Harpenden

<p>The aim of this course is to expose the commercial context within which technical work is carried out. It is to allow technical staff to understand how they fit into a larger picture, why they may be asked to undertake tasks that may not appear to be technical and the impact their interactions have within the commercial context.</p><p>The scope of the programme includes:</p><p>The course emphasises the collaborative nature of delivery and the need to offer value to customers.</p>The principal training objectives for this programme are to help participants:<ul><li>Understand why technical roles are broader than we might assume</li><li>Appreciate the importance of, and the need to support, sales</li><li>Value the idea of <em>'Good Enough'</em></li><li>Recognise what can affect profitability</li><li>Realise the future needs protecting</li></ul><section>
                    <br /><h3>1 Introduction</h3><br /><br /><ul><li><em>(Course sponsor)</em></li><li>Why this programme has been developed</li><li>Review of participants' needs and objectives</li></ul><br /><br /><br /><h3>2 That's not my job!</h3><br /><br /><ul><li>How we see our own role in work</li><li>How other people see our role</li><li>Stakeholders: who are they and why do they matter?</li><li>The organisational backdrop</li><li>What is my role really?</li></ul><br /><br /><br /><br /><h3>3 Sales and marketing</h3><br /><br /><ul><li>Where does the money come from?</li><li>Where do we find customers?</li><li>The sales process</li><li>One-off sales versus repeat business</li><li>Customer/supplier relationships</li><li>What something costs versus what the customer will pay</li><li>The value chain</li></ul><br /><br /><br /><br /><h3>4 Estimating</h3><br /><br /><ul><li>Purpose of estimates</li><li>The problem with precision</li><li>Five estimating techniques</li></ul><br /><br /><br /><br /><h3>5 Change control</h3><br /><br /><ul><li>Can you just do this for me?</li><li>When being helpful leads to bankruptcy</li><li>How to deal with change requests</li></ul><br /><br /><br /><br /><h3>6 Risk management</h3><br /><br /><ul><li>Risk in projects</li><li>Risk in operations</li><li>Categories of risk</li></ul><br /><br /><br /><br /><h3>7 The value of intellectual property</h3><br /><br /><ul><li>Issues with sharing information</li><li>Commercial in confidence</li><li>Non-disclosure agreements</li></ul><br /><br /><br /><br /><h3>8 Course review and action planning</h3><br /><br /><ul><li><em>(Course sponsor present)</em></li><li>Identify actions to be implemented individually</li><li>What actions should be implemented to improve working with non-technical people?</li><li>Conclusion</li></ul><br />


                </section>

The In House Training Company

Online Course Marketing

Design & Technology Courses (DT)

Business Communication Skills

Professional Skills Course (PSC)

Trainers Course

Teaching & Training

Commercial awareness for technical people (In-House)

<p>The aim of this course is to provide an overview of the key principles and techniques for leading and managing project work. It will focus on the core principles and generic methods of project management, showing how these can be applied to typical projects.</p><p>The scope of the programme includes:</p><p>The course also emphasises the importance of the leadership and team-working skills needed by project managers and team members in carrying out their roles.</p>The principal training objectives for this programme are to:<ul><li>Explain and demonstrate the key principles of successful project management</li><li>Demonstrate a range of useful project management tools and techniques</li><li>Define the role of, and help participants understand the skills required by, the project leader</li><li>Illustrate the use of project skills through examples and case studies</li><li>Identify ways to improve project management, both individually and corporately</li></ul><section>
                    DAY ONE <h3>1 Introduction (Course sponsor)</h3><ul><li>Why this programme has been developed</li><li>Review of participants' needs and objectives</li></ul> <h3>2 Key concepts and requirements for success</h3><ul><li>Projects and project management</li><li>Lessons from past projects; the essential requirements for success</li><li>Differences between projects; characteristic project life cycles</li><li>The challenges of project management; the role of the project manager</li><li>Project exercise<ul><li><em>A team exercise to demonstrate the challenges of project management</em></li></ul></li></ul> <h3>3 Defining project objectives and scope</h3><ul><li>Identifying the stakeholders; key roles and responsibilities</li><li>Getting organised; managing the definition process</li><li>Working with the 'customer' to define the project scope</li></ul> <h3>4 Project case study: part 1</h3><ul><li><em>Defining the project objectives: syndicate teams define the objectives and scope for a typical project</em></li></ul> <h3>5 Project planning</h3><ul><li>The nature of planning; recognising planning assumptions</li><li>Planning the plan; the importance of team involvement</li><li>Developing the work breakdown structure</li><li>Estimating task resources, timescales and costs</li><li>Developing the project schedule</li><li>Analysing the plan and identifying the critical path</li></ul> <h3>6 Project case study: part 2</h3><ul><li><em>Creating the project plan</em></li><li><em>Syndicate teams begin development of their project plans (for completion after session 7)</em></li><li><em>Team presentations and group discussion (after session 7)</em></li></ul> DAY TWO <h3>7 Managing project risks</h3><ul><li>Understanding and defining project risks</li><li>Classifying risks and adopting an appropriate risk strategy</li><li>Identifying, evaluating and managing project risks</li><li>Agreeing ownership of project risks; the risk register</li><li>Integrating planning and risk management</li></ul> <h3>8 Project control</h3><ul><li>Pro-active and re-active control; striking the right balance</li><li>Pre-requisites for effective, pro-active project control</li><li>Avoiding unnecessary 'scope creep' and controlling change</li><li>Selecting the data needed to provide early warning of problems</li><li>Monitoring project performance: 'S' curves, slip charts, earned value</li><li>Getting good data and assessing project status</li><li>Defining the roles and responsibilities for control</li><li>Setting up a routine process for keeping up to date</li><li>Managing and controlling multiple projects</li></ul> <h3>9 Project case study: part 3</h3><ul><li><em>Controlling the project</em></li><li><em>Teams control their project as new developments take place</em></li></ul> <h3>10 Course review and transfer planning (Course sponsor present)</h3><ul><li>Identify actions to be implemented individually</li><li>Identify corporate opportunities for improving project management</li><li>Sponsor-led review and discussion of proposals</li><li>Conclusion</li></ul> 


                </section>

Project Management Institute (PMI)

Project Leadership

Project Management

Google Project Management

Successful project management (In-House)

<p>This programme concentrates on the core planning skills needed to develop sound practical project plans in a team environment. This enables the plan to be modified should requirements change or difficulties arise.</p><p>The programme also gives participants the confidence to practise those skills and apply them in the work environment and deliver their projects more successfully in the future.</p>Participants learn fundamental project management concepts and terminology, demystifying the project management process, and, in particular, how to:<ul><li>Break a project down into manageable sections and ensure nothing is left out</li><li>Understand and apply estimating techniques to develop realistic estimates</li><li>Sequence work effectively and carry out critical path analysis to determine project duration and which tasks to pay closest attention to</li><li>Manage project risk effectively to protect project value</li><li>Monitor, control and re-plan the project to best keep it on track</li><li>Close out the project and ensure the project comes to an orderly end</li></ul><section>
                    <h3>1 Introduction</h3><ul><li>Self-introductions and personal objectives</li><li>Course objectives</li><li>Sharing of project issues</li></ul> <h3>2 Project management concepts</h3><ul><li>Characteristics of a project and what should be kept as operational responsibilities</li><li>Understanding the triple and quadruple constraints - and their limitations</li><li>Prioritising requirements through the MOSCOW technique</li><li>Product <em>v</em> project life cycle</li><li>Key project roles and responsibilities - the importance of sponsorship and clarity of roles</li></ul> <h3>3 Starting a project, and the importance of the terms of reference / project brief</h3><ul><li>Avoiding the pressure to 'just do it'!</li><li>The importance and benefits of planning</li><li>The best time to learn!</li><li>Initial project documentation - the BOSCARDI approach</li></ul> <h3>4 Breaking the work down</h3><ul><li>Understanding alternative breakdown structures such as the product breakdown structure and work breakdown structure</li><li>Guidelines for creating a work breakdown structure to ensure the full work scope is identified</li></ul> <h3>5 Estimating</h3><ul><li>Alternative estimating techniques and associated confidence levels</li><li>Further considerations - loss and resource factors</li></ul> <h3>6 Organising the work</h3><ul><li>Use of network diagrams to develop a clear sequence of work</li><li>Critical path analysis and calculating the project duration and task float - and usage</li></ul> <h3>7 The management of project risk</h3><ul><li>Understanding the nature of project risk</li><li>The risk analysis and risk management processes</li><li>How to best manage threats and opportunities</li><li>Running a risk workshop</li><li>Using the risk register</li></ul> <h3>8 Scheduling the work</h3><ul><li>The importance of the Gantt chart and understanding its limitations</li><li>The Gantt chart layout and using alternative views such as the tracking Gantt</li><li>Using alternative dependencies</li></ul> <h3>9 Resource issues</h3><ul><li>Assigning resources and resolving resource overloads</li><li>Crashing and fast-tracking your project and potential issues to look out for</li></ul> <h3>10 Controlling the project</h3><ul><li>The control cycle and alternative feedback mechanisms</li><li>Alternative progress reporting</li><li>Assessing the impact</li><li>The importance of re-planning</li><li>The benefits of control</li><li>Change control - the importance of impact analysis</li><li>The steps of change control and the use of the issue register</li></ul> <h3>11 Closing the project</h3><ul><li>The project closure checklist</li><li>Reviewing the project - things to avoid</li><li>Developing meaningful lessons and ensuring they are applied effectively</li><li>The post-project review - its importance to the organisation</li></ul> 


                </section>

Project Management Qualification (PMQ)

Project Management Professional (PMP)

Project planning and control (In-House)

<p>Businesses that don't control their costs don't stay in business. How well are you doing? Is everyone in your organisation sufficiently aware of costs, managing them effectively and maximising opportunities to reduce them? If there is scope for improvement, this course will help get you back on track. It will demonstrate that cost reduction is so much more than cost control and cost cutting. True cost management is about being aware of costs, seeking to reduce them through good design and efficient operating practices whilst taking continuing action on overspending.</p>This course will develop the participants' skills in:<ul><li>Being aware of costs at all times</li><li>Seeking cost reduction from the start (including life-cycle costing)</li><li>Appraising projects / production to identify and take out risk</li><li>Understanding real budgeting</li><li>Using techniques such as ZBB and ABC where appropriate</li><li>Ensuring cost reports lead to action</li><li>Managing a cost reduction process that delivers</li></ul><p>Benefits to the organisation will include:</p><ul><li>Identification of cost reduction and business improvement opportunities</li><li>Better reporting and ownership of costs</li><li>Greater awareness and control of everyday costs</li></ul><section>
                    <h3>1 Introduction - the cost management process</h3><ul><li>The risks of poor cost control</li><li>Capital and revenue costs</li><li>The importance of cost awareness</li><li><em>The importance of cost reduction</em></li><li>Cost management - the key aspects</li><li>How to build a cost management and control process checklist for your areas of responsibility</li></ul> <h3>2 Cost removal - taking out costs</h3><ul><li>Cost awareness</li><li>Costs of poor design / poor processes</li><li>Value engineering</li><li>Removing redundant costs</li></ul> <h3>3 The need for commercial, technical and financial appraisals</h3><ul><li>Understand the problems before cash is committed and costs incurred</li><li>Making the effort to identify commercial and technical risk</li><li>The time value of money - DCF techniques for long term projects</li><li>Cost models for production processes and projects</li><li>Costing models - project appraisals</li><li>The use of spreadsheets to identify sensitivity and risk</li><li>How to focus on risk management</li></ul> <h3>4 Budgeting - proper budgeting challenges costs</h3><ul><li>The philosophy of the business - are costs an issue?</li><li>The importance of having the right culture</li><li>The need for detailed business objectives</li><li>Budgetary control measures</li><li>Designing budget reports - for action</li></ul> <h3>5 Zero-based budgeting (ZBB) - the principles</h3><ul><li>Much more than starting with a clean sheet of paper</li><li>What ZBB can achieve</li><li>The concept of decision packages - to challenge business methods and costs</li><li>Only necessary costs should be incurred</li><li>A review of an operating budget - demonstrating what ZBB challenges and the costs it may lead to being taken out</li></ul> <h3>6 Awareness of overheads and other costs</h3><ul><li>Definitions of cost - direct and indirect</li><li>Dealing with overheads - what is meant by allocation, absorption or apportionment?</li><li>The apparent and real problems with overheads</li><li>Different ways of dealing with overheads</li><li>Review of overhead allocation methods and accounting and reporting issues</li></ul> <h3>7 Overheads and product costing</h3><ul><li>Activity-based costing (ABC) - the principles</li><li>Where and how the ABC approach may be helpful</li><li>Know the 'true' cost of a product or a project</li><li>Should you be in business? Will you stay in business?</li><li>Identifying weaknesses in a traditional overhead allocation</li><li>How ABC will help improve product or service costing</li><li>Identifying which products and activities should be developed and which abandoned</li></ul> <h3>8 Cost reduction culture</h3><ul><li>The need for cost reports</li><li>What measures can be used to identify over-spends as early as possible</li><li>Cost control performance measures and ratios</li></ul> <h3>9 Design of cost control reports</h3><ul><li>Reports should lead to action and deliver</li><li>Selecting cost control measures which can be acted upon</li><li>Practice in designing action reports</li></ul> <h3>10 Course summary - developing your own cost action plan</h3><ul><li>Group and individual action plans will be prepared with a view to participants identifying their cost risks areas and the techniques which can be immediately applied to improve costing and reduce costs</li></ul> 


                </section>

Business Analysis

Business Case Development

Manager Training

Finance For Non Finance Managers

Management Skills

Practical Accounting

Cost reduction (In-House)

<p>This five-day programme empowers participants with the skills and knowledge to understand and effectively apply best practice commercial and contracting principles and techniques, ensuring better contractor performance and greater value add.</p><p>This is an assessed programme, leading to the International Association for Contracts &amp; Commercial Management (IACCM)'s coveted Contract and Commercial Management Practitioner (CCMP) qualification.</p>By the end of this comprehensive programme the participants will be able to:<ul><li>Develop robust contracting plans, including scopes of work and award strategies</li><li>Undertake early market engagements to maximise competition</li><li>Conduct effective contracting and commercial management activities, including ITT, RFP, negotiated outcomes</li><li>Understand the legalities of contract and commercial management</li><li>Negotiate effectively with key stakeholders and clients, making use of the key skills of persuading and influencing to optimise outcomes</li><li>Undertake effective Supplier Relationship Management</li><li>Appreciate the implications of national and organisational culture on contracting and commercial activities</li><li>Appreciate professional contract management standards</li><li>Set up and maintain contract and commercial management governance systems</li><li>Take a proactive, collaborative, and agile approach to managing commercial contracts</li><li>Develop and monitor appropriate and robust KPIs and SLAs to manage the contractor and facilitate improved contractor performance</li><li>Appreciate the cross-functional nature of contract management</li><li>Collaborate with clients to deliver sustainable performance and to manage and exceed client expectations</li><li>Understand the roles and responsibilities of contract and commercial managers</li><li>Use effective contractor selection and award methods and models (including the 10Cs model) and use these models to prepare robust propositions to clients</li><li>Make effective use of lessons learned to promote improvements from less than optimal outcomes, using appropriate templates</li><li>Effectively manage the process of change, claims, variations, and dispute resolution</li><li>Develop and present robust propositions</li><li>Make appropriate use of best practice contract and commercial management tools, techniques, and templates</li></ul><section>
                    <h3>DAY ONE</h3> <h3>1 Introduction</h3><ul><li>Aims</li><li>Objectives</li><li>KPIs</li><li>Learning strategies</li><li>Plan for the programme</li></ul> <h3>2 The contracting context</h3><ul><li>Key objectives of contract management</li><li>Importance and impact on the business</li></ul> <h3>3 Critical success factors</h3><ul><li>Essential features of professional commercial and contract management and administration</li><li>The 6-step model</li></ul> <h3>4 Putting the 'management' into commercial and contract management</h3><ul><li>Traditional <em>v</em> 'new age' models</li><li>The need for a commercial approach</li><li>The added value generated</li></ul> <h3>5 Definitions</h3><ul><li>'Commercial management'</li><li>'Contract management'</li><li>'Contracting'</li><li>... and why have formal contracts?</li></ul> <h3>6 Stakeholders</h3><ul><li>Stakeholder mapping and analysis</li><li>The 'shared vision' concept</li><li>Engaging with key functions, eg, HSE, finance, operations</li></ul> <h3>7 Roles and responsibilities</h3><ul><li>Contract administrators</li><li>Stakeholders</li></ul> <h3>8 Strategy and planning</h3><ul><li>Developing effective contracting plans and strategies</li></ul>  <h3>DAY TWO</h3> <h3>1 Contract control</h3><ul><li>Tools and techniques, including CPA and Gantt charts</li><li>A project management approach</li><li>Developing effective contract programmes</li></ul> <h3>2 The contracting context</h3><ul><li>Key objectives of contract management</li><li>Importance and impact on the business</li></ul> <h3>3 Tendering</h3><ul><li>Overview of the contracting cycle</li><li>Requirement to tender</li><li>Methods</li><li>Rationale</li><li>Exceptions</li><li>Steps</li><li>Gateways</li><li>Controls</li><li>One and two package bids</li></ul> <h3>4 Tender assessment and contract award I - framework</h3><ul><li>Tender board procedures</li><li>Role of the tender board (including minor and major tender boards)</li><li>Membership</li><li>Administration</li><li>Developing robust contract award strategies and presentations</li></ul>  <h3>DAY THREE</h3> <h3>1 Tender assessment and contract award II - processes</h3><ul><li>Pre-qualification processes</li><li>CRS</li><li>Vendor registration rules and processes</li><li>Creating bidder lists</li><li>Disqualification criteria</li><li>Short-listing</li><li>Using the 10Cs model</li><li>Contract award and contract execution processes</li></ul> <h3>2 Minor works orders</h3><ul><li>Process</li><li>Need for competition</li><li>Role and purpose</li><li>Controls</li><li>Risks</li></ul> <h3>3 Contract strategy</h3><ul><li>Types of contract</li><li>Call-offs</li><li>Framework agreements</li><li>Price agreements</li><li>Supply agreements</li></ul> <h3>4 Contract terms I: Pricing structures</h3><ul><li>Lump sum</li><li>Unit price</li><li>Cost plus</li><li>Time and materials</li><li>Alternative methods</li><li>Target cost</li><li>Gain share contracts</li><li>Advance payments</li><li>Price escalation clauses</li></ul> <h3>5 Contract terms II: Other financial clauses</h3><ul><li>Insurance</li><li>Currencies</li><li>Parent body guarantees</li><li>Tender bonds</li><li>Performance bonds</li><li>Retentions</li><li>Sub-contracting</li><li>Termination</li><li>Invoicing</li></ul> <h3>6 Contract terms III: Risk and reward</h3><ul><li>Incentive contracts</li><li>Management and mitigation of contractual risk</li></ul>  <h3>DAY FOUR</h3> <h3>1 Contract terms IV: Jurisdiction and related matters</h3><ul><li>Applicable laws and regulations</li><li>Registration</li><li>Commercial registry</li><li>Commercial agencies</li></ul> <h3>2 Managing the client-contractor relationship</h3><ul><li>Types of relationship</li><li>Driving forces</li><li>Link between type of contract and style of relationships</li><li>Motivation - use of incentives and remedies</li></ul> <h3>3 Disputes</h3><ul><li>Types of dispute</li><li>Conflict resolution strategies</li><li>Negotiation</li><li>Mediation</li><li>Arbitration</li></ul>  <h3>DAY FIVE</h3> <h3>1 Performance measurement</h3><ul><li>KPIs</li><li>Benchmarking</li><li>Cost controls</li><li>Validity of savings</li><li>Balanced scorecards</li><li>Using the KPI template</li></ul> <h3>2 Personal qualities of the contract manager</h3><ul><li>Negotiation</li><li>Communication</li><li>Persuasion and influencing</li><li>Working in a matrix environment</li></ul> <h3>3 Contract terms V: Drafting skills</h3><ul><li>Drafting special terms</li></ul> <h3>4 Variations</h3><ul><li>Contract and works variation orders</li><li>Causes of variations</li><li>Risk management</li><li>Controls</li><li>Prevention</li><li>Negotiation with contractors</li></ul> <h3>5 Claims</h3><ul><li>Claims management processes</li><li>Controls</li><li>Risk mitigation</li><li>Schedules of rates</li></ul> <h3>6 Close-out</h3><ul><li>Contract close-out and acceptance / completion</li><li>HSE</li><li>Final payments</li><li>Performance evaluation</li><li>Capturing the learning</li></ul> <h3>7 Close</h3><ul><li>Review</li><li>Final assessment</li><li>Next steps</li></ul> 


                </section>

Association of Proposal Management Professionals (APMP)

Commercial Manager

Construction Management

Construction Design & Management (CDM)

Contract Management

Commercial & Contract Management Certification Program (CCM)

Contract and commercial management for practitioners (In-House)

Edinburgh

<p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="color: rgb(16, 24, 64); box-sizing: border-box;" id="isPasted" fr-original-style="color: rgb(16, 24, 64);"><strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">1. Introduction</strong></span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">This course offers an introduction to Environmental, Social, and Governance (ESG) principles, tailored for professionals who seek to integrate sustainable practices into their business strategy. With the rising importance of corporate responsibility, this course provides the essential knowledge and tools needed to understand and implement ESG initiatives effectively within any organisation.</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">&nbsp;<strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">2. Objectives</strong></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">By the end of this course, participants will be able to:</p><ul fr-original-style="" style="box-sizing: border-box;"><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Understand the components and importance of ESG in contemporary business environments.</li><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Evaluate ESG performance metrics and integrate them into overall business strategy.</li><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Create an actionable plan for developing and implementing ESG initiatives in their respective organisations.</li><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Assess regulatory requirements and anticipate future trends in ESG reporting.</li><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Communicate ESG strategies effectively to stakeholders.</li><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Foster a culture of sustainability and ethical governance within their organisations.</li></ul><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">&nbsp;<strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">3. Methodology</strong></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">This course will employ a blended learning approach, incorporating the following methods:</p><ul fr-original-style="" style="box-sizing: border-box;"><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Interactive Lectures: Engage with subject matter experts through presentations on foundational and advanced ESG topics.</li><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Case Studies: Analyse real-world scenarios to apply ESG principles and strategies.</li><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Group Discussions: Facilitate peer learning through discussions on various ESG aspects and their impact on different sectors.</li><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Workshops: Hands-on sessions to draft ESG strategies tailored to participants&#39; organisations.</li><li style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Q&amp;A Sessions: Direct engagement with instructors to clarify concepts and approaches.</li></ul><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">&nbsp;<strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">4. Target Audience</strong></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">This course is designed for leaders, strategy and sustainability officers, and other managers who are responsible for the development and execution of ESG initiatives within their organisations. Participants will typically have a foundational understanding of ESG concepts but seek to enhance their strategic and operational approaches.</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">&nbsp;<strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">5. Programme Outline</strong></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">Day 1: Understanding ESG Fundamentals and Frameworks</span></strong></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">1. ESG Overview: Definition, Components, and Importance</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">2. Governance Structures for ESG: Best Practices in Ethics</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">3. Social Responsibility in ESG: Employee and Community Impact</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">4. Environmental Strategies: Managing Carbon Footprint and Sustainable Practices</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">5. ESG Reporting and Metrics: Transparency and Accountability</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">6. Interactive Workshop: Developing an ESG Strategic Outline</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;"><strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">Day 2: Advanced Application and Strategic Integration</strong></span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">1. Global ESG Trends and Regulations: Navigating the Global Landscape</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">2. Risk Management through ESG: Mitigating Financial and Reputational Risks</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">3. Sustainable Investing: ESG Criteria for Investors</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">4. Stakeholder Engagement in ESG: Communication and Collaboration</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">5. Case Study Analysis: ESG Challenges</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;">6. Workshop: Finalising ESG Strategy and Action Plan</span></p><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;"></span><span style="font-size: 12px; box-sizing: border-box;" fr-original-style="font-size: 12px;"><strong fr-original-style="" style="font-weight: 700; box-sizing: border-box;">Note this course can be modified to suit your specific requirement at no extra charge</strong></span></p>

Buon Consultancy

Sustainability

Sustainability Leadership

Leadership

Corporate Sustainability

Ethical Leadership

Explore the key concepts of Environmental, Social, and Governance (ESG) with our expert-led course designed for professionals. Learn how to seamlessly incorporate sustainable practices into your business strategy and enhance your corporate responsibility. Gain the tools and insights necessary to effectively implement ESG initiatives within your organisation. Join now and lead the change towards a more sustainable future!

ESG Fundamentals for Organisational Leaders

(£1450 total for this 2-day course for a group of 4-10 participants)

<div id="course-pills-1">Duration<p>4 Days</p><p>24 CPD hours</p>This course is intended for<p></p><p>The Microsoft Security Operations Analyst collaborates with organizational stakeholders to secure information technology systems for the organization. Their goal is to reduce organizational risk by rapidly remediating active attacks in the environment, advising on improvements to threat protection practices, and referring violations of organizational policies to appropriate stakeholders. Responsibilities include threat management, monitoring, and response by using a variety of security solutions across their environment. The role primarily investigates, responds to, and hunts for threats using Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft 365 Defender, and third-party security products. Since the Security Operations Analyst consumes the operational output of these tools, they are also a critical stakeholder in the configuration and deployment of these technologies.</p><p></p><p></p><p>Learn how to investigate, respond to, and hunt for threats using Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft 365 Defender. In this course you will learn how to mitigate cyberthreats using these technologies. Specifically, you will configure and use Microsoft Sentinel as well as utilize Kusto Query Language (KQL) to perform detection, analysis, and reporting. The course was designed for people who work in a Security Operations job role and helps learners prepare for the exam SC-200: Microsoft Security Operations Analyst.</p><p></p>Prerequisites<p></p><li>Basic understanding of Microsoft 365</li>  <li>Fundamental understanding of Microsoft security, compliance, and identity products</li>   <li> Intermediate understanding of Windows 10</li>  <li> Familiarity with Azure services, specifically Azure SQL Database and Azure Storage</li>   <li> Familiarity with Azure virtual machines and virtual networking</li>   <li>Basic understanding of scripting concepts.</li><p></p></div><div id="course-pills-2"><h3>1 - Introduction to Microsoft 365 threat protection</h3> <ul> <li>Explore Extended Detection &amp; Response (XDR) response use cases</li> <li>Understand Microsoft Defender XDR in a Security Operations Center (SOC)</li> <li>Explore Microsoft Security Graph</li> <li>Investigate security incidents in Microsoft Defender XDR</li> </ul> <h3>2 - Mitigate incidents using Microsoft 365 Defender</h3> <ul> <li>Use the Microsoft Defender portal</li> <li>Manage incidents</li> <li>Investigate incidents</li> <li>Manage and investigate alerts</li> <li>Manage automated investigations</li> <li>Use the action center</li> <li>Explore advanced hunting</li> <li>Investigate Microsoft Entra sign-in logs</li> <li>Understand Microsoft Secure Score</li> <li>Analyze threat analytics</li> <li>Analyze reports</li> <li>Configure the Microsoft Defender portal</li> </ul> <h3>3 - Protect your identities with Microsoft Entra ID Protection</h3> <ul> <li>Microsoft Entra ID Protection overview</li> <li>Detect risks with Microsoft Entra ID Protection policies</li> <li>Investigate and remediate risks detected by Microsoft Entra ID Protection</li> </ul> <h3>4 - Remediate risks with Microsoft Defender for Office 365</h3> <ul> <li>Automate, investigate, and remediate</li> <li>Configure, protect, and detect</li> <li>Simulate attacks</li> </ul> <h3>5 - Safeguard your environment with Microsoft Defender for Identity</h3> <ul> <li>Configure Microsoft Defender for Identity sensors</li> <li>Review compromised accounts or data</li> <li>Integrate with other Microsoft tools</li> </ul> <h3>6 - Secure your cloud apps and services with Microsoft Defender for Cloud Apps</h3> <ul> <li>Understand the Defender for Cloud Apps Framework</li> <li>Explore your cloud apps with Cloud Discovery</li> <li>Protect your data and apps with Conditional Access App Control</li> <li>Walk through discovery and access control with Microsoft Defender for Cloud Apps</li> <li>Classify and protect sensitive information</li> <li>Detect Threats</li> </ul> <h3>7 - Respond to data loss prevention alerts using Microsoft 365</h3> <ul> <li>Describe data loss prevention alerts</li> <li>Investigate data loss prevention alerts in Microsoft Purview</li> <li>Investigate data loss prevention alerts in Microsoft Defender for Cloud Apps</li> </ul> <h3>8 - Manage insider risk in Microsoft Purview</h3> <ul> <li>Insider risk management overview</li> <li>Create and manage insider risk policies</li> <li>Investigate insider risk alerts</li> <li>Take action on insider risk alerts through cases</li> <li>Manage insider risk management forensic evidence</li> <li>Create insider risk management notice templates</li> </ul> <h3>9 - Investigate threats by using audit features in Microsoft Defender XDR and Microsoft Purview Standard</h3> <ul> <li>Explore Microsoft Purview Audit solutions</li> <li>Implement Microsoft Purview Audit (Standard)</li> <li>Start recording activity in the Unified Audit Log</li> <li>Search the Unified Audit Log (UAL)</li> <li>Export, configure, and view audit log records</li> <li>Use audit log searching to investigate common support issues</li> </ul> <h3>10 - Investigate threats using audit in Microsoft Defender XDR and Microsoft Purview (Premium)</h3> <ul> <li>Explore Microsoft Purview Audit (Premium)</li> <li>Implement Microsoft Purview Audit (Premium)</li> <li>Manage audit log retention policies</li> <li>Investigate compromised email accounts using Purview Audit (Premium)</li> </ul> <h3>11 - Investigate threats with Content search in Microsoft Purview</h3> <ul> <li>Explore Microsoft Purview eDiscovery solutions</li> <li>Create a content search</li> <li>View the search results and statistics</li> <li>Export the search results and search report</li> <li>Configure search permissions filtering</li> <li>Search for and delete email messages</li> </ul> <h3>12 - Protect against threats with Microsoft Defender for Endpoint</h3> <ul> <li>Practice security administration</li> <li>Hunt threats within your network</li> </ul> <h3>13 - Deploy the Microsoft Defender for Endpoint environment</h3> <ul> <li>Create your environment</li> <li>Understand operating systems compatibility and features</li> <li>Onboard devices</li> <li>Manage access</li> <li>Create and manage roles for role-based access control</li> <li>Configure device groups</li> <li>Configure environment advanced features</li> </ul> <h3>14 - Implement Windows security enhancements with Microsoft Defender for Endpoint</h3> <ul> <li>Understand attack surface reduction</li> <li>Enable attack surface reduction rules</li> </ul> <h3>15 - Perform device investigations in Microsoft Defender for Endpoint</h3> <ul> <li>Use the device inventory list</li> <li>Investigate the device</li> <li>Use behavioral blocking</li> <li>Detect devices with device discovery</li> </ul> <h3>16 - Perform actions on a device using Microsoft Defender for Endpoint</h3> <ul> <li>Explain device actions</li> <li>Run Microsoft Defender antivirus scan on devices</li> <li>Collect investigation package from devices</li> <li>Initiate live response session</li> </ul> <h3>17 - Perform evidence and entities investigations using Microsoft Defender for Endpoint</h3> <ul> <li>Investigate a file</li> <li>Investigate a user account</li> <li>Investigate an IP address</li> <li>Investigate a domain</li> </ul> <h3>18 - Configure and manage automation using Microsoft Defender for Endpoint</h3> <ul> <li>Configure advanced features</li> <li>Manage automation upload and folder settings</li> <li>Configure automated investigation and remediation capabilities</li> <li>Block at risk devices</li> </ul> <h3>19 - Configure for alerts and detections in Microsoft Defender for Endpoint</h3> <ul> <li>Configure advanced features</li> <li>Configure alert notifications</li> <li>Manage alert suppression</li> <li>Manage indicators</li> </ul> <h3>20 - Utilize Vulnerability Management in Microsoft Defender for Endpoint</h3> <ul> <li>Understand vulnerability management</li> <li>Explore vulnerabilities on your devices</li> <li>Manage remediation</li> </ul> <h3>21 - Plan for cloud workload protections using Microsoft Defender for Cloud</h3> <ul> <li>Explain Microsoft Defender for Cloud</li> <li>Describe Microsoft Defender for Cloud workload protections</li> <li>Enable Microsoft Defender for Cloud</li> </ul> <h3>22 - Connect Azure assets to Microsoft Defender for Cloud</h3> <ul> <li>Explore and manage your resources with asset inventory</li> <li>Configure auto provisioning</li> <li>Manual log analytics agent provisioning</li> </ul> <h3>23 - Connect non-Azure resources to Microsoft Defender for Cloud</h3> <ul> <li>Protect non-Azure resources</li> <li>Connect non-Azure machines</li> <li>Connect your AWS accounts</li> <li>Connect your GCP accounts</li> </ul> <h3>24 - Manage your cloud security posture management?</h3> <ul> <li>Explore Secure Score</li> <li>Explore Recommendations</li> <li>Measure and enforce regulatory compliance</li> <li>Understand Workbooks</li> </ul> <h3>25 - Explain cloud workload protections in Microsoft Defender for Cloud</h3> <ul> <li>Understand Microsoft Defender for servers</li> <li>Understand Microsoft Defender for App Service</li> <li>Understand Microsoft Defender for Storage</li> <li>Understand Microsoft Defender for SQL</li> <li>Understand Microsoft Defender for open-source databases</li> <li>Understand Microsoft Defender for Key Vault</li> <li>Understand Microsoft Defender for Resource Manager</li> <li>Understand Microsoft Defender for DNS</li> <li>Understand Microsoft Defender for Containers</li> <li>Understand Microsoft Defender additional protections</li> </ul> <h3>26 - Remediate security alerts using Microsoft Defender for Cloud</h3> <ul> <li>Understand security alerts</li> <li>Remediate alerts and automate responses</li> <li>Suppress alerts from Defender for Cloud</li> <li>Generate threat intelligence reports</li> <li>Respond to alerts from Azure resources</li> </ul> <h3>27 - Construct KQL statements for Microsoft Sentinel</h3> <ul> <li>Understand the Kusto Query Language statement structure</li> <li>Use the search operator</li> <li>Use the where operator</li> <li>Use the let statement</li> <li>Use the extend operator</li> <li>Use the order by operator</li> <li>Use the project operators</li> </ul> <h3>28 - Analyze query results using KQL</h3> <ul> <li>Use the summarize operator</li> <li>Use the summarize operator to filter results</li> <li>Use the summarize operator to prepare data</li> <li>Use the render operator to create visualizations</li> </ul> <h3>29 - Build multi-table statements using KQL</h3> <ul> <li>Use the union operator</li> <li>Use the join operator</li> </ul> <h3>30 - Work with data in Microsoft Sentinel using Kusto Query Language</h3> <ul> <li>Extract data from unstructured string fields</li> <li>Extract data from structured string data</li> <li>Integrate external data</li> <li>Create parsers with functions</li> </ul> <h3>31 - Introduction to Microsoft Sentinel</h3> <ul> <li>What is Microsoft Sentinel?</li> <li>How Microsoft Sentinel works</li> <li>When to use Microsoft Sentinel</li> </ul> <h3>32 - Create and manage Microsoft Sentinel workspaces</h3> <ul> <li>Plan for the Microsoft Sentinel workspace</li> <li>Create a Microsoft Sentinel workspace</li> <li>Manage workspaces across tenants using Azure Lighthouse</li> <li>Understand Microsoft Sentinel permissions and roles</li> <li>Manage Microsoft Sentinel settings</li> <li>Configure logs</li> </ul> <h3>33 - Query logs in Microsoft Sentinel</h3> <ul> <li>Query logs in the logs page</li> <li>Understand Microsoft Sentinel tables</li> <li>Understand common tables</li> <li>Understand Microsoft Defender XDR tables</li> </ul> <h3>34 - Use watchlists in Microsoft Sentinel</h3> <ul> <li>Plan for watchlists</li> <li>Create a watchlist</li> <li>Manage watchlists</li> </ul> <h3>35 - Utilize threat intelligence in Microsoft Sentinel</h3> <ul> <li>Define threat intelligence</li> <li>Manage your threat indicators</li> <li>View your threat indicators with KQL</li> </ul> <h3>36 - Connect data to Microsoft Sentinel using data connectors</h3> <ul> <li>Ingest log data with data connectors</li> <li>Understand data connector providers</li> <li>View connected hosts</li> </ul> <h3>37 - Connect Microsoft services to Microsoft Sentinel</h3> <ul> <li>Plan for Microsoft services connectors</li> <li>Connect the Microsoft Office 365 connector</li> <li>Connect the Microsoft Entra connector</li> <li>Connect the Microsoft Entra ID Protection connector</li> <li>Connect the Azure Activity connector</li> </ul> <h3>38 - Connect Microsoft Defender XDR to Microsoft Sentinel</h3> <ul> <li>Plan for Microsoft Defender XDR connectors</li> <li>Connect the Microsoft Defender XDR connector</li> <li>Connect Microsoft Defender for Cloud connector</li> <li>Connect Microsoft Defender for IoT</li> <li>Connect Microsoft Defender legacy connectors</li> </ul> <h3>39 - Connect Windows hosts to Microsoft Sentinel</h3> <ul> <li>Plan for Windows hosts security events connector</li> <li>Connect using the Windows Security Events via AMA Connector</li> <li>Connect using the Security Events via Legacy Agent Connector</li> <li>Collect Sysmon event logs</li> </ul> <h3>40 - Connect Common Event Format logs to Microsoft Sentinel</h3> <ul> <li>Plan for Common Event Format connector</li> <li>Connect your external solution using the Common Event Format connector</li> </ul> <h3>41 - Connect syslog data sources to Microsoft Sentinel</h3> <ul> <li>Plan for syslog data collection</li> <li>Collect data from Linux-based sources using syslog</li> <li>Configure the Data Collection Rule for Syslog Data Sources</li> <li>Parse syslog data with KQL</li> </ul> <h3>42 - Connect threat indicators to Microsoft Sentinel</h3> <ul> <li>Plan for threat intelligence connectors</li> <li>Connect the threat intelligence TAXII connector</li> <li>Connect the threat intelligence platforms connector</li> <li>View your threat indicators with KQL</li> </ul> <h3>43 - Threat detection with Microsoft Sentinel analytics</h3> <ul> <li>What is Microsoft Sentinel Analytics?</li> <li>Types of analytics rules</li> <li>Create an analytics rule from templates</li> <li>Create an analytics rule from wizard</li> <li>Manage analytics rules</li> </ul> <h3>44 - Automation in Microsoft Sentinel</h3> <ul> <li>Understand automation options</li> <li>Create automation rules</li> </ul> <h3>45 - Threat response with Microsoft Sentinel playbooks</h3> <ul> <li>What are Microsoft Sentinel playbooks?</li> <li>Trigger a playbook in real-time</li> <li>Run playbooks on demand</li> </ul> <h3>46 - Security incident management in Microsoft Sentinel</h3> <ul> <li>Understand incidents</li> <li>Incident evidence and entities</li> <li>Incident management</li> </ul> <h3>47 - Identify threats with Behavioral Analytics</h3> <ul> <li>Understand behavioral analytics</li> <li>Explore entities</li> <li>Display entity behavior information</li> <li>Use Anomaly detection analytical rule templates</li> </ul> <h3>48 - Data normalization in Microsoft Sentinel</h3> <ul> <li>Understand data normalization</li> <li>Use ASIM Parsers</li> <li>Understand parameterized KQL functions</li> <li>Create an ASIM Parser</li> <li>Configure Azure Monitor Data Collection Rules</li> </ul> <h3>49 - Query, visualize, and monitor data in Microsoft Sentinel</h3> <ul> <li>Monitor and visualize data</li> <li>Query data using Kusto Query Language</li> <li>Use default Microsoft Sentinel Workbooks</li> <li>Create a new Microsoft Sentinel Workbook</li> </ul> <h3>50 - Manage content in Microsoft Sentinel</h3> <ul> <li>Use solutions from the content hub</li> <li>Use repositories for deployment</li> </ul> <h3>51 - Explain threat hunting concepts in Microsoft Sentinel</h3> <ul> <li>Understand cybersecurity threat hunts</li> <li>Develop a hypothesis</li> <li>Explore MITRE ATT&amp;CK</li> </ul> <h3>52 - Threat hunting with Microsoft Sentinel</h3> <ul> <li>Explore creation and management of threat-hunting queries</li> <li>Save key findings with bookmarks</li> <li>Observe threats over time with livestream</li> </ul> <h3>53 - Use Search jobs in Microsoft Sentinel</h3> <ul> <li>Hunt with a Search Job</li> <li>Restore historical data</li> </ul> <h3>54 - Hunt for threats using notebooks in Microsoft Sentinel</h3> <ul> <li>Access Azure Sentinel data with external tools</li> <li>Hunt with notebooks</li> <li>Create a notebook</li> <li>Explore notebook code</li> </ul></div>

Nexus Human

Microsoft Certification

Microsoft AZ-900

Microsoft AZ-104

Microsoft SC-200

Microsoft AZ-303

Microsoft AZ-700

SC-200T00 Microsoft Security Operations Analyst

General Admission

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is designed for people who are seeking to launch a career in cybersecurity.</p>Overview<p>Assess the security posture of an enterprise environment and recommend and implement appropriate security solutions; Monitor and secure hybrid environments, including cloud, mobile, and IoT; Operate with an awareness of applicable laws and policies, including principles of governance, risk, and compliance; Identify, analyze, and respond to security events and incidents.</p><p>CompTIA Security+ is a global certification that validates the baseline skills necessary to perform core security functions and is the first security certification a candidate should earn.<br /> <br /> CompTIA Security+ establishes the core knowledge required of any cybersecurity role and provides a springboard to intermediate-level cybersecurity jobs.</p></div><div id="course-pills-2"><h3>Lesson 1: Summarize Fundamental Security Concepts</h3> <ul> <li>Security Concepts</li> <li>Security Controls</li> </ul> <h3>Lesson 2: Compare Threat Types</h3> <ul> <li>Threat Actors</li> <li>Attack Surfaces</li> <li>Social Engineering</li> </ul> <h3>Lesson 3: Explain Cryptographic Solutions</h3> <ul> <li>Cryptographic Algorithms</li> <li>Public Key Infrastructure</li> <li>Cryptographic Solutions</li> </ul> <h3>Lesson 4: Implement Identity and Access Management</h3> <ul> <li>Authentication</li> <li>Authorization</li> <li>Identity Management</li> </ul> <h3>Lesson 5: Secure Enterprise Network Architecture</h3> <ul> <li>Enterprise Network Architecture</li> <li>Network Security Appliances</li> <li>Secure Communications</li> </ul> <h3>Lesson 6: Secure Cloud Network Architecture</h3> <ul> <li>Cloud Infrastructure</li> <li>Embedded Systems and Zero Trust Architecture</li> </ul> <h3>Lesson 7: Explain Resiliency and Site Security Concepts</h3> <ul> <li>Asset Management</li> <li>Redundancy Strategies</li> <li>Physical Security</li> </ul> <h3>Lesson 8: Explain Vulnerability Management</h3> <ul> <li>Device and OS Vulnerabilities</li> <li>Application and Cloud Vulnerabilities</li> <li>Vulnerability Identification Methods</li> <li>Vulnerability Analysis and Remediation</li> </ul> <h3>Lesson 9: Evaluate Network Security Capabilities</h3> <ul> <li>Network Security Baselines</li> <li>Network Security Capability Enhancement</li> </ul> <h3>Lesson 10: Assess Endpoint Security Capabilities</h3> <ul> <li>Implement Endpoint Security</li> <li>Mobile Device Hardening</li> </ul> <h3>Lesson 11: Enhance Application Security Capabilities</h3> <ul> <li>Application Protocol Security Baselines</li> <li>Cloud and Web Application Security Concepts</li> </ul> <h3>Lesson 12: Explain Incident Response and Monitoring Concepts</h3> <ul> <li>Incident Response</li> <li>Digital Forensics</li> <li>Data Sources</li> <li>Alerting and Monitoring Tools</li> </ul> <h3>Lesson 13: Analyze Indicators of Malicious Activity</h3> <ul> <li>Malware Attack Indicators</li> <li>Physical and Network Attack Indicators</li> <li>Application Attack Indicators</li> </ul> <h3>Lesson 14: Summarize Security Governance Concepts</h3> <ul> <li>Policies, Standards, and Procedures</li> <li>Change Management</li> <li>Automation and Orchestration</li> </ul> <h3>Lesson 15: Explain Risk Management Processes</h3> <ul> <li>Risk Management Processes and Concepts</li> <li>Vendor Management Concepts</li> <li>Audits and Assessments</li> </ul> <h3>Lesson 16: Summarize Data Protection and Compliance Concepts</h3> <ul> <li>Data Classification and Compliance</li> <li>Personnel Policies</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans CompTIA Security Plus Certification (Exam SY0-601) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the CompTIA Security Plus Certification (Exam SY0-601) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Certified in Cybersecurity (CC)

CompTIA Network+

Certificate in Information Security Management Principles (CISMP)

Certified Cyber Professional (CCP)

CompTIA A+

CompTIA Security+

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>The primary audience for this course is someone who works, or has ambition to work, in a leadership role in data center operations such as a data center facilities manager, data center operations manager, who has the responsibility to achieve and improve the high-availability and manageability of the data center operations.</p>Overview<p>After completion of the course the participant will be able to:<br />Perform the needs analysis translating business requirements to data center services<br />Set-up and manage the data center operations team<br />Implement and monitor safety- and security practices<br />Identify a suitable maintenance program for the data center facility and its equipment<br />Select the appropriate policies and procedures required for data center operations<br />Monitor the data center availability, capacity and capability<br />Manage and implement basic data center projects<br />Set-up and implement an environmental sustainability program<br />Select an appropriate back-up site to support organizational resilience<br />Identify and respond to risk in the data center<br />Manage and support the document life cycle<br />Create a basic budget proposal<br />Select and manage vendors and measure their performance<br />Manage data center assets</p><p>Managing the facilities of today?s high-end and high-availability data centers is an extremely demanding and complex task which is often underestimated. There is often very little appreciation and understanding of the complexities of managing today's mission-critical data centers where downtime is not an option, especially since many of the data centers are operating at, or near, their design limits. Operations management at the facilities layer makes all the difference. Even a data center designed to the highest redundancy level as per the ANSI/TIA-942 standard could still experience many unscheduled downtime events due to poor planning, operations, maintenance and management processes.</p></div><div id="course-pills-2"><h4>Service Level Management</h4><ul><li>Service Level Management</li><li>Needs analysis</li><li>Capability assessment</li><li>Service portfolio</li><li>Service catalogue</li><li>Service Level Agreements (SLAs)</li><li>Availability measurement</li><li>Data points in SLA</li><li>Service reporting</li><li>Complaint procedure</li><li>Customer satisfaction measurement</li><li>Service Improvement Process (SIP)</li><li>SLA content</li></ul><h4>The Data Center Organization</h4><ul><li>Operational issues</li><li>Organization chart</li><li>Roles and responsibilities</li><li>Skills matrix</li><li>Contingency / backup roles</li><li>Shift management</li><li>Performance management</li><li>Career development</li><li>Training and assessment</li><li>Job rotation</li><li>Succession planning</li><li>Disciplinary program</li></ul><h4>Managing Safety &amp; Statutory Requirements</h4><ul><li>Safety policies and regulations</li><li>Occupational Health and Safety (OH&amp;S)</li><li>Safety awareness training</li><li>Permit to Work (PTW)</li><li>Lock-out / Tag-out</li><li>Personal Protective Equipment (PPE)</li><li>Testing and tagging of equipment</li><li>Emergency preparedness and response</li><li>Reporting of safety issues</li><li>Reviews / internal audit / external audit</li></ul><h4>Managing Physical Security</h4><ul><li>Security policies and procedures</li><li>Security standards and guidelines</li><li>Security staff</li><li>Security awareness</li><li>Security incident management</li><li>Disciplinary program</li><li>Reviews, internal and external audits</li></ul><h4>Facilities Management</h4><ul><li>Maintenance policies and procedures</li><li>Various maintenance programs</li><li>Outsourcing of maintenance activities</li><li>Maintenance contract options</li><li>Warranty</li><li>Maintenance schedule</li><li>Service situations</li><li>Spart part management</li><li>Contamination control</li></ul><h4>Data Center Operations</h4><ul><li>Policies and procedures for data center operations</li><li>Service operations and the daily data center operations</li></ul><h4>Monitoring / Reporting / Control</h4><ul><li>Monitoring requirements</li><li>Escalation procedures</li><li>Reporting</li><li>Trend analysis</li><li>Reviews</li></ul><h4>Project Management</h4><ul><li>Project management</li><li>Project organization</li><li>Project manager</li><li>Project phases</li></ul><h4>Environment Sustainability</h4><ul><li>The importance of sustainability</li><li>Sustainability policies </li><li>Environmental management </li><li>Power efficiency indicators -</li><li>Waste management -</li><li>Water management</li><li>ICT utilisation management </li><li>Environmental performance measurements</li><li>Renewable energy factor (REF)</li></ul><h4>Organizational Resilience</h4><ul><li>Business continuity</li><li>Data center facility options</li><li>Business Impact Analysis</li><li>Type of facility</li><li>Human resources</li><li>Facility, equipment and consumables</li></ul><h4>Governance, Risk and Compliance</h4><ul><li>Management commitment</li><li>Coordination, collaboration and integration</li><li>Compliance</li><li>Risk management</li><li>Document management</li><li>Financial management</li><li>Vendor management</li><li>Asset management</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans Certified Data Center Facilities Operations Manager (CDFOM) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the Certified Data Center Facilities Operations Manager (CDFOM) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Operations Management

Certified Facility Manager (CFM)

Facility Management

Operations Manager

Certified Data Center Facilities Operations Manager (CDFOM)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is designed primarily for cybersecurity practitioners preparing for or who currently perform job functions related to protecting information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. It is ideal for those roles within federal contracting companies and private sector firms whose mission or strategic objectives require the execution of Defensive Cyber Operations (DCO) or DoD Information Network (DoDIN) operation and incident handling. This course focuses on the knowledge, ability, and skills necessary to provide for the defense of those information systems in a cybersecurity context, including protection, detection, analysis, investigation, and response processes.</p>Overview<p>In this course, you will identify, assess, respond to, and protect against security threats and operate a system and network security analysis platform. You will:<br />Assess cybersecurity risks to the organization.<br />Analyze the threat landscape.<br />Analyze various reconnaissance threats to computing and network environments.<br />Analyze various attacks on computing and network environments.<br />Analyze various post-attack techniques.<br />Assess the organization's security posture through auditing, vulnerability management, and penetration testing.<br />Collect cybersecurity intelligence from various network-based and host-based sources.<br />Analyze log data to reveal evidence of threats and incidents.<br />Perform active asset and network analysis to detect incidents.<br />Respond to cybersecurity incidents using containment, mitigation, and recovery tactics.<br />Investigate cybersecurity incidents using forensic analysis techniques.</p><p>This course covers network defense and incident response methods, tactics, and procedures that are in alignment with industry frameworks such as NIST 800-61r2 (Computer Security Incident Handling Guide), US-CERT's National Cyber Incident Response Plan (NCIRP), and Presidential Policy Directive (PPD)-41 on Cyber Incident Coordination. It is ideal for candidates who have been tasked with the responsibility of monitoring and detecting security incidents in information systems and networks, and for executing standardized responses to such incidents. The course introduces tools, tactics, and procedures to manage cybersecurity risks, defend cybersecurity assets, identify various types of common threats, evaluate the organization's security, collect and analyze cybersecurity intelligence, and remediate and report incidents as they occur. This course provides a comprehensive methodology for individuals responsible for defending the cybersecurity of their organization. This course is designed to assist students in preparing for the CertNexus CyberSec First Responder (Exam CFR-410) certification examination. What you learn and practice in this course can be a significant part of your preparation. In addition, this course and subsequent certification (CFR-410) meet all requirements for personnel requiring DoD directive 8570.01-M position certification baselines:<br />CSSP Analyst<br />CSSP Infrastructure Support<br />CSSP Incident Responder<br />CSSP Auditor<br />The course and certification also meet all criteria for the following Cybersecurity Maturity Model<br />Certification (CMMC) domains:<br />Incident Response (IR)<br />Audit and Accountability (AU)<br />Risk Management (RM)<br /></p></div><div id="course-pills-2"><h4> Lesson 1: Assessing Cybersecurity Risk</h4><ul><li>Topic A: Identify the Importance of Risk Management</li><li>Topic B: Assess Risk</li><li>Topic C: Mitigate Risk</li><li>Topic D: Integrate Documentation into Risk Management</li></ul><h4>Lesson 2: Analyzing the Threat Landscape</h4><ul><li>Topic A: Classify Threats</li><li>Topic B: Analyze Trends Affecting Security Posture</li></ul><h4>Lesson 3: Analyzing Reconnaissance Threats to Computing and Network Environments</h4><ul><li>Topic A: Implement Threat Modeling</li><li>Topic B: Assess the Impact of Reconnaissance</li><li>Topic C: Assess the Impact of Social Engineering</li></ul><h4>Lesson 4: Analyzing Attacks on Computing and Network Environments</h4><ul><li>Topic A: Assess the Impact of System Hacking Attacks</li><li>Topic B: Assess the Impact of Web-Based Attacks</li><li>Topic C: Assess the Impact of Malware</li><li>Topic D: Assess the Impact of Hijacking and Impersonation Attacks</li><li>Topic E: Assess the Impact of DoS Incidents</li><li>Topic F: Assess the Impact of Threats to Mobile Security</li><li>Topic G: Assess the Impact of Threats to Cloud Security</li></ul><h4>Lesson 5: Analyzing Post-Attack Techniques</h4><ul><li>Topic A: Assess Command and Control Techniques</li><li>Topic B: Assess Persistence Techniques</li><li>Topic C: Assess Lateral Movement and Pivoting Techniques</li><li>Topic D: Assess Data Exfiltration Techniques</li><li>Topic E: Assess Anti-Forensics Techniques</li></ul><h4>Lesson 6: Assessing the Organization's Security Posture</h4><ul><li>Topic A: Implement Cybersecurity Auditing</li><li>Topic B: Implement a Vulnerability Management Plan</li><li>Topic C: Assess Vulnerabilities</li><li>Topic D: Conduct Penetration Testing</li></ul><h4>Lesson 7: Collecting Cybersecurity Intelligence</h4><ul><li>Topic A: Deploy a Security Intelligence Collection and Analysis Platform</li><li>Topic B: Collect Data from Network-Based Intelligence Sources</li><li>Topic C: Collect Data from Host-Based Intelligence Sources</li></ul><h4>Lesson 8: Analyzing Log Data</h4><ul><li>Topic A: Use Common Tools to Analyze Logs</li><li>Topic B: Use SIEM Tools for Analysis</li></ul><h4>Lesson 9: Performing Active Asset and Network Analysis</h4><ul><li>Topic A: Analyze Incidents with Windows-Based Tools</li><li>Topic B: Analyze Incidents with Linux-Based Tools</li><li>Topic C: Analyze Indicators of Compromise</li></ul><h4>Lesson 10: Responding to Cybersecurity Incidents</h4><ul><li>Topic A: Deploy an Incident Handling and Response Architecture</li><li>Topic B: Mitigate Incidents</li><li>Topic C: Hand Over Incident Information to a Forensic Investigation</li></ul><h4>Lesson 11: Investigating Cybersecurity Incidents</h4><ul><li>Topic A: Apply a Forensic Investigation Plan</li><li>Topic B: Securely Collect and Analyze Electronic Evidence</li><li>Topic C: Follow Up on the Results of an Investigation</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans CertNexus Certified CyberSec First Responder (CFR-410) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the CertNexus Certified CyberSec First Responder (CFR-410) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

NIST Cybersecurity Framework (CSF)

Cyber Security

Cyber Security Foundation

CertNexus Certified CyberSec First Responder (CFR-410)

Microsoft 365

MS-102T00 Microsoft 365 Administrator Essentials

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is designed primarily for cybersecurity practitioners who perform job functions related to protecting information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. This course focuses on the knowledge, ability, and skills necessary to provide for the defense of those information systems in a cybersecurity context, including protection, detection, analysis, investigation, and response processes. In addition, the course ensures that all members of an IT team?everyone from help desk staff to the Chief Information Officer?understand their role in these security processes.</p>Overview<p>In this course, you will assess and respond to security threats and operate a systems and network security analysis platform.   You will:  - Assess information security risk in computing and network environments.  - Analyze reconnaissance threats to computing and network environments.  - Analyze attacks on computing and network environments.  - Analyze post-attack techniques on computing and network environments.  - Implement a vulnerability management program.  - Collect cybersecurity intelligence.  - Analyze data collected from security and event logs.  - Perform active analysis on assets and networks.  - Respond to cybersecurity incidents.  - Investigate cybersecurity incidents.  - Address security issues with the organization's technology architecture.</p><p>The course introduces tools and tactics to manage cybersecurity risks, identify various types of common threats, evaluate the organization's security, collect and analyze cybersecurity intelligence, and handle incidents as they occur.</p></div><div id="course-pills-2"><h3>1 - ASSESSING INFORMATION SECURITY RISK</h3> <ul> <li>Identify the Importance of Risk Management</li> <li>Assess Risk</li> <li>Mitigate Risk</li> <li>Integrate Documentation into Risk Management</li> </ul> <h3>2 - ANALYZING RECONNAISSANCE THREATS TO COMPUTING AND NETWORK ENVIRONMENTS</h3> <ul> <li>Assess the Impact of Reconnaissance Incidents</li> <li>Assess the Impact of Social Engineering</li> </ul> <h3>3 - ANALYZING ATTACKS ON COMPUTING AND NETWORK ENVIRONMENTS</h3> <ul> <li>Assess the Impact of System Hacking Attacks</li> <li>Assess the Impact of Web-Based Attacks</li> <li>Assess the Impact of Malware</li> <li>Assess the Impact of Hijacking and Impersonation Attacks</li> <li>Assess the Impact of DoS Incidents</li> <li>Assess the Impact of Threats to Mobile Security</li> <li>Assess the Impact of Threats to Cloud Security</li> </ul> <h3>4 - ANALYZING POST-ATTACK TECHNIQUES</h3> <ul> <li>Assess Command and Control Techniques</li> <li>Assess Persistence Techniques</li> <li>Assess Lateral Movement and Pivoting Techniques</li> <li>Assess Data Exfiltration Techniques</li> <li>Assess Anti-Forensics Techniques</li> </ul> <h3>5 - MANAGING VULNERABILITIES IN THE ORGANIZATION</h3> <ul> <li>Implement a Vulnerability Management Plan</li> <li>Assess Common Vulnerabilities</li> <li>Conduct Vulnerability Scans</li> <li>Conduct Penetration Tests on Network Assets</li> </ul> <h3>6 - COLLECTING CYBERSECURITY INTELLIGENCE</h3> <ul> <li>Deploy a Security Intelligence Collection and Analysis Platform</li> <li>Collect Data from Network-Based Intelligence Sources</li> <li>Collect Data from Host-Based Intelligence Sources</li> </ul> <h3>7 - ANALYZING LOG DATA</h3> <ul> <li>Use Common Tools to Analyze Logs</li> <li>Use SIEM Tools for Analysis</li> </ul> <h3>8 - PERFORMING ACTIVE ASSET AND NETWORK ANALYSIS</h3> <ul> <li>Analyze Incidents with Windows-Based Tools</li> <li>Analyze Incidents with Linux-Based Tools</li> <li>Analyze Malware</li> <li>Analyze Indicators of Compromise</li> </ul> <h3>9 - RESPONDING TO CYBERSECURITY INCIDENTS</h3> <ul> <li>Deploy an Incident Handling and Response Architecture</li> <li>Mitigate Incidents</li> <li>Prepare for Forensic Investigation as a CSIRT</li> </ul> <h3>10 - INVESTIGATING CYBERSECURITY INCIDENTS</h3> <ul> <li>Apply a Forensic Investigation Plan</li> <li>Securely Collect and Analyze Electronic Evidence</li> <li>Follow Up on the Results of an Investigation</li> </ul> <h3>11 - ADDRESSING SECURITY ARCHITECTURE ISSUES</h3> <ul> <li>Remediate Identity and Access Management Issues</li> <li>Implement Security During the SDLC</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans CompTIA Cybersecurity Analyst Certification (CySA Plus) (Exam CS0-003) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the CompTIA Cybersecurity Analyst Certification (CySA Plus) (Exam CS0-003) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

CompTIA Cybersecurity Analyst (CySA+)

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>The intended audience for this course is information security and IT professionals, such as network administrators and engineers, IT managers, and IT auditors, and other individuals who want to learn more about information security, who are interested in learning in-depth information about information security management, who are looking for career advancement in IT security, or who are interested in earning the CISM certification.</p>Overview<p>Establish and maintain a framework to provide assurance that information security strategies are aligned with business objectives and consistent with applicable laws and regulations. Identify and manage information security risks to achieve business objectives. Create a program to implement the information security strategy. Implement an information security program. Oversee and direct information security activities to execute the information security program. Plan, develop, and manage capabilities to detect, respond to, and recover from information security incidents.</p><p>In this course, students will establish processes to ensure that information security measures align with established business needs.</p>Prerequisites<p></p><li>Information security governance</li>  <li>Information risk management</li>  <li>Information security program development</li>  <li>Information security program management</li>  <li>Incident management and response</li><p></p></div><div id="course-pills-2"><h3>1 - Information Security Governance</h3> <ul> <li>Develop an Information Security Strategy</li> <li>Align Information Security Strategy with Corporate Governance</li> <li>Identify Legal and Regulatory Requirements</li> <li>Justify Investment in Information Security</li> <li>Identify Drivers Affecting the Organization</li> <li>Obtain Senior Management Commitment to Information Security</li> <li>Define Roles and Responsibilities for Information Security</li> <li>Establish Reporting and Communication Channels</li> </ul> <h3>2 - Information Risk Management</h3> <ul> <li>Implement an Information Risk Assessment Process</li> <li>Determine Information Asset Classification and Ownership</li> <li>Conduct Ongoing Threat and Vulnerability Evaluations</li> <li>Conduct Periodic BIAs</li> <li>Identify and Evaluate Risk Mitigation Strategies</li> <li>Integrate Risk Management into Business Life Cycle Processes</li> <li>Report Changes in Information Risk</li> </ul> <h3>3 - Information Security Program Development</h3> <ul> <li>Develop Plans to Implement an Information Security Strategy</li> <li>Security Technologies and Controls</li> <li>Specify Information Security Program Activities</li> <li>Coordinate Information Security Programs with Business Assurance Functions</li> <li>Identify Resources Needed for Information Security Program Implementation</li> <li>Develop Information Security Architectures</li> <li>Develop Information Security Policies</li> <li>Develop Information Security Awareness, Training, and Education Programs</li> <li>Develop Supporting Documentation for Information Security Policies</li> </ul> <h3>4 - Information Security Program Implementation</h3> <ul> <li>Integrate Information Security Requirements into Organizational Processes</li> <li>Integrate Information Security Controls into Contracts</li> <li>Create Information Security Program Evaluation Metrics</li> </ul> <h3>5 - Information Security Program Management</h3> <ul> <li>Manage Information Security Program Resources</li> <li>Enforce Policy and Standards Compliance</li> <li>Enforce Contractual Information Security Controls</li> <li>Enforce Information Security During Systems Development</li> <li>Maintain Information Security Within an Organization</li> <li>Provide Information Security Advice and Guidance</li> <li>Provide Information Security Awareness and Training</li> <li>Analyze the Effectiveness of Information Security Controls</li> <li>Resolve Noncompliance Issues</li> </ul> <h3>6 - Incident Management and Response</h3> <ul> <li>Develop an Information Security Incident Response Plan</li> <li>Establish an Escalation Process</li> <li>Develop a Communication Process</li> <li>Integrate an IRP</li> <li>Develop IRTs</li> <li>Test an IRP</li> <li>Manage Responses to Information Security Incidents</li> <li>Perform an Information Security Incident Investigation</li> <li>Conduct Post-Incident Reviews</li> </ul></div>

Certified Cryptocurrency Investigator Course (CCI)

Certified Information Security Manager (CISM)

Cissp

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is intended for experienced IT security-related practitioners, auditors, consultants, investigators, or instructors, including network or security analysts and engineers, network administrators, information security specialists, and risk management professionals, who are pursuing CISSP training and certification to acquire the credibility and mobility to advance within their current computer security careers or to migrate to a related career. Through the study of all eight CISSP Common Body of Knowledge (CBK) domains, students will validate their knowledge by meeting the necessary preparation requirements to qualify to sit for the CISSP certification exam. Additional CISSP certification requirements include a minimum of five years of direct professional work experience in two or more fields related to the eight CBK security domains, or a college degree and four years of experience.</p>Overview<p>#NAME?</p><p>In this course, students will expand upon their knowledge by addressing the essential elements of the 8 domains that comprise a Common Body of Knowledge (CBK)Â© for information systems security professionals.</p>Prerequisites<p></p><ul><li>CompTIA Network+ Certification</li></ul><p></p></div><div id="course-pills-2"><h3>1 - Security and Risk Management</h3> <ul> <li>Security Governance Principles</li> <li>Compliance</li> <li>Professional Ethics</li> <li>Security Documentation</li> <li>Risk Management</li> <li>Threat Modeling</li> <li>Business Continuity Plan Fundamentals</li> <li>Acquisition Strategy and Practice</li> <li>Personnel Security Policies</li> <li>Security Awareness and Training</li> </ul> <h3>2 - Asset Security</h3> <ul> <li>Asset Classification</li> <li>Privacy Protection</li> <li>Asset Retention</li> <li>Data Security Controls</li> <li>Secure Data Handling</li> </ul> <h3>3 - Security Engineering</h3> <ul> <li>Security in the Engineering Lifecycle</li> <li>System Component Security</li> <li>Security Models</li> <li>Controls and Countermeasures in Enterprise Security</li> <li>Information System Security Capabilities</li> <li>Design and Architecture Vulnerability Mitigation</li> <li>Vulnerability Mitigation in Embedded, Mobile, and Web-Based Systems</li> <li>Cryptography Concepts</li> <li>Cryptography Techniques</li> <li>Site and Facility Design for Physical Security</li> <li>Physical Security Implementation in Sites and Facilities</li> </ul> <h3>4 - Information Security Management Goals</h3> <ul> <li>Organizational Security</li> <li>The Application of Security Concepts</li> </ul> <h3>5 - Information Security Classification and Program Development</h3> <ul> <li>Information Classification</li> <li>Security Program Development</li> </ul> <h3>6 - Risk Management and Ethics</h3> <ul> <li>Risk Management</li> <li>Ethics</li> </ul> <h3>7 - Software Development Security</h3> <ul> <li>Software Configuration Management</li> <li>Software Controls</li> <li>Database System Security</li> </ul> <h3>8 - Cryptography</h3> <ul> <li>Ciphers and Cryptography</li> <li>Symmetric-Key Cryptography</li> <li>Asymmetric-Key Cryptography</li> <li>Hashing and Message Digests</li> <li>Email, Internet, and Wireless Security</li> <li>Cryptographic Weaknesses</li> </ul> <h3>9 - Physical Security</h3> <ul> <li>Physical Access Control</li> <li>Physical Access Monitoring</li> <li>Physical Security Methods</li> <li>Facilities Security</li> </ul></div>

Certified Cloud Security Professional (CCSP)

Certified Information Security Systems Professional (CISSP)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>The intended audience for this course is information systems security professionals, internal review auditors, and other individuals who have an interest in aspects of information systems audit, controls, and security.</p>Overview<p>Upon successful completion of this course, students will be able to: - implement information systems audit services in accordance with information systems audit standards, guidelines, and best practices. - evaluate an organizations structure, policies, accountability, mechanisms, and monitoring practices. - evaluate information systems acquisition, development, and implementation. - evaluate the information systems operations, maintenance, and support of an organization; and evaluate the business continuity and disaster recovery processes used to provide assurance that in the event of a disruption, IT services are maintained. - define the protection policies used to promote the confidentiality, integrity, and availability of information assets.</p><p>In this course, students will evaluate organizational policies, procedures, and processes to ensure that an organizations information systems align with its overall business goals and objectives.</p></div><div id="course-pills-2"><h3>1 - The Process of Auditing Information Systems</h3> <ul> <li>ISACA Information Systems Auditing Standards and Guidelines</li> <li>Fundamental Business Processes</li> <li>Develop and Implement an Information Systems Audit Strategy</li> <li>Plan an Audit</li> <li>Conduct an Audit</li> <li>The Evidence Life Cycle</li> <li>Communicate Issues, Risks, and Audit Results</li> <li>Support the Implementation of Risk Management and Control Practices</li> </ul> <h3>2 - IT Governance and Management</h3> <ul> <li>Evaluate the Effectiveness of IT Governance</li> <li>Evaluate the IT Organizational Structure and HR Management</li> <li>Evaluate the IT Strategy and Direction</li> <li>Evaluate IT Policies, Standards, and Procedures</li> <li>Evaluate the Effectiveness of Quality Management Systems</li> <li>Evaluate IT Management and Monitoring of Controls</li> <li>IT Resource Investment, Use, and Allocation Practices</li> <li>Evaluate IT Contracting Strategies and Policies</li> <li>Evaluate Risk Management Practices</li> <li>Performance Monitoring and Assurance Practices</li> <li>Evaluate the Organizations Business Continuity Plan</li> </ul> <h3>3 - Information Systems Acquisition, Development, and Implementation</h3> <ul> <li>Evaluate the Business Case for Change</li> <li>Evaluate Project Management Frameworks and Governance Practices</li> <li>Development Life Cycle Management</li> <li>Perform Periodic Project Reviews</li> <li>Evaluate Control Mechanisms for Systems</li> <li>Evaluate Development and Testing Processes</li> <li>Evaluate Implementation Readiness</li> <li>Evaluate a System Migration</li> <li>Perform a Post-Implementation System Review</li> </ul> <h3>4 - Information Systems Operations, Maintenance, and Support</h3> <ul> <li>Perform Periodic System Reviews</li> <li>Evaluate Service Level Management Practices</li> <li>Evaluate Third-Party Management Practices</li> <li>Evaluate Operations and End User Management Practices</li> <li>Evaluate the Maintenance Process</li> <li>Evaluate Data Administration Practices</li> <li>Evaluate the Use of Capacity and Performance Monitoring Methods</li> <li>Evaluate Change, Configuration, and Release Management Practices</li> <li>Evaluate Problem and Incident Management Practices</li> <li>Evaluate the Adequacy of Backup and Restore Provisions</li> </ul> <h3>5 - Protection of Information Assets</h3> <ul> <li>Information Security Design</li> <li>Encryption Basics</li> <li>Evaluate the Functionality of the IT Infrastructure</li> <li>Evaluate Network Infrastructure Security</li> <li>Evaluate the Design, Implementation, and Monitoring of Logical Access Controls</li> <li>Risks and Controls of Virtualization</li> <li>Evaluate the Design, Implementation, and Monitoring of Data Classification Process</li> <li>Evaluate the Design, Implementation, and Monitoring of Physical Access Controls</li> <li>Evaluate the Design, Implementation, and Monitoring of Environmental Controls</li> </ul></div>

106 Courses in Cardiff

Commercial awareness for technical people (In-House)

By The In House Training Company

Successful project management (In-House)

By The In House Training Company

Project planning and control (In-House)

By The In House Training Company

Cost reduction (In-House)

By The In House Training Company

Contract and commercial management for practitioners (In-House)

By The In House Training Company

ESG Fundamentals for Organisational Leaders (£1450 total for this 2-day course for a group of 4-10 participants)

By Buon Consultancy

Search By Location