Get a 10% discount on your first order when you use this promo code at checkout: MAY24BAN3X
The Remote Auditing Course
By Research Quality Association
COURSE INFORMATION Join us for a two-day immersive course crafted to equip participants with an in-depth understanding of remote audit methodologies. Delve into the nuances between remote and face-to-face audits, dissecting their respective strengths and limitations. Through practical scenarios tailored for remote audit conduct, this course stands as an essential counterpart to our on-site audits course The Auditing Course. WHO SHOULD ATTEND: Applicable across various domains of regulated research and development, this course proves invaluable in contexts requiring a quality system for audit. Participants with firsthand audit experience stand to gain the most benefit from this programme. EXPANDING ON PREVIOUS LEARNING: This course extends its relevance to all forms of audits and further amplifies concepts explored in RQA's suite of research quality assurance courses, including: 'Research Quality Assurance for Good Laboratory Practice,' 'Good Clinical Practice Auditing – Principles and Practice,' and 'Good Manufacturing Practice for Investigational Medicinal Products.' BENEFITS INCLUDE IMPROVED: * Understand the processes of planning, conducting, reporting and follow-up of audits * Recognising the importance of personal approach in developing positive audit outcomes * Ability to analyse evidence and present logical audit findings * Appreciate the importance of audit in continuing improvement. THIS COURSE IS STRUCTURED TO ENCOURAGE DELEGATES TO: * Discuss and develop ideas * Solve problems * Exchange information. -------------------------------------------------------------------------------- TUTORS Tutors will be comprised of (click the photos for biographies): ANDREW WADDELL Founder Director, Tower Mains Ltd ROSEMARY ICHABA Senior QA Associate, Tower Mains Ltd CATE OVINGTON Director, The Knowlogy Group Ltd JEAN MCWILLIAM Associate Director, Alexion -------------------------------------------------------------------------------- PROGRAMME Please note timings may be subject to alteration. DAY 1 09:00 COURSE REGISTRATION 09:15 WELCOME AND INTRODUCTIONS 09:35 INTRODUCTION TO AUDITS Delegates explore the range of audits which they have experienced, define the purpose of each audit type and establish which of those audits are performed to meet regulatory requirements. 10:05 INTRODUCTION TO REMOTE AUDITS Presentation to introduce the major differences between face-to-face audits and remote audits. The major elements of audits will be examined to determine where there may be differences. 10:30 BREAK 10:45 WORKSHOP 1 - REMOTE AUDITS This workshop will examine participants experience or understanding of the differences between face-to-face and remote audits. 11:15 WORKSHOP 1 - FEEDBACK 11:35 AUDIT PREPARATION The essential steps in preparation for audits will be discussed with emphasis on remote audits. 12:05 WORKSHOP 2 - REMOTE AUDIT PREPARATION Factors relating to the preparation for remote audits will be considered in discussion groups. 12:35 WORKSHOP 2 - FEEDBACK 12:50 LUNCH 13:30 AUDIT LOGISTICS Preparation for the audit includes many arrangements other than the audit content. 14:00 WORKSHOP 3 - AUDIT LOGISTICS Delegates will discuss some of the issues that may occur during the set up and conduct of remote audits and how to resolve them. 14:30 WORKSHOP 3 - FEEDBACK 14:45 BREAK 15:00 THE OPENING MEETING Presentation regarding the importance and content of the opening meeting. 15:20 WORKSHOP 4 - OPENING MEETING Delegates will consider the practicalities of arranging and conducting an opening meeting. 15:45 WORKSHOP 4 - FEEDBACK 16:10 AUDIT CONDUCT TOOLS Practical advice on preparation of some of the tools that will be valuable in the conduct of audits. 16:40 QUESTIONS AND ANSWERS An overview of the first day and a chance to ask questions 17:00 CLOSE OF DAY DAY 2 09:00 REFLECTIONS ON DAY 1 Recap on the topics covered and a chance for delegates to raise points. 09:15 GATHERING EVIDENCE Presentation on challenges of gathering evidence and conducting interviews during remote audits. 09:45 WORKSHOP 5 - REMOTE INTERVIEWS Scenarios of different remote interviews will be played and delegates assess the strengths and weaknesses of each approach. 10:15 BREAK 10:30 CREATING AUDIT FINDINGS Ideas regarding how to create good audit findings will be discussed during this short presentation. 10:50 WORKSHOP 6 - CREATING AUDIT FINDINGS Delegates will be provided with examples of evidence from an audit. They will discuss these and create their audit findings for presentation at the closing meeting. 11:35 THE CLOSING MEETING The content and conduct of the closing meeting will be discussed. 11:55 WORKSHOP 7(A) - PREPARING FOR THE CLOSING MEETING The findings from workshop 6 will be reviewed and a Lead Auditor selected to provide feedback in workshop 7(b) 12:15 WORKSHOP 7(B) - THE CLOSING MEETING The Lead Auditor from each group will hold a meeting to present the results (role play). 12:45 LUNCH 13:30 THE AUDIT REPORT This presentation will cover not only the essential contents of the audit report but also how to write the report in a manner that will generate the most positive reaction. 14:00 WORKSHOP 8 - THE AUDIT REPORT Delegates will be provided with an audit report from an audit conducted remotely and will conduct a peer review of the report in their breakout groups. 15:00 WORKSHOP 8 - FEEDBACK 15:20 BREAK 15:35 AUDIT CLOSURE Presentation on how to conclude the audit with reference to post-audit activities. 15:55 OPEN FORUM 16:30 CLOSE OF COURSE -------------------------------------------------------------------------------- EXTRA INFORMATION COURSE MATERIAL This course will be run completely online. You will receive an email with a link to our online system, which will house your licensed course materials and access to the remote event. Please note this course will run in UK timezone. THE ADVANTAGES OF THIS INCLUDE: * Ability for delegates to keep material on a mobile device * Ability to review material at any time pre and post course * Environmental benefits – less paper being used per course Access to an online course group to enhance networking You will need a stable internet connection, a microphone and a webcam.
SC-200T00 Microsoft Security Operations Analyst
By Nexus Human
Duration 4 Days 24 CPD hours This course is intended for The Microsoft Security Operations Analyst collaborates with organizational stakeholders to secure information technology systems for the organization. Their goal is to reduce organizational risk by rapidly remediating active attacks in the environment, advising on improvements to threat protection practices, and referring violations of organizational policies to appropriate stakeholders. Responsibilities include threat management, monitoring, and response by using a variety of security solutions across their environment. The role primarily investigates, responds to, and hunts for threats using Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft 365 Defender, and third-party security products. Since the Security Operations Analyst consumes the operational output of these tools, they are also a critical stakeholder in the configuration and deployment of these technologies. Learn how to investigate, respond to, and hunt for threats using Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft 365 Defender. In this course you will learn how to mitigate cyberthreats using these technologies. Specifically, you will configure and use Microsoft Sentinel as well as utilize Kusto Query Language (KQL) to perform detection, analysis, and reporting. The course was designed for people who work in a Security Operations job role and helps learners prepare for the exam SC-200: Microsoft Security Operations Analyst. Prerequisites Basic understanding of Microsoft 365 Fundamental understanding of Microsoft security, compliance, and identity products Intermediate understanding of Windows 10 Familiarity with Azure services, specifically Azure SQL Database and Azure Storage Familiarity with Azure virtual machines and virtual networking Basic understanding of scripting concepts. 1 - INTRODUCTION TO MICROSOFT 365 THREAT PROTECTION * Explore Extended Detection & Response (XDR) response use cases * Understand Microsoft Defender XDR in a Security Operations Center (SOC) * Explore Microsoft Security Graph * Investigate security incidents in Microsoft Defender XDR 2 - MITIGATE INCIDENTS USING MICROSOFT 365 DEFENDER * Use the Microsoft Defender portal * Manage incidents * Investigate incidents * Manage and investigate alerts * Manage automated investigations * Use the action center * Explore advanced hunting * Investigate Microsoft Entra sign-in logs * Understand Microsoft Secure Score * Analyze threat analytics * Analyze reports * Configure the Microsoft Defender portal 3 - PROTECT YOUR IDENTITIES WITH MICROSOFT ENTRA ID PROTECTION * Microsoft Entra ID Protection overview * Detect risks with Microsoft Entra ID Protection policies * Investigate and remediate risks detected by Microsoft Entra ID Protection 4 - REMEDIATE RISKS WITH MICROSOFT DEFENDER FOR OFFICE 365 * Automate, investigate, and remediate * Configure, protect, and detect * Simulate attacks 5 - SAFEGUARD YOUR ENVIRONMENT WITH MICROSOFT DEFENDER FOR IDENTITY * Configure Microsoft Defender for Identity sensors * Review compromised accounts or data * Integrate with other Microsoft tools 6 - SECURE YOUR CLOUD APPS AND SERVICES WITH MICROSOFT DEFENDER FOR CLOUD APPS * Understand the Defender for Cloud Apps Framework * Explore your cloud apps with Cloud Discovery * Protect your data and apps with Conditional Access App Control * Walk through discovery and access control with Microsoft Defender for Cloud Apps * Classify and protect sensitive information * Detect Threats 7 - RESPOND TO DATA LOSS PREVENTION ALERTS USING MICROSOFT 365 * Describe data loss prevention alerts * Investigate data loss prevention alerts in Microsoft Purview * Investigate data loss prevention alerts in Microsoft Defender for Cloud Apps 8 - MANAGE INSIDER RISK IN MICROSOFT PURVIEW * Insider risk management overview * Create and manage insider risk policies * Investigate insider risk alerts * Take action on insider risk alerts through cases * Manage insider risk management forensic evidence * Create insider risk management notice templates 9 - INVESTIGATE THREATS BY USING AUDIT FEATURES IN MICROSOFT DEFENDER XDR AND MICROSOFT PURVIEW STANDARD * Explore Microsoft Purview Audit solutions * Implement Microsoft Purview Audit (Standard) * Start recording activity in the Unified Audit Log * Search the Unified Audit Log (UAL) * Export, configure, and view audit log records * Use audit log searching to investigate common support issues 10 - INVESTIGATE THREATS USING AUDIT IN MICROSOFT DEFENDER XDR AND MICROSOFT PURVIEW (PREMIUM) * Explore Microsoft Purview Audit (Premium) * Implement Microsoft Purview Audit (Premium) * Manage audit log retention policies * Investigate compromised email accounts using Purview Audit (Premium) 11 - INVESTIGATE THREATS WITH CONTENT SEARCH IN MICROSOFT PURVIEW * Explore Microsoft Purview eDiscovery solutions * Create a content search * View the search results and statistics * Export the search results and search report * Configure search permissions filtering * Search for and delete email messages 12 - PROTECT AGAINST THREATS WITH MICROSOFT DEFENDER FOR ENDPOINT * Practice security administration * Hunt threats within your network 13 - DEPLOY THE MICROSOFT DEFENDER FOR ENDPOINT ENVIRONMENT * Create your environment * Understand operating systems compatibility and features * Onboard devices * Manage access * Create and manage roles for role-based access control * Configure device groups * Configure environment advanced features 14 - IMPLEMENT WINDOWS SECURITY ENHANCEMENTS WITH MICROSOFT DEFENDER FOR ENDPOINT * Understand attack surface reduction * Enable attack surface reduction rules 15 - PERFORM DEVICE INVESTIGATIONS IN MICROSOFT DEFENDER FOR ENDPOINT * Use the device inventory list * Investigate the device * Use behavioral blocking * Detect devices with device discovery 16 - PERFORM ACTIONS ON A DEVICE USING MICROSOFT DEFENDER FOR ENDPOINT * Explain device actions * Run Microsoft Defender antivirus scan on devices * Collect investigation package from devices * Initiate live response session 17 - PERFORM EVIDENCE AND ENTITIES INVESTIGATIONS USING MICROSOFT DEFENDER FOR ENDPOINT * Investigate a file * Investigate a user account * Investigate an IP address * Investigate a domain 18 - CONFIGURE AND MANAGE AUTOMATION USING MICROSOFT DEFENDER FOR ENDPOINT * Configure advanced features * Manage automation upload and folder settings * Configure automated investigation and remediation capabilities * Block at risk devices 19 - CONFIGURE FOR ALERTS AND DETECTIONS IN MICROSOFT DEFENDER FOR ENDPOINT * Configure advanced features * Configure alert notifications * Manage alert suppression * Manage indicators 20 - UTILIZE VULNERABILITY MANAGEMENT IN MICROSOFT DEFENDER FOR ENDPOINT * Understand vulnerability management * Explore vulnerabilities on your devices * Manage remediation 21 - PLAN FOR CLOUD WORKLOAD PROTECTIONS USING MICROSOFT DEFENDER FOR CLOUD * Explain Microsoft Defender for Cloud * Describe Microsoft Defender for Cloud workload protections * Enable Microsoft Defender for Cloud 22 - CONNECT AZURE ASSETS TO MICROSOFT DEFENDER FOR CLOUD * Explore and manage your resources with asset inventory * Configure auto provisioning * Manual log analytics agent provisioning 23 - CONNECT NON-AZURE RESOURCES TO MICROSOFT DEFENDER FOR CLOUD * Protect non-Azure resources * Connect non-Azure machines * Connect your AWS accounts * Connect your GCP accounts 24 - MANAGE YOUR CLOUD SECURITY POSTURE MANAGEMENT? * Explore Secure Score * Explore Recommendations * Measure and enforce regulatory compliance * Understand Workbooks 25 - EXPLAIN CLOUD WORKLOAD PROTECTIONS IN MICROSOFT DEFENDER FOR CLOUD * Understand Microsoft Defender for servers * Understand Microsoft Defender for App Service * Understand Microsoft Defender for Storage * Understand Microsoft Defender for SQL * Understand Microsoft Defender for open-source databases * Understand Microsoft Defender for Key Vault * Understand Microsoft Defender for Resource Manager * Understand Microsoft Defender for DNS * Understand Microsoft Defender for Containers * Understand Microsoft Defender additional protections 26 - REMEDIATE SECURITY ALERTS USING MICROSOFT DEFENDER FOR CLOUD * Understand security alerts * Remediate alerts and automate responses * Suppress alerts from Defender for Cloud * Generate threat intelligence reports * Respond to alerts from Azure resources 27 - CONSTRUCT KQL STATEMENTS FOR MICROSOFT SENTINEL * Understand the Kusto Query Language statement structure * Use the search operator * Use the where operator * Use the let statement * Use the extend operator * Use the order by operator * Use the project operators 28 - ANALYZE QUERY RESULTS USING KQL * Use the summarize operator * Use the summarize operator to filter results * Use the summarize operator to prepare data * Use the render operator to create visualizations 29 - BUILD MULTI-TABLE STATEMENTS USING KQL * Use the union operator * Use the join operator 30 - WORK WITH DATA IN MICROSOFT SENTINEL USING KUSTO QUERY LANGUAGE * Extract data from unstructured string fields * Extract data from structured string data * Integrate external data * Create parsers with functions 31 - INTRODUCTION TO MICROSOFT SENTINEL * What is Microsoft Sentinel? * How Microsoft Sentinel works * When to use Microsoft Sentinel 32 - CREATE AND MANAGE MICROSOFT SENTINEL WORKSPACES * Plan for the Microsoft Sentinel workspace * Create a Microsoft Sentinel workspace * Manage workspaces across tenants using Azure Lighthouse * Understand Microsoft Sentinel permissions and roles * Manage Microsoft Sentinel settings * Configure logs 33 - QUERY LOGS IN MICROSOFT SENTINEL * Query logs in the logs page * Understand Microsoft Sentinel tables * Understand common tables * Understand Microsoft Defender XDR tables 34 - USE WATCHLISTS IN MICROSOFT SENTINEL * Plan for watchlists * Create a watchlist * Manage watchlists 35 - UTILIZE THREAT INTELLIGENCE IN MICROSOFT SENTINEL * Define threat intelligence * Manage your threat indicators * View your threat indicators with KQL 36 - CONNECT DATA TO MICROSOFT SENTINEL USING DATA CONNECTORS * Ingest log data with data connectors * Understand data connector providers * View connected hosts 37 - CONNECT MICROSOFT SERVICES TO MICROSOFT SENTINEL * Plan for Microsoft services connectors * Connect the Microsoft Office 365 connector * Connect the Microsoft Entra connector * Connect the Microsoft Entra ID Protection connector * Connect the Azure Activity connector 38 - CONNECT MICROSOFT DEFENDER XDR TO MICROSOFT SENTINEL * Plan for Microsoft Defender XDR connectors * Connect the Microsoft Defender XDR connector * Connect Microsoft Defender for Cloud connector * Connect Microsoft Defender for IoT * Connect Microsoft Defender legacy connectors 39 - CONNECT WINDOWS HOSTS TO MICROSOFT SENTINEL * Plan for Windows hosts security events connector * Connect using the Windows Security Events via AMA Connector * Connect using the Security Events via Legacy Agent Connector * Collect Sysmon event logs 40 - CONNECT COMMON EVENT FORMAT LOGS TO MICROSOFT SENTINEL * Plan for Common Event Format connector * Connect your external solution using the Common Event Format connector 41 - CONNECT SYSLOG DATA SOURCES TO MICROSOFT SENTINEL * Plan for syslog data collection * Collect data from Linux-based sources using syslog * Configure the Data Collection Rule for Syslog Data Sources * Parse syslog data with KQL 42 - CONNECT THREAT INDICATORS TO MICROSOFT SENTINEL * Plan for threat intelligence connectors * Connect the threat intelligence TAXII connector * Connect the threat intelligence platforms connector * View your threat indicators with KQL 43 - THREAT DETECTION WITH MICROSOFT SENTINEL ANALYTICS * What is Microsoft Sentinel Analytics? * Types of analytics rules * Create an analytics rule from templates * Create an analytics rule from wizard * Manage analytics rules 44 - AUTOMATION IN MICROSOFT SENTINEL * Understand automation options * Create automation rules 45 - THREAT RESPONSE WITH MICROSOFT SENTINEL PLAYBOOKS * What are Microsoft Sentinel playbooks? * Trigger a playbook in real-time * Run playbooks on demand 46 - SECURITY INCIDENT MANAGEMENT IN MICROSOFT SENTINEL * Understand incidents * Incident evidence and entities * Incident management 47 - IDENTIFY THREATS WITH BEHAVIORAL ANALYTICS * Understand behavioral analytics * Explore entities * Display entity behavior information * Use Anomaly detection analytical rule templates 48 - DATA NORMALIZATION IN MICROSOFT SENTINEL * Understand data normalization * Use ASIM Parsers * Understand parameterized KQL functions * Create an ASIM Parser * Configure Azure Monitor Data Collection Rules 49 - QUERY, VISUALIZE, AND MONITOR DATA IN MICROSOFT SENTINEL * Monitor and visualize data * Query data using Kusto Query Language * Use default Microsoft Sentinel Workbooks * Create a new Microsoft Sentinel Workbook 50 - MANAGE CONTENT IN MICROSOFT SENTINEL * Use solutions from the content hub * Use repositories for deployment 51 - EXPLAIN THREAT HUNTING CONCEPTS IN MICROSOFT SENTINEL * Understand cybersecurity threat hunts * Develop a hypothesis * Explore MITRE ATT&CK 52 - THREAT HUNTING WITH MICROSOFT SENTINEL * Explore creation and management of threat-hunting queries * Save key findings with bookmarks * Observe threats over time with livestream 53 - USE SEARCH JOBS IN MICROSOFT SENTINEL * Hunt with a Search Job * Restore historical data 54 - HUNT FOR THREATS USING NOTEBOOKS IN MICROSOFT SENTINEL * Access Azure Sentinel data with external tools * Hunt with notebooks * Create a notebook * Explore notebook code
PORTRAYING REALISTIC RELATIONSHIPS IN PERFORMANCE
By Fay Beck Studio
AN ONLINE ACTING COURSE ON HOW TO PORTRAY REALISTIC RELATIONSHIPS ON SCREEN AND STAGE Stories are always about people in relationships. Werther they involve real human beings, inanimate objects or ideas, characters in film and theatre are either motivated or hindered by people and things they have some kind of relationship with. Skilled actors are able to ’embody’ relationships convincingly and genuinely. Their interactions with their co-stars are richly layered and nuanced – much like our relationships are in real life. ‘What’, they do and ‘how’, they do things with each other reveals specificity in the relationships they are depicting. This specificity is so important in performance that sometimes it may be a major reason why a particular actor is chosen for a certain part. As an audience member you may have experienced how powerful relationships work is. You many have found yourself walking away from a performance, saying that the lead actors had ‘chemistry’ with each other – or, that they did not. Despite how key relationships work is, actors are rarely taught how to do it exclusively. As a result, actors feel uncertain about how to properly ‘get into’ or embody a particular relationship. This course has been designed for exactly this purpose! TRAINING ESPECIALLY TO DO RELATIONSHIP WORK Part theory, part practice, the course will introduce you to practical tools you can use right now to elevate your auditions and acting performances. The first part of the course focuses on equipping you with tools you need to recognise relationships in script work. The second part of the course is purely practical. Through a set of exercises you’ll learn how to embody different relationships convincingly. Or said differently, how to be truthfully ‘in them’ during your performance. COURSE REQUIREMENTS * INTERMEDIATE ACTORS WELCOME: To join the course you will need at least intermediate acting skills. Good script analysis skills are presumed. * BEGINNING ACTORS: Consider doing the Script Analysis Course. You will benefit much more from this course if you are well equipped with sound script analysis skills. * EXPERIENCED ACTORS: This course is recommend for you! Elevate existing acting skills KEY POINTS * 5 WEEK COURSE, 5 X 2HR WEEKLY CLASS (TOTAL 10HRS) * SMALL GROUP (MAX 10 PEOPLE) TO POWER LEARNING * SESSIONS CONDUCTED LIVE OVER GOOGLE MEET * CLASSES AVAILABLE TO WATCH BACK WHILE THE COURSE IS RUNNING * 50% THEORY, 50% PRACTICE/HOMEWORK PLAYBACK Desire and training bring you to the precipice of success. Then you still have a mountain to climb. FAY BECK LEARNING OUTCOMES * Understanding how Relationships 'shift' meaning and story * Recognising Relationships in text * Creating personal connection to text through Relationships work * Learned how to craft Relationships with people * Learned how to craft Relationships with in-animate objects, animals and ideas * Practiced Substitution Exercises COURSE TERMS MAY 25TH – JUNE 22ND 2024 5 Consecutive SATURDAYS Join us from any timezone around the world. The course runs at generally convenient times for the following Timezones: Universal Time Coordinated (UTC): 09:00 AM – 11:00 AM Greenwhich Mean Time (GMT): 10:00 AM – 12:00 PM (EG. LONDON, GB) Central European Time (CET): 11:00 AM – 13:00 PM (EG, BERLIN, PARIS, ROME) (UTC+4): 13:00 PM – 15:00 PM (EG, DUBAI) Australian Western Standard Time (AWST) 17:00 PM – 19:00 PM (EG. PERTH) Australian Central Standard Time (ACST) 18:30 PM – 20:30 PM (EG. ADELAIDE) Australian Eastern Standard Time (AEST) 19:00 PM – 21:00 PM (EG. Brisbane, Sydney, Melbourne) Not a convenient time for you? Don’t worry this course will run again at a time more suitable for your timezone. Keep up with upcoming by signing up to our newsletter!
CompTIA Security+
By Nexus Human
Duration 5 Days 30 CPD hours This course is intended for This course is designed for people who are seeking to launch a career in cybersecurity. Overview Assess the security posture of an enterprise environment and recommend and implement appropriate security solutions; Monitor and secure hybrid environments, including cloud, mobile, and IoT; Operate with an awareness of applicable laws and policies, including principles of governance, risk, and compliance; Identify, analyze, and respond to security events and incidents. CompTIA Security+ is a global certification that validates the baseline skills necessary to perform core security functions and is the first security certification a candidate should earn. CompTIA Security+ establishes the core knowledge required of any cybersecurity role and provides a springboard to intermediate-level cybersecurity jobs. LESSON 1: SUMMARIZE FUNDAMENTAL SECURITY CONCEPTS * Security Concepts * Security Controls LESSON 2: COMPARE THREAT TYPES * Threat Actors * Attack Surfaces * Social Engineering LESSON 3: EXPLAIN CRYPTOGRAPHIC SOLUTIONS * Cryptographic Algorithms * Public Key Infrastructure * Cryptographic Solutions LESSON 4: IMPLEMENT IDENTITY AND ACCESS MANAGEMENT * Authentication * Authorization * Identity Management LESSON 5: SECURE ENTERPRISE NETWORK ARCHITECTURE * Enterprise Network Architecture * Network Security Appliances * Secure Communications LESSON 6: SECURE CLOUD NETWORK ARCHITECTURE * Cloud Infrastructure * Embedded Systems and Zero Trust Architecture LESSON 7: EXPLAIN RESILIENCY AND SITE SECURITY CONCEPTS * Asset Management * Redundancy Strategies * Physical Security LESSON 8: EXPLAIN VULNERABILITY MANAGEMENT * Device and OS Vulnerabilities * Application and Cloud Vulnerabilities * Vulnerability Identification Methods * Vulnerability Analysis and Remediation LESSON 9: EVALUATE NETWORK SECURITY CAPABILITIES * Network Security Baselines * Network Security Capability Enhancement LESSON 10: ASSESS ENDPOINT SECURITY CAPABILITIES * Implement Endpoint Security * Mobile Device Hardening LESSON 11: ENHANCE APPLICATION SECURITY CAPABILITIES * Application Protocol Security Baselines * Cloud and Web Application Security Concepts LESSON 12: EXPLAIN INCIDENT RESPONSE AND MONITORING CONCEPTS * Incident Response * Digital Forensics * Data Sources * Alerting and Monitoring Tools LESSON 13: ANALYZE INDICATORS OF MALICIOUS ACTIVITY * Malware Attack Indicators * Physical and Network Attack Indicators * Application Attack Indicators LESSON 14: SUMMARIZE SECURITY GOVERNANCE CONCEPTS * Policies, Standards, and Procedures * Change Management * Automation and Orchestration LESSON 15: EXPLAIN RISK MANAGEMENT PROCESSES * Risk Management Processes and Concepts * Vendor Management Concepts * Audits and Assessments LESSON 16: SUMMARIZE DATA PROTECTION AND COMPLIANCE CONCEPTS * Data Classification and Compliance * Personnel Policies ADDITIONAL COURSE DETAILS: Nexus Humans CompTIA Security Plus Certification (Exam SY0-601) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success. While we feel this is the best course for the CompTIA Security Plus Certification (Exam SY0-601) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you. Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.
First Line Management Course
By Dickson Training Ltd
This 2 day course is ideal for Team Leaders and Managers who have had little or no training in the role where they have to lead a team and take on management responsibilities. It will give them confidence and the skills to take decisions and get the best performance from their team. The most popular of our management training courses, the First Line Management course is specifically for people who are new to a management position or who are about to undertake a management position and have had no formal management training. Anyone who is new to a management or supervisory position will benefit from this course. Run over two days, the syllabus of the First Line Management course will cover a wide range of topics to give new or inexperienced managers a firm understanding of the foundations needed to begin their journey as a manager. It includes units on effective communication, managing your team, managing yourself, delegating, setting objectives, effective planning and personal development. -------------------------------------------------------------------------------- COURSE SYLLABUS MODULE ONE ROLE ASSESSMENT AND PERSONAL DEVELOPMENT PLANNING * Understanding roles and responsibilities * Outline framework of management * Taking the step into management * Identifying personal development needs and planning MODULE TWO EFFECTIVE COMMUNICATION SKILLS * Communicating to be effective - how and what to communicate * Designing effective questioning techniques and listening actively * Non-verbal communication * Dealing with, and responding to, differing communication styles MODULE THREE MANAGING YOURSELF * Use of planning tools and techniques * Dealing with time stealers and interruptions * Learn how to delegate effectively MODULE FOUR MANAGING YOUR TEAM * Understanding different management styles and how to use them * Recognising performance management * Setting expectations and clearly defining roles and responsibilities * Pinpointing performance and motivating your team/individuals * Learning the management actions required to maintain team effectiveness * Team dynamics and looking at individual behaviour within teams -------------------------------------------------------------------------------- FIRST LINE MANAGEMENT COURSE Management is the efficient, effective and economic use of resources to achieve results with and through the efforts of other people. Leadership – a definition Inspiring others to follow your lead by creating a compelling vision of the future, whereby targets are not merely achieved, but are surpassed . Leadership – a definition Inspiring others to follow your lead by creating a compelling vision of the future, whereby targets are not merely achieved, but are surpassed . The Role of the First Line Manager as ‘Leader'. First Line Managers have Leadership responsibilities – this is often the biggest challenge for Team Leaders and Supervisors who have to adapt from performing a task to motivating a team. At the beginning of the 21st century, the most powerful sources of growth, employment and wealth creation are found in innovation-driven industries. As a result, organisational leaders face a whole new set of challenges. They have to change and will increasingly need to rely on the knowledge, skills, experience and judgement of all their people. Organisational leaders will need to place less emphasis on traditional structures and control, and concentrate on five key priorities: . Five Key Priorities . * using strategic vision to motivate and inspire * empowering employees at all levels * accumulating and sharing internal knowledge * gathering and integrating external information * challenging the status quo and enabling creativity Using Strategic Vision. Effective leaders will develop a strategic vision that is clear and compelling, and communicate it in a way that gives a real sense of purpose and direction. A powerful vision is clear about direction and objectives, proactive in its approach, but allows room for flexibility about the means of achievement. A powerful vision is important because it is one way of linking the present to a desirable future. The role of strategic planning is then to map out a path to achieve that vision. However, visionary thinking should not be the exclusive province of the organisation's top executives. Successful leaders will encourage participation in the formulation of a strategic vision that offers different perspectives and encourages commitment. It is also important to empower employees with the responsibility and authority to implement the vision. . Empowering Employees. Some people have proposed the view that the great leader is a great servant [2]. Certainly, many organisations believe that an environment based on trust will produce better results than one of rules, regulation and hierarchy. This means that leaders will increasingly have to respond to their employees' needs and take on some unaccustomed roles, such as coach, teacher, information provider, facilitator, listener or supporter. But for empowerment to work, organisations will have to share information and knowledge far more than they have done in the past. This will certainly include First Line Managers . Challenging the status quo and enabling creativity. There are a number of ways in which effective First Line Managers can challenge the status quo and enable creativity: . Facilitate ‘constructive dissent', i.e. encourage people to question openly a manager's perspective without fear of retaliation. An interesting example of this is at Motorola, where employees can file a ‘minority report' and lodge a different point of view to their immediate First Line Manager on a business issue.Foster a culture that encourages risk-taking.Create a sense of urgency by producing a compelling picture of the risks of not changing. To summarise, successful First Line Managers will be those that are proactive both in facilitating organisational learning and encouraging positive adaptation to external changes. . A 2 day First Line Manager Course will accelerate the process for Team Leaders and Supervisors to reach a high level of competence and confidence in the Leadership role they have . -------------------------------------------------------------------------------- SAMPLE EXERCISES Our range of bespoke First Line Manager modules works wonders! The course outlines may look as you'd expect - but the content, approach and effect is very much greater than expectations. We have a very large library of innovative exercises that are highly effective in capturing and embedding the learning points in a practical way. Following each exercise - that may be aligned to a 'Financial Theme' - they are debriefed fully and related to how the learning can to be applied back in the work-place. They are also really great fun!! Here are some template modules and sample exercises designed to embed the learning in a motivational and memorable way:- SAMPLE 'ICE-BREAKER' EXERCISE - NUMBER CRUNCH The team must be effectively led and motivated to work as one to reach their objective of visiting each location in a short period of time. Debrief - Leadership and co-ordination, strategy and planning, adapting approach, decision making & control SAMPLE EXERCISE - THROUGH THE HOOP Taking the full team through the 'hoop' within the 'stretching' time limit is likely to exceed the group's own self-limitations. TIME MANAGEMENT SAMPLE EXERCISE - CONES This task requires the team to take a numbered tower of 5 cones from point 'A' to 'B' in a specific order; this will have to meet the criteria outlined in the brief. The option of 'C' is vital to achieve the results. Debrief: * Stepping back for overview * Planning disciplines * Time-budgeting * Skills audit for delegation HANDLING CONFLICT SAMPLE EXERCISE - CAVE RESCUE * Requires that the group make some difficult choices and then hold a press conference to justify their decisions while under scrutiny and criticism. This also displayed some required leadership learning; notably that a unified leadership team is crucial to gain commitment and confidence and also how vital it is to plan for any communication that will involve some sort of conflict. * Handling Conflict and maintaining control in a professional manner are key debriefing points from this exercise. COMMUNICATION, NEGOTIATION & INFLUENCE SAMPLE EXERCISE - RED & WHITE There is a specific time managed agenda and itinerary, which puts the group under pressure. The key challenge is for the sub-groups to maximise the commercial value from the task, however there is always a great danger that the individuals attempt to gain financial progress at the expense of the other group! Debriefing Points: * Engaging the other group to 'buy-in' to collaboration * Commercial consequences when collaboration is lacking or difficult * Effective communication and influence across barriers GLOBAL THINKING & BUSINESS MIND-SET SAMPLE EXERCISE - DRAGON'S DEN The delegation is split into 2 -3 groups - each with a specific product or service to win the Dragons' investment. (A specialised Toy; A unique Team Building Training programme; An eBook Library; An innovative soft-ware package for the Retail Industry Sector. They have to also present to the Dragon's Den their business case for feedback and negotiate with the Dragons to gain either an 'I'm in' or an 'I'm out' reply. Debrief: * Global business potential * Supply Chain appreciation * Commercial framework PERFORMANCE MANAGEMENT SAMPLE EXERCISE - JUGGLING The group will be asked to set their own team target of how many 'issues' (balls) they can manage at one time. This involves devising a sequence between the group to achieve maximum results without making any mistakes. We introduce different balls which represent different degrees of complexity, challenging the group's preparation and approach to a variety 'team members' needs. Debrief: * How to maintain focus when pressure is applied * Ensuring effective communication * Clarifying the approach for dealing with the unexpected * Setting expectations and reviewing delivery * Treating every team member as an individual PRIORITISATION & ORGANISATION SAMPLE EXERCISE - LABYRINTH This activity requires the group to solve a number of tasks through verbal communication only, but they will be forbidden to write any information down or make any gestures using their hands. They will each be provided with a great deal of different pieces of data that has to be assimilated within an increasingly pressurised time-scale. The material also contains distracting and misleading 'red-herrings'. The task requires delegates to keep focussed on the 'critical path' and be very organised in order to meet the dead-line. Debrief: * Rigour of planning - SMART * Prioritising through ambiguity * Time budgeting * Assigning roles & responsibilities to break down volume of material * The value of keeping accurate records -------------------------------------------------------------------------------- IN-HOUSE & CLASSROOM COURSES AVAILABLE ONLINE We have developed an alternative to traditional face-to-face training that continues to provide a full learning experience, and allows delegates to learn effectively whilst self-isolating from home. This is how it looks: Delegates booked on Classroom and In-House courses will continue to have access to their trainer online throughout the days that the course is booked to run. Prior to a delegate's course start date, they will be enrolled on our e-learning platform (in partnership with BCF Group [https://www.thebcfgroup.co.uk/management-training/first-line-manager-course.php]) for the course they are booked on to. They will also be given contact information for their trainer, and details of how to access the online workshops. Delegates will not require any special IT equipment. A desktop computer, laptop, tablet, or a mobile phone with internet and audio capability is all that is required. Delegates taking ILM Qualifications will then proceed to the book review, video review and work based assignments with 12 months tutor support as appropriate, and in line with our previous arrangements. We hope you agree that this blended learning experience represents the safest way to continue supporting our clients and delegates during the Coronavirus disruption. -------------------------------------------------------------------------------- IN-HOUSE COURSES This is our own management training course which has been developed and refined over the many years we have been providing it to delegates from organisations in virtually every industry. This means that the course syllabus is flexible and can be tailored to the specific requirements of a new first line manager or managers, making it ideal for companies or organisations who require an in-house first line management training course which is attended by a number of current or potential managers. -------------------------------------------------------------------------------- SCHEDULED COURSES A one day version of this First Line Management course is available as an Open Course delivered at our partner, the BCF's Training suites in Nottingham and Reading from the following scheduled dates... CLASSROOM COURSE - NOTTINGHAM (NG12 4DG) Classroom training courses enable you to benefit from having the tutor and other delegates right there in the room with you. Face-to-face training sessions are one of the best ways to learn, as it is easy to ask questions and have group discussions. Cost: £595 + vat * 16 October 2023 * 09 January 2024 * 11 March 2024 CLASSROOM COURSE - READING (RG41 5QS) Classroom training courses enable you to benefit from having the tutor and other delegates right there in the room with you. Face-to-face training sessions are one of the best ways to learn, as it is easy to ask questions and have group discussions. Cost: £595 + vat * 07 December 2023 * 15 February 2024 * 14 May 2024 ZOOM™ COURSE Attending a course via Zoom videoconferencing gives you all of the benefits of classroom training without the need to leave your home or office. You still benefit from a real tutor facilitating the programme, and the content is exactly the same. Cost: £495 + vat * 11 September 2023 * 04 December 2023 * 13 March 2024 -------------------------------------------------------------------------------- DICKSON TRAINING LTD Founded in 1985 in Yorkshire, we have built an impressive and loyal client base. Our partnerships are built by consistently delivering outstanding development solutions and working in close collaboration with our clients, resulting in us becoming a leading UK and international training provider.
EC-Council Certified Ethical Hacker (CEH) v12
By Nexus Human
Duration 5 Days 30 CPD hours This course is intended for The Certified Ethical Hacking v12 course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure. Overview Information security controls, laws, and standards. Various types of footprinting, footprinting tools, and countermeasures. Network scanning techniques and scanning countermeasures Enumeration techniques and enumeration countermeasures Vulnerability analysis to identify security loopholes in the target organization?s network, communication infrastructure, and end systems. System hacking methodology, steganography, steganalysis attacks, and covering tracks to discover system and network vulnerabilities. Different types of malware (Trojan, Virus, worms, etc.), system auditing for malware attacks, malware analysis, and countermeasures. Packet sniffing techniques to discover network vulnerabilities and countermeasures to defend against sniffing. Social engineering techniques and how to identify theft attacks to audit human-level vulnerabilities and social engineering countermeasures. DoS/DDoS attack techniques and tools to audit a target and DoS/DDoS countermeasures. Session hijacking techniques to discover network-level session management, authentication/authorization, and cryptographic weaknesses and countermeasures. Webserver attacks and a comprehensive attack methodology to audit vulnerabilities in webserver infrastructure, and countermeasures. Web application attacks, comprehensive web application hacking methodology to audit vulnerabilities in web applications, and countermeasures. SQL injection attack techniques, injection detection tools to detect SQL injection attempts, and countermeasures. Wireless encryption, wireless hacking methodology, wireless hacking tools, and Wi-Fi security tools. Mobile platform attack vector, android vulnerability exploitations, and mobile security guidelines and tools. Firewall, IDS and honeypot evasion techniques, evasion tools and techniques to audit a network perimeter for weaknesses, and countermeasures. Cloud computing concepts (Container technology, serverless computing), the working of various threats and attacks, and security techniques and tools. Penetration testing, security audit, vulnerability assessment, and penetration testing roadmap. Threats to IoT and OT platforms and defending IoT and OT devices. Cryptography ciphers, Public Key Infrastructure (PKI), cryptography attacks, and cryptanalysis tools. CEH provides an in-depth understanding of ethical hacking phases, various attack vectors, and preventative countermeasures. It will teach you how hackers think and act maliciously so you will be better positioned to setup your security infrastructure and defend against future attacks. An understanding of system weaknesses and vulnerabilities helps organizations strengthen their system security controls to minimize the risk of an incident. CEH was built to incorporate a hands-on environment and systematic process across each ethical hacking domain and methodology, giving you the opportunity to work towards proving the required knowledge and skills needed to achieve the CEH credential. You will be exposed to an entirely different posture toward the responsibilities and measures required to be secure. Now in its 12th version, CEH continues to evolve with the latest operating systems, tools, tactics, exploits, and technologies. 1 - INTRODUCTION TO ETHICAL HACKING * Information Security Overview * Cyber Kill Chain Concepts * Hacking Concepts * Ethical Hacking Concepts * Information Security Controls * Information Security Laws and Standards 2 - 2 - FOOT-PRINTING AND RECONNAISSANCE * Footprinting Concepts * Footprinting through Search Engines * Footprinting through Web Services * Footprinting through Social Networking Sites * Website Footprinting * Email Footprinting * Who is Footprinting * DNS Footprinting * Network Footprinting * Footprinting through Social Engineering * Footprinting Tools * Footprinting Countermeasures 3 - SCANNING NETWORKS * Network Scanning Concepts * Scanning Tools * Host Discovery * Port and Service Discovery * OS Discovery (Banner Grabbing/OS Fingerprinting) * Scanning Beyond IDS and Firewall * Draw Network Diagrams 4 - ENUMERATION * Enumeration Concepts * NetBIOS Enumeration * SNMP Enumeration * LDAP Enumeration * NTP and NFS Enumeration * SMTP and DNS Enumeration * Other Enumeration Techniques * Enumeration Countermeasures 5 - VULNERABILITY ANALYSIS * Vulnerability Assessment Concepts * Vulnerability Classification and Assessment Types * Vulnerability Assessment Solutions and Tools * Vulnerability Assessment Reports 6 - SYSTEM HACKING * System Hacking Concepts * Gaining Access * Escalating Privileges * Maintaining Access * Clearing Logs 7 - MALWARE THREATS * Malware Concepts * APT Concepts * Trojan Concepts * Virus and Worm Concepts * Fileless Malware Concepts * Malware Analysis * Countermeasures * Anti-Malware Software 8 - SNIFFING * Sniffing Concepts * Sniffing Technique: MAC Attacks * Sniffing Technique: DHCP Attacks * Sniffing Technique: ARP Poisoning * Sniffing Technique: Spoofing Attacks * Sniffing Technique: DNS Poisoning * Sniffing Tools * Countermeasures * Sniffing Detection Techniques 9 - SOCIAL ENGINEERING * Social Engineering Concepts * Social Engineering Techniques * Insider Threats * Impersonation on Social Networking Sites * Identity Theft * Countermeasures 10 - DENIAL-OF-SERVICE * DoS/DDoS Concepts * DoS/DDoS Attack Techniques * BotnetsDDoS Case Study * DoS/DDoS Attack Tools * Countermeasures * DoS/DDoS Protection Tools 11 - SESSION HIJACKING * Session Hijacking Concepts * Application Level Session Hijacking * Network Level Session Hijacking * Session Hijacking Tools * Countermeasures 12 - EVADING IDS, FIREWALLS, AND HONEYPOTS * IDS, IPS, Firewall, and Honeypot Concepts * IDS, IPS, Firewall, and Honeypot Solutions * Evading IDS * Evading Firewalls * IDS/Firewall Evading Tools * Detecting Honeypots * IDS/Firewall Evasion Countermeasures 13 - HACKING WEB SERVERS * Web Server Concepts * Web Server Attacks * Web Server Attack Methodology * Web Server Attack Tools * Countermeasures * Patch Management * Web Server Security Tools 14 - HACKING WEB APPLICATIONS * Web Application Concepts * Web Application Threats * Web Application Hacking Methodology * Web API, Webhooks, and Web Shell * Web Application Security 15 - SQL INJECTION * SQL Injection Concepts * Types of SQL Injection * SQL Injection Methodology * SQL Injection Tools * Evasion Techniques * Countermeasures 16 - HACKING WIRELESS NETWORKS * Wireless Concepts * Wireless Encryption * Wireless Threats * Wireless Hacking Methodology * Wireless Hacking Tools * Bluetooth Hacking * Countermeasures * Wireless Security Tools 17 - HACKING MOBILE PLATFORMS * Mobile Platform Attack Vectors * Hacking Android OS * Hacking iOS * Mobile Device Management * Mobile Security Guidelines and Tools 18 - IOT AND OT HACKING * IoT Hacking * IoT Concepts * IoT Attacks * IoT Hacking Methodology * IoT Hacking Tools * Countermeasures * OT Hacking * OT Concepts * OT Attacks * OT Hacking Methodology * OT Hacking Tools * Countermeasures 19 - CLOUD COMPUTING * Cloud Computing Concepts * Container Technology * Serverless Computing * Cloud Computing Threats * Cloud Hacking * Cloud Security 20 - CRYPTOGRAPHY * Cryptography Concepts * Encryption Algorithms * Cryptography Tools * Public Key Infrastructure (PKI) * Email Encryption * Disk Encryption * Cryptanalysis * Countermeasures ADDITIONAL COURSE DETAILS: Nexus Humans EC-Council Certified Ethical Hacker (CEH) v.12 training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success. While we feel this is the best course for the EC-Council Certified Ethical Hacker (CEH) v.12 course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you. Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.
