Duration
5 days
Course Description
It is critical for an organization to secure and protect their information system. Security posture assessment exposed potential threats to the information assets and it is a comprehensive evaluation of organization’s enterprise-wide networks environment with objective to mitigate risks and to establish ‘Defense-in-Depth’.
Information security is implemented by systems; policies and procedures in comply with ISO/IEC 27001:2013 Information Security Management System (ISMS). Therefore, the security posture assessment provides a thorough understanding on information security, follows with technical knowledge and skill sets.
Objectives
- Identify the organization’s information security structure, mitigate risks and enhance overall security. Includes information security awareness and its benefits; introduction to ISO/IEC 27001:2013 requirements and controls for policies and procedures development;
- Establish network assessment skills to mitigate risks within and outside organization’s network infrastructure;
- Establish server and desktop security assessment skills by exposing the vulnerabilities of unsecured Windows and Linux systems;
- Establish web application security assessment skills; and
- Assess the weaknesses and vulnerabilities in target systems and demonstrate hacking attempts by exposing the tools and information that hackers use in underground activities
Target Participants
- Information security practitioners and professionals
- System and network administrators
- Web and application developers
- Penetration testers
Modules
ICT Policy Compliance & Physical Security Training
- Compliance Framework
- How to use the Framework
- How to check for compliance
- Physical Security
- Case studies
Network Security Assessment
- Common network vulnerabilities and mitigation
- Methodology and components in building secured network architecture,
- Data flow analysis
- Industry best practices
- Assessment methodology
- Hands-on and practical on network security assessment
Wireless Security Assessment
- Wireless Encryption Networks
- Wireless Discovery and Sniffing
- Wireless Penetration Testing
- Wireless Vulnerability Testing
- Wireless Traffic Assessment
- Hands-on and practical on wireless security assessment
Server and Desktop Security
- Server and desktop vulnerabilities investigation and exploitation
- Security assessment methodologies for both Windows and Linux environment
- Insight and in-depth explanation of reconnaissance approaches
- Mitigation and rectifications
- Hands-on scanning and enumerations
Web Application Security Assessment
- Web applications security assessment methodology
- Introduction to web application vulnerabilities
- Common web application vulnerabilities and recommendations
- Hands-on exercises
Programme scope, delivery arrangements and suitability are confirmed during enquiry.