Duration 2 Days 12 CPD hours This course is intended for The intended audience for this comprehensive course on Information Assurance and STIGs includes professionals with roles such as: IT professionals - System administrators, network engineers, and security analysts who are responsible for maintaining and securing IT infrastructure and web applications. Developers - Software engineers and web developers who design, implement, and maintain web applications, and need to integrate security best practices throughout the development process. Project teams - Cross-functional teams that collaborate on application development projects, including members from development, testing, and deployment teams. Technical leads - Senior software engineers or architects who oversee technical aspects of projects and ensure the implementation of secure design and coding practices. Project managers - Professionals responsible for planning, executing, and closing projects, ensuring that security requirements are met throughout the project lifecycle. Overview Working in an interactive learning environment, guided by our application security expert, you'll explore: The concepts and terminology behind defensive coding Threat Modeling as a tool in identifying software vulnerabilities based on realistic threats against meaningful assets The entire spectrum of threats and attacks that take place against software applications in today's world The role that static code reviews and dynamic application testing to uncover vulnerabilities in applications The vulnerabilities of programming languages as well as how to harden installations The basics of Cryptography and Encryption and where they fit in the overall security picture The requirements and best practices for program management as specified in the STIGS The processes and measures associated with the Secure Software Development (SSD) The basics of security testing and planning Understand the concepts and terminology behind defensive coding Understand Threat Modeling as a tool in identifying software vulnerabilities based on realistic threats against meaningful assets Learn the entire spectrum of threats and attacks that take place against software applications in today's world Discuss the role that static code reviews and dynamic application testing to uncover vulnerabilities in applications Understand the vulnerabilities of programming language as well as how to harden installations Understand the basics of Cryptography and Encryption and where they fit in the overall security picture Understand the fundamentals of XML Digital Signature and XML Encryption as well as how they are used within the web services arena Understand the requirements and best practices for program management as specified in the STIGS Understand the processes and measures associated with the Secure Software Development (SSD) Understand the basics of security testing and planning The Information Assurance (STIG) Overview is a comprehensive two-day course that delves into the realm of Information Assurance, empowering you to enhance your cybersecurity skills, understand the essentials of STIGs, and discover cutting-edge web application security practices. This immersive experience is tailored for IT professionals, developers, project teams, technical leads, project managers, testing/QA personnel, and other key stakeholders who seek to expand their knowledge and expertise in the evolving cybersecurity landscape. The course focuses on the intricacies of best practices for design, implementation, and deployment, inspired by the diverse and powerful STIGs, ultimately helping participants become more proficient in application security.The first half of the course covers the foundations of DISA's Security Technical Implementation Guides (STIGs) and learn the ethical approach to bug hunting, while exploring the language of cybersecurity and dissecting real-life case studies. Our expert instrtors will guide you through the importance of respecting privacy, working with bug bounty programs, and avoiding common mistakes in the field.The next half delves into the core principles of information security and application protection, as you learn how to identify and mitigate authentication failures, SQL injections, and cryptographic vulnerabilities. You?ll gain experience with STIG walkthroughs and discover the crucial steps for securing web applications.Throughout the course, you'll also explore the fundamentals of application security and development, including checklists, common practices, and secure development lifecycle (SDL) processes. You?ll learn from recent incidents and acquire actionable strategies to strengthen your project teams and IT organizations. You'll also have the opportunity to explore asset analysis and design review methodologies to ensure your organization is prepared to face future cybersecurity challenges. DISA's Security Technical Implementation Guides (STIGs) The motivations behind STIGs Requirements that the various software development roles must meet Implementing STIG requirements and guidelines Why Hunt Bugs? The Language of CyberSecurity The Changing Cybersecurity Landscape AppSec Dissection of SolarWinds The Human Perimeter Interpreting the 2021 Verizon Data Breach Investigation Report First Axiom in Web Application Security Analysis First Axiom in Addressing ALL Security Concerns Lab: Case Study in Failure Safe and Appropriate Bug Hunting/Hacking Working Ethically Respecting Privacy Bug/Defect Notification Bug Bounty Programs Bug Hunting Mistakes to Avoid Principles of Information Security Secuity Is a Lifecycle Issue Minimize Attack Surface Area Layers of Defense: Tenacious D Compartmentalize Consider All Application States Do NOT Trust the Untrusted Identification and Authentication Failures Applicable STIGs Quality and Protection of Authentication Data Proper hashing of passwords Handling Passwords on Server Side Session Management HttpOnly and Security Headers Lab: STIG Walk-Throughs Injection Applicable STIGs Injection Flaws SQL Injection Attacks Evolve Drill Down on Stored Procedures Other Forms of Server-Side Injection Minimizing Injection Flaws Client-side Injection: XSS Persistent, Reflective, and DOM-Based XSS Best Practices for Untrusted Data Lab: STIG Walk-Throughs Applications: What Next? Common Vulnerabilities and Exposures CWE/SANS Top 25 Most Dangerous SW Errors Strength Training: Project Teams/Developers Strength Training: IT Organizations Cryptographic Failures Applicable STIGs Identifying Protection Needs Evolving Privacy Considerations Options for Protecting Data Transport/Message Level Security Weak Cryptographic Processing Keys and Key Management Threats of Quantum Computing Steal Now, Crack Later Threat Lab: STIG Walk-Throughs Application Security and Development Checklists Checklist Overview, Conventions, and Best Practices Leveraging Common AppSec Practices and Control Actionable Application Security Additional Tools for the Toolbox Strength Training: Project Teams/Developers Strength Training: IT Organizations Lab: Recent Incidents SDL Overview Attack Phases: Offensive Actions and Defensive Controls Secure Software Development Processes Shifting Left Actionable Items Moving Forward Lab: Design Study Review Asset Analysis Asset Analysis Process Types of Application-Related Assets Adding Risk Escalators Discovery and Recon Design Review Asset Inventory and Design Assets, Dataflows, and Trust Boundaries Risk Escalators in Designs Risk Mitigation Options
Coming soon! Embark on a transformative odyssey into operational leadership with our Level 5 Operations Department Manager course. Meticulously designed for individuals venturing into the role of an Operations Department Manager, whether through recent recruitment or a well-deserved promotion, this program is a gateway to acquiring advanced skills and unique insights crucial for success in the realm of operations.
Duration 5 Days 30 CPD hours This course is intended for This course is designed for technology leaders, solution developers, project managers, organizational decision makers, and other individuals seeking to demonstrate a vendor-neutral, cross-industry understanding of ethics in emerging data-driven technologies, such as AI, robotics, IoT, and data science. This course is also designed for professionals who want to pursue the CertNexus Certification Exam CET-110: Certified Ethical Emerging Technologies. Overview In this course, you will incorporate ethics into data-driven technologies such as AI, IoT, and data science. You will: Describe general concepts, theories, and challenges related to ethics and emerging technologies. Identify ethical risks. Practice ethical reasoning. Identify and mitigate safety and security risks. Identify and mitigate privacy risks. Identify and mitigate fairness and bias risks. Identify and mitigate transparency and explainability risks. Identify and mitigate accountability risks. Build an ethical organization. Develop ethical systems in technology-focused organizations. Mutually reinforcing innovations in computing and engineering are catapulting advances in technological production. From blockchain and artificial intelligence (AI) to gene editing and the Internet of Things (IoT), these advances come with tremendous opportunities for improvement in productivity, efficiency, and human well-being. But as scandals increasingly demonstrate, these advances also introduce new and serious risks of conflict and harm.Technology professionals now face growing demands to identify and mitigate ethical risks to human rights and the environment, as well as to navigate ethical tradeoffs between qualities such as privacy and accuracy, fairness and utility, and safety and accountability. This course provides the tools to identify and manage common ethical risks in the development of emerging data-driven technologies. It distills ethical theory, public regulations, and industry best practices into concrete skills and guidelines needed for the responsible development of digital products and services. By following the course's practical, problems-based approach, learners will become adept at applying theories, principles, frameworks, and techniques in their own roles and organizations. Introduction to Ethics of Emerging Technologies Topic A: What?s at Stake Topic B: Ethics and Why It Matters Topic C: Ethical Decision-Making in Practice Topic D: Causes of Ethical Failures Identifying Ethical Risks Topic A: Ethical Reasons Topic B: Stumbling Blocks for Ethical Reasoning Topic C: Identify Ethical Risks in Product Development Topic D: Tools for Identifying Ethical Risks Topic E: Use Regulations, Standards, and Human Rights to Identify Ethical Risks Ethical Reasoning in Practice Topic A: Ethical Theories Topic B: Use Ethical Decision-Making Frameworks Topic C: Select Options for Action Topic D: Avoid Problems in Ethical Decision-Making Identifying and Mitigating Security Risks Topic A: What Is Security? Topic B: Identify Security Risks Topic C: Security Tradeoffs Topic D: Mitigate Security Risks Identifying and Mitigating Privacy Risks Topic A: What Is Privacy? Topic B: Identify Privacy Risks Topic C: Privacy Tradeoffs Topic D: Mitigate Privacy Risks Identifying and Mitigating Fairness and Bias Risks Topic A: What Are Fairness and Bias? Topic B: Identify Bias Risks Topic C: Fairness Tradeoffs Topic D: Mitigate Bias Risks Identifying and Mitigating Transparency and Explainability Risks Topic A: What Are Transparency and Explainability? Topic B: Identify Transparency and Explainability Risks Topic C: Transparency and Explainability Tradeoffs Topic D: Mitigate Transparency and Explainability Risks Identifying and Mitigating Accountability Risks Topic A: What Is Accountability? Topic B: Identify Accountability Risks Topic C: Accountability Tradeoffs Topic D: Mitigate Accountability Risks Building an Ethical Organization Topic A: What Are Ethical Organizations? Topic B: Organizational Purpose Topic C: Ethics Awareness Topic D: Develop Professional Ethics within Organizations Developing Ethical Systems in Technology-Focused Organizations Topic A: Policy and Compliance Topic B: Metrics and Monitoring Topic C: Communication and Stakeholder Engagement Topic D: Ethical Leadership
Join us on this webinar presented by Kate Perkins, founder of OncoLaser, discussing the inclusion of therapeutic laser (MLS® Laser therapy) in the treatment of post-operative cancer patients and lymphoedema.
Duration 5 Days 30 CPD hours This course is intended for Project Team Members IT Support Team Members Advanced Business Analysts System Administrators Application Consultants Business Process Owners / Team Leads / Power Users Program / Project Managers Trainers Overview Learn how to design, configure, consolidate, and report with BPC Standard In this course, students learn all of the key steps to set up Consolidation based on the SAP Business Planning and Consolidation, version for SAP NetWeaver. SAP Business Planning and Consolidation Overview Describing SAP Business Planning and Consolidation Running Consolidation Tasks Implementing BPC Standard Consolidation Modeling Consolidation Structures and Reporting Configuring Environments and Dimensions Creating Models for Consolidation Creating Reports and Formats in the EPM Add-In Report on BPC Standard Data in Analysis for Office Data Collection and Preparation Collecting Transforming Data for Consolidation Scenarios Creating Consolidation Logic Configuring Reclassifications Configuring Balance Carryforward Managing Journals Consolidations and Eliminations Translating Local Currency Configuring Intercompany Matching and Booking Using the Ownership Manager Configuring Integration Rules Eliminating Intercompany Transactions Configuring Intercompany US Elimination Designing Management, Matrix, and Multiple Accounting Standard Solutions Describing Consolidation and Elimination Principles Consolidating Investments Describing Stage Consolidation Configuring Scope Variation Configuring Equity Pickup Consolidation Process Monitoring Configuring Work Status Using the Controls Monitor to Validate Data Configuring Consolidation Business Process Flows
Duration 2 Days 12 CPD hours This course is intended for Scrum Masters (coaches), Product Owners (customers), and team members. Overview Please refer to Overview Many organizations are incorporating different project management methodologies into their skill base. This course is designed for individuals who need to get started with agile concepts and practice. Basic planning is covered along with the various roles and responsibilities of customers and developers / practitioners. Learn about epics, stories, sprints, feature prioritization and value-driven delivery. Course IntroductionCore Agile Concepts Origins of Agile Project Management Traditional Project Management Methodologies Agile Project Management Methodologies Generalizations: Agile and Traditional Project Management Comparisons The Agile Manifesto Manifesto Contributors Manifesto Values Manifesto Principles Agile Planning and Sprint Overview Agile Planning Overview Develop Epics Create Stories Verification/Validation Wireframes and Storyboards Functionality Based on User Roles Story Maps Estimating Effort: Story Points and Ideal Days Prioritizing Stories Methods for Prioritizing Stories Create Product Backlog Create Product Roadmap Conduct Release Planning Determining Iteration/Sprint Length Conduct Date-Driven Release Planning Conduct Feature-Driven Release Planning Sizing Stories Agile Role, Responsibilities and Team Space Agile Teams and Team Space Overview Scrum Master/Servant Leader/Coach (XP) Product Owner/Customer (XP) Team Members/Developers (XP) Team Space Physical Space Recommendations Next Steps
Duration 3 Days 18 CPD hours This course is intended for This course is designed for anyone currently working on Agile-based projects or having experience with other forms of project management experience and want to add Agile PM skills and knowledge to their portfolio. Anyone with any experience in project-based work, either from the customer or supplier side can benefit from this course, including but not limited to: project manager, team leaders and managers or project employees. Overview AgilePM ⢠certification is the result of collaboration between APMG-International and the DSDM Consortium. DSDM (Dynamic Systems Development Method) is the longest existing Agile method and the only Agile method aimed at managing Agile projects. It Has evolved over the years into a Project Framework, and AgilePM is a subset tailored to the Agile project manager. Students will be explained how the model is set up, how the different project activities and project roles are connected and how AgilePM handles project management. This course provides preparation for the Foundation exam of APMG. Training Day 1 - AgilePM Foundation Topics What is Agile? Choosing an appropriate Agile approach philosophy, principles and project variables preparing for success The DSDM Process Training Day 2 - AgilePM Foundation Topics The People ? DSDM Roles and Responsibilities The DSDM Products Key practices ? prioritization and timeboxes Training Day 3 - AgilePM Foundation Topics Planning and control throughout the lifecycle Other practices: facilitated workshops, modeling and iterative development
Duration 5 Days 30 CPD hours This course is intended for The primary audience for this course are Application Consultants, Business Analysts, Business Process Owners/Team Leads/Power Users, Program/Project Managers, Technology Consultants, and Users. In this course, students will gain SAP Netweaver Business Warehouse knowledge necessary for successful implementation and administration within a heterogeneous SAP NetWeaver BW system landscape. Data Warehousing Describing Data Warehouse Systems Describing Data Warehouse Architecture Using the Data Warehousing Workbench Master Data Modeling in SAP BW Describing InfoObjects Creating Characteristic InfoObjects The Loading of Master Data from SAP Data Sources Describing Data Flow Modeling a Master Data Flow Loading a Master Data Flow Modeling with the Graphical Data Flow Tool Loading of Transaction Data from SAP DataSources Describing the Core InfoProviders Creating a Key Figure InfoObject Creating a DataStore Object (DSO) Loading Transaction Data into a Data Store Object Describing the Extended Star Schema of an InfoCube Creating InfoCubes Loading Transaction Data into an InfoCube Master Data Loading from Flat File Data Sources Loading Data From a Flat File Describing the Data Flow in Detail Describing the Data Loading Process in Detail InfoProviders in SAP BW Explaining the InfoProviders Used in SAP BW ? Introduction Creating MultiProviders Usage of SAP BI Content Using BI Content Query Performance Optimization Optimizing Query Performance Monitoring Performance Creating and Filling Aggregates The SAP BW Administration Describing Administrative Tasks and Tools Administrating the InfoCubes Administrating the DataStore Objects Creating Process Chains
Duration 2 Days 12 CPD hours This course is intended for The primary audience for this course are Application Consultants, Business Process Architects, Business Process Owners/Team Leads/Power Users, Enterprise Architects, and Solution Architects. Overview The course introduces you to the concepts and procedures of supply chain planning in SAP SCM (APO).It demonstrates how to forecast future sales and the release of the forecast.The course outlines the different possibilities to create feasible plans for cross-location planning and to achieve a finite detailed plan for certain plants. *You determine feasible stock transfers with deployment functionality and confirm sales orders using Global Available- to-Promise. In this course, students will get to know the concepts and processes of supply chain planning in SAP SCM (APO). This foundation knowledge is mandatory in order for students to have the confidence to complete the subsequent configuration courses. Supply Chain Planning Defining Supply Chain Planning Outlining Supply Chain Planning Master Data & Transaction Data Outlining Supply Chain Master Data Outlining Master Data Mapping Integrating Transaction Data in Supply Chain Planning Demand Planning Outlining Demand Planning (DP) Executing Demand Planning Releasing the Demand Plan Cross-Location Planning Outlining Supply Network Planning (SNP) Integrating Supply Network Planning Applying Cross-Location Planning Procedures Production Planning and Detailed Scheduling Outlining Production Planning and Detailed Scheduling (PP/DS) Applying Production Planning and Detailed Scheduling Deployment and Availability Check Planning Deployment Checking the Availability of Customer Demand New User Interfaces for SAP SCM Identifying the Functionality of Developments in SAP SCM
Duration 1 Days 6 CPD hours This course is intended for This course is intended for both organizations that would like to improve the corporate communications of their employees and individuals, who take the role of Project Managers, Business Analysts, Team Leaders, Scrum Masters, Product Owners, Managers, Employees, and anyone who would like to improve their communications skills both in the personal and professional aspects. Overview Upon successful completion of this course, students will learn: what effective communications are. why they are important. how by improving communications you will be able to improve the overall execution of projects and your results in general. the specifics of online remote teamwork communications. Your employees will be equipped with knowledge of different communication techniques and styles, which will save them time to adapt to the communication style of the interlocutor and allow them to have more effective conversations both with business partners and customers, and with colleagues at work. Also, they will master the art of active listening and thus win more customers and partners. This course can be adapted to the specific needs of your organization. This course represents highly effective training on developing communication skills and teaches students how to ask correct questions and get the most from one discussion. Also, students will learn how to resolve and/or avoid conflict situations. Course Outline What is the process of effective communications? How to ask good questions and reach clear agreements? Why is listening important and how to listen actively? How to give and receive feedback? How to prepare and conduct effective meetings? Each topic includes discussions and exercises.