Name: DevSecOps Foundation (DSOF)?
Price: 1495 GBP
Availability: InStock

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>This course is for Network, IT security, and systems administration professionals in a Security Operations position who are tasked with configuring optimum security settings for endpoints protected by Symantec Endpoint Protection 14.</p>Overview<p>At the completion of the course, you will be able to: <br />Protect against Network Attacks and Enforcing Corporate Policies using the Firewall Policy. <br />Blocking Threats with Intrusion Prevention. <br />Introducing File-Based Threats. <br />Preventing Attacks with SEP. <br />Layered Security. Securing Windows Clients. <br />Secure Mac Clients. Secure Linux Clients. <br />Controlling Application and File Access. <br />Restricting Device Access for Windows and Mac Clients. <br />Hardening Clients with System Lockdown. <br />Customizing Policies based on Location. <br />Managing Security Exceptions.</p><p>This course is designed for the network, IT security, and systems administration professionals in a Security Operations position who are tasked with configuring optimum security settings for endpoints protected by Symantec Endpoint Protection 14.</p></div><div id="course-pills-2"><h4>Introduction</h4><ul><li>Course environment<br />Lab environment</li></ul><h4>Introducing Network Threats</h4><ul><li>Describing how Symantec Endpoint Protection protects each layer of the network stack<br />Discovering the tools and methods used by attackers<br />Describing the stages of an attack</li></ul><h4>Protecting against Network Attacks and Enforcing Corporate Policies using the Firewall Policy</h4><ul><li>Preventing network attacks<br />Examining Firewall Policy elements<br />Evaluating built-in rules<br />Creating custom firewall rules<br />Enforcing corporate security policy with firewall rules<br />Blocking network attacks using protection and stealth settings<br />Configuring advanced firewall feature</li></ul><h4>Blocking Threats with Intrusion Prevention</h4><ul><li>Introducing Intrusion Prevention technologies<br />Configuring the Intrusion Prevention policy<br />Managing custom signatures<br />Monitoring Intrusion Prevention events</li></ul><h4>Introducing File-Based Threats</h4><ul><li>Describing threat types<br />Discovering how attackers disguise their malicious applications<br />Describing threat vectors<br />Describing Advanced Persistent Threats and a typical attack scenario<br />Following security best practices to reduce risks</li></ul><h4>Preventing Attacks with SEP Layered Security</h4><ul><li>Virus and Spyware protection needs and solutions<br />Describing how Symantec Endpoint Protection protects each layer of the network stack<br />Examining file reputation scoring<br />Describing how SEP protects against zero-day threats and threats downloaded through files and email<br />Describing how endpoints are protected with the Intelligent Threat Cloud Service<br />Describing how the emulator executes a file in a sandbox and the machine learning engine?s role and function</li></ul><h4>Securing Windows Clients</h4><ul><li>Platform and Virus and Spyware Protection policy overview<br />Tailoring scans to meet an environment?s needs<br />Ensuring real-time protection for clients<br />Detecting and remediating risks in downloaded files<br />Identifying zero-day and unknown threats<br />Preventing email from downloading malware<br />Configuring advanced options<br />Monitoring virus and spyware activity</li></ul><h4>Securing Mac Clients</h4><ul><li>Touring the SEP for Mac client<br />Securing Mac clients<br />Monitoring Mac clients</li></ul><h4>Securing Linux Clients</h4><ul><li>Navigating the Linux client<br />Tailoring Virus and Spyware settings for Linux clients<br />Monitoring Linux clients</li></ul><h4>Providing Granular Control with Host Integrity</h4><ul><li>Ensuring client compliance with Host Integrity<br />Configuring Host Integrity<br />Troubleshooting Host Integrity<br />Monitoring Host Integrity</li></ul><h4>Controlling Application and File Access</h4><ul><li>Describing Application Control and concepts<br />Creating application rulesets to restrict how applications run<br />Monitoring Application Control events</li></ul><h4>Restricting Device Access for Windows and Mac Clients</h4><ul><li>Describing Device Control features and concepts for Windows and Mac clients<br />Enforcing access to hardware using Device Control<br />Discovering hardware access policy violations with reports, logs, and notifications</li></ul><h4>Hardening Clients with System Lockdown</h4><ul><li>What is System Lockdown?<br />Determining to use System Lockdown in Whitelist or Blacklist mode<br />Creating whitelists for blacklists<br />Protecting clients by testing and Implementing System Lockdown</li></ul><h4>Customizing Policies based on Location</h4><ul><li>Creating locations to ensure the appropriate level of security when logging on remotely<br />Determining the criteria and order of assessment before assigning policies<br />Assigning policies to locations<br />Monitoring locations on the SEPM and SEP client</li></ul><h4>Managing Security Exceptions</h4><ul><li>Creating file and folder exceptions for different scan types<br />Describing the automatic exclusion created during installation<br />Managing Windows and Mac exclusions<br />Monitoring security exceptions</li></ul></div>

Duration
3 Days
18 CPD hours
This course is intended for
This course is for Network, IT security, and systems administration professionals in a Security Operations position who are tasked with configuring optimum security settings for endpoints protected by Symantec Endpoint Protection 14.
Overview
At the completion of the course, you will be able to: 
Protect against Network Attacks and Enforcing Corporate Policies using the Firewall Policy. 
Blocking Threats with Intrusion Prevention. 
Introducing File-Based Threats. 
Preventing Attacks with SEP. 
Layered Security. Securing Windows Clients. 
Secure Mac Clients. Secure Linux Clients. 
Controlling Application and File Access. 
Restricting Device Access for Windows and Mac Clients. 
Hardening Clients with System Lockdown. 
Customizing Policies based on Location. 
Managing Security Exceptions.
This course is designed for the network, IT security, and systems administration professionals in a Security Operations position who are tasked with configuring optimum security settings for endpoints protected by Symantec Endpoint Protection 14.
Introduction
Course environment
Lab environment
Introducing Network Threats
Describing how Symantec Endpoint Protection protects each layer of the network stack
Discovering the tools and methods used by attackers
Describing the stages of an attack
Protecting against Network Attacks and Enforcing Corporate Policies using the Firewall Policy
Preventing network attacks
Examining Firewall Policy elements
Evaluating built-in rules
Creating custom firewall rules
Enforcing corporate security policy with firewall rules
Blocking network attacks using protection and stealth settings
Configuring advanced firewall feature
Blocking Threats with Intrusion Prevention
Introducing Intrusion Prevention technologies
Configuring the Intrusion Prevention policy
Managing custom signatures
Monitoring Intrusion Prevention events
Introducing File-Based Threats
Describing threat types
Discovering how attackers disguise their malicious applications
Describing threat vectors
Describing Advanced Persistent Threats and a typical attack scenario
Following security best practices to reduce risks
Preventing Attacks with SEP Layered Security
Virus and Spyware protection needs and solutions
Describing how Symantec Endpoint Protection protects each layer of the network stack
Examining file reputation scoring
Describing how SEP protects against zero-day threats and threats downloaded through files and email
Describing how endpoints are protected with the Intelligent Threat Cloud Service
Describing how the emulator executes a file in a sandbox and the machine learning engine?s role and function
Securing Windows Clients
Platform and Virus and Spyware Protection policy overview
Tailoring scans to meet an environment?s needs
Ensuring real-time protection for clients
Detecting and remediating risks in downloaded files
Identifying zero-day and unknown threats
Preventing email from downloading malware
Configuring advanced options
Monitoring virus and spyware activity
Securing Mac Clients
Touring the SEP for Mac client
Securing Mac clients
Monitoring Mac clients
Securing Linux Clients
Navigating the Linux client
Tailoring Virus and Spyware settings for Linux clients
Monitoring Linux clients
Providing Granular Control with Host Integrity
Ensuring client compliance with Host Integrity
Configuring Host Integrity
Troubleshooting Host Integrity
Monitoring Host Integrity
Controlling Application and File Access
Describing Application Control and concepts
Creating application rulesets to restrict how applications run
Monitoring Application Control events
Restricting Device Access for Windows and Mac Clients
Describing Device Control features and concepts for Windows and Mac clients
Enforcing access to hardware using Device Control
Discovering hardware access policy violations with reports, logs, and notifications
Hardening Clients with System Lockdown
What is System Lockdown?
Determining to use System Lockdown in Whitelist or Blacklist mode
Creating whitelists for blacklists
Protecting clients by testing and Implementing System Lockdown
Customizing Policies based on Location
Creating locations to ensure the appropriate level of security when logging on remotely
Determining the criteria and order of assessment before assigning policies
Assigning policies to locations
Monitoring locations on the SEPM and SEP client
Managing Security Exceptions
Creating file and folder exceptions for different scan types
Describing the automatic exclusion created during installation
Managing Windows and Mac exclusions
Monitoring security exceptions

Nexus Human

IT Security

Basic Security Training (BST)

Network & Security

Cyber Security

ASIS Certified Protection Professional (CPP)

CompTIA Security+

Symantec Endpoint Protection 14.X - Configure And Protect

<div id="course-pills-1">Duration<p>2 Days</p><p>12 CPD hours</p>This course is intended for<p>Security professionals, System engineers, channel partners, service partners, and end users with at least one year of experience in implementing IT security technologies (Network, Applications, and Systems).</p>Overview<p>This course will enable students to configure, monitor, manage, and optimize the SonicWall Network Security firewall appliances running the new SonicOS 7 to effectively defend against limitless network and cyberthreats and implement SonicWall Boundless Cybersecurity safeguards for seamless protection. Upon completion of the course, students will be able to configure the SonicWall firewall for Secure and Remote Connectivity, Network Optimization, and Advanced Threat Protection.</p><p>The SonicWall Network Security Administrator (SNSA) for SonicOS 7.0curriculum provides students the required background, knowledge, and hands-on experience to begin designing, implementing, and troubleshooting SonicWall Network Security products. SonicOS 7 is SonicWall?s brand new and most advanced security operating system and is at the core of its latest physical and virtual firewalls, including models from the TZ, NSv, NSa and NSsp Series. SonicOS 7.0 features advanced security, simplified policy management, and critical networking and management capabilities for distributed enterprises and small- to medium-sized businesses with SD-branch support.</p></div><div id="course-pills-2"><h4>Course Outline </h4><ul><li>Setting up Basic Firewall Components</li><li>Unified Threat Management</li><li>Secure Access</li><li>Deep Packet Inspection for SSL (DPI-SSL)</li><li>Content Filtering Services</li><li>Application Control</li><li>Scalability and Reliability</li><li>SD-WAN</li><li>High Availability</li><li>Troubleshooting Tools</li></ul></div>

Duration
2 Days
12 CPD hours
This course is intended for
Security professionals, System engineers, channel partners, service partners, and end users with at least one year of experience in implementing IT security technologies (Network, Applications, and Systems).
Overview
This course will enable students to configure, monitor, manage, and optimize the SonicWall Network Security firewall appliances running the new SonicOS 7 to effectively defend against limitless network and cyberthreats and implement SonicWall Boundless Cybersecurity safeguards for seamless protection. Upon completion of the course, students will be able to configure the SonicWall firewall for Secure and Remote Connectivity, Network Optimization, and Advanced Threat Protection.
The SonicWall Network Security Administrator (SNSA) for SonicOS 7.0curriculum provides students the required background, knowledge, and hands-on experience to begin designing, implementing, and troubleshooting SonicWall Network Security products. SonicOS 7 is SonicWall?s brand new and most advanced security operating system and is at the core of its latest physical and virtual firewalls, including models from the TZ, NSv, NSa and NSsp Series. SonicOS 7.0 features advanced security, simplified policy management, and critical networking and management capabilities for distributed enterprises and small- to medium-sized businesses with SD-branch support.
Course Outline
Setting up Basic Firewall Components
Unified Threat Management
Secure Access
Deep Packet Inspection for SSL (DPI-SSL)
Content Filtering Services
Application Control
Scalability and Reliability
SD-WAN
High Availability
Troubleshooting Tools

Certified School Nurse (CSN)

Microsoft Certified Solutions Associate (MCSA)

Security Awareness

SonicWALL Network Security Administrator For Sonic OS 7 - SNSA v7 - NA

Redhill

<h3><b>Cloud deployment training course description</b></h3>
      <p>This course covers the important topics every cloud
professional needs, including, configuration and
deployment, security, maintenance, management, and
troubleshooting. It covers all aspects of cloud
computing infrastructure and administration, with a
practical focus on real-world skills. It will help you to
master the fundamental concepts, terminology, and
characteristics of cloud computing. Deploy and
implement cloud solutions, manage the infrastructure,
and monitor performance. You will also be able to
install, configure, and manage virtual machines. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
  <li>Cloud services, models, and characteristics.</li>
<li>Virtualization components, installation, and
configuration.</li>
<li>Infrastructure configurations and optimization.</li>
<li>Resource management and specific allocations.</li>
<li>IT security concepts, tools, and best practices.</li>
<li>Recovery, availability and continuity in the cloud.</li>
                  </ul>
        <h5>
        <b>Cloud deployment training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>IT professionals looking to deploy and implement cloud
solutions, manage the infrastructure, and monitor
performance, Install, configure, and manage virtual
machines.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Introduction to virtualization.</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Cloud deployment training course contents</b></h3>
      
				Preparing to Deploy Cloud Solutions<br />
Deploying a Pilot Project<br />
Testing Pilot Project Deployments<br />
Designing a Secure and Compliant Cloud Infrastructure<br />
Designing and Implementing a Secure
Cloud Environment<br />
Planning Identity and Access Management for Cloud
Deployments<br />
Determining CPU and Memory Sizing for Cloud
Deployments<br />
Determining Storage Requirements for Cloud
Deployments<br />
Analysing Workload Characteristics to Ensure
Successful Migration<br />
Maintaining Cloud Systems<br />
Implementing Backup, Restore, Disaster Recovery, and
Business Continuity Measures<br />
Analysing Cloud Systems for Performance<br />
Analysing Cloud Systems for Anomalies and Growth
Forecasting<br />
Troubleshooting Deployment, Capacity, Automation, and
Orchestration Issues<br />
Troubleshooting Connectivity Issues<br />
Troubleshooting Security Issues<br />

Cloud deployment training course description
This course covers the important topics every cloud
professional needs, including, configuration and
deployment, security, maintenance, management, and
troubleshooting. It covers all aspects of cloud
computing infrastructure and administration, with a
practical focus on real-world skills. It will help you to
master the fundamental concepts, terminology, and
characteristics of cloud computing. Deploy and
implement cloud solutions, manage the infrastructure,
and monitor performance. You will also be able to
install, configure, and manage virtual machines. 
What will you learn
Cloud services, models, and characteristics.
Virtualization components, installation, and
configuration.
Infrastructure configurations and optimization.
Resource management and specific allocations.
IT security concepts, tools, and best practices.
Recovery, availability and continuity in the cloud.
Cloud deployment training course details
Who will benefit:
IT professionals looking to deploy and implement cloud
solutions, manage the infrastructure, and monitor
performance, Install, configure, and manage virtual
machines.
Prerequisites:
Introduction to virtualization.
Duration
5 days 
Cloud deployment training course contents
Preparing to Deploy Cloud Solutions
Deploying a Pilot Project
Testing Pilot Project Deployments
Designing a Secure and Compliant Cloud Infrastructure
Designing and Implementing a Secure
Cloud Environment
Planning Identity and Access Management for Cloud
Deployments
Determining CPU and Memory Sizing for Cloud
Deployments
Determining Storage Requirements for Cloud
Deployments
Analysing Workload Characteristics to Ensure
Successful Migration
Maintaining Cloud Systems
Implementing Backup, Restore, Disaster Recovery, and
Business Continuity Measures
Analysing Cloud Systems for Performance
Analysing Cloud Systems for Anomalies and Growth
Forecasting
Troubleshooting Deployment, Capacity, Automation, and
Orchestration Issues
Troubleshooting Connectivity Issues
Troubleshooting Security Issues

Systems & Network Training

Network Engineer

Cloud deployment

General Admission

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is intended for experienced IT security-related practitioners, auditors, consultants, investigators, or instructors, including network or security analysts and engineers, network administrators, information security specialists, and risk management professionals, who are pursuing CISSP training and certification to acquire the credibility and mobility to advance within their current computer security careers or to migrate to a related career. Through the study of all eight CISSP Common Body of Knowledge (CBK) domains, students will validate their knowledge by meeting the necessary preparation requirements to qualify to sit for the CISSP certification exam. Additional CISSP certification requirements include a minimum of five years of direct professional work experience in two or more fields related to the eight CBK security domains, or a college degree and four years of experience.</p>Overview<p>#NAME?</p><p>In this course, students will expand upon their knowledge by addressing the essential elements of the 8 domains that comprise a Common Body of Knowledge (CBK)Â© for information systems security professionals.</p>Prerequisites<p></p><ul><li>CompTIA Network+ Certification</li></ul><p></p></div><div id="course-pills-2"><h3>1 - Security and Risk Management</h3> <ul> <li>Security Governance Principles</li> <li>Compliance</li> <li>Professional Ethics</li> <li>Security Documentation</li> <li>Risk Management</li> <li>Threat Modeling</li> <li>Business Continuity Plan Fundamentals</li> <li>Acquisition Strategy and Practice</li> <li>Personnel Security Policies</li> <li>Security Awareness and Training</li> </ul> <h3>2 - Asset Security</h3> <ul> <li>Asset Classification</li> <li>Privacy Protection</li> <li>Asset Retention</li> <li>Data Security Controls</li> <li>Secure Data Handling</li> </ul> <h3>3 - Security Engineering</h3> <ul> <li>Security in the Engineering Lifecycle</li> <li>System Component Security</li> <li>Security Models</li> <li>Controls and Countermeasures in Enterprise Security</li> <li>Information System Security Capabilities</li> <li>Design and Architecture Vulnerability Mitigation</li> <li>Vulnerability Mitigation in Embedded, Mobile, and Web-Based Systems</li> <li>Cryptography Concepts</li> <li>Cryptography Techniques</li> <li>Site and Facility Design for Physical Security</li> <li>Physical Security Implementation in Sites and Facilities</li> </ul> <h3>4 - Information Security Management Goals</h3> <ul> <li>Organizational Security</li> <li>The Application of Security Concepts</li> </ul> <h3>5 - Information Security Classification and Program Development</h3> <ul> <li>Information Classification</li> <li>Security Program Development</li> </ul> <h3>6 - Risk Management and Ethics</h3> <ul> <li>Risk Management</li> <li>Ethics</li> </ul> <h3>7 - Software Development Security</h3> <ul> <li>Software Configuration Management</li> <li>Software Controls</li> <li>Database System Security</li> </ul> <h3>8 - Cryptography</h3> <ul> <li>Ciphers and Cryptography</li> <li>Symmetric-Key Cryptography</li> <li>Asymmetric-Key Cryptography</li> <li>Hashing and Message Digests</li> <li>Email, Internet, and Wireless Security</li> <li>Cryptographic Weaknesses</li> </ul> <h3>9 - Physical Security</h3> <ul> <li>Physical Access Control</li> <li>Physical Access Monitoring</li> <li>Physical Security Methods</li> <li>Facilities Security</li> </ul></div>

Duration
5 Days
30 CPD hours
This course is intended for
This course is intended for experienced IT security-related practitioners, auditors, consultants, investigators, or instructors, including network or security analysts and engineers, network administrators, information security specialists, and risk management professionals, who are pursuing CISSP training and certification to acquire the credibility and mobility to advance within their current computer security careers or to migrate to a related career. Through the study of all eight CISSP Common Body of Knowledge (CBK) domains, students will validate their knowledge by meeting the necessary preparation requirements to qualify to sit for the CISSP certification exam. Additional CISSP certification requirements include a minimum of five years of direct professional work experience in two or more fields related to the eight CBK security domains, or a college degree and four years of experience.
Overview
#NAME?
In this course, students will expand upon their knowledge by addressing the essential elements of the 8 domains that comprise a Common Body of Knowledge (CBK)Â© for information systems security professionals.
Prerequisites

CompTIA Network+ Certification

1 - Security and Risk Management
Security Governance Principles
Compliance
Professional Ethics
Security Documentation
Risk Management
Threat Modeling
Business Continuity Plan Fundamentals
Acquisition Strategy and Practice
Personnel Security Policies
Security Awareness and Training
2 - Asset Security
Asset Classification
Privacy Protection
Asset Retention
Data Security Controls
Secure Data Handling
3 - Security Engineering
Security in the Engineering Lifecycle
System Component Security
Security Models
Controls and Countermeasures in Enterprise Security
Information System Security Capabilities
Design and Architecture Vulnerability Mitigation
Vulnerability Mitigation in Embedded, Mobile, and Web-Based Systems
Cryptography Concepts
Cryptography Techniques
Site and Facility Design for Physical Security
Physical Security Implementation in Sites and Facilities
4 - Information Security Management Goals
Organizational Security
The Application of Security Concepts
5 - Information Security Classification and Program Development
Information Classification
Security Program Development
6 - Risk Management and Ethics
Risk Management
Ethics
7 - Software Development Security
Software Configuration Management
Software Controls
Database System Security
8 - Cryptography
Ciphers and Cryptography
Symmetric-Key Cryptography
Asymmetric-Key Cryptography
Hashing and Message Digests
Email, Internet, and Wireless Security
Cryptographic Weaknesses
9 - Physical Security
Physical Access Control
Physical Access Monitoring
Physical Security Methods
Facilities Security

Certified in Cybersecurity (CC)

Certificate in Information Security Management Principles (CISMP)

Certified Cloud Security Professional (CCSP)

Certified Information Security Manager (CISM)

Cissp

Certified Information Security Systems Professional (CISSP)

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>This course is intended for security engineers, security architects, and information security professionals.</p>Overview<p>Identify security benefits and responsibilities of using the AWS Cloud Build secure application infrastructures Protect applications and data from common security threats Perform and automate security checks Configure authentication and permissions for applications and resources Monitor AWS resources and respond to incidents Capture and process logs Create and configure automated and repeatable deployments with tools such as AMIs and AWS CloudFormation</p><p>This course demonstrates how to efficiently use AWS security services to stay secure in the AWS Cloud. The course focuses on the security practices that AWS recommends for enhancing the security of your data and systems in the cloud. The course highlights the security features of AWS key services including compute, storage, networking, and database services. You will also learn how to leverage AWS services and tools for automation, continuous monitoring and logging, and responding to security incidents.</p>Prerequisites<p>We recommend that attendees of this course have: </p><ul> <li>Working knowledge of IT security practices and infrastructure concepts</li> <li>Familiarity with cloud computing concepts</li> <li>Completed AWS Security Essentials and Architecting on AWS courses</li> </ul><p></p></div><div id="course-pills-2"><h3>1 - Security on AWS</h3> <ul> <li>Security in the AWS cloud</li> <li>AWS Shared Responsibility Model</li> <li>Incident response overview</li> <li>DevOps with Security Engineering</li> </ul> <h3>2 - Identifying Entry Points on AWS</h3> <ul> <li>Identify the different ways to access the AWS platform</li> <li>Understanding IAM policies</li> <li>IAM Permissions Boundary</li> <li>IAM Access Analyzer</li> <li>Multi-factor authentication</li> <li>AWS CloudTrail</li> </ul> <h3>3 - Security Considerations: Web Application Environments</h3> <ul> <li>Threats in a three-tier architecture</li> <li>Common threats: user access</li> <li>Common threats: data access</li> <li>AWS Trusted Advisor</li> </ul> <h3>4 - Application Security</h3> <ul> <li>Amazon Machine Images</li> <li>Amazon Inspector</li> <li>AWS Systems Manager</li> </ul> <h3>5 - Data Security</h3> <ul> <li>Data protection strategies</li> <li>Encryption on AWS</li> <li>Protecting data at rest with Amazon S3, Amazon RDS, Amazon DynamoDB</li> <li>Protecting archived data with Amazon S3 Glacier</li> <li>Amazon S3 Access Analyzer</li> <li>Amazon S3 Access Points</li> </ul> <h3>6 - Securing Network Communications</h3> <ul> <li>Amazon VPC security considerations</li> <li>Amazon VPC Traffic Mirroring</li> <li>Responding to compromised instances</li> <li>Elastic Load Balancing</li> <li>AWS Certificate Manager</li> </ul> <h3>7 - Monitoring and Collecting Logs on AWS</h3> <ul> <li>Amazon CloudWatch and CloudWatch Logs</li> <li>AWS Config</li> <li>Amazon Macie</li> <li>Amazon VPC Flow Logs</li> <li>Amazon S3 Server Access Logs</li> <li>ELB Access Logs</li> </ul> <h3>8 - Processing Logs on AWS</h3> <ul> <li>Amazon Kinesis</li> <li>Amazon Athena</li> </ul> <h3>9 - Security Considerations: Hybrid Environments</h3> <ul> <li>AWS Site-to-Site and Client VPN connections</li> <li>AWS Direct Connect</li> <li>AWS Transit Gateway</li> </ul> <h3>10 - Out-Of-Region Protection</h3> <ul> <li>Amazon Route 53</li> <li>AWS WAF</li> <li>Amazon CloudFront</li> <li>AWS Shield</li> <li>AWS Firewall Manager</li> <li>DDoS mitigation on AWS</li> </ul> <h3>11 - Security Considerations: Serverless Environments</h3> <ul> <li>Amazon Cognito</li> <li>Amazon API Gateway</li> <li>AWS Lambda</li> </ul> <h3>12 - Threat Detection and Investigation</h3> <ul> <li>Amazon GuardDuty</li> <li>AWS Security Hub</li> <li>Amazon Detective</li> </ul> <h3>13 - Secrets Management on AWS</h3> <ul> <li>AWS KMS</li> <li>AWS CloudHSM</li> <li>AWS Secrets Manager</li> </ul> <h3>14 - Automation and Security by Design</h3> <ul> <li>AWS CloudFormation</li> <li>AWS Service Catalog</li> </ul> <h3>15 - Account Management and Provisioning on AWS</h3> <ul> <li>AWS Organizations</li> <li>AWS Control Tower</li> <li>AWS SSO</li> <li>AWS Directory Service</li> </ul></div>

Duration
3 Days
18 CPD hours
This course is intended for
This course is intended for security engineers, security architects, and information security professionals.
Overview
Identify security benefits and responsibilities of using the AWS Cloud Build secure application infrastructures Protect applications and data from common security threats Perform and automate security checks Configure authentication and permissions for applications and resources Monitor AWS resources and respond to incidents Capture and process logs Create and configure automated and repeatable deployments with tools such as AMIs and AWS CloudFormation
This course demonstrates how to efficiently use AWS security services to stay secure in the AWS Cloud. The course focuses on the security practices that AWS recommends for enhancing the security of your data and systems in the cloud. The course highlights the security features of AWS key services including compute, storage, networking, and database services. You will also learn how to leverage AWS services and tools for automation, continuous monitoring and logging, and responding to security incidents.
Prerequisites
We recommend that attendees of this course have: 
Working knowledge of IT security practices and infrastructure concepts
Familiarity with cloud computing concepts
Completed AWS Security Essentials and Architecting on AWS courses

1 - Security on AWS
Security in the AWS cloud
AWS Shared Responsibility Model
Incident response overview
DevOps with Security Engineering
2 - Identifying Entry Points on AWS
Identify the different ways to access the AWS platform
Understanding IAM policies
IAM Permissions Boundary
IAM Access Analyzer
Multi-factor authentication
AWS CloudTrail
3 - Security Considerations: Web Application Environments
Threats in a three-tier architecture
Common threats: user access
Common threats: data access
AWS Trusted Advisor
4 - Application Security
Amazon Machine Images
Amazon Inspector
AWS Systems Manager
5 - Data Security
Data protection strategies
Encryption on AWS
Protecting data at rest with Amazon S3, Amazon RDS, Amazon DynamoDB
Protecting archived data with Amazon S3 Glacier
Amazon S3 Access Analyzer
Amazon S3 Access Points
6 - Securing Network Communications
Amazon VPC security considerations
Amazon VPC Traffic Mirroring
Responding to compromised instances
Elastic Load Balancing
AWS Certificate Manager
7 - Monitoring and Collecting Logs on AWS
Amazon CloudWatch and CloudWatch Logs
AWS Config
Amazon Macie
Amazon VPC Flow Logs
Amazon S3 Server Access Logs
ELB Access Logs
8 - Processing Logs on AWS
Amazon Kinesis
Amazon Athena
9 - Security Considerations: Hybrid Environments
AWS Site-to-Site and Client VPN connections
AWS Direct Connect
AWS Transit Gateway
10 - Out-Of-Region Protection
Amazon Route 53
AWS WAF
Amazon CloudFront
AWS Shield
AWS Firewall Manager
DDoS mitigation on AWS
11 - Security Considerations: Serverless Environments
Amazon Cognito
Amazon API Gateway
AWS Lambda
12 - Threat Detection and Investigation
Amazon GuardDuty
AWS Security Hub
Amazon Detective
13 - Secrets Management on AWS
AWS KMS
AWS CloudHSM
AWS Secrets Manager
14 - Automation and Security by Design
AWS CloudFormation
AWS Service Catalog
15 - Account Management and Provisioning on AWS
AWS Organizations
AWS Control Tower
AWS SSO
AWS Directory Service

AWS Certification

AWS Certified Cloud Practitioner

AWS Certified Solutions Architect

Security Engineering on AWS

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>The intended audience for this course is information security and IT professionals, such as network administrators and engineers, IT managers, and IT auditors, and other individuals who want to learn more about information security, who are interested in learning in-depth information about information security management, who are looking for career advancement in IT security, or who are interested in earning the CISM certification.</p>Overview<p>Establish and maintain a framework to provide assurance that information security strategies are aligned with business objectives and consistent with applicable laws and regulations. Identify and manage information security risks to achieve business objectives. Create a program to implement the information security strategy. Implement an information security program. Oversee and direct information security activities to execute the information security program. Plan, develop, and manage capabilities to detect, respond to, and recover from information security incidents.</p><p>In this course, students will establish processes to ensure that information security measures align with established business needs.</p>Prerequisites<p></p><li>Information security governance</li>  <li>Information risk management</li>  <li>Information security program development</li>  <li>Information security program management</li>  <li>Incident management and response</li><p></p></div><div id="course-pills-2"><h3>1 - Information Security Governance</h3> <ul> <li>Develop an Information Security Strategy</li> <li>Align Information Security Strategy with Corporate Governance</li> <li>Identify Legal and Regulatory Requirements</li> <li>Justify Investment in Information Security</li> <li>Identify Drivers Affecting the Organization</li> <li>Obtain Senior Management Commitment to Information Security</li> <li>Define Roles and Responsibilities for Information Security</li> <li>Establish Reporting and Communication Channels</li> </ul> <h3>2 - Information Risk Management</h3> <ul> <li>Implement an Information Risk Assessment Process</li> <li>Determine Information Asset Classification and Ownership</li> <li>Conduct Ongoing Threat and Vulnerability Evaluations</li> <li>Conduct Periodic BIAs</li> <li>Identify and Evaluate Risk Mitigation Strategies</li> <li>Integrate Risk Management into Business Life Cycle Processes</li> <li>Report Changes in Information Risk</li> </ul> <h3>3 - Information Security Program Development</h3> <ul> <li>Develop Plans to Implement an Information Security Strategy</li> <li>Security Technologies and Controls</li> <li>Specify Information Security Program Activities</li> <li>Coordinate Information Security Programs with Business Assurance Functions</li> <li>Identify Resources Needed for Information Security Program Implementation</li> <li>Develop Information Security Architectures</li> <li>Develop Information Security Policies</li> <li>Develop Information Security Awareness, Training, and Education Programs</li> <li>Develop Supporting Documentation for Information Security Policies</li> </ul> <h3>4 - Information Security Program Implementation</h3> <ul> <li>Integrate Information Security Requirements into Organizational Processes</li> <li>Integrate Information Security Controls into Contracts</li> <li>Create Information Security Program Evaluation Metrics</li> </ul> <h3>5 - Information Security Program Management</h3> <ul> <li>Manage Information Security Program Resources</li> <li>Enforce Policy and Standards Compliance</li> <li>Enforce Contractual Information Security Controls</li> <li>Enforce Information Security During Systems Development</li> <li>Maintain Information Security Within an Organization</li> <li>Provide Information Security Advice and Guidance</li> <li>Provide Information Security Awareness and Training</li> <li>Analyze the Effectiveness of Information Security Controls</li> <li>Resolve Noncompliance Issues</li> </ul> <h3>6 - Incident Management and Response</h3> <ul> <li>Develop an Information Security Incident Response Plan</li> <li>Establish an Escalation Process</li> <li>Develop a Communication Process</li> <li>Integrate an IRP</li> <li>Develop IRTs</li> <li>Test an IRP</li> <li>Manage Responses to Information Security Incidents</li> <li>Perform an Information Security Incident Investigation</li> <li>Conduct Post-Incident Reviews</li> </ul></div>

Duration
3 Days
18 CPD hours
This course is intended for
The intended audience for this course is information security and IT professionals, such as network administrators and engineers, IT managers, and IT auditors, and other individuals who want to learn more about information security, who are interested in learning in-depth information about information security management, who are looking for career advancement in IT security, or who are interested in earning the CISM certification.
Overview
Establish and maintain a framework to provide assurance that information security strategies are aligned with business objectives and consistent with applicable laws and regulations. Identify and manage information security risks to achieve business objectives. Create a program to implement the information security strategy. Implement an information security program. Oversee and direct information security activities to execute the information security program. Plan, develop, and manage capabilities to detect, respond to, and recover from information security incidents.
In this course, students will establish processes to ensure that information security measures align with established business needs.
Prerequisites

Information security governance
Information risk management
Information security program development
Information security program management
Incident management and response

1 - Information Security Governance
Develop an Information Security Strategy
Align Information Security Strategy with Corporate Governance
Identify Legal and Regulatory Requirements
Justify Investment in Information Security
Identify Drivers Affecting the Organization
Obtain Senior Management Commitment to Information Security
Define Roles and Responsibilities for Information Security
Establish Reporting and Communication Channels
2 - Information Risk Management
Implement an Information Risk Assessment Process
Determine Information Asset Classification and Ownership
Conduct Ongoing Threat and Vulnerability Evaluations
Conduct Periodic BIAs
Identify and Evaluate Risk Mitigation Strategies
Integrate Risk Management into Business Life Cycle Processes
Report Changes in Information Risk
3 - Information Security Program Development
Develop Plans to Implement an Information Security Strategy
Security Technologies and Controls
Specify Information Security Program Activities
Coordinate Information Security Programs with Business Assurance Functions
Identify Resources Needed for Information Security Program Implementation
Develop Information Security Architectures
Develop Information Security Policies
Develop Information Security Awareness, Training, and Education Programs
Develop Supporting Documentation for Information Security Policies
4 - Information Security Program Implementation
Integrate Information Security Requirements into Organizational Processes
Integrate Information Security Controls into Contracts
Create Information Security Program Evaluation Metrics
5 - Information Security Program Management
Manage Information Security Program Resources
Enforce Policy and Standards Compliance
Enforce Contractual Information Security Controls
Enforce Information Security During Systems Development
Maintain Information Security Within an Organization
Provide Information Security Advice and Guidance
Provide Information Security Awareness and Training
Analyze the Effectiveness of Information Security Controls
Resolve Noncompliance Issues
6 - Incident Management and Response
Develop an Information Security Incident Response Plan
Establish an Escalation Process
Develop a Communication Process
Integrate an IRP
Develop IRTs
Test an IRP
Manage Responses to Information Security Incidents
Perform an Information Security Incident Investigation
Conduct Post-Incident Reviews

Certified Cryptocurrency Investigator Course (CCI)

Commercial & Contract Management Certification Program (CCM)

Certified Cyber Professional (CCP)

<p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><span style="color: rgb(0, 0, 0); box-sizing: border-box;" id="isPasted" fr-original-style="color: rgb(0, 0, 0);">Classroom based, instructor led workshop with proctor at home exam. The lab-intensive Certified SOC Analyst (CSA) program emphasizes the holistic approach to deliver the advanced knowledge of how to identify, validate and defend against cyber-attacks. The event is targeted at SOC Level 1 &amp; Level 2 team members and their managers and those IT staff aspiring for a role in SOC.</span></p><div style="color: rgb(98, 98, 98); box-sizing: border-box;" id="isPasted" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">Description</h3><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">The goal of this course is to help you master how to use SIEM and other SOC tools to identify and protect the business from cyber threats. Candidates will learn to perform enhanced threat detection using the predictive capabilities of Threat Intelligence. You walk out the door with skills needed to be an effective SOC response team member as well as the internationally recognized SOC Analyst certification!</p></div><div style="color: rgb(98, 98, 98); box-sizing: border-box;" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">Exam</h3><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;"><b fr-original-style="" style="box-sizing: border-box;">&nbsp;T</b>his course fully prepares you for EC-Council Certified SOC Analyst exam 312-39.</p><ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">Number of Questions: 100</li><li fr-original-style="" style="box-sizing: border-box;">Test Duration: 3 Hours</li><li fr-original-style="" style="box-sizing: border-box;">Test Format: Multiple Choice</li></ul><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">Proctor at home exam is included in the online course</p></div><div style="color: rgb(98, 98, 98); box-sizing: border-box;" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">Outline</h3><ul fr-original-style="" style="box-sizing: border-box;"><li fr-original-style="" style="box-sizing: border-box;">SOC processes, procedures, Technologies, and workflows.</li><li fr-original-style="" style="box-sizing: border-box;">Security threats, attacks &amp; vulnerabilities</li><li fr-original-style="" style="box-sizing: border-box;">The cyber kill chain</li><li fr-original-style="" style="box-sizing: border-box;">Recognize attacker tools &amp; tactics</li><li fr-original-style="" style="box-sizing: border-box;">Monitor and analyse logs and alerts</li><li fr-original-style="" style="box-sizing: border-box;">Centralized Log Management (CLM)</li><li fr-original-style="" style="box-sizing: border-box;">Log collection, monitoring, and analysis</li><li fr-original-style="" style="box-sizing: border-box;">SIEM solutions</li><li fr-original-style="" style="box-sizing: border-box;">Architecture &amp; implementation</li><li fr-original-style="" style="box-sizing: border-box;">Fine tuning of SIEM solutions</li><li fr-original-style="" style="box-sizing: border-box;">Gain hands-on experience on SIEM use cases</li><li fr-original-style="" style="box-sizing: border-box;">Able to develop threat cases</li><li fr-original-style="" style="box-sizing: border-box;">SIEM Use cases</li><li fr-original-style="" style="box-sizing: border-box;">Plan, organize, and perform threat monitoring</li><li fr-original-style="" style="box-sizing: border-box;">Monitor emerging threat patterns</li><li fr-original-style="" style="box-sizing: border-box;">Perform security threat analysis</li><li fr-original-style="" style="box-sizing: border-box;">Gain hands-on experience in alert triaging process.</li><li fr-original-style="" style="box-sizing: border-box;">Threat intelligence</li><li fr-original-style="" style="box-sizing: border-box;">Enhanced incident detection and response</li><li fr-original-style="" style="box-sizing: border-box;">Gain knowledge of Incident Response Process</li></ul></div><div style="color: rgb(98, 98, 98); box-sizing: border-box;" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">Overview</h3><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">As the security landscape is expanding, a SOC team offers high quality IT-security services to actively detect potential cyber threats/attacks and quickly respond to security incidents. Organizations need skilled SOC Analysts who can serve as the front-line defenders, warning other professionals of emerging and present cyber threats.</p></div><div style="color: rgb(98, 98, 98); box-sizing: border-box;" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">Prerequisites</h3><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">All delegates must have strong TCP/IP networking skills, equivalent of CompTIA Network+. All delegate must have strong IT Systems administration experience, equivalent of CompTIA &nbsp;A+ and CompTIA Server+. It is recommended that delegates have fundamental security experience, equivalent of our CISMP programme.</p></div><div style="color: rgb(98, 98, 98); box-sizing: border-box;" fr-original-style=" color: rgb(98, 98, 98);"><h3 style="color: rgb(126, 121, 125); box-sizing: border-box;" fr-original-style=" color: rgb(126, 121, 125);">The Programme</h3><p fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">3 Days classroom + 2 hours self-study each evening with proctor at home exam&nbsp;</p></div>

Classroom based, instructor led workshop with proctor at home exam. The lab-intensive Certified SOC Analyst (CSA) program emphasizes the holistic approach to deliver the advanced knowledge of how to identify, validate and defend against cyber-attacks. The event is targeted at SOC Level 1 & Level 2 team members and their managers and those IT staff aspiring for a role in SOC.
Description
The goal of this course is to help you master how to use SIEM and other SOC tools to identify and protect the business from cyber threats. Candidates will learn to perform enhanced threat detection using the predictive capabilities of Threat Intelligence. You walk out the door with skills needed to be an effective SOC response team member as well as the internationally recognized SOC Analyst certification!
Exam
 This course fully prepares you for EC-Council Certified SOC Analyst exam 312-39.
Number of Questions: 100
Test Duration: 3 Hours
Test Format: Multiple Choice
Proctor at home exam is included in the online course
Outline
SOC processes, procedures, Technologies, and workflows.
Security threats, attacks & vulnerabilities
The cyber kill chain
Recognize attacker tools & tactics
Monitor and analyse logs and alerts
Centralized Log Management (CLM)
Log collection, monitoring, and analysis
SIEM solutions
Architecture & implementation
Fine tuning of SIEM solutions
Gain hands-on experience on SIEM use cases
Able to develop threat cases
SIEM Use cases
Plan, organize, and perform threat monitoring
Monitor emerging threat patterns
Perform security threat analysis
Gain hands-on experience in alert triaging process.
Threat intelligence
Enhanced incident detection and response
Gain knowledge of Incident Response Process
Overview
As the security landscape is expanding, a SOC team offers high quality IT-security services to actively detect potential cyber threats/attacks and quickly respond to security incidents. Organizations need skilled SOC Analysts who can serve as the front-line defenders, warning other professionals of emerging and present cyber threats.
Prerequisites
All delegates must have strong TCP/IP networking skills, equivalent of CompTIA Network+. All delegate must have strong IT Systems administration experience, equivalent of CompTIA A+ and CompTIA Server+. It is recommended that delegates have fundamental security experience, equivalent of our CISMP programme.
The Programme
3 Days classroom + 2 hours self-study each evening with proctor at home exam 

Nemstar Ltd

Classroom based, instructor led workshop with proctor at home exam. The lab-intensive Certified SOC Analyst (CSA) program emphasizes the holistic approach to deliver the advanced knowledge of how to identify, validate and defend against cyber-attacks.

SOC - EC Council Official SOC Analyst (CSA) with exam

<div>
                        
                        <div>
                            <p> </p>
<p><span>ISO/IEC 27032: 2023 Lead Cybersecurity Manager training enables you to acquire the expertise and competence needed to support an organization in implementing and managing a Cybersecurity program based on ISO 27032: 2023</span><span> and the NIST Cybersecurity framework.</span></p>
                        </div>
                    </div>
                    <div>
                        <h2>About This Course</h2>
                        <div>
                            <p> </p>
<p>During this training course, you will gain a comprehensive knowledge of Cybersecurity, the relationship between Cybersecurity and other types of IT security, and stakeholders' role in Cybersecurity. </p>
<p> </p>
<p>After mastering all the necessary concepts of Cybersecurity, you can sit for the exam and gain "Certified ISO/IEC 27032 Lead Cybersecurity Manager' Certification. By holding this certification, you will be able to demonstrate that you have the practical knowledge and professional capabilities to support and lead a team in managing Cybersecurity.</p>
<p> </p>
<h2>Learning objectives</h2>
<p> </p>
<ul>
<li>Acquire comprehensive knowledge on the elements and operations of a Cybersecurity Program in conformance with ISO/IEC 27032 and NIST Cybersecurity framework</li>
<li>Acknowledge the correlation between ISO 27032, NIST Cybersecurity framework and other standards and operating frameworks</li>
<li>Master the concepts, approaches, standards, methods and techniques used to effectively set up, implement, and  manage a Cybersecurity program within an organization </li>
<li>Learn how to interpret the guidelines of ISO/IEC 27032 in the specific context of an organization</li>
<li>Master the necessary expertise to plan, implement, manage, control and maintain a Cybersecurity Program as specified in ISO/IEC 27032 and NIST Cybersecurity framework </li>
<li>Acquire the necessary expertise to advise an organization on the best practices for managing Cybersecurity </li>
</ul>
<p> </p>
<h2>Educational approach</h2>
<p> </p>
<ul>
<li>This training is based on both theory and best practices used in the implementation and management of a Cybersecurity Program</li>
<li>Lecture sessions are illustrated with examples based on case studies</li>
<li>Practical exercises are based on a case study which includes role playing and discussions</li>
<li>Practical tests are similar to the Certification Exam</li>
</ul>
                        </div>
                    </div>
                    <div>
                        <h2>Prerequisites</h2>
                        <div>
                            <p> </p>
<p><span>A fundamental understanding of ISO/IEC 27032: 2023 and comprehensive knowledge of Cybersecurity.</span></p>
                        </div>
                    </div>
                    <div>
                        <h2>What's Included?</h2>
                        <div>
                            <p> </p>
<p>Refreshments &amp; Lunch (Classroom courses only)                </p>
<p>Course Slide Deck                          </p>
<p>Official Study Guides                    </p>
<p>CPD Certificate        </p>
<p>The Exam</p>
                        </div>
                    </div>
                    <div>
                        <h2>Who Should Attend?</h2>
                        <div>
                            <p> </p>
<ul>
<li>Cybersecurity professionals</li>
<li>Information Security experts </li>
<li>Professionals seeking to manage a Cybersecurity program</li>
<li>Individuals responsible to develop a Cybersecurity program</li>
<li>IT specialists</li>
<li>Information Technology expert advisors</li>
<li>IT professionals looking to enhance their technical skills and knowledge</li>
</ul>
                        </div>
                    </div>
                    <div>
                        <h2>Accreditation</h2>
                        <div>
                            <p><img src="https://www.the-training-centre.com/content/img/National%20Accreditation%20Service%20(3).jpg" height="156" width="200" /></p>
                        </div>
                    </div>
                    <div>
                        <h2>Assessment</h2>
                        <div>
                            <p> </p>
<p> </p>
<p>Delegates sit a combined exam, consisting of in-course quizzes and exercises, as well as a final 12 question, essay type exam on Day 4 of the course. The overall passing score is 70%, to be achieved within the 150 minute time allowance.</p>
<p>Exam results are provided within 24 hours, with both a Certificate and a digital badge provided as proof of success.</p>
                        </div>
                    </div>
                    <div>
                        <h2>Provided by</h2>
                        <div>
                            <p> </p>
<p>This course is Accredited by <a title="NACS" href="http://www.nacs.ee" target="_blank">NACS</a> and Administered by the <a title="IECB" href="https://www.iecb.org" target="_blank">IECB</a></p>
                        </div>
                    </div>

 
ISO/IEC 27032: 2023 Lead Cybersecurity Manager training enables you to acquire the expertise and competence needed to support an organization in implementing and managing a Cybersecurity program based on ISO 27032: 2023 and the NIST Cybersecurity framework.
About This Course
 
During this training course, you will gain a comprehensive knowledge of Cybersecurity, the relationship between Cybersecurity and other types of IT security, and stakeholders' role in Cybersecurity. 
 
After mastering all the necessary concepts of Cybersecurity, you can sit for the exam and gain "Certified ISO/IEC 27032 Lead Cybersecurity Manager' Certification. By holding this certification, you will be able to demonstrate that you have the practical knowledge and professional capabilities to support and lead a team in managing Cybersecurity.
 
Learning objectives
 
Acquire comprehensive knowledge on the elements and operations of a Cybersecurity Program in conformance with ISO/IEC 27032 and NIST Cybersecurity framework
Acknowledge the correlation between ISO 27032, NIST Cybersecurity framework and other standards and operating frameworks
Master the concepts, approaches, standards, methods and techniques used to effectively set up, implement, and manage a Cybersecurity program within an organization
Learn how to interpret the guidelines of ISO/IEC 27032 in the specific context of an organization
Master the necessary expertise to plan, implement, manage, control and maintain a Cybersecurity Program as specified in ISO/IEC 27032 and NIST Cybersecurity framework
Acquire the necessary expertise to advise an organization on the best practices for managing Cybersecurity
 
Educational approach
 
This training is based on both theory and best practices used in the implementation and management of a Cybersecurity Program
Lecture sessions are illustrated with examples based on case studies
Practical exercises are based on a case study which includes role playing and discussions
Practical tests are similar to the Certification Exam
Prerequisites
 
A fundamental understanding of ISO/IEC 27032: 2023 and comprehensive knowledge of Cybersecurity.
What's Included?
 
Refreshments & Lunch (Classroom courses only) 
Course Slide Deck 
Official Study Guides 
CPD Certificate 
The Exam
Who Should Attend?
 
Cybersecurity professionals
Information Security experts
Professionals seeking to manage a Cybersecurity program
Individuals responsible to develop a Cybersecurity program
IT specialists
Information Technology expert advisors
IT professionals looking to enhance their technical skills and knowledge
Accreditation

Assessment
 
 
Delegates sit a combined exam, consisting of in-course quizzes and exercises, as well as a final 12 question, essay type exam on Day 4 of the course. The overall passing score is 70%, to be achieved within the 150 minute time allowance.
Exam results are provided within 24 hours, with both a Certificate and a digital badge provided as proof of success.
Provided by
 
This course is Accredited by NACS and Administered by the IECB

Training Centre

ISO 27032: 2023 Lead Cybersecurity Manager

<div id="course-pills-1">Duration<p>1 Days</p><p>6 CPD hours</p>This course is intended for<p>Security IT business-level professionals interested in cloud security practices  Security professionals with minimal to no working knowledge of AWS</p>Overview<p>Assimilate Identify security benefits and responsibilities of using the AWS Cloud Describe the access control and management features of AWS Explain the available methods for providing encryption of data in transit and data at rest when storing your data in AWS. Describe how to secure network access to your AWS resources Determine which AWS services can be used for monitoring and incident response</p><p>This course covers fundamental AWS cloud security concepts, including AWS access control, data encryption methods, and how network access to your AWS infrastructure can be secured. Based on the AWS Shared Security Model, you learn where you are responsible for implementing security in the AWS Cloud and what security-oriented services are available to you and why and how the security services can help meet the security needs of your organization.</p>Prerequisites<p>Working knowledge of IT security practices and infrastructure concepts, familiarity with cloud computing concepts</p></div><div id="course-pills-2"><h3>1 - Security on AWS</h3> <ul> <li>Security design principles in the AWS Cloud</li> <li>AWS Shared Responsibility Model</li> </ul> <h3>2 - Security OF the Cloud</h3> <ul> <li>AWS Global Infrastructure</li> <li>Data center security</li> <li>Compliance and governance</li> </ul> <h3>3 - Security IN the Cloud ? Part 1</h3> <ul> <li>Identity and access management</li> <li>Data protection essentials</li> <li>Lab 01 ? Introduction to security policies</li> </ul> <h3>4 - Security IN the Cloud ? Part 2</h3> <ul> <li>Securing your infrastructure</li> <li>Monitoring and detective controls</li> <li>Lab 02 ? Securing VPC resources with Security Groups</li> </ul> <h3>5 - Security IN the Cloud ? Part 3</h3> <ul> <li>DDoS mitigation</li> <li>Incident response essentials</li> <li>Lab 03 ? Remediating issues with AWS Config Conformance Packs</li> </ul> <h3>6 - Course Wrap Up</h3> <ul> <li>AWS Well-Architected tool overview</li> <li>Next Steps</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans AWS Security Essentials training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the AWS Security Essentials course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Duration
1 Days
6 CPD hours
This course is intended for
Security IT business-level professionals interested in cloud security practices Security professionals with minimal to no working knowledge of AWS
Overview
Assimilate Identify security benefits and responsibilities of using the AWS Cloud Describe the access control and management features of AWS Explain the available methods for providing encryption of data in transit and data at rest when storing your data in AWS. Describe how to secure network access to your AWS resources Determine which AWS services can be used for monitoring and incident response
This course covers fundamental AWS cloud security concepts, including AWS access control, data encryption methods, and how network access to your AWS infrastructure can be secured. Based on the AWS Shared Security Model, you learn where you are responsible for implementing security in the AWS Cloud and what security-oriented services are available to you and why and how the security services can help meet the security needs of your organization.
Prerequisites
Working knowledge of IT security practices and infrastructure concepts, familiarity with cloud computing concepts
1 - Security on AWS
Security design principles in the AWS Cloud
AWS Shared Responsibility Model
2 - Security OF the Cloud
AWS Global Infrastructure
Data center security
Compliance and governance
3 - Security IN the Cloud ? Part 1
Identity and access management
Data protection essentials
Lab 01 ? Introduction to security policies
4 - Security IN the Cloud ? Part 2
Securing your infrastructure
Monitoring and detective controls
Lab 02 ? Securing VPC resources with Security Groups
5 - Security IN the Cloud ? Part 3
DDoS mitigation
Incident response essentials
Lab 03 ? Remediating issues with AWS Config Conformance Packs
6 - Course Wrap Up
AWS Well-Architected tool overview
Next Steps
Additional course details:
Nexus Humans AWS Security Essentials training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. 

This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts.

Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.

While we feel this is the best course for the AWS Security Essentials course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.

Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.


AWS Certified Developer

AWS Security Essentials

<div id="course-pills-1">Duration<p>2 Days</p><p>12 CPD hours</p>This course is intended for<p>The target audience for the DevSecOps Foundation course are professionals including:<br />Anyone involved or interested in learning about DevSecOps strategies and automation<br />Anyone involved in Continuous Delivery toolchain architectures<br />Compliance Team<br />Business managers<br />Delivery Staff<br />DevOps Engineers<br />IT Managers<br />IT Security Professionals, Practitioners, and Managers<br />Maintenance and support staff<br />Managed Service Providers<br />Project &amp; Product Managers<br />Quality Assurance Teams<br />Release Managers<br />Scrum Masters<br />Site Reliability Engineers<br />Software Engineers<br />Testers</p>Overview<p>You will learn:<br />The purpose, benefits, concepts, and vocabulary of DevSecOps<br />How DevOps security practices differ from other security approaches<br />Business-driven security strategies and Best Practices<br />Understanding and applying data and security sciences<br />Integrating corporate stakeholders into DevSecOps Practices<br />Enhancing communication between Dev, Sec, and Ops teams<br />How DevSecOps roles fit with a DevOps culture and organization</p><p>In this course, students will gain a solid understanding of how DevSecOps provides business value, enhancing your business opportunities, and improving corporate value. The core DevSecOps principles taught can support an organizational transformation, increase productivity, reduce risk, and optimize resource usage. This course explains how DevOps security practices differ from other approaches then delivers the education needed to apply changes to your organization. Participants learn the purpose, benefits, concepts, vocabulary and applications of DevSecOps. Most importantly, students learn how DevSecOps roles fit with a DevOps culture and organization. At the course?s end, participants will understand ?security as code? to make security and compliance value consumable as a service. This course prepares you for the DevSecOps Foundation (DSOF) certification. </p></div><div id="course-pills-2"><h4>Realizing DevSecOps Outcomes</h4><ul><li>Origins of DevOps</li><li>Evolution of DevSecOps</li><li>CALMS</li><li>The Three Ways</li></ul><h4>Defining the Cyberthreat Landscape</h4><ul><li>What is the Cyber Threat Landscape?</li><li>What is the threat?</li><li>What do we protect from?</li><li>What do we protect, and why?</li><li>How do I talk to security?</li></ul><h4>Building a Responsive DevSecOps Model</h4><ul><li>Demonstrate Model</li><li>Technical, business and human outcomes</li><li>What?s being measured?</li><li>Gating and thresholding</li></ul><h4>Integrating DevSecOps Stakeholders</h4><ul><li>The DevSecOps State of Mind</li><li>The DevSecOps Stakeholders</li><li>What?s at stake for who?</li><li>Participating in the DevSecOps model</li></ul><h4>Establishing DevSecOps Best Practices</h4><ul><li>Start where you are</li><li>Integrating people, process and technology and governance</li><li>DevSecOps operating model</li><li>Communication practices and boundaries</li><li>Focusing on outcomes</li></ul><h4>Best Practices to get Started</h4><ul><li>The Three Ways</li><li>Identifying target states</li><li>Value stream-centric thinking</li></ul><h4>DevOps Pipelines and Continuous Compliance</h4><ul><li>The goal of a DevOps pipeline</li><li>Why continuous compliance is important</li><li>Archetypes and reference architectures</li><li>Coordinating DevOps Pipeline construction</li><li>DevSecOps tool categories, types and examples</li></ul><h4>Learning Using Outcomes</h4><ul><li>Security Training Options</li><li>Training as Policy</li><li>Experiential Learning</li><li>Cross-Skilling</li><li>The DevSecOps Collective Body of Knowledge</li><li>Preparing for the DevSecOps Foundation certification exam</li></ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans DevSecOps Foundation (DevOps Institute) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the DevSecOps Foundation (DevOps Institute) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

Duration
2 Days
12 CPD hours
This course is intended for
The target audience for the DevSecOps Foundation course are professionals including:
Anyone involved or interested in learning about DevSecOps strategies and automation
Anyone involved in Continuous Delivery toolchain architectures
Compliance Team
Business managers
Delivery Staff
DevOps Engineers
IT Managers
IT Security Professionals, Practitioners, and Managers
Maintenance and support staff
Managed Service Providers
Project & Product Managers
Quality Assurance Teams
Release Managers
Scrum Masters
Site Reliability Engineers
Software Engineers
Testers
Overview
You will learn:
The purpose, benefits, concepts, and vocabulary of DevSecOps
How DevOps security practices differ from other security approaches
Business-driven security strategies and Best Practices
Understanding and applying data and security sciences
Integrating corporate stakeholders into DevSecOps Practices
Enhancing communication between Dev, Sec, and Ops teams
How DevSecOps roles fit with a DevOps culture and organization
In this course, students will gain a solid understanding of how DevSecOps provides business value, enhancing your business opportunities, and improving corporate value. The core DevSecOps principles taught can support an organizational transformation, increase productivity, reduce risk, and optimize resource usage. This course explains how DevOps security practices differ from other approaches then delivers the education needed to apply changes to your organization. Participants learn the purpose, benefits, concepts, vocabulary and applications of DevSecOps. Most importantly, students learn how DevSecOps roles fit with a DevOps culture and organization. At the course?s end, participants will understand ?security as code? to make security and compliance value consumable as a service. This course prepares you for the DevSecOps Foundation (DSOF) certification. 
Realizing DevSecOps Outcomes
Origins of DevOps
Evolution of DevSecOps
CALMS
The Three Ways
Defining the Cyberthreat Landscape
What is the Cyber Threat Landscape?
What is the threat?
What do we protect from?
What do we protect, and why?
How do I talk to security?
Building a Responsive DevSecOps Model
Demonstrate Model
Technical, business and human outcomes
What?s being measured?
Gating and thresholding
Integrating DevSecOps Stakeholders
The DevSecOps State of Mind
The DevSecOps Stakeholders
What?s at stake for who?
Participating in the DevSecOps model
Establishing DevSecOps Best Practices
Start where you are
Integrating people, process and technology and governance
DevSecOps operating model
Communication practices and boundaries
Focusing on outcomes
Best Practices to get Started
The Three Ways
Identifying target states
Value stream-centric thinking
DevOps Pipelines and Continuous Compliance
The goal of a DevOps pipeline
Why continuous compliance is important
Archetypes and reference architectures
Coordinating DevOps Pipeline construction
DevSecOps tool categories, types and examples
Learning Using Outcomes
Security Training Options
Training as Policy
Experiential Learning
Cross-Skilling
The DevSecOps Collective Body of Knowledge
Preparing for the DevSecOps Foundation certification exam
Additional course details:
Nexus Humans DevSecOps Foundation (DevOps Institute) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. 

This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts.

Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.

While we feel this is the best course for the DevSecOps Foundation (DevOps Institute) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.

Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.


Educators providing IT Security courses in Leeds delivered Live Online