<div id="course-pills-1">Duration<p>2 Days</p><p>12 CPD hours</p>This course is intended for<p>This course is designed for technical professionals who need to know how to deploy a Cisco Integrated Threat Defense solution in their network environment.<br />Cisco integrators and partners<br />Systems and network engineers<br />Technical architects<br />Technical support personnel</p>Overview<p>After taking this course, you should be able to:<br />Understand the network security landscape and the Cisco Integrated Threat Defense (ITD) solutions<br />Describe the key components of the ITD solution and their use in the network<br />Configure the Cisco Identity Services Engine (ISE) for a baseline of operation in the ITD solution<br />Configure the integration between the Cisco Stealthwatch and Cisco ISE platforms<br />Configure the integration between the Cisco Firepower and ISE platforms<br />Configure the integration between Cisco Firepower and Cisco Advanced Malware Protection (AMP) for Endpoints</p><p>The Implementing an Integrated Threat Defense Solution (SECUR201) v1.2 course provides an analysis of the cybersecurity landscape with an emphasis on the importance of an integrated threat defense architecture. Through a combination of lessons and hands-on practice, you will learn to deploy and integrate CiscoÂ©?s Integrated Threat Defense solutions which include: Cisco Identity Services Engine (ISE), Cisco Stealthwatch, Cisco Firepower NGFW, and Cisco AMP for Endpoints. This course provides you with the knowledge and skills to implement and integrate solution components with existing network services, integrate solution components with the pxGrid (Platform Exchange Grid) framework, integrate network and endpoint-based malware protection, and observation of security dataflow after the introduction of malware.</p></div><div id="course-pills-2"><h4>Course Outline</h4><ul><li>Integrated Threat Defense Introduction</li><li>ITD Products</li><li>Identity Services Engine Setup</li><li>Integration of Stealthwatch with Identity Services Engine</li><li>Integration of Firepower with Identity Services Engine</li><li>Integration of Firepower with AMP for Endpoints</li></ul><h4>Lab outline</h4><ul><li>Connecting to the Lab Environment</li><li>Integrating ISE and Active Directory</li><li>Integrating ISE and Cisco Adaptive Security Appliance (ASA)</li><li>Configuring pxGrid and Client Certificates</li><li>Integrating Stealthwatch with Identity Services Engine</li><li>Integrating Network Visibility Module (NVM) with AnyConnect</li><li>Integrating Firepower with Identity Services Engine</li><li>Integrating AMP for Endpoints with Firepower</li></ul></div>

Nexus Human

IT Security

CompTIA Network+

IT Certifications

Certificate in Information Security Management Principles (CISMP)

Cyber Security

CompTIA Security+

Cisco Implementing an Integrated Threat Defense Solution (SECUR201) v1.2

<div id="course-pills-1">Duration<p>4 Days</p><p>24 CPD hours</p>This course is intended for<p>Information Assurance Managers/Auditors<br />System Implementors/administrators<br />IT Administrators<br />Auditors/Auditees<br />Federal Agencies/Contractors<br />Security Vendors and Consulting Groups</p>Overview<p>Upon completion, the IS20 Security Controls candidate will be able to not only competently take the IS20 Controls exam but will also have an understanding of how to implement the top 20 most critical controls in the work place.</p><p>IS20 controls are the Top Twenty Most Critical Security Controls in Information Technology.Ã¿ This 4 day training course covers proven tools and methodologies needed to execute and analyze the Top Twenty Most Critical Security Controls. Nearly all organizations that maintain sensitive information are adopting these Security Controls. These controls were chosen by leading government and private organizations who are experts on how attacks work and what can be done to prevent them from happening. The controls were selected as the best way to block known attacks as well as help search for and alleviate any damage from the attacks that are successful. This course allows the security professional to see how to implement controls in an existing network through highly effective and economical automation. For management, this training is the best way to distinguish how you will assess whether these security controls are effectively being administered.</p></div><div id="course-pills-2"><h4>Introduction</h4><ul><li>Critical Control 1</li><li>Critical Control 2</li><li>Critical Control 3</li><li>Critical Control 4</li><li>Critical Control 5</li><li>Critical Control 6</li><li>Critical Control 7</li><li>Critical Control 8</li><li>Critical Control 9</li><li>Critical Control 10</li><li>Critical Control 11</li><li>Critical Control 12</li><li>Critical Control 13</li><li>Critical Control 14</li><li>Critical Control 15</li><li>Critical Control 16</li><li>Critical Control 17</li><li>Critical Control 18</li><li>Critical Control 19</li><li>Critical Control 20</li></ul></div>

Information Security (IS)

Internal Controls

IS20SECURITYCON - IS20 Security Controls Mile 2

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>Security administrators<br />Security consultants<br />Network administrators<br />System engineers<br />Technical support personnel<br />Cisco integrators and partners</p>Overview<p>After taking this course, you should be able to:<br />Describe key concepts of NGIPS and NGFW technology and the Cisco Firepower Threat Defense system, and identify deployment scenarios<br />Perform initial Cisco Firepower Threat Defense device configuration and setup tasks<br />Describe how to manage traffic and implement Quality of Service (QoS) using Cisco Firepower Threat Defense<br />Describe how to implement NAT by using Cisco Firepower Threat Defense<br />Perform an initial network discovery, using Cisco Firepower to identify hosts, applications, and services<br />Describe the behavior, usage, and implementation procedure for access control policies<br />Describe the concepts and procedures for implementing security intelligence features</p><p>This course gives you knowledge and skills to use and configure CiscoÂ© Firepower Threat Defense technology, beginning with initial device setup and configuration and including routing, high availability, Cisco Adaptive Security Appliance (ASA) to Cisco Firepower Threat Defense migration, traffic control, and Network Address Translation (NAT). You will learn how to implement advanced Next-Generation Firewall (NGFW) and Next-Generation Intrusion Prevention System (NGIPS) features, including network intelligence, file type detection, network-based malware detection, and deep packet inspection. You will also learn how to configure site-to-site VPN, remote-access VPN, and Secure Sockets Layer (SSL) decryption before moving on to detailed analysis, system administration, and troubleshooting.</p></div><div id="course-pills-2"><h4>Cisco Firepower Threat Defense Overview</h4><ul><li>Examining Firewall and IPS Technology</li><li>Firepower Threat Defense Features and Components</li><li>Examining Firepower Platforms</li><li>Examining Firepower Threat Defense Licensing</li><li>Cisco Firepower Implementation Use Cases</li></ul><h4>Cisco Firepower NGFW Device Configuration</h4><ul><li>Firepower Threat Defense Device Registration</li><li>FXOS and Firepower Device Manager</li><li>Initial Device Setup</li><li>Managing NGFW Devices</li><li>Examining Firepower Management Center Policies</li><li>Examining Objects</li><li>Examining System Configuration and Health Monitoring</li><li>Device Management</li><li>Examining Firepower High Availability</li><li>Configuring High Availability</li><li>Cisco ASA to Firepower Migration</li><li>Migrating from Cisco ASA to Firepower Threat Defense</li></ul><h4>Cisco Firepower NGFW Traffic Control</h4><ul><li>Firepower Threat Defense Packet Processing</li><li>Implementing QoS</li><li>Bypassing Traffic</li></ul><h4>Cisco Firepower NGFW Address Translation</h4><ul><li>NAT Basics</li><li>Implementing NAT</li><li>NAT Rule Examples</li><li>Implementing NAT</li></ul><h4>Cisco Firepower Discovery</h4><ul><li>Examining Network Discovery</li><li>Configuring Network Discovery</li><li>Implementing Access Control Policies</li><li>Examining Access Control Policies</li><li>Examining Access Control Policy Rules and Default Action</li><li>Implementing Further Inspection</li><li>Examining Connection Events</li><li>Access Control Policy Advanced Settings</li><li>Access Control Policy Considerations</li><li>Implementing an Access Control Policy</li></ul><h4>Security Intelligence</h4><ul><li>Examining Security Intelligence</li><li>Examining Security Intelligence Objects</li><li>Security Intelligence Deployment and Logging</li><li>Implementing Security Intelligence</li></ul><h4>File Control and Advanced Malware Protection</h4><ul><li>Examining Malware and File Policy</li><li>Examining Advanced Malware Protection</li></ul><h4>Next-Generation Intrusion Prevention Systems</h4><ul><li>Examining Intrusion Prevention and Snort Rules</li><li>Examining Variables and Variable Sets</li><li>Examining Intrusion Policies</li></ul><h4>Site-to-Site VPN</h4><ul><li>Examining IPsec</li><li>Site-to-Site VPN Configuration</li><li>Site-to-Site VPN Troubleshooting</li><li>Implementing Site-to-Site VPN</li></ul><h4>Remote-Access VPN</h4><ul><li>Examining Remote-Access VPN</li><li>Examining Public-Key Cryptography and Certificates</li><li>Examining Certificate Enrollment</li><li>Remote-Access VPN Configuration</li><li>Implementing Remote-Access VPN</li></ul><h4>SSL Decryption</h4><ul><li>Examining SSL Decryption</li><li>Configuring SSL Policies</li><li>SSL Decryption Best Practices and Monitoring</li></ul><h4>Detailed Analysis Techniques</h4><ul><li>Examining Event Analysis</li><li>Examining Event Types</li><li>Examining Contextual Data</li><li>Examining Analysis Tools</li><li>Threat Analysis</li></ul><h4>System Administration</h4><ul><li>Managing Updates</li><li>Examining User Account Management Features</li><li>Configuring User Accounts</li><li>System Administration</li></ul><h4>Cisco Firepower Troubleshooting</h4><ul><li>Examining Common Misconfigurations</li><li>Examining Troubleshooting Commands</li><li>Firepower Troubleshooting</li></ul></div>

Network & Security

Cyber Security Foundation

Cisco Securing Networks with Cisco Firepower Next Generation Firewall v1.0 (SSNGFW)

<div id="course-pills-1">Duration<p>4 Days</p><p>24 CPD hours</p>This course is intended for<p>This course is for technical professionals who need to know how to deploy open source intrusion detection systems (IDS) and intrusion prevention systems (IPS), and how to write Snort rules.<br />Security administrators<br />Security consultants<br />Network administrators<br />System engineers<br />Technical support personnel<br />Channel partners and resellers</p>Overview<p>After taking this course, you should be able to:<br />Describe Snort technology and identify resources available for maintaining a Snort deployment<br />Install Snort on a Linux-based operating system<br />Describe the Snort operation modes and their command-line options<br />Describe the Snort intrusion detection output options<br />Download and deploy a new rule set to Snort<br />Describe and configure the snort.conf file<br />Configure Snort for inline operation and configure the inline-only features<br />Describe the Snort basic rule syntax and usage<br />Describe how traffic is processed by the Snort engine<br />Describe several advanced rule options used by Snort<br />Describe OpenAppID features and functionality<br />Describe how to monitor Snort performance and how to tune rules</p><p>The Securing Cisco Networks with Open Source Snort (SSFSNORT) v2.1 course shows you how to deploy a network intrusion detection system based on Snort. You?ll learn how to install, configure, operate, and manage a Snort system, rules writing with an overview of basic options, advanced rules writing, how to configure Pulled Pork, and how to use OpenAppID to provide protection of your network from malware. You will learn techniques of tuning and performance monitoring, traffic flow through Snort rules, and more</p></div><div id="course-pills-2"><h4>Course outline</h4><ul><li>Introduction to Snort Technology</li><li>Snort Installation</li><li>Snort Operation</li><li>Snort Intrusion Detection Output</li><li>Rule Management</li><li>Snort Configuration</li><li>Inline Operation and Configuration</li><li>Snort Rule Syntax and Usage</li><li>Traffic Flow Through Snort Rules</li><li>Advanced Rule Options</li><li>OpenAppID Detection</li><li>Tuning Snort</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans Cisco Securing Cisco Networks with Open Source Snort v2.1 (SSFSNORT) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the Cisco Securing Cisco Networks with Open Source Snort v2.1 (SSFSNORT) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Trainers Course

Cisco Securing Cisco Networks with Open Source Snort v2.1 (SSFSNORT)

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>This course is for technical professionals to gain skills in writing rules for Snort-based Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS). The primary audience includes:<br />Security administrators<br />Security consultants<br />Network administrators<br />System engineers<br />Technical support personnel using open source IDS and IPS<br />Channel partners and resellers</p>Overview<p>After taking this course, you should be able to:<br />Describe the Snort rule development process<br />Describe the Snort basic rule syntax and usage<br />Describe how traffic is processed by Snort<br />Describe several advanced rule options used by Snort<br />Describe OpenAppID features and functionality<br />Describe how to monitor the performance of Snort and how to tune rules</p><p>The Securing Cisco Networks with Snort Rule Writing Best Practices (SSFRules) v2.1 course shows you how to write rules for Snort, an open-source intrusion detection and prevention system. Through a combination of expert-instruction and hands-on practice, this course provides you with the knowledge and skills to develop and test custom rules, standard and advanced rules-writing techniques, how to integrate OpenAppID into rules, rules filtering, rules tuning, and more. The hands-on labs give you practice in creating and testing Snort rules.</p></div><div id="course-pills-2"><h4>Course Outline</h4><ul><li>Introduction to Snort Rule Development</li><li>Snort Rule Syntax and Usage</li><li>Traffic Flow Through Snort Rules</li><li>Advanced Rule Options</li><li>OpenAppID Detection</li><li>Tuning Snort</li></ul></div>

NIST Cybersecurity Framework (CSF)

Cissp

Cisco Securing Cisco Networks with Snort Rule Writing Best Practices v2.1 (SSFRULES)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>Network security engineers<br />ISE administrators<br />Wireless network security engineers<br />Cisco integrators and partners</p>Overview<p>After taking this course, you should be able to:<br />Describe Cisco ISE deployments, including core deployment components and how they interact to create a cohesive security architecture. Describe the advantages of such a deployment and how each Cisco ISE capability contributes to these advantages.<br />Describe concepts and configure components related to 802.1X and MAC Authentication Bypass (MAB) authentication, identity management, and certificate services.<br />Describe how Cisco ISE policy sets are used to implement authentication and authorization, and how to leverage this capability to meet the needs of your organization.<br />Describe third-party Network Access Devices (NADs), Cisco TrustSec, and Easy Connect.<br />Describe and configure web authentication, processes, operation, and guest services, including guest access components and various guest access scenarios.<br />Describe and configure Cisco ISE profiling services, and understand how to monitor these services to enhance your situational awareness about network-connected endpoints. Describe best practices for deploying this profiler service in your specific environment.<br />Describe BYOD challenges, solutions, processes, and portals. Configure a BYOD solution, and describe the relationship between BYOD processes and their related configuration components. Describe and configure various certificates related to a BYOD solution.<br />Describe the value of the My Devices portal and how to configure this portal.<br />Describe endpoint compliance, compliance components, posture agents, posture deployment and licensing, and the posture service in Cisco ISE.<br />Describe and configure TACACS+ device administration using Cisco ISE, including command sets, profiles, and policy sets. Understand the role of TACACS+ within the Authentication, Authentication, and Accounting (AAA) framework and the differences between the RADIUS and TACACS+ protocols.<br />Migrate TACACS+ functionality from Cisco Secure Access Control System (ACS) to Cisco ISE, using a migration tool.</p><p>Implementing and Configuring Cisco Identity Services Engine (SISE) v3.0 is a Cisco ISE training program that discusses the Cisco Identity Services Engine, an identity and access control policy platform that provides a single policy plane across the entire organization, combining multiple services, including authentication, authorization, and accounting (AAA), posture, profiling, device onboarding, and guest management, into a single context-aware identity-based platform. This CCNA course provides students with the knowledge and skills to enforce security posture compliance for wired and wireless endpoints as well as enhance infrastructure security using the Cisco ISE.</p></div><div id="course-pills-2"><h4>Introducing Cisco ISE Architecture and Deployment</h4><ul><li>Using Cisco ISE as a Network Access Policy Engine</li><li>Cisco ISE Use Cases</li><li>Describing Cisco ISE Functions</li><li>Cisco ISE Deployment Models</li><li>Context Visibility</li></ul><h4>Cisco ISE Policy Enforcement</h4><ul><li>Using 802.1X for Wired and Wireless Access</li><li>Using MAC Authentication Bypass for Wired and Wireless Access</li><li>Introducing Identity Management</li><li>Configuring Certificate Services</li><li>Introducing Cisco ISE Policy</li><li>Implementing Third-Party Network Access Device Support</li><li>Introducing Cisco TrustSec</li><li>Cisco TrustSec Configuration</li><li>Easy Connect</li></ul><h4>Web Authentication and Guest Services</h4><ul><li>Introducing Web Access with Cisco ISE</li><li>Introducing Guest Access Components</li><li>Configuring Guest Access Settings</li><li>Configuring Sponsor and Guest Portals</li></ul><h4>Cisco ISE Profiler</h4><ul><li>Introducing Cisco ISE Profiler</li><li>Profiling Deployment and Best Practices</li></ul><h4>Cisco ISE BYOD</h4><ul><li>Introducing the Cisco ISE BYOD Process</li><li>Describing BYOD Flow</li><li>Configuring the My Devices Portal</li><li>Configuring Certificates in BYOD Scenarios</li></ul><h4>Cisco ISE Endpoint Compliance Services</h4><ul><li>Introducing Endpoint Compliance Services</li><li>Configuring Client Posture Services and Provisioning in Cisco ISE</li></ul><h4>Working with Network Access Devices</h4><ul><li>Review TACACS+</li><li>Cisco ISE TACACS+ Device Administration</li><li>Configure TACACS+ Device Administration</li><li>TACACS+ Device Administration Guidelines and Best Practices</li><li>Migrating from Cisco ACS to Cisco ISE</li></ul><h4>Lab outline</h4><ul><li>Access the SISE Lab and Install ISE 2.4</li><li>Configure Initial Cisco ISE Setup, GUI Familiarization, and System Certificate Usage</li><li>Integrate Cisco ISE with Active Directory</li><li>Configure Basic Policy on Cisco ISE</li><li>Configure Policy Sets</li><li>Configure Access Policy for Easy Connect</li><li>Configure Guest Access</li><li>Configure Guest Access Operations</li><li>Create Guest Reports</li><li>Configure Profiling</li><li>Customize the Cisco ISE Profiling Configuration</li><li>Create Cisco ISE Profiling Reports</li><li>Configure BYOD</li><li>Blacklisting a Device</li><li>Configure Cisco ISE Compliance Services</li><li>Configure Client Provisioning</li><li>Configure Posture Policies</li><li>Test and Monitor Compliance-Based Access</li><li>Test Compliance Policy</li><li>Configure Cisco ISE for Basic Device Administration</li><li>Configure TACACS+ Command Authorization</li></ul></div>

SIA Training

Cisco Certified Internetwork Expert (CCIE)

Cisco SISE Implementing and Configuring Cisco Identity Services Engine v3.0

<div id="course-pills-1">Duration<p>2 Days</p><p>12 CPD hours</p>This course is intended for<p>The intended audience for this comprehensive course on Information Assurance and STIGs includes professionals with roles such as:<br />IT professionals - System administrators, network engineers, and security analysts who are responsible for maintaining and securing IT infrastructure and web applications.<br />Developers - Software engineers and web developers who design, implement, and maintain web applications, and need to integrate security best practices throughout the development process. Project teams - Cross-functional teams that collaborate on application development projects, including members from development, testing, and deployment teams. Technical leads - Senior software engineers or architects who oversee technical aspects of projects and ensure the implementation of secure design and coding practices. Project managers - Professionals responsible for planning, executing, and closing projects, ensuring that security requirements are met throughout the project lifecycle.</p>Overview<p>Working in an interactive learning environment, guided by our application security expert, you'll explore:<br />The concepts and terminology behind defensive coding<br />Threat Modeling as a tool in identifying software vulnerabilities based on realistic threats against meaningful assets<br />The entire spectrum of threats and attacks that take place against software applications in today's world<br />The role that static code reviews and dynamic application testing to uncover vulnerabilities in applications<br />The vulnerabilities of programming languages as well as how to harden installations<br />The basics of Cryptography and Encryption and where they fit in the overall security picture<br />The requirements and best practices for program management as specified in the STIGS<br />The processes and measures associated with the Secure Software Development (SSD)<br />The basics of security testing and planning<br />Understand the concepts and terminology behind defensive coding<br />Understand Threat Modeling as a tool in identifying software vulnerabilities based on realistic threats against meaningful assets<br />Learn the entire spectrum of threats and attacks that take place against software applications in today's world<br />Discuss the role that static code reviews and dynamic application testing to uncover vulnerabilities in applications<br />Understand the vulnerabilities of programming language as well as how to harden installations<br />Understand the basics of Cryptography and Encryption and where they fit in the overall security picture<br />Understand the fundamentals of XML Digital Signature and XML Encryption as well as how they are used within the web services arena<br />Understand the requirements and best practices for program management as specified in the STIGS<br />Understand the processes and measures associated with the Secure Software Development (SSD)<br />Understand the basics of security testing and planning</p><p>The Information Assurance (STIG) Overview is a comprehensive two-day course that delves into the realm of Information Assurance, empowering you to enhance your cybersecurity skills, understand the essentials of STIGs, and discover cutting-edge web application security practices. This immersive experience is tailored for IT professionals, developers, project teams, technical leads, project managers, testing/QA personnel, and other key stakeholders who seek to expand their knowledge and expertise in the evolving cybersecurity landscape. The course focuses on the intricacies of best practices for design, implementation, and deployment, inspired by the diverse and powerful STIGs, ultimately helping participants become more proficient in application security.The first half of the course covers the foundations of DISA's Security Technical Implementation Guides (STIGs) and learn the ethical approach to bug hunting, while exploring the language of cybersecurity and dissecting real-life case studies. Our expert <br />instrtors will guide you through the importance of respecting privacy, working with bug bounty programs, and avoiding common mistakes in the field.The next half  delves into the core principles of information security and application protection, as you learn how to identify and mitigate authentication failures, SQL injections, and cryptographic vulnerabilities. You?ll gain experience with STIG walkthroughs and discover the crucial steps for securing web applications.Throughout the course, you'll also explore the fundamentals of application security and development, including checklists, common practices, and secure development lifecycle (SDL) processes. You?ll learn from recent incidents and acquire actionable strategies to strengthen your project teams and IT organizations. You'll also have the opportunity to explore asset analysis and design review methodologies to ensure your organization is prepared to face future cybersecurity challenges.</p></div><div id="course-pills-2"><h4>DISA's Security Technical Implementation Guides (STIGs)</h4><ul><li>The motivations behind STIGs</li><li>Requirements that the various software development roles must meet</li><li>Implementing STIG requirements and guidelines</li></ul><h4>Why Hunt Bugs?</h4><ul><li>The Language of CyberSecurity</li><li>The Changing Cybersecurity Landscape</li><li>AppSec Dissection of SolarWinds</li><li>The Human Perimeter</li><li>Interpreting the 2021 Verizon Data Breach Investigation Report</li><li>First Axiom in Web Application Security Analysis</li><li>First Axiom in Addressing ALL Security Concerns</li><li>Lab: Case Study in Failure</li></ul><h4>Safe and Appropriate Bug Hunting/Hacking</h4><ul><li>Working Ethically</li><li>Respecting Privacy</li><li>Bug/Defect Notification</li><li>Bug Bounty Programs</li><li>Bug Hunting Mistakes to Avoid</li></ul><h4>Principles of Information Security</h4><ul><li>Secuity Is a Lifecycle Issue</li><li>Minimize Attack Surface Area</li><li>Layers of Defense: Tenacious D</li><li>Compartmentalize</li><li>Consider All Application States</li><li>Do NOT Trust the Untrusted</li></ul><h4>Identification and Authentication Failures</h4><ul><li>Applicable STIGs</li><li>Quality and Protection of Authentication Data</li><li>Proper hashing of passwords</li><li>Handling Passwords on Server Side</li><li>Session Management</li><li>HttpOnly and Security Headers</li><li>Lab: STIG Walk-Throughs</li></ul><h4>Injection</h4><ul><li>Applicable STIGs</li><li>Injection Flaws</li><li>SQL Injection Attacks Evolve</li><li>Drill Down on Stored Procedures</li><li>Other Forms of Server-Side Injection</li><li>Minimizing Injection Flaws</li><li>Client-side Injection: XSS</li><li>Persistent, Reflective, and DOM-Based XSS</li><li>Best Practices for Untrusted Data</li><li>Lab: STIG Walk-Throughs</li></ul><h4>Applications: What Next?</h4><ul><li>Common Vulnerabilities and Exposures</li><li>CWE/SANS Top 25 Most Dangerous SW Errors</li><li>Strength Training: Project Teams/Developers</li><li>Strength Training: IT Organizations</li></ul><h4>Cryptographic Failures</h4><ul><li>Applicable STIGs</li><li>Identifying Protection Needs</li><li>Evolving Privacy Considerations</li><li>Options for Protecting Data</li><li>Transport/Message Level Security</li><li>Weak Cryptographic Processing</li><li>Keys and Key Management</li><li>Threats of Quantum Computing</li><li>Steal Now, Crack Later Threat</li><li>Lab: STIG Walk-Throughs</li></ul><h4>Application Security and Development Checklists</h4><ul><li>Checklist Overview, Conventions, and Best Practices</li><li>Leveraging Common AppSec Practices and Control</li><li>Actionable Application Security</li><li>Additional Tools for the Toolbox</li><li>Strength Training: Project Teams/Developers</li><li>Strength Training: IT Organizations</li><li>Lab: Recent Incidents</li></ul><h4>SDL Overview</h4><ul><li>Attack Phases: Offensive Actions and Defensive Controls</li><li>Secure Software Development Processes</li><li>Shifting Left</li><li>Actionable Items Moving Forward</li><li>Lab: Design Study Review</li></ul><h4>Asset Analysis</h4><ul><li>Asset Analysis Process</li><li>Types of Application-Related Assets</li><li>Adding Risk Escalators</li><li>Discovery and Recon</li></ul><h4>Design Review</h4><ul><li>Asset Inventory and Design</li><li>Assets, Dataflows, and Trust Boundaries</li><li>Risk Escalators in Designs</li><li>Risk Mitigation Options</li></ul></div>

Information Security

Information Security Awareness

Information Assurance (STIG) Overview (TT8800)

<div id="course-pills-1">Duration<p>4.125 Days</p><p>24.75 CPD hours</p>This course is intended for<p>The job roles best suited to the material in this course are: Project managers and consultants involved in and concerned with the implementation of an ISMS, expert advisors seeking to master the implementation of an ISMS, individuals responsible for ensuring conformity to information security requirements within an organization</p>Overview<p>Master the concepts, approaches, methods and techniques used for the implementation and effective management of an ISMS<br />Learn how to interpret the ISO/IEC 27001 requirements in the specific context of an organization<br />Learn how to support an organization to effectively plan, implement, manage, monitor and maintain an ISMS<br />Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002 and other standards and regulatory frameworks<br />Acquire the expertise to advise an organization in implementing Information Security Management System best practices</p><p>This training course is designed to prepare you to implement an information security management system (ISMS) based on the requirements of ISO/IEC 27001. It aims to provide a comprehensive understanding of the best practices of an ISMS and a framework for its continual management and improvement.</p></div><div id="course-pills-2"><h4>Introduction to ISO/IEC 27001 and initiation of an ISMS</h4><ul><li>Training course objectives and structure</li><li>Standards and regulatory frameworks</li><li>Information Security Management System (ISMS)</li><li>Fundamental information security concepts and principles</li><li>Initiation of the ISMS implementation</li><li>Understanding the organization and its context</li><li>ISMS scope</li></ul><h4>Planning the implementation of an ISMS</h4><ul><li>Leadership and project approval</li><li>Organizational structure</li><li>Analysis of the existing system</li><li>Information security policy</li><li>Risk management</li><li>Statement of Applicability</li></ul><h4>Implementation of an ISMS</h4><ul><li>Documented information management</li><li>Selection and design of controls</li><li>Implementation of controls</li><li>Trends and technologies</li><li>Communication</li><li>Competence and awareness</li><li>Security operations management</li></ul><h4>ISMS monitoring, continual improvement, and preparation for the certification audit</h4><ul><li>Monitoring, measurement, analysis, and evaluation</li><li>Internal audit h Management review</li><li>Treatment of nonconformities</li><li>Continual improvement</li><li>Preparing for the certification audit</li><li>Certification process and closing of the training course</li></ul></div>

ISO 45001

ISO 9001

ISO 27001

Certified Information Security Manager (CISM)

ISO 27001 Lead Implementer

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is for IT administrators who will be maintaining and installing software, taking inventory of computers, distributing software updates to computers or remotely managing computers.</p>Overview<p>Upon completion of this course, students will be able to: Discover and import computer and user resources that you want to manage. Deploy the Symantec Management Agent and plug-ins. Gather hardware, software and operating system inventory from managed computers. Maintain a software catalog containing software components. Deliver software to managed computers. Meter software on managed computers. Distribute software updates to managed computers. Remotely manage computers. Analyze gathered data using predefined reports.</p><p>This hands-on course teaches students the underlying components and concepts of the Symantec Management Platform along with the Symantec Management Console that is used by CMS to perform its management functions.</p></div><div id="course-pills-2"><h4>Introduction</h4><ul><li>Course overview<br />The classroom lab environment</li></ul><h4>Understanding the Symantec Client Management Suite</h4><ul><li>Symantec Client Management Suite demonstration<br />Learning about the Symantec Client Management Suite<br />Symantec Management Platform components used by CMS<br />Symantec Management Platform concepts used by CMS<br />How the platform and CMS work</li></ul><h4>The Symantec Management Console</h4><ul><li>Accessing the Symantec Management Console<br />Getting to know the Symantec Management Console<br />Getting to know the enhanced console views</li></ul><h4>Symantec Management Platform Basics</h4><ul><li>Importing computer resources from Active Directory<br />Discover computer resources using Network Discovery<br />Grouping resources<br />Applying CMS policies to resource targets</li></ul><h4>Deploying the Symantec Management Agent</h4><ul><li>Installing the Symantec Management Agent - push method<br />Installing the Symantec Management Agent - pull method<br />Installing solution plug-ins for the Symantec Management Agent<br />Working with the Symantec Management Agent GUI<br />Working with the Symantec Management Agent health settings</li></ul><h4>Gathering Inventory from Managed Computers</h4><ul><li>Introducing Inventory Solution<br />Creating and configuring inventory policies<br />Using inventory tasks<br />Other Inventory Solution capabilities<br />Introducing inventory reports</li></ul><h4>Managing the Software Catalog</h4><ul><li>Preparing the Software Management Framework to support the Software Catalog<br />Populating the Software Catalog with software components<br />Working with software component resources<br />Creating and configuring software products</li></ul><h4>Delivering Software to Managed Computers</h4><ul><li>Choosing a method to deliver software<br />Understanding the software blade of the enhanced console view<br />Managing software deliveries with tasks<br />Installing software using a managed software delivery policy<br />Introducing software management reports</li></ul><h4>Managing Software with Application Metering</h4><ul><li>Understanding Application Metering<br />Tracking software usage on managed computers<br />Metering software with Application Metering policies<br />Application metering reports</li></ul><h4>Managing Organizational Views and Organizational Groups</h4><ul><li>Learning about organizational views and groups<br />Creating custom organizational views and group<br />Managing organizational views and groups</li></ul><h4>Managing Resource Filters and Resource Targets</h4><ul><li>More about resource filters<br />Managing and working with existing filters<br />Creating and modifying filters<br />More about resource targets<br />Working with targets</li></ul><h4>Managing Software Updates on Windows Computers</h4><ul><li>Introducing Patch Management Solution for Windows<br />Preparing your environment for Patch Management<br />Distributing software updates<br />Patch Management Solution reports</li></ul><h4>Managing Virtualized Software</h4><ul><li>Introducing Symantec Workspace Virtualization<br />Installing the Symantec Workspace Virtualization agent<br />Using CMS to deliver virtualized software</li></ul><h4>Remotely Managing Computers</h4><ul><li>Introducing Symantec Remote Access Connector<br />Overview or Real-Time System Manger<br />Remote management reports</li></ul><h4>Managing Policies</h4><ul><li>Getting to know policies<br />Understanding user-based policies<br />Understanding maintenance windows<br />Configuring automation policies<br />Managing shared schedules</li></ul><h4>Managing Jobs and Tasks</h4><ul><li>Overview of task management<br />Creating and scheduling tasks and jobs</li></ul><h4>Overview of Deployment Solution</h4><ul><li>Introducing Deployment Solution<br />Configuring Deployment Solution<br />Creating and managing deployment jobs and tasks<br />Deployment Solution imaging</li></ul><h4>Reporting</h4><ul><li>Introducing reports<br />Using and creating standard reports<br />Configuring and using IT Analytics Solution</li></ul><h4>Site Management</h4><ul><li>Introducing site management<br />Managing sites, subnets and site servers<br />Reviewing site server plug-ins to the Symantec Management Agent<br />Configuring site services</li></ul><h4>Security</h4><ul><li>Learning about security<br />Managing user accounts, security roles, and privileges<br />Managing permissions</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans Symantec Client Management Suite 7.6 - Administration training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the Symantec Client Management Suite 7.6 - Administration course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Sccm

Computer Maintenance

Commercial & Contract Management Certification Program (CCM)

Security Management

Management System

Symantec Client Management Suite 7.6 - Administration

<div id="course-pills-1">Duration<p>0.5 Days</p><p>3 CPD hours</p>This course is intended for<p>This course is designed for all users of computers, mobile devices, networks, and the Internet, to enable them to use technology more securely and minimize digital risks, regardless of technical ability. This course is also designed for you to prepare for the CyberSAFE credential. You can obtain your CyberSAFE certificate by completing the CyberSAFE credential process on the CHOICE platform following the course presentation.</p>Overview<p>In this course, you will identify many of the common risks involved in using conventional computing technology, as well as ways to use it safely, to protect yourself from those risks. You will:<br />Identify security compliance measures.<br />Address social engineering attempts.<br />Secure devices such as desktops, laptops, tablets, smartphones, and more.<br />Use the Internet securely.</p><p>Welcome to CyberSAFE: Exam CBS-410. Regardless of your computer experience, this class will help you become more aware of technology-related risks and what you can do to protect yourself and your organization from them. This course will help you to:Understand both security and compliance needs and requirements.Recognize and avoid phishing and other social engineering attempts.Recognize and avoid viruses, ransomware, and other malware.Help ensure data security on computers, mobile devices, networks, the Internet, and in the cloud.In this course, you will use discussions, case studies, and the experiences of your instructor and fellow students to explore the hazards and pitfalls of technology and learn how to use that technology safely and securely.</p></div><div id="course-pills-2"><h4>Identifying Security Compliance Measures</h4><ul><li>Topic A: Identify Organizational Compliance Requirements and Resources</li><li>Topic B: Identify Legal Compliance Requirements and Resources</li><li>Topic C: Identify Industry Compliance Requirements and Resources</li></ul><h4>Recognizing and Addressing Social Engineering Attacks</h4><ul><li>Topic A: Recognize Phishing and Other Social Engineering Attacks</li><li>Topic B: Defend Against Phishing and Other Social Engineering Attacks</li></ul><h4>Securing Devices</h4><ul><li>Topic A: Maintain Physical Security of Devices</li><li>Topic B: Use Secure Authentication Methods</li><li>Topic C: Protect Your Data</li><li>Topic D: Defend Against Malware</li><li>Topic E: Use Wireless Devices Securely</li></ul><h4>Using the Internet Securely</h4><ul><li>Topic A: Browse the Web Safely</li><li>Topic B: Use Email Securely</li><li>Topic C: Use Social Networks Securely</li><li>Topic D: Use Cloud Services Securely</li><li>Topic E: Work from Remote Locations Securely</li></ul></div>

Certified in Cybersecurity (CC)

Security Awareness

CertNexus CyberSAFE (CBS-410)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is designed for people who are seeking to launch a career in cybersecurity.</p>Overview<p>Assess the security posture of an enterprise environment and recommend and implement appropriate security solutions; Monitor and secure hybrid environments, including cloud, mobile, and IoT; Operate with an awareness of applicable laws and policies, including principles of governance, risk, and compliance; Identify, analyze, and respond to security events and incidents.</p><p>CompTIA Security+ is a global certification that validates the baseline skills necessary to perform core security functions and is the first security certification a candidate should earn.<br /> <br /> CompTIA Security+ establishes the core knowledge required of any cybersecurity role and provides a springboard to intermediate-level cybersecurity jobs.</p></div><div id="course-pills-2"><h3>Lesson 1: Summarize Fundamental Security Concepts</h3> <ul> <li>Security Concepts</li> <li>Security Controls</li> </ul> <h3>Lesson 2: Compare Threat Types</h3> <ul> <li>Threat Actors</li> <li>Attack Surfaces</li> <li>Social Engineering</li> </ul> <h3>Lesson 3: Explain Cryptographic Solutions</h3> <ul> <li>Cryptographic Algorithms</li> <li>Public Key Infrastructure</li> <li>Cryptographic Solutions</li> </ul> <h3>Lesson 4: Implement Identity and Access Management</h3> <ul> <li>Authentication</li> <li>Authorization</li> <li>Identity Management</li> </ul> <h3>Lesson 5: Secure Enterprise Network Architecture</h3> <ul> <li>Enterprise Network Architecture</li> <li>Network Security Appliances</li> <li>Secure Communications</li> </ul> <h3>Lesson 6: Secure Cloud Network Architecture</h3> <ul> <li>Cloud Infrastructure</li> <li>Embedded Systems and Zero Trust Architecture</li> </ul> <h3>Lesson 7: Explain Resiliency and Site Security Concepts</h3> <ul> <li>Asset Management</li> <li>Redundancy Strategies</li> <li>Physical Security</li> </ul> <h3>Lesson 8: Explain Vulnerability Management</h3> <ul> <li>Device and OS Vulnerabilities</li> <li>Application and Cloud Vulnerabilities</li> <li>Vulnerability Identification Methods</li> <li>Vulnerability Analysis and Remediation</li> </ul> <h3>Lesson 9: Evaluate Network Security Capabilities</h3> <ul> <li>Network Security Baselines</li> <li>Network Security Capability Enhancement</li> </ul> <h3>Lesson 10: Assess Endpoint Security Capabilities</h3> <ul> <li>Implement Endpoint Security</li> <li>Mobile Device Hardening</li> </ul> <h3>Lesson 11: Enhance Application Security Capabilities</h3> <ul> <li>Application Protocol Security Baselines</li> <li>Cloud and Web Application Security Concepts</li> </ul> <h3>Lesson 12: Explain Incident Response and Monitoring Concepts</h3> <ul> <li>Incident Response</li> <li>Digital Forensics</li> <li>Data Sources</li> <li>Alerting and Monitoring Tools</li> </ul> <h3>Lesson 13: Analyze Indicators of Malicious Activity</h3> <ul> <li>Malware Attack Indicators</li> <li>Physical and Network Attack Indicators</li> <li>Application Attack Indicators</li> </ul> <h3>Lesson 14: Summarize Security Governance Concepts</h3> <ul> <li>Policies, Standards, and Procedures</li> <li>Change Management</li> <li>Automation and Orchestration</li> </ul> <h3>Lesson 15: Explain Risk Management Processes</h3> <ul> <li>Risk Management Processes and Concepts</li> <li>Vendor Management Concepts</li> <li>Audits and Assessments</li> </ul> <h3>Lesson 16: Summarize Data Protection and Compliance Concepts</h3> <ul> <li>Data Classification and Compliance</li> <li>Personnel Policies</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans CompTIA Security Plus Certification (Exam SY0-601) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the CompTIA Security Plus Certification (Exam SY0-601) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Certified Cyber Professional (CCP)

CompTIA A+

General Admission

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is designed primarily for cybersecurity practitioners preparing for or who currently perform job functions related to protecting information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. It is ideal for those roles within federal contracting companies and private sector firms whose mission or strategic objectives require the execution of Defensive Cyber Operations (DCO) or DoD Information Network (DoDIN) operation and incident handling. This course focuses on the knowledge, ability, and skills necessary to provide for the defense of those information systems in a cybersecurity context, including protection, detection, analysis, investigation, and response processes.</p>Overview<p>In this course, you will identify, assess, respond to, and protect against security threats and operate a system and network security analysis platform. You will:<br />Assess cybersecurity risks to the organization.<br />Analyze the threat landscape.<br />Analyze various reconnaissance threats to computing and network environments.<br />Analyze various attacks on computing and network environments.<br />Analyze various post-attack techniques.<br />Assess the organization's security posture through auditing, vulnerability management, and penetration testing.<br />Collect cybersecurity intelligence from various network-based and host-based sources.<br />Analyze log data to reveal evidence of threats and incidents.<br />Perform active asset and network analysis to detect incidents.<br />Respond to cybersecurity incidents using containment, mitigation, and recovery tactics.<br />Investigate cybersecurity incidents using forensic analysis techniques.</p><p>This course covers network defense and incident response methods, tactics, and procedures that are in alignment with industry frameworks such as NIST 800-61r2 (Computer Security Incident Handling Guide), US-CERT's National Cyber Incident Response Plan (NCIRP), and Presidential Policy Directive (PPD)-41 on Cyber Incident Coordination. It is ideal for candidates who have been tasked with the responsibility of monitoring and detecting security incidents in information systems and networks, and for executing standardized responses to such incidents. The course introduces tools, tactics, and procedures to manage cybersecurity risks, defend cybersecurity assets, identify various types of common threats, evaluate the organization's security, collect and analyze cybersecurity intelligence, and remediate and report incidents as they occur. This course provides a comprehensive methodology for individuals responsible for defending the cybersecurity of their organization. This course is designed to assist students in preparing for the CertNexus CyberSec First Responder (Exam CFR-410) certification examination. What you learn and practice in this course can be a significant part of your preparation. In addition, this course and subsequent certification (CFR-410) meet all requirements for personnel requiring DoD directive 8570.01-M position certification baselines:<br />CSSP Analyst<br />CSSP Infrastructure Support<br />CSSP Incident Responder<br />CSSP Auditor<br />The course and certification also meet all criteria for the following Cybersecurity Maturity Model<br />Certification (CMMC) domains:<br />Incident Response (IR)<br />Audit and Accountability (AU)<br />Risk Management (RM)<br /></p></div><div id="course-pills-2"><h4> Lesson 1: Assessing Cybersecurity Risk</h4><ul><li>Topic A: Identify the Importance of Risk Management</li><li>Topic B: Assess Risk</li><li>Topic C: Mitigate Risk</li><li>Topic D: Integrate Documentation into Risk Management</li></ul><h4>Lesson 2: Analyzing the Threat Landscape</h4><ul><li>Topic A: Classify Threats</li><li>Topic B: Analyze Trends Affecting Security Posture</li></ul><h4>Lesson 3: Analyzing Reconnaissance Threats to Computing and Network Environments</h4><ul><li>Topic A: Implement Threat Modeling</li><li>Topic B: Assess the Impact of Reconnaissance</li><li>Topic C: Assess the Impact of Social Engineering</li></ul><h4>Lesson 4: Analyzing Attacks on Computing and Network Environments</h4><ul><li>Topic A: Assess the Impact of System Hacking Attacks</li><li>Topic B: Assess the Impact of Web-Based Attacks</li><li>Topic C: Assess the Impact of Malware</li><li>Topic D: Assess the Impact of Hijacking and Impersonation Attacks</li><li>Topic E: Assess the Impact of DoS Incidents</li><li>Topic F: Assess the Impact of Threats to Mobile Security</li><li>Topic G: Assess the Impact of Threats to Cloud Security</li></ul><h4>Lesson 5: Analyzing Post-Attack Techniques</h4><ul><li>Topic A: Assess Command and Control Techniques</li><li>Topic B: Assess Persistence Techniques</li><li>Topic C: Assess Lateral Movement and Pivoting Techniques</li><li>Topic D: Assess Data Exfiltration Techniques</li><li>Topic E: Assess Anti-Forensics Techniques</li></ul><h4>Lesson 6: Assessing the Organization's Security Posture</h4><ul><li>Topic A: Implement Cybersecurity Auditing</li><li>Topic B: Implement a Vulnerability Management Plan</li><li>Topic C: Assess Vulnerabilities</li><li>Topic D: Conduct Penetration Testing</li></ul><h4>Lesson 7: Collecting Cybersecurity Intelligence</h4><ul><li>Topic A: Deploy a Security Intelligence Collection and Analysis Platform</li><li>Topic B: Collect Data from Network-Based Intelligence Sources</li><li>Topic C: Collect Data from Host-Based Intelligence Sources</li></ul><h4>Lesson 8: Analyzing Log Data</h4><ul><li>Topic A: Use Common Tools to Analyze Logs</li><li>Topic B: Use SIEM Tools for Analysis</li></ul><h4>Lesson 9: Performing Active Asset and Network Analysis</h4><ul><li>Topic A: Analyze Incidents with Windows-Based Tools</li><li>Topic B: Analyze Incidents with Linux-Based Tools</li><li>Topic C: Analyze Indicators of Compromise</li></ul><h4>Lesson 10: Responding to Cybersecurity Incidents</h4><ul><li>Topic A: Deploy an Incident Handling and Response Architecture</li><li>Topic B: Mitigate Incidents</li><li>Topic C: Hand Over Incident Information to a Forensic Investigation</li></ul><h4>Lesson 11: Investigating Cybersecurity Incidents</h4><ul><li>Topic A: Apply a Forensic Investigation Plan</li><li>Topic B: Securely Collect and Analyze Electronic Evidence</li><li>Topic C: Follow Up on the Results of an Investigation</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans CertNexus Certified CyberSec First Responder (CFR-410) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the CertNexus Certified CyberSec First Responder (CFR-410) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

CertNexus Certified CyberSec First Responder (CFR-410)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is designed primarily for cybersecurity practitioners who perform job functions related to protecting information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. This course focuses on the knowledge, ability, and skills necessary to provide for the defense of those information systems in a cybersecurity context, including protection, detection, analysis, investigation, and response processes. In addition, the course ensures that all members of an IT team?everyone from help desk staff to the Chief Information Officer?understand their role in these security processes.</p>Overview<p>In this course, you will assess and respond to security threats and operate a systems and network security analysis platform.   You will:  - Assess information security risk in computing and network environments.  - Analyze reconnaissance threats to computing and network environments.  - Analyze attacks on computing and network environments.  - Analyze post-attack techniques on computing and network environments.  - Implement a vulnerability management program.  - Collect cybersecurity intelligence.  - Analyze data collected from security and event logs.  - Perform active analysis on assets and networks.  - Respond to cybersecurity incidents.  - Investigate cybersecurity incidents.  - Address security issues with the organization's technology architecture.</p><p>The course introduces tools and tactics to manage cybersecurity risks, identify various types of common threats, evaluate the organization's security, collect and analyze cybersecurity intelligence, and handle incidents as they occur.</p></div><div id="course-pills-2"><h3>1 - ASSESSING INFORMATION SECURITY RISK</h3> <ul> <li>Identify the Importance of Risk Management</li> <li>Assess Risk</li> <li>Mitigate Risk</li> <li>Integrate Documentation into Risk Management</li> </ul> <h3>2 - ANALYZING RECONNAISSANCE THREATS TO COMPUTING AND NETWORK ENVIRONMENTS</h3> <ul> <li>Assess the Impact of Reconnaissance Incidents</li> <li>Assess the Impact of Social Engineering</li> </ul> <h3>3 - ANALYZING ATTACKS ON COMPUTING AND NETWORK ENVIRONMENTS</h3> <ul> <li>Assess the Impact of System Hacking Attacks</li> <li>Assess the Impact of Web-Based Attacks</li> <li>Assess the Impact of Malware</li> <li>Assess the Impact of Hijacking and Impersonation Attacks</li> <li>Assess the Impact of DoS Incidents</li> <li>Assess the Impact of Threats to Mobile Security</li> <li>Assess the Impact of Threats to Cloud Security</li> </ul> <h3>4 - ANALYZING POST-ATTACK TECHNIQUES</h3> <ul> <li>Assess Command and Control Techniques</li> <li>Assess Persistence Techniques</li> <li>Assess Lateral Movement and Pivoting Techniques</li> <li>Assess Data Exfiltration Techniques</li> <li>Assess Anti-Forensics Techniques</li> </ul> <h3>5 - MANAGING VULNERABILITIES IN THE ORGANIZATION</h3> <ul> <li>Implement a Vulnerability Management Plan</li> <li>Assess Common Vulnerabilities</li> <li>Conduct Vulnerability Scans</li> <li>Conduct Penetration Tests on Network Assets</li> </ul> <h3>6 - COLLECTING CYBERSECURITY INTELLIGENCE</h3> <ul> <li>Deploy a Security Intelligence Collection and Analysis Platform</li> <li>Collect Data from Network-Based Intelligence Sources</li> <li>Collect Data from Host-Based Intelligence Sources</li> </ul> <h3>7 - ANALYZING LOG DATA</h3> <ul> <li>Use Common Tools to Analyze Logs</li> <li>Use SIEM Tools for Analysis</li> </ul> <h3>8 - PERFORMING ACTIVE ASSET AND NETWORK ANALYSIS</h3> <ul> <li>Analyze Incidents with Windows-Based Tools</li> <li>Analyze Incidents with Linux-Based Tools</li> <li>Analyze Malware</li> <li>Analyze Indicators of Compromise</li> </ul> <h3>9 - RESPONDING TO CYBERSECURITY INCIDENTS</h3> <ul> <li>Deploy an Incident Handling and Response Architecture</li> <li>Mitigate Incidents</li> <li>Prepare for Forensic Investigation as a CSIRT</li> </ul> <h3>10 - INVESTIGATING CYBERSECURITY INCIDENTS</h3> <ul> <li>Apply a Forensic Investigation Plan</li> <li>Securely Collect and Analyze Electronic Evidence</li> <li>Follow Up on the Results of an Investigation</li> </ul> <h3>11 - ADDRESSING SECURITY ARCHITECTURE ISSUES</h3> <ul> <li>Remediate Identity and Access Management Issues</li> <li>Implement Security During the SDLC</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans CompTIA Cybersecurity Analyst Certification (CySA Plus) (Exam CS0-003) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the CompTIA Cybersecurity Analyst Certification (CySA Plus) (Exam CS0-003) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

CompTIA Cybersecurity Analyst (CySA+)

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>The intended audience for this course is information security and IT professionals, such as network administrators and engineers, IT managers, and IT auditors, and other individuals who want to learn more about information security, who are interested in learning in-depth information about information security management, who are looking for career advancement in IT security, or who are interested in earning the CISM certification.</p>Overview<p>Establish and maintain a framework to provide assurance that information security strategies are aligned with business objectives and consistent with applicable laws and regulations. Identify and manage information security risks to achieve business objectives. Create a program to implement the information security strategy. Implement an information security program. Oversee and direct information security activities to execute the information security program. Plan, develop, and manage capabilities to detect, respond to, and recover from information security incidents.</p><p>In this course, students will establish processes to ensure that information security measures align with established business needs.</p>Prerequisites<p></p><li>Information security governance</li>  <li>Information risk management</li>  <li>Information security program development</li>  <li>Information security program management</li>  <li>Incident management and response</li><p></p></div><div id="course-pills-2"><h3>1 - Information Security Governance</h3> <ul> <li>Develop an Information Security Strategy</li> <li>Align Information Security Strategy with Corporate Governance</li> <li>Identify Legal and Regulatory Requirements</li> <li>Justify Investment in Information Security</li> <li>Identify Drivers Affecting the Organization</li> <li>Obtain Senior Management Commitment to Information Security</li> <li>Define Roles and Responsibilities for Information Security</li> <li>Establish Reporting and Communication Channels</li> </ul> <h3>2 - Information Risk Management</h3> <ul> <li>Implement an Information Risk Assessment Process</li> <li>Determine Information Asset Classification and Ownership</li> <li>Conduct Ongoing Threat and Vulnerability Evaluations</li> <li>Conduct Periodic BIAs</li> <li>Identify and Evaluate Risk Mitigation Strategies</li> <li>Integrate Risk Management into Business Life Cycle Processes</li> <li>Report Changes in Information Risk</li> </ul> <h3>3 - Information Security Program Development</h3> <ul> <li>Develop Plans to Implement an Information Security Strategy</li> <li>Security Technologies and Controls</li> <li>Specify Information Security Program Activities</li> <li>Coordinate Information Security Programs with Business Assurance Functions</li> <li>Identify Resources Needed for Information Security Program Implementation</li> <li>Develop Information Security Architectures</li> <li>Develop Information Security Policies</li> <li>Develop Information Security Awareness, Training, and Education Programs</li> <li>Develop Supporting Documentation for Information Security Policies</li> </ul> <h3>4 - Information Security Program Implementation</h3> <ul> <li>Integrate Information Security Requirements into Organizational Processes</li> <li>Integrate Information Security Controls into Contracts</li> <li>Create Information Security Program Evaluation Metrics</li> </ul> <h3>5 - Information Security Program Management</h3> <ul> <li>Manage Information Security Program Resources</li> <li>Enforce Policy and Standards Compliance</li> <li>Enforce Contractual Information Security Controls</li> <li>Enforce Information Security During Systems Development</li> <li>Maintain Information Security Within an Organization</li> <li>Provide Information Security Advice and Guidance</li> <li>Provide Information Security Awareness and Training</li> <li>Analyze the Effectiveness of Information Security Controls</li> <li>Resolve Noncompliance Issues</li> </ul> <h3>6 - Incident Management and Response</h3> <ul> <li>Develop an Information Security Incident Response Plan</li> <li>Establish an Escalation Process</li> <li>Develop a Communication Process</li> <li>Integrate an IRP</li> <li>Develop IRTs</li> <li>Test an IRP</li> <li>Manage Responses to Information Security Incidents</li> <li>Perform an Information Security Incident Investigation</li> <li>Conduct Post-Incident Reviews</li> </ul></div>

Certified Cryptocurrency Investigator Course (CCI)

London

<p id="isPasted" fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">Cognicert ISO 7101:2023 Healthcare Quality Lead Auditor Course</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">Certify by Cognicert Limited www.cognicert.com</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">Training Overview: The ISO 7101 Lead Auditor Course is designed to provide participants with the knowledge and skills required to lead audits of Healthcare Quality Management systems (HQMS) based on ISO 7101:2023. This comprehensive training program covers the principles, processes, and practices of auditing HQMS, focusing on key areas such as audit planning, conducting audits, reporting, and follow-up activities.</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">ISO 7101 Healthcare Quality Management System Lead Auditor Course provides participants with the knowledge and skills necessary to lead audits of quality management systems within healthcare organizations. This comprehensive training program covers the principles, processes, and practices of auditing healthcare quality management systems, focusing on key standards and regulations applicable to the healthcare industry.</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">Target Audience:</strong></p><ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Healthcare Quality assurance managers and officers.</li><li fr-original-style="" style="box-sizing: border-box;">Internal auditors responsible for auditing HQMS within organizations.</li><li fr-original-style="" style="box-sizing: border-box;">Professionals seeking to become certified lead auditors for ISO 7101 audits.</li><li fr-original-style="" style="box-sizing: border-box;">Personnel involved in implementing and maintaining HQMS within organizations.</li></ul><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">Reference Standards:</p><ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">ISO 7101:2023 - Healthcare Quality Management systems - Requirements.</li><li fr-original-style="" style="box-sizing: border-box;">They will understand how to apply ISO 19011:2018 and ISO 17011:2017 principles to ensure effective auditing, conformity assessment, and continual improvement within the Artificial Intelligence industry.</li></ul><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">Objectives</strong>:</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">By the end of the course, participants will be able to:</p><ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Understand the principles and requirements of ISO 7101:2023.</li><li fr-original-style="" style="box-sizing: border-box;">Interpret and apply the requirements of ISO 7101 during audit activities.</li><li fr-original-style="" style="box-sizing: border-box;">Plan and prepare for HQMS audits effectively, including developing audit programs and checklists.</li><li fr-original-style="" style="box-sizing: border-box;">Conduct HQMS audits in accordance with ISO 7101 requirements, including gathering evidence, interviewing personnel, and documenting findings.</li><li fr-original-style="" style="box-sizing: border-box;">Apply audit techniques and methodologies to identify nonconformities and areas for improvement.</li><li fr-original-style="" style="box-sizing: border-box;">Prepare audit reports and communicate findings to relevant stakeholders.</li><li fr-original-style="" style="box-sizing: border-box;">Understand the process for audit follow-up and verification of corrective actions.</li></ul><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">Learning Outcome:</strong> Upon completion of the course, participants will be able to lead and conduct audits of HQMS effectively, in line with the requirements of ISO 7101:2023. They will possess the necessary knowledge and skills to plan, execute, report on, and follow up audits, contributing to the continual improvement of organizational processes and systems.</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">Course Content:</strong></p><ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Introduction to ISO 7101:2023<ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Overview of the standard</li><li fr-original-style="" style="box-sizing: border-box;">Key concepts and principles of Healthcare Quality Management</li></ul></li><li fr-original-style="" style="box-sizing: border-box;">Principles of Auditing According to ISO 19011<ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Fundamental concepts of auditing</li><li fr-original-style="" style="box-sizing: border-box;">Roles and responsibilities of auditors</li><li fr-original-style="" style="box-sizing: border-box;">Ethical considerations in auditing</li></ul></li><li fr-original-style="" style="box-sizing: border-box;">Audit Planning and Preparation according to ISO 17021:2015<ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Developing audit objectives and scope</li><li fr-original-style="" style="box-sizing: border-box;">Establishing audit criteria and methods</li><li fr-original-style="" style="box-sizing: border-box;">Creating audit programs and checklists</li></ul></li><li fr-original-style="" style="box-sizing: border-box;">Conducting Audits<ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Techniques for gathering evidence</li><li fr-original-style="" style="box-sizing: border-box;">Interviewing skills and communication techniques</li><li fr-original-style="" style="box-sizing: border-box;">On-site audit activities and observations</li></ul></li><li fr-original-style="" style="box-sizing: border-box;">Audit Reporting<ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Documentation of audit findings</li><li fr-original-style="" style="box-sizing: border-box;">Preparation of audit reports</li><li fr-original-style="" style="box-sizing: border-box;">Presentation of findings to management and stakeholders</li></ul></li><li fr-original-style="" style="box-sizing: border-box;">Audit Follow-up and Corrective Actions<ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Verification of corrective actions</li><li fr-original-style="" style="box-sizing: border-box;">Monitoring and measuring audit performance</li><li fr-original-style="" style="box-sizing: border-box;">Continuous improvement of the audit process</li></ul></li><li fr-original-style="" style="box-sizing: border-box;">Case Studies and Practical Exercises<ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Application of audit principles and techniques through hands-on exercises and real-world scenarios.</li></ul></li></ul><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">Duration: 5 days<br fr-original-style="" style="box-sizing: border-box;">Training Methodologies</p><ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Case Study</li><li fr-original-style="" style="box-sizing: border-box;">Individual Exercises</li><li fr-original-style="" style="box-sizing: border-box;">Role Play</li><li fr-original-style="" style="box-sizing: border-box;">Group Exercises</li><li fr-original-style="" style="box-sizing: border-box;">Group Presentation</li><li fr-original-style="" style="box-sizing: border-box;">Examination</li></ul>

Cognicert ISO 7101:2023 Healthcare Quality Lead Auditor Course
Certify by Cognicert Limited www.cognicert.com
Training Overview: The ISO 7101 Lead Auditor Course is designed to provide participants with the knowledge and skills required to lead audits of Healthcare Quality Management systems (HQMS) based on ISO 7101:2023. This comprehensive training program covers the principles, processes, and practices of auditing HQMS, focusing on key areas such as audit planning, conducting audits, reporting, and follow-up activities.
ISO 7101 Healthcare Quality Management System Lead Auditor Course provides participants with the knowledge and skills necessary to lead audits of quality management systems within healthcare organizations. This comprehensive training program covers the principles, processes, and practices of auditing healthcare quality management systems, focusing on key standards and regulations applicable to the healthcare industry.
Target Audience:
Healthcare Quality assurance managers and officers.
Internal auditors responsible for auditing HQMS within organizations.
Professionals seeking to become certified lead auditors for ISO 7101 audits.
Personnel involved in implementing and maintaining HQMS within organizations.
Reference Standards:
ISO 7101:2023 - Healthcare Quality Management systems - Requirements.
They will understand how to apply ISO 19011:2018 and ISO 17011:2017 principles to ensure effective auditing, conformity assessment, and continual improvement within the Artificial Intelligence industry.
Objectives:
By the end of the course, participants will be able to:
Understand the principles and requirements of ISO 7101:2023.
Interpret and apply the requirements of ISO 7101 during audit activities.
Plan and prepare for HQMS audits effectively, including developing audit programs and checklists.
Conduct HQMS audits in accordance with ISO 7101 requirements, including gathering evidence, interviewing personnel, and documenting findings.
Apply audit techniques and methodologies to identify nonconformities and areas for improvement.
Prepare audit reports and communicate findings to relevant stakeholders.
Understand the process for audit follow-up and verification of corrective actions.
Learning Outcome: Upon completion of the course, participants will be able to lead and conduct audits of HQMS effectively, in line with the requirements of ISO 7101:2023. They will possess the necessary knowledge and skills to plan, execute, report on, and follow up audits, contributing to the continual improvement of organizational processes and systems.
Course Content:
Introduction to ISO 7101:2023Overview of the standardKey concepts and principles of Healthcare Quality Management
Principles of Auditing According to ISO 19011Fundamental concepts of auditingRoles and responsibilities of auditorsEthical considerations in auditing
Audit Planning and Preparation according to ISO 17021:2015Developing audit objectives and scopeEstablishing audit criteria and methodsCreating audit programs and checklists
Conducting AuditsTechniques for gathering evidenceInterviewing skills and communication techniquesOn-site audit activities and observations
Audit ReportingDocumentation of audit findingsPreparation of audit reportsPresentation of findings to management and stakeholders
Audit Follow-up and Corrective ActionsVerification of corrective actionsMonitoring and measuring audit performanceContinuous improvement of the audit process
Case Studies and Practical ExercisesApplication of audit principles and techniques through hands-on exercises and real-world scenarios.
Duration: 5 days
Training Methodologies
Case Study
Individual Exercises
Role Play
Group Exercises
Group Presentation
Examination

Cognicert Limited

ISO 7101 Healthcare Quality Management System Lead Auditor Course provides participants with the knowledge and skills necessary to lead audits of quality management systems within healthcare organizations. This comprehensive training program covers the principles, processes, and practices of auditing healthcare quality management systems, focusing on key standards and regulations applicable to the healthcare industry.

Cognicert ISO 7101 Healthcare Quality Lead Auditor Course

early bird registration

<h4>Overview</h4>
						<hr />
						<div></div>
							<p>
							</p><p>Contract Management Principles and Practices provide an overview of all phases of contracting, from requirements development to closeout, and discuss how incentives can be used to improve contract results. Explore these vital issues from the manager's perspective, highlighting key roles and responsibilities to give participants greater influence over how work is performed. Finally, discover specific actions that can be taken to help ensure that contractors or subcontractors perform as required under the contract.</p>

<p>This course guide you through all the principles and practices of contract management and preparation. </p>
<p>
							
							</p><div>
						
					</div>

GBA Corporate

Contract Management - Principles and Practices

Online

On Site

<p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="color: rgb(0, 0, 0); box-sizing: border-box;" id="isPasted" fr-original-style="color: rgb(0, 0, 0);">Nemstar is a BCS Accredited Training provider for the BCS Foundation Certificate in Information Security Management Principles. This course and exam is for anyone wishing to progress their career in the rapidly expanding fields of Information Security, risk and cyber especially within the UK public sector. From those wishing to change role to those seeking the senior business role, CISMP is the standard of excellence for all IS professionals</span></p><div style="color: rgb(98, 98, 98); box-sizing: border-box;" id="isPasted" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">Description</h3><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">Up to date and covering all the 9 Domains of Knowledge from the latest BCS Foundation Certificate in Information Security Management Principles &nbsp;exam, this programme guarantees you the best possible chance of a first time pass. &nbsp;The industry expert led classroom course explains each topic in depth and detail with the chance to have your questions answered. &nbsp;</p></div><div style="color: rgb(98, 98, 98); box-sizing: border-box;" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">Exam</h3><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">We don&#39;t expect the delegate to cram the in-depth materials to attempt the exam on the final day. &nbsp;We fully support you in that process and after the intensive 3 day course, we provide detailed exam study plans and prep materials which work alongside our unique live cram webinars to ensure your best chance at a first time exam pass at a date and time that you choose.</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">The exam is included in this course, either online or in person.</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">&nbsp;</p></div><div style="color: rgb(98, 98, 98); box-sizing: border-box;" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">Outline</h3><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><b fr-original-style="" style="box-sizing: border-box;">Domain 1&nbsp;</b>Information Security Management Principles (10%)</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><b fr-original-style="" style="box-sizing: border-box;">Domain 2&nbsp;</b>Information Risk (Threats, Vulnerabilities) (10%)</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><b fr-original-style="" style="box-sizing: border-box;">Domain 3&nbsp;</b>Information Security Frameworks (20%)</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><b fr-original-style="" style="box-sizing: border-box;">Domain 4&nbsp;</b>Procedural / People Security Controls (15%)</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><b fr-original-style="" style="box-sizing: border-box;">Domain 5</b>&nbsp;Technical Security Controls (25%)</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><b fr-original-style="" style="box-sizing: border-box;">Domain 6&nbsp;</b>Software Development and Lifecycle (5%)</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><b fr-original-style="" style="box-sizing: border-box;">Domain 7&nbsp;</b>Physical and Environmental Security Controls (5%)</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><b fr-original-style="" style="box-sizing: border-box;">Domain 8&nbsp;</b>Disaster Recovery and Business Continuity Management (5%)</p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><b fr-original-style="" style="box-sizing: border-box;">Domain 9&nbsp;</b>Technical Security Topics (15%)</p></div><div style="color: rgb(98, 98, 98); box-sizing: border-box;" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">Overview</h3><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">If you work in or with the UK public sector, then the CISMP qualification is particularly important to you. The CISMP certification is an approved part of UK Government&rsquo;s Certified Professional (CCP) Scheme, licensed by the NCSC (part of GCHQ), proves your expertise in Information Security and provides clearly defined career development paths for public sector employees.</p></div><div style="color: rgb(98, 98, 98); box-sizing: border-box;" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">Prerequisites</h3><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">There are no formal entry requirements, however a basic understanding of information systems, servers, desktop &amp; mobile computing and TCP/IP networking would be recommended. No prior security experience is required.</p></div>

Nemstar Ltd

This CISMP course and exam is for anyone wishing to progress their career in the rapidly expanding fields of Information Security, risk and cyber especially within the UK public sector.

BCS Foundation Certificate in Information Security Management Principles

Hayes

Research Quality Association

Practical Approach to Auditing Systems and Processes

RQA Member

Non Member

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is intended for experienced IT security-related practitioners, auditors, consultants, investigators, or instructors, including network or security analysts and engineers, network administrators, information security specialists, and risk management professionals, who are pursuing CISSP training and certification to acquire the credibility and mobility to advance within their current computer security careers or to migrate to a related career. Through the study of all eight CISSP Common Body of Knowledge (CBK) domains, students will validate their knowledge by meeting the necessary preparation requirements to qualify to sit for the CISSP certification exam. Additional CISSP certification requirements include a minimum of five years of direct professional work experience in two or more fields related to the eight CBK security domains, or a college degree and four years of experience.</p>Overview<p>#NAME?</p><p>In this course, students will expand upon their knowledge by addressing the essential elements of the 8 domains that comprise a Common Body of Knowledge (CBK)Â© for information systems security professionals.</p>Prerequisites<p></p><ul><li>CompTIA Network+ Certification</li></ul><p></p></div><div id="course-pills-2"><h3>1 - Security and Risk Management</h3> <ul> <li>Security Governance Principles</li> <li>Compliance</li> <li>Professional Ethics</li> <li>Security Documentation</li> <li>Risk Management</li> <li>Threat Modeling</li> <li>Business Continuity Plan Fundamentals</li> <li>Acquisition Strategy and Practice</li> <li>Personnel Security Policies</li> <li>Security Awareness and Training</li> </ul> <h3>2 - Asset Security</h3> <ul> <li>Asset Classification</li> <li>Privacy Protection</li> <li>Asset Retention</li> <li>Data Security Controls</li> <li>Secure Data Handling</li> </ul> <h3>3 - Security Engineering</h3> <ul> <li>Security in the Engineering Lifecycle</li> <li>System Component Security</li> <li>Security Models</li> <li>Controls and Countermeasures in Enterprise Security</li> <li>Information System Security Capabilities</li> <li>Design and Architecture Vulnerability Mitigation</li> <li>Vulnerability Mitigation in Embedded, Mobile, and Web-Based Systems</li> <li>Cryptography Concepts</li> <li>Cryptography Techniques</li> <li>Site and Facility Design for Physical Security</li> <li>Physical Security Implementation in Sites and Facilities</li> </ul> <h3>4 - Information Security Management Goals</h3> <ul> <li>Organizational Security</li> <li>The Application of Security Concepts</li> </ul> <h3>5 - Information Security Classification and Program Development</h3> <ul> <li>Information Classification</li> <li>Security Program Development</li> </ul> <h3>6 - Risk Management and Ethics</h3> <ul> <li>Risk Management</li> <li>Ethics</li> </ul> <h3>7 - Software Development Security</h3> <ul> <li>Software Configuration Management</li> <li>Software Controls</li> <li>Database System Security</li> </ul> <h3>8 - Cryptography</h3> <ul> <li>Ciphers and Cryptography</li> <li>Symmetric-Key Cryptography</li> <li>Asymmetric-Key Cryptography</li> <li>Hashing and Message Digests</li> <li>Email, Internet, and Wireless Security</li> <li>Cryptographic Weaknesses</li> </ul> <h3>9 - Physical Security</h3> <ul> <li>Physical Access Control</li> <li>Physical Access Monitoring</li> <li>Physical Security Methods</li> <li>Facilities Security</li> </ul></div>

Certified Cloud Security Professional (CCSP)

Certified Information Security Systems Professional (CISSP)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>The intended audience for this course is information systems security professionals, internal review auditors, and other individuals who have an interest in aspects of information systems audit, controls, and security.</p>Overview<p>Upon successful completion of this course, students will be able to: - implement information systems audit services in accordance with information systems audit standards, guidelines, and best practices. - evaluate an organizations structure, policies, accountability, mechanisms, and monitoring practices. - evaluate information systems acquisition, development, and implementation. - evaluate the information systems operations, maintenance, and support of an organization; and evaluate the business continuity and disaster recovery processes used to provide assurance that in the event of a disruption, IT services are maintained. - define the protection policies used to promote the confidentiality, integrity, and availability of information assets.</p><p>In this course, students will evaluate organizational policies, procedures, and processes to ensure that an organizations information systems align with its overall business goals and objectives.</p></div><div id="course-pills-2"><h3>1 - The Process of Auditing Information Systems</h3> <ul> <li>ISACA Information Systems Auditing Standards and Guidelines</li> <li>Fundamental Business Processes</li> <li>Develop and Implement an Information Systems Audit Strategy</li> <li>Plan an Audit</li> <li>Conduct an Audit</li> <li>The Evidence Life Cycle</li> <li>Communicate Issues, Risks, and Audit Results</li> <li>Support the Implementation of Risk Management and Control Practices</li> </ul> <h3>2 - IT Governance and Management</h3> <ul> <li>Evaluate the Effectiveness of IT Governance</li> <li>Evaluate the IT Organizational Structure and HR Management</li> <li>Evaluate the IT Strategy and Direction</li> <li>Evaluate IT Policies, Standards, and Procedures</li> <li>Evaluate the Effectiveness of Quality Management Systems</li> <li>Evaluate IT Management and Monitoring of Controls</li> <li>IT Resource Investment, Use, and Allocation Practices</li> <li>Evaluate IT Contracting Strategies and Policies</li> <li>Evaluate Risk Management Practices</li> <li>Performance Monitoring and Assurance Practices</li> <li>Evaluate the Organizations Business Continuity Plan</li> </ul> <h3>3 - Information Systems Acquisition, Development, and Implementation</h3> <ul> <li>Evaluate the Business Case for Change</li> <li>Evaluate Project Management Frameworks and Governance Practices</li> <li>Development Life Cycle Management</li> <li>Perform Periodic Project Reviews</li> <li>Evaluate Control Mechanisms for Systems</li> <li>Evaluate Development and Testing Processes</li> <li>Evaluate Implementation Readiness</li> <li>Evaluate a System Migration</li> <li>Perform a Post-Implementation System Review</li> </ul> <h3>4 - Information Systems Operations, Maintenance, and Support</h3> <ul> <li>Perform Periodic System Reviews</li> <li>Evaluate Service Level Management Practices</li> <li>Evaluate Third-Party Management Practices</li> <li>Evaluate Operations and End User Management Practices</li> <li>Evaluate the Maintenance Process</li> <li>Evaluate Data Administration Practices</li> <li>Evaluate the Use of Capacity and Performance Monitoring Methods</li> <li>Evaluate Change, Configuration, and Release Management Practices</li> <li>Evaluate Problem and Incident Management Practices</li> <li>Evaluate the Adequacy of Backup and Restore Provisions</li> </ul> <h3>5 - Protection of Information Assets</h3> <ul> <li>Information Security Design</li> <li>Encryption Basics</li> <li>Evaluate the Functionality of the IT Infrastructure</li> <li>Evaluate Network Infrastructure Security</li> <li>Evaluate the Design, Implementation, and Monitoring of Logical Access Controls</li> <li>Risks and Controls of Virtualization</li> <li>Evaluate the Design, Implementation, and Monitoring of Data Classification Process</li> <li>Evaluate the Design, Implementation, and Monitoring of Physical Access Controls</li> <li>Evaluate the Design, Implementation, and Monitoring of Environmental Controls</li> </ul></div>

1020 Courses delivered Online

Cisco Implementing an Integrated Threat Defense Solution (SECUR201) v1.2

By Nexus Human

IS20SECURITYCON - IS20 Security Controls Mile 2

By Nexus Human

Cisco Securing Networks with Cisco Firepower Next Generation Firewall v1.0 (SSNGFW)

By Nexus Human

Cisco Securing Cisco Networks with Open Source Snort v2.1 (SSFSNORT)

By Nexus Human

Cisco Securing Cisco Networks with Snort Rule Writing Best Practices v2.1 (SSFRULES)

By Nexus Human

Cisco SISE Implementing and Configuring Cisco Identity Services Engine v3.0

By Nexus Human

Information Assurance (STIG) Overview (TT8800)

By Nexus Human

ISO 27001 Lead Implementer

By Nexus Human

Symantec Client Management Suite 7.6 - Administration

By Nexus Human

CertNexus CyberSAFE (CBS-410)

By Nexus Human