Cyber Security: Information Security Management Best Practice

By the end of the program, participants will be able to: 

1. Apply Information Security Standards to their organization and its critical assets
2. Identify the threats presented by viruses, malware, active code, and Active Persistent Threats (APT) and consider the different mitigating options
3. Apply the Computer Security Incident Response Team (CSIRT) framework, tools and capabilities to deliver cost effective and robust solutions to protect the organization
4. Use Neuro Linguistic Programming (NLP) to deliver messages that will change the way employees work and think about security
5. Study the area of Wireless Security Protocols, their security attributes, and their potential insecurities within the organization, and in public spaces
6. Illustrate how Penetration Testing and Ethical Hacking enhance organizational security
7. Explore and apply two of the most important aspects in the modern day of cyber-adversity: Open Source Intelligence (OSINT) and Cyber Threat Intelligence

IT Professionals, Security Professionals, auditors, site administrators, general management and anyone tasked with managing and protecting the integrity of the network infrastructure. This also includes anyone already familiar and involved with IT/Cyber/Digital Security and seeking to build on their fundamental principles of security.

Adapting to Evolving Standards: 

• Information Security Standards (e.g. PCI-DSS/ISO27001)
• Documented tools such as ISO/IEC 27001, PAS 555, and CoBIT
• Future standards
  • ISO/IEC 2017
  • EU Privacy Regulations
  • Local and International Government stipulations implicating access to private data

Principles of IT Security: 

• Enterprise Security
  • Firewalls
  • Intruder Detection Systems (IDS)
  • Intruder Prevention Systems (IPS)
  • Web Filtering
  • External Defenses
• Secure Code and Software Development Lifecycles (SDL)
• Potential insecurities within developed applications
• WiFi security protocols and attributes
• Voice over IP (VoIP) security
• Governance Risk and Compliance (GRC)
• Security Incident Event Management (SEIM) applications
• Cloud security
• Third party security and compliance

Adopting Cyber Security Measures: 

• Employee perception on security through Nero Linguistic Programming (NLP)
• Security Education and Awareness: Techniques, systems, and methodologies
• Penetration Testing and Ethical Hacking
• Options to mitigate viruses, malware, Active Code Threats and Active Persistent Threats (APT)
• The Computer Incident Response Team (CSIRT) Frameworks, Tools and Capabilities
• Incident First Response: Proven methodologies, tools, and systems
• The science of applying robust Digital Forensics: Applicable law, capabilities, and methodologies
• Supervisory Controls and Data Acquisition (SCADA); security requirements, processes and methodologies
• Abuse images: complying with local and international law

Advanced Cyber Risks and Tools: 

• Cyber Crime and The Darknet/Darkweb: The world of the Hackers/Hacktivists
• The underground of Cyber Criminality
• Social Engineering as a tool to test operational resilience
• Open Source Intelligence (OSINT) and Cyber Threat Intelligence
• Open Source and Commercial Security Tools
• The operational use of Encryption
• Virtual Private Networks

• The Training lectures.
• The Group discussions.
• The Training Workshops.