Duration 3 Days 18 CPD hours This course is intended for The intended audience for this course is information security and IT professionals, such as network administrators and engineers, IT managers, and IT auditors, and other individuals who want to learn more about information security, who are interested in learning in-depth information about information security management, who are looking for career advancement in IT security, or who are interested in earning the CISM certification. Overview Establish and maintain a framework to provide assurance that information security strategies are aligned with business objectives and consistent with applicable laws and regulations. Identify and manage information security risks to achieve business objectives. Create a program to implement the information security strategy. Implement an information security program. Oversee and direct information security activities to execute the information security program. Plan, develop, and manage capabilities to detect, respond to, and recover from information security incidents. In this course, students will establish processes to ensure that information security measures align with established business needs. Prerequisites Information security governance Information risk management Information security program development Information security program management Incident management and response 1 - Information Security Governance Develop an Information Security Strategy Align Information Security Strategy with Corporate Governance Identify Legal and Regulatory Requirements Justify Investment in Information Security Identify Drivers Affecting the Organization Obtain Senior Management Commitment to Information Security Define Roles and Responsibilities for Information Security Establish Reporting and Communication Channels 2 - Information Risk Management Implement an Information Risk Assessment Process Determine Information Asset Classification and Ownership Conduct Ongoing Threat and Vulnerability Evaluations Conduct Periodic BIAs Identify and Evaluate Risk Mitigation Strategies Integrate Risk Management into Business Life Cycle Processes Report Changes in Information Risk 3 - Information Security Program Development Develop Plans to Implement an Information Security Strategy Security Technologies and Controls Specify Information Security Program Activities Coordinate Information Security Programs with Business Assurance Functions Identify Resources Needed for Information Security Program Implementation Develop Information Security Architectures Develop Information Security Policies Develop Information Security Awareness, Training, and Education Programs Develop Supporting Documentation for Information Security Policies 4 - Information Security Program Implementation Integrate Information Security Requirements into Organizational Processes Integrate Information Security Controls into Contracts Create Information Security Program Evaluation Metrics 5 - Information Security Program Management Manage Information Security Program Resources Enforce Policy and Standards Compliance Enforce Contractual Information Security Controls Enforce Information Security During Systems Development Maintain Information Security Within an Organization Provide Information Security Advice and Guidance Provide Information Security Awareness and Training Analyze the Effectiveness of Information Security Controls Resolve Noncompliance Issues 6 - Incident Management and Response Develop an Information Security Incident Response Plan Establish an Escalation Process Develop a Communication Process Integrate an IRP Develop IRTs Test an IRP Manage Responses to Information Security Incidents Perform an Information Security Incident Investigation Conduct Post-Incident Reviews
Accounting and Finance Course Overview: This Accounting and Finance course offers a comprehensive understanding of the key principles and practices involved in accounting and finance. Learners will gain insights into essential financial concepts, from understanding the role of accountants to analysing financial statements. The course equips learners with the skills needed to navigate the world of financial management, preparing them for a wide range of opportunities in the finance industry. By completing this course, learners will be able to confidently approach financial tasks, from budgeting to risk management, and develop a clear understanding of the financial decision-making process. Course Description: This course covers the fundamentals of accounting and finance, offering in-depth insights into financial processes, accounting mechanics, and the preparation and analysis of financial statements. Learners will explore the role of accountants, budgeting and budgetary control, and financial markets, while also gaining a strong foundation in financial risk management and investment strategies. With a focus on analytical skills, the course will help learners develop a deeper understanding of financial operations and decision-making. By the end of the course, participants will be well-equipped to analyse financial data, manage risks, and apply their knowledge in a range of financial contexts. Accounting and Finance Curriculum: Module 01: Introduction to Accounting and Finance Module 02: The Role of an Accountant Module 03: Accounting Process and Mechanics Module 04: Introduction to Financial Statements Module 05: Financial Statement Analysis Module 06: Budgeting and Budgetary Control Module 07: Financial Markets Module 08: Financial Risk Management Module 09: Investment Management Module 10: Auditing (See full curriculum) Who is this course for? Individuals seeking to gain a solid understanding of accounting and finance. Professionals aiming to develop their financial management skills. Beginners with an interest in the finance or accounting industries. Those looking to transition into a finance-focused career. Career Path: Accountant Financial Analyst Budget Analyst Investment Advisor Risk Manager Auditor Finance Manager Banking and Financial Services
Compliance and Risk Management Diploma Level 5 Course Overview The Compliance and Risk Management Diploma Level 5 provides a comprehensive introduction to the fundamental principles of compliance and risk management. This course covers essential topics such as compliance audits, risk management processes, compliance ethics, and risk types, ensuring that learners gain a solid foundation in the field. Upon completion, learners will possess the knowledge and skills necessary to effectively manage compliance and risk in various organisations, enhancing their career prospects within compliance-focused roles. The course is suitable for professionals looking to upskill and those new to the field, offering valuable insights for practical application in today’s regulatory environments. Course Description This diploma-level course explores key concepts in compliance and risk management, beginning with an overview of compliance principles and progressing through modules that delve into specific areas, including risk identification, management strategies, and the ethics of compliance. The course will provide learners with a thorough understanding of compliance management systems (CMS), audit procedures, and the diverse types of risks organisations face. Learners will gain the expertise required to assess, mitigate, and manage risks while ensuring compliance with industry regulations. The curriculum includes real-world case studies and examples that will equip learners with the skills to tackle the challenges faced by businesses in maintaining regulatory adherence and managing risk exposure. Compliance and Risk Management Diploma Level 5 Curriculum Module 01: Introduction to Compliance Module 02: Five Basic Elements of Compliance Module 03: Compliance Management System (CMS) Module 04: Compliance Audit Module 05: Compliance and Ethics Module 06: Risk and Types of Risk Module 07: Introduction to Risk Management Module 08: Risk Management Process (See full curriculum) Who is this course for? Individuals seeking to enter or advance in the compliance and risk management field. Professionals aiming to enhance their knowledge of compliance systems and risk strategies. Beginners with an interest in regulatory frameworks and risk management. Individuals seeking career growth within regulated industries. Career Path Compliance Officer Risk Manager Compliance Auditor Risk Analyst Regulatory Affairs Specialist Corporate Governance Advisor
About this Virtual Instructor Led Training (VILT) This 3 half-day Virtual Instructor Led Training (VILT) course will help participants grasp the idea of real-world risk management and how this relates to the cyber world. The VILT course will cover topics surrounding identifying cyber risks and vulnerabilities, guidance on applying administrative actions, and comprehensive solutions to ensure your organization is adequately secure and protected. The VILT course will guide participants on how to conduct a security risk assessment for their organization, and equip them with the skills to develop a risk compliance assessment plan as well as methods to develop risk management strategies which can improve their organization's security posture. The VILT course has at least a 30% hands-on approach through the use of Table Top Exercises. The VILT course will cover the following modules: Introduction to Risk Assessments (RA) Threat Actors and Their Motivations Threat and Risk Assessment Critical Controls Identification Maturity Assessment Treated Cyber Risk Profile Target Cyber Risk Profile and Strategy Target Audience The VILT course is intended for professionals responsible for organizational information and security system and those involved in operating and maintenance of critical information and IT network & sotware systems. Professionals who are designated as the Single Point of Accountability (SPoA) as well as system auditors will find this course useful. Course Level Basic or Foundation Training Methods The VILT course will be delivered online in 3 half-day sessions comprising 4 hours per day, with 2 x 10 minutes break per day, including time for lectures, discussion, quizzes and short classroom exercises. Course Duration: 3 half-day sessions, 4 hours per session (12 hours in total). This VILT course is delivered in partnership with ENGIE Laborelec. Trainer Your expert course leader is a is specialized in cybersecurity risk management. Before joining ENGIE, she worked for The National Cybersecurity Agency of France (ANSSI) based in Paris (France) and for Deloitte Belgium located in Zaventem (Belgium). She has been involved in cybersecurity projects focusing on the principle of protecting critical infrastructures. Her different experiences in Cyber Security, Anti-Money Laundering and Global Trade Compliance (including Export Control and Customs) gave her the opportunity to use methodologies tackling strategic, operational and financial control issues at all levels of an organization: people, business processes, IT applications and infrastructure, legal and regulatory compliance. She was an EBIOS Risk Manager (RM) trainer while she worked for the French government; EBIOS RM is the French method for assessing and treating digital risks. She also had the opportunity to represent France towards European institutions and other relevant stakeholders for topics related to cybersecurity risk management. POST TRAINING COACHING SUPPORT (OPTIONAL) To further optimise your learning experience from our courses, we also offer individualized 'One to One' coaching support for 2 hours post training. We can help improve your competence in your chosen area of interest, based on your learning needs and available hours. This is a great opportunity to improve your capability and confidence in a particular area of expertise. It will be delivered over a secure video conference call by one of our senior trainers. They will work with you to create a tailor-made coaching program that will help you achieve your goals faster. Request for further information about post training coaching support and fees applicable for this. Accreditions And Affliations
Gain expertise in IFRS accounting for the oil and gas sector with our industry-focused training course. Enroll today with EnergyEdge.
Information Management Course Overview This Information Management course provides a comprehensive understanding of the principles and practices essential for effectively managing information in today’s data-driven world. It covers core topics such as strategic planning, databases, management information systems, and the auditing of information systems. The course is designed to enhance learners' understanding of how information can be efficiently organised, secured, and utilised for decision-making within organisations. Upon completion, learners will be equipped with the skills to manage data, ensure compliance with data protection laws, and address ethical and social issues surrounding information management. This course is ideal for individuals looking to advance their knowledge in information management and pursue a career in this dynamic field. Course Description The Information Management course explores critical aspects of managing data and information systems, offering in-depth insights into the processes and tools used in modern organisations. The course covers a broad range of topics, including developing information management strategies, understanding and implementing databases, and examining management information systems (MIS) for efficient decision-making. Learners will also gain knowledge of auditing information systems to ensure accuracy, integrity, and security. The ethical, legal, and social considerations of data protection and information governance are also discussed. Throughout the course, learners will engage with key theories and practices, preparing them to apply their knowledge to various industries, ensuring organisations meet legal requirements and maximise the value of their information assets. Information Management Curriculum Module 01: Introduction to Information Management Module 02: Information Management Strategy Module 03: Databases and Information Management Module 04: Management Information Systems (MIS) Module 05: Auditing Information Systems Module 06: Ethical and Social Issues and Data Protection (See full curriculum) Who is this course for? Individuals seeking to understand the principles of information management. Professionals aiming to enhance their knowledge of information governance and security. Beginners with an interest in data management and organisational systems. Anyone looking to develop skills for improving organisational efficiency and compliance. Career Path Data Analyst Information Manager Records Manager IT Compliance Officer Data Protection Officer Information Systems Auditor
Course Overview This comprehensive Anti-Money Laundering (AML) Training Level 5 course offers a deep exploration of the UK’s anti-money laundering regulations and reporting requirements. Learners will gain a solid understanding of money laundering typologies, the legal framework surrounding the Proceeds of Crime Act 2002, and the roles and responsibilities of compliance professionals. Through structured learning, this course prepares individuals to effectively identify, assess, and report suspicious activity within financial and non-financial institutions. Ideal for professionals in banking, finance, legal, and corporate sectors, the course builds awareness of AML obligations and supports regulatory alignment. Upon completion, learners will possess the theoretical knowledge required to contribute to financial crime prevention, risk management, and organisational integrity. Course Description The Anti-Money Laundering (AML) Training Level 5 course is designed to equip learners with an in-depth understanding of regulatory requirements, reporting procedures, and due diligence obligations. The course examines key legislation such as the Proceeds of Crime Act 2002, and outlines the development of AML frameworks across sectors. Learners will study the responsibilities of the Money Laundering Reporting Officer (MLRO), the importance of record-keeping, and how to implement a risk-based approach in compliance programmes. Emphasis is placed on identifying suspicious transactions, maintaining regulatory standards, and fostering awareness throughout an organisation. Whether preparing for a role in compliance or enhancing existing knowledge, this course supports learners in aligning with UK regulatory expectations and strengthening their ability to safeguard businesses from financial crime. Course Modules: Module 01: Introduction to Money Laundering Module 02: Proceeds of Crime Act 2002 Module 03: Development of Anti-Money Laundering Regulation Module 04: Responsibility of the Money Laundering Reporting Office Module 05: Risk-based Approach Module 06: Customer Due Diligence Module 07: Record Keeping Module 08: Suspicious Conduct and Transactions Module 09: Awareness and Training (See full curriculum) Who is this course for? Individuals seeking to understand financial crime regulations and prevention measures. Professionals aiming to transition into compliance, audit, or financial regulation roles. Beginners with an interest in anti-money laundering, financial oversight, or legal studies. Employees responsible for ensuring compliance within financial or legal institutions. Career Path Anti-Money Laundering Officer Compliance Analyst Risk and Governance Associate Financial Crime Consultant Internal Auditor Regulatory Affairs Specialist Legal and Compliance Assistant
Course Information Join our comprehensive three-day programme designed as an invaluable external training opportunity for auditors, audit programme managers, and individuals subject to audits. This course is tailored to foster a deep understanding and cultivate essential skills for auditing the validation of computer systems intended for GxP environments (GLP, GCP, GMP, GDP, GPvP). Commencing with an overview of regulatory prerequisites and the system life cycle, the course swiftly transitions to focus on the pragmatic aspects of auditing computer system validation. Experience a blend of presentations, interactive discussions, and immersive practical workshops throughout the duration of the course. Delegates will benefit from practical examples of how to understand the framework of applicable regulations and guidance. Apply risk management techniques to audit planning Plan and conduct computerised system audits Assess system validation documentation to verify compliance Evaluate data integrity and security issues Prepare for regulatory inspection. The course is structured to encourage delegates to: Discuss and develop ideas Solve specific problems Understand the vulnerabilities of computerised systems Learn how to create a compliance checklist Link system development with good business practice. Is this course for you? Auditors Audit programme managers Individuals subject to audits. Tutors Tutors will be comprised of (click the photos for biographies): Nichola Stevens Director and Principal Consultant, Nuncius Compliance Solutions Ltd Barry McManus Consultancy Partner, Empowerment Quality Engineering Ltd Programme Please note timings may be subject to alteration. Day 1 09:00 Welcome and Introductions 09:45 Why We Validate and Regulatory Trends 10:30 Break 10:45 Audit Overview, High Level Process and Scheduling 11:30 System Lifecycle 12:30 Lunch 13:15 Exercise 1 - Audit Scheduling 14:45 Exercise 1 - Feedback 15:15 Break 15:30 Validation Deliverables 16:30 Risk Assessments 17:30 Close of Day 1 Day 2 09:00 Supplier Assessment 10:30 Break 10:45 Exercise 2 - Planning a Supplier Audit 12:00 Exercise 2 - Feedback 12:30 Lunch 13:15 Exercise 3 - Auditing a Computerised System Validation Package 15:30 Break 15:45 Exercise 3 - Feedback 16:30 Change Control 17:15 Close of Day Day 3 09:00 Infrastructure Qualification 09:45 Maintaining a Validated State - Operational Processes 11:00 Break 11:15 Exercise 4 - Auditing Systems in Operational Use 12:45 Lunch 13:30 Exercise 4 - Feedback 14:15 Exercise 5 - Auditing Trail Review 15:30 Break 15:45 Exercise 5 - Feedback 16:15 Course Objectives Summary and Any Additional Questions 16:45 Close of Course Extra Information Face-to-face course Course Material Course material will be available in PDF format for delegates attending this course. The advantages of this include: Ability for delegates to keep material on a mobile device Ability to review material at any time pre and post course Environmental benefits – less paper being used per course. The material will be emailed in advance of the course and RQA will not be providing any printed copies of the course notes during the training itself. Delegates wishing to have a hard copy of the notes should print these in advance to bring with them. Alternatively delegates are welcome to bring along their own portable devices to view the material during the training sessions. Remote course Course Material This course will be run completely online. You will receive an email with a link to our online system, which will house your licensed course materials and access to the remote event. Please note this course will run in UK timezone. The advantages of this include: Ability for delegates to keep material on a mobile device Ability to review material at any time pre and post course Environmental benefits – less paper being used per course Access to an online course group to enhance networking. You will need a stable internet connection, a microphone and a webcam. CPD Points 19 Points Development Level Develop
IP security training course description Connection to the Internet is becoming an essential business tool. This course looks at firewalls, digital certificates, encryption and other essential topics for e-commerce sites. A generic course that looks at firewalls and VPNs. Hands on sessions include using hacking tools and configuring firewalls. What will you learn Describe: Basic security attacks RADIUS SSL IPSec VPNs Implement digital certificates Deploy firewalls to protect Web servers and users. Secure Web servers and clients. IP security training course details Who will benefit: Network administrators. Network operators. Security auditors Prerequisites: TCP/IP foundation for engineers Duration 2 days IP security training course contents TCP/IP review Brief overview of the relevant headers. Hands on Download software for course, use analyser to capture passwords on the wire. Security review Policies, Types of security breach, denial of service, data manipulation, data theft, data destruction, security checklists, incident response. Security exploits The Internet worm, IP spoofing, SYN attack, hijacking, Ping o' Death⦠keeping up to date with new threats. Hands on Use a port scanning tool, use a 'hacking' tool. Firewalls Products, Packet filtering, DMZ, content filtering, stateful packet inspection, Proxies, firewall architectures, Intrusion Detection Systems, Viruses. Hands on Set up a firewall and prevent attacks. NAT NAT and PAT, Why use NAT, NAT-ALG, RSIP. Encryption Encryption keys, Encryption strengths, Secret key vs Public key, algorithms, systems, SSL, SSH, Public Key Infrastructures. Hands on Run a password-cracking program. Authentication Types of authentication, Securid, Biometrics, PGP, Digital certificates, X.509 v3, Certificate authorities, CRLs, PPP authentication, RADIUS. Hands on Using certificates. Web client and server security Cookies, browser certificates, censorship, PICS. Operating system security, Web server user authentication, Restricting access, Logging, Securing CGI scripts. Hands on Browser security. VPNs and IPSec What is a VPN, tunnelling, L2F, PPTP, L2TP, IPSec, AH, ESP, transport mode, tunnel mode.
Duration 2 Days 12 CPD hours This course is intended for The COBIT 2019 Foundation course would suit candidates working in the following IT professions or areas: IT Auditors IT Managers IT Quality professionals IT Leadership IT Developers Process practitioners Managers in IT service providing firms The above list is a suggestion only; individuals may wish to attend based on their own career aspirations, personal goals or objectives. Delegates may take as few or as many Intermediate qualifications as they require, and to suit their needs. Overview This COBIT 2019 Foundation course is designed as an introduction to COBIT 2019 and enables you to understand how an integrated business framework for the governance and management of enterprise IT can be utilized to achieve IT business integration, cost reductions and increased productivity. The syllabus areas that this course is designed to cover are: New framework introduction Key concepts and terminology Governance and Framework Principles Governance system and components Governance and management objectives Performance management Designing a tailored governance system COBIT 2019 builds on and integrates more than 25 years of development in this field, not only incorporating new insights from science, but also operationalizing these insights as practice. The heart of the COBIT framework updates COBIT principles while laying out the structure of the overall framework including: New concepts are introduced and terminology is explained?the COBIT Core Model and its 40 governance and management objectives provide the platform for establishing your governance program. The performance management system is updated and allows the flexibility to use maturity measurements as well as capability measurements. Introductions to design factors and focus areas offer additional practical guidance on flexible adoption of COBIT 2019, whether for specific projects or full implementation. From its foundation in the IT audit community, COBIT has developed into a broader and more comprehensive information and technology (I&T) governance and management framework and continues to establish itself as a generally accepted framework for I&T governance. 1 - COBIT 5 OVERVIEW AND INTRODUCTION Course Administration Course Objectives Exam Overview Certification Scheme History of COBIT COBIT 2019 Improvements Major differences with 2019 Misconceptions about COBIT COBIT and Other Standards 2 - KEY CONCEPTS AND TERMINOLOGY Introduction to Enterprise Governance of Information and Technology Benefits of Information and Technology Governance COBIT Information and Technology Governance Framework Distinction of Governance and Management Three Principles of a Governance Framework Six Principles for a Governance System 3 - GOVERNANCE SYSTEMS AND COMPONENTS Introduction to the Components of a Governance System Processes and Capability Levels Organizational Structures and Defined Roles Information Flows and Items People, Skills and Competencies Principles, Policies and Frameworks Culture, Ethics and Behavior Services, Infrastructure and Applications 4 - GOVERNANCE MANAGEMENT OBJECTIVES Governance and Management Objectives Publication Governance and Management Objectives Governance and Management Objectives Core Model Evaluate, Direct and Monitor Align, Plan and Organize Build, Acquire and Implement Deliver, Service and Support Monitor, Evaluate and Assess 5 - GOALS CASCADE Governance and Management Objective Relationships Governance and Management Objective Descriptions High-Level Information Example Introduction to the Goals Cascade Enterprise Goals Alignment Goals Mapping Tables ? Appendix A 6 - PERFORMANCE MANAGEMENT Introduction to Performance Management COBIT Performance Management Principles COBIT Performance Management (CPM) Overview Process Capability Levels Rating Process Activities Focus Area Maturity Levels Performance Management of Organizational Structures Performance Management of Information Items Performance Management of Culture and Behavior 7 - DESIGNING A TAILORED GOVERNANCE SYSTEM The Need for Tailoring Design Factors Enterprise Strategy Enterprise Goals Risk Profile I&T Related Issues Threat Landscape Compliance Requirements Role of IT Sourcing Model for IT IT Implementation Methods Technology Adoption Strategy Enterprise Size Focus Areas Designing a Tailored Governance System Management Objective Priority and Target Capability Levels Component Variations Specific Focus Areas Stages and Steps in the Design Process 8 - IMPLEMENTING ENTERPRISE GOVERNANCE OF IT The Business Case The COBIT Implementation Guide Purpose COBIT Implementation Approach Phase 1 ? What are the Drivers Phase 2 ? Where are we Now Phase 3 ? Where do we Want to be Phase 4 ? What Needs to be Done Phase 5 ? How do we get There Phase 6 ? Did we get There Phase 7 How do we Weep the Momentum Going? EGIT Implementation Program Challenges