Duration
3 days
Overview
This course introduces you to cybersecurity, a growing and rapidly changing field that is becoming increasingly vital to business survival, job stability, and national security. Cybersecurity demands skilled professionals who possess the knowledge, skills, and ability to address the evolving threat landscape.
Target Audience
A wide range of individuals, including:
- Those new to IT, students, recent graduates and career changers.
- Audit, risk, security and governance professionals looking to gainbase line IT knowledge and skills.
- Current IT Professionals looking to reskill or upskill to broaden their IT knowledge and skills or keep up to date.
Outline
Introduction to Cybersecurity
Learning Objectives
- Identify and explain cybersecurity concepts.
- Identify main components of telecommunications technologies.
- Differentiate types of security.
Overview
- What is Security?
- Types of Security
Cybersecurity and Privacy
Learning Objectives
- Identify differences between information technology systems and specialized systems.
- Discuss enterprise cybersecurity roles and responsibilities.
- Define governance, risk management and compliance (GRC).
- Distinguish between privacy and security.
Topics
- Specialized Systems
- Roles and Responsibilities
- Governance, Risk Management and Compliance
- Cybersecurity Governance
- Privacy
- Privacy vs. Security
Service Disruption and Cybersecurity
Learning Objectives
- Identify and discuss common causes of enterprise service disruption.
- Explain business continuity planning.
- Describe the relationship between business continuity planning (BCP) and disaster recovery (DR).
Topics
- Resilience
- Business Continuity and Disaster Recovery
- Business Impact Analysis
- Recovery Concepts
Threat Landscape
Learning Objectives
- Identify and discuss common causes of enterprise service disruption.
- Explain business continuity planning.
- Describe the relationship between business continuity planning (BCP) and disaster recovery (DR).
Topics
- Specialized Systems
- Roles and Responsibilities
- Governance, Risk Management and Compliance
- Cybersecurity Governance
- Privacy
- Privacy vs. Security
Cyberattacks
Learning Objectives
- Identify and explain cybersecurity concepts.
- Identify main components of telecommunications technologies.
- Differentiate types of security.
Topics
- Attack Attributes
- Attack Process
- Malware and Attacks
Risk Mitigation
Learning Objectives
- Identify differences between information technology systems and specialized systems.
- Discuss enterprise cybersecurity roles and responsibilities.
- Define governance, risk management and compliance (GRC).
- Distinguish between privacy and security
Topics
- Risk Assessment
- Supply Chain Considerations
- Risk Management Life Cycle
- Managing Risk
- Using the Results of Risk Assessments
Securing Assets
Learning Objectives
- Identify differences between information technology systems and specialized systems.
- Discuss enterprise cybersecurity roles and responsibilities.
- Define governance, risk management and compliance (GRC).
- Distinguish between privacy and security.
Topics
- Risk Identification, Standards, Frameworks and Industry Guidance
- Endpoint Security
- System Hardening
- Logging, Monitoring and Detection
- Data Security
Security Architecture
Learning Objectives
- Identify components of a security architecture.
- Compare security models.
Topics
- Architecture, Models, and Frameworks
Security Controls
Learning Objectives
- Explain defense in depth.
- Compare traditional security and assume-breach philosophies.
- Identify three main types of security controls.
- Distinguish types of logical access controls.
- Identify and explain types of administrative controls.
- Explain each component of authentication, authorization and accounting (AAA).
Topics
- Security Controls
Network Security
Learning Objectives
- Explain methods to achieve isolation and segmentation.
- Identify network security hardware.
- Distinguish types of firewalls.
Topics
- Network Security
Application and Cloud Security
Learning Objectives
- Recognize system life cycle management principles, including software security and usability.
- Identify and analyze cloud service models.
- Discuss risk associated with cloud computing.
Topics
- Application Security
- Cloud Security
Software Management and Encryption
Learning Objectives
- Identify elements of cryptographic systems.
- Identify and discuss key systems.
Topics
- Configuration Management
- Change Management
- Patch Management
- Encryption Fundamentals, Techniques and Applications
Introducing Security Operations
Learning Objectives
- Discuss security operations center (SOC) deployment models.
- Identify common SOC functions, roles and responsibilities.
- Identify vulnerability assessment tools, including open sourcetools and their capabilities.
Topics
- Security Operations
Testing Technologies and Security Tools
Learning Objectives
- Differentiate vulnerability scanning and penetration testing.
- Discuss common phases of penetration testing.
- Identify and use common cybersecurity tools.
- Discuss components that aid cybersecurity monitoring and detection.
Topics
- Tool and Technologies (Monitoring, Detection, Correlation)
- Forensics
Handling Security Incidents
Learning Objectives
- Understand incident response and handling methodologies.
- Distinguish between an event and an incident.
- Discuss the elements of an incident response plan (IRP).
Topics
- Incident Handling
Practice Labs
- SQL Injection
- Windows Event Monitoring & Defender
- Threat Removal
- Threat Detection
- File Permissions on Windows and Linux
- Forensics: File Recovery, Baselining with Lynis
- Scanning Ports and Utilizing SSH
- Windows and Linux OS Firewalls
Programme scope, delivery arrangements and suitability are confirmed during enquiry.