate
    $559$1,397
    Save $838 · or $140/mo × 4

    Scholarship rate shown

    • 3-Day Money-Back Guarantee
    • Full Lifetime Access
    • 1 Year Exam License
    • Official Study Manual
    • Official Online Training
    • Official Prep Review Quizzes
    Begin Enrollment

    or pay over time with Affirm · Sezzle

    Military / Gov COOL and TA eligible

    Read the full eligibility and conduct policy
    • Disclosure & verification

      Applicants must disclose criminal history as requested during enrollment. McAfee Institute may verify eligibility through documentation and/or a background check when required by a program component, partner environment, exam vendor, or when reasonably necessary to protect program integrity. Disclosures are required to the extent permitted by applicable law.

    • False information

      Any material falsification or omission is grounds for denial of admission, removal from the program, and/or denial of certification.

    • No guarantee of outcome

      Completion of training does not guarantee employment, promotion, security clearance eligibility, or acceptance by any agency or third party.

    The CCTA curriculum progresses from counterintelligence principles, the intelligence cycle, collection disciplines, privacy, and secure research environments into social-media investigations, deep-web research, deception analysis, behavioral threat assessment, digital forensics, email analysis, cyberterrorism, and applied intelligence methodology. Across 19 modules and 40 hours of instruction, learners examine how threat indicators can be collected, evaluated, connected, documented, and translated into mitigation recommendations.

    Curriculum

    What you will study

    19 modules · 169 lessons of structured coursework, board-aligned and tested in the final exam.

    Academic StandardsEducational performance objectives

    This program is mapped to measurable performance objectives used for academic review, assessment alignment, and continuous improvement.

    • Foundational Performance Objective

      Identify counterintelligence principles, threat typologies, and legal considerations relevant to national and organizational security.

    • Applied Performance Objective

      Apply counterintelligence techniques across social media, deep web, and behavioral threat domains.

    • Exit Performance Objective

      Produce a counterintelligence threat assessment incorporating analytical reasoning, legal compliance, and mitigation recommendations.

    Overview

    About this Course

    Advanced training in counterintelligence operations, threat analysis, and security countermeasures. Learn to identify, assess, and neutralize intelligence threats to organizations and national security.

    The Certified Cyber Counterintelligence Threat Analyst (CCTA) program by McAfee Institute offers elite training for professionals in law enforcement, intelligence, and cybersecurity. This rigorous certification program provides the expertise needed to tackle evolving cyber threats and safeguard national security. CCTA-certified professionals are highly regarded across government agencies and the private sector for their ability to perform complex cyber investigations and counterintelligence operations.

    Through a blend of self-paced online modules, real-world exercises, and live instructor support, you’ll master advanced methodologies in counterintelligence, social media analysis, deep web navigation, and digital forensics. The CCTA credential signifies not just proficiency but a strategic advantage in the fight against cybercrime.

    What's included

    Everything you need to certify

    One enrollment includes the full course library, the official manual, the proctored exam license, and your board credential on completion.

    • Official study manual
    • Prep review quizzes
    • Online training program
    • Exam license (1 year)
    • 40+ hours of instruction
    • Mobile & desktop access
    • Board certification (digital + physical)
    • 40 CPE / CEU credits
    • Closed captions
    The platform

    More Than Just Certifications

    Join a comprehensive professional development platform designed exclusively for law enforcement, intelligence, and investigation professionals.

    • Active Community

      Engage with verified professionals in law enforcement and intelligence

    • Exclusive Jobs

      Access career opportunities not listed elsewhere

    • CPE Tracking

      Automatic continuing professional education credit management

    • Expert Network

      Connect with federal agents and industry leaders

    • Communities

      Join private discussion groups with peers

    • Resources

      Articles, whitepapers, tools and more

    One credential. Three eligibility paths. Pick yours.

    CertificationYou're here

    Certified Counterintelligence Threat Analyst (CCTA)

    The full credential for working professionals.

    Complete curriculum, mentorship, and proctored exam included.

    Eligibility
    Bachelor's degree + 3 yrs experience or Associate's degree + 4 yrs experience or HS diploma + 5 yrs experience
    $1,397USD
    Associate

    Associate Certified Counterintelligence Threat Analyst (A|CCTA)

    Same program, same exam, same credential. Open to anyone with a Bachelor's degree, no work experience required.

    Designed for those entering the field who don't yet meet the Certification's experience requirements.

    Eligibility
    Bachelor's degree
    $1,397USD
    Exam Only

    Certified Counterintelligence Threat Analyst (CCTA) Exam

    For experienced practitioners ready to validate without taking the training.

    Standalone exam — does not include curriculum, study materials, or mentorship.

    Eligibility
    Bachelor's degree + 3 yrs experience or Associate's degree + 4 yrs experience or HS diploma + 5 yrs experience
    $450USD
    Choose your enrollment path

    Three ways to fund your certification.

    Self-pay · Military / Gov COOL · Employer-funded

    Most popularOne-time payment
    $559$1,397

    For individual students paying out of pocket. Employer-funded, team, or military/government-funded enrollments use the Standard Institutional Rate.

    3-day money-back guarantee

    Payment plans
    $140/mo × 4

    Interest-free via Affirm or Sezzle. 6–12 month plans available.

    Military / Gov COOL eligible? Use DoD/Navy/Army/Coast Guard/Air Force COOL or TA funding — switch to the tab for the invoice request flow.

    Need financial help? — available for self-paying students demonstrating financial need.

    Scholarship price available for individual students paying out of pocket only.
    Not valid for employer-funded, organizational, team, Military / Gov COOL, or third-party paid enrollments.

    FAQ

    Enrollment, examination, and policy FAQs

    • Our certifications are trusted by more than 4,500 employers, including government agencies, law enforcement departments, intelligence units, and private-sector organizations. Programs are recognized by POST (various states), DoD COOL & CA, NICCS, and the Missouri Department of Higher Education & Workforce Development.

    Not sure if this is the right credential?

    Talk to an advisor about eligibility, fit, and funding paths.

    Develop the analytical judgment to identify threats, test assumptions, and protect critical assets.

    Complete the CCTA certification process and document specialized education and assessment in counterintelligence principles, insider-threat analysis, behavioral indicators, digital and open-source investigation, deception analysis, legal considerations, and mitigation planning.

    We use cookies to analyze traffic and personalize content. You can opt out at any time. See our Cookie Policy.