This course will provide participants with in-depth knowledge and practical skills to plan, deliver and monitor IT/cybersecurity to internal and external clients encompassing a complete, conjoined set of disciplines in the areas of IT policies, Security-Operational-Run-Book, security/penetration testing, ethical hacking, and black hat hacking.
It will also cover WiFi security, Website security, human factors, cyber forensics, cybersecurity team management, Secure Operations Center (SOC), and Computer Security Incident Response Team (CSIRT) infrastructures.
As part of the course, participants will conduct a risk assessment of two different deployments based on the ISO27001 to identify any direct, or indirect threats, security exposures, or potentials for vulnerabilities. Participants will also respond to an example of security incident and identify the best practices which could be applied to secure their own organization and associated assets. All participants will be given copies of Run Books to deal with cyber extortions, Distributed Denial of Service (DDoS/DoS), and forensic investigations.
By the end of the course, participants will be able to:
Apply information security standards to their organization and its critical assets.
Identify the threats presented by viruses, malware, active code, and Active Persistent Threats (APT) and consider the different mitigating options.
Formulate and manage effective cybersecurity teams, and apply the Computer Security Incident Response Team (CSIRT) framework, tools, and capabilities to deliver cost-effective and robust solutions to protect the organization.
Use Neuro-Linguistic Programing (NLP) to deliver messages that will change the way employees work and think about security.
Examine the area of wireless security protocols, their security attributes, and their potential insecurities within the organization, and in public spaces.
Illustrate how penetration testing and ethical hacking enhance organizational security.
Evaluate and apply two of the most important aspects in the modern day of cyber-adversity: Open Source Intelligence (OSINT) and cyber threat intelligence.
IT professionals
Security professionals
Auditors
Site administrators
General management and anyone tasked with managing and protecting the integrity of the network infrastructure
This also includes anyone already familiar and involved with IT/cyber/digital security and seeking to build on their fundamental principles of security.
Information security standards (e.g. PCI-DSS/ISO27001).
Documented tools:
ISO/IEC 27001.
PAS 555.
Control Objectives for Information and Related Technology (COBIT).
Future standards:
ISO/IEC 2018.
EU privacy regulations.
Local and international government stipulations implicating access to private data.
Enterprise security:
External defenses.
Web filtering.
Intruder Prevention Systems (IPS).
Intruder Detection Systems (IDS).
Firewalls.
Secure code.
Software Development Lifecycles (SDL).
Potential insecurities within developed applications.
The world is packed with information; and most organizations struggle to recognize what information they have, why they need it, how long they need it for, and if it has any value. Furthermore, changes in the law, such as the recent changes in the UAE employment law, often call for tighter controls on contract documentation, and lead to a need for enhanced management of human resource and contract records. In addition, electronic information is under threat from cyber-attack and personal information is at risk of exposure. As such, the development and implementation of a records management program that includes document control methods to identify, secure, and protect critical information, is necessary for every organization.
The world is packed with information; and most organizations struggle to recognize what information they have, why they need it, how long they need it for, and if it has any value. Furthermore, changes in the law, such as the recent changes in the UAE employment law, often call for tighter controls on contract documentation, and lead to a need for enhanced management of human resource and contract records. In addition, electronic information is under threat from cyber-attack and personal information is at risk of exposure. As such, the development and implementation of a records management program that includes document control methods to identify, secure, and protect critical information, is necessary for every organization.
Organizations typically start using electronic document management systems to transform paper-based operations after reaching an internal tipping point in which customer response times become too slow, departments don’t have enough bandwidth to solve recurring process bottlenecks, paper archiving becomes too costly or large-scale regulatory risks are exposed during a data breach or compliance fines.
For organizations that have defined but resource-intensive business processes, EDMS is an ideal fit. Document management helps organizations across industries sidestep this busy work entirely by eliminating manual document maintenance, reclaiming valuable staff time, and boosting the bottom-line.
It is universally recognized that for any company to succeed it must take a proactive approach to risk management. Over the last few years, Companies and several countries legislators have been focusing on Process Safety as a method to reduce the risks posed by hazardous industries. Process Hazard Analysis (PHA) is recognized as being a critical tool in the implementation of a successful risk management system
The level of competition in current business environments requires a focus on practices that assist in the management of personal and workgroup tasks, priorities, and projects. All types of organizations need to find more productive means to offer their products and/or services, so goals are established and tasks assigned to better meet customer and stakeholder needs. A focus on the use of productive practices allows for effective and efficient management of project work, establishing priorities and meeting deadlines, and is an important part of customer service.
Through training as a lead disaster recovery manager, you can gain the knowledge and skills required to assist a company in creating, administering, and executing a disaster recovery plan. You will learn about business continuity management's best practices for disaster recovery processes and ICT disaster recovery services throughout this training course.