ITIL® 4 Foundation: In-House Training ITIL® 4 is built on the established core of best practice in the ITIL® guidance. ITIL® 4 provides a practical and flexible approach to move to the new world of digital transformation and embrace an end-to-end operating model for the delivery and operation of products and services. ITIL® 4 also provides a holistic end-to-end picture that integrates frameworks such as Lean IT, Agile, and DevOps. The ITIL® 4 Foundation is based on the exam specifications specified by AXELOS for the ITIL® 4 Foundation certification. The fundamental objective of this course is to help the participants understand the key concepts of service management and the ITIL® 4 service management framework and prepare for the ITIL® 4 Foundation exam. In addition, this course offers a rich learning experience that helps the participants relate ITIL® to their own work environment. The course includes a case study (based on a fictitious organization, 'Axle Car Hire') that will help the participants understand and experience the ITIL® guiding principles, service value, practices through real-world challenges and opportunities. The rich learning experience is supported by additional learning tools such as pre-course reading materials, post-course reading material, and a set of quick reference cards. What You Will Learn At the end of this program, you will be able to: Understand the key concepts of ITIL® service management Understand how ITIL® guiding principles can help an organization to adopt and adapt ITIL® service management Understand the four dimensions of ITIL® service management Understand the purpose and components of the ITIL® service value system, and activities of the service value chain, and how they interconnect Understand the key concepts of continual improvement Learn the various ITIL® practices and how they contribute to value chain activities Course Introduction Let's Get to Know Each Other Course Overview Course Learning Objectives Course Structure Course Agenda Introduction to IT Service Management in the Modern World Introduction to ITIL® 4 Structure and Benefits of ITIL® 4 Case Study: Axle Car Hire Case Study: Meet the Key People at Axle Case Study: The CIOs Vision for Axle Exam Details ITIL® 4 Certification Scheme Service Management - Key Concepts Intent and Context Key Terms Covered in the Module Module Learning Objectives Value and Value Co-Creation Value: Service, Products, and Resources Service Relationships Value: Outcomes, Costs, and Risks Exercise: Multiple-Choice Questions The Guiding Principles Intent and Context Identifying Guiding Principles Key Terms Covered in the Module Module Learning Objectives The Seven Guiding Principles Applying the Guiding Principles Exercise: Multiple-Choice Questions The Four Dimensions of Service Management Intent and Context The Four Dimensions Key Terms Covered in the Module The Four Dimensions and Service Value System Module Learning Objectives Organizations and People Information and Technology Partners and Suppliers Value Streams and Processes External Factors and Pestle Model Exercise: Multiple-Choice Questions Service Value System Intent and Context Service Value System and Service Value Chain Module Learning Objectives Overview of Service Value System Overview of the Service Value Chain Exercise: Multiple-Choice Questions Continual Improvement Intent and Context Key Terms Covered in the Module Introduction to Continual Improvement Module Learning Objectives The Continual Improvement Model Relationship between Continual Improvement and Guiding Principles Exercise: Multiple-Choice Questions The ITIL® Practices Intent and Context ITIL® Management Practices Key Terms Covered in the Module Module Learning Objectives The Continual Improvement Practice The Change Control Practice The Incident Management Practice The Problem Management Practice The Service Request Management Practice The Service Desk Practice The Service Level Management Practice Purpose of ITIL® Practices Exercise: Crossword Puzzle
Duration 5 Days 30 CPD hours This course is intended for The C|CT is ideal for anyone looking to start their career in cybersecurity or add a strong foundational understanding of the cybersecurity concepts and techniques required to be effective on the job. The course is especially well suited to: Early-career IT professionals, IT managers, career changers, and career advancers Students and recent graduates Overview After completing this course, you will understand: Key concepts in cybersecurity, including information security and network security Information security threats, vulnerabilities, and attacks The different types of malware Identification, authentication, and authorization Network security controls Network security assessment techniques and tools (threat hunting, threat intelligence, vulnerability assessment, ethical hacking, penetration testing, configuration and asset management) Application security design and testing techniques Fundamentals of virtualization, cloud computing, and cloud security Wireless network fundamentals, wireless encryption, and related security measures Fundamentals of mobile, IoT, and OT devices and related security measures Cryptography and public-key infrastructure Data security controls, data backup and retention methods, and data loss prevention techniques Network troubleshooting, traffic and log monitoring, and analysis of suspicious traffic The incident handling and response process Computer forensics and digital evidence fundamentals, including the phases of a forensic investigation Concepts in business continuity and disaster recovery Risk management concepts, phases, and frameworks EC-Council?s C|CT certification immerses students in well-constructed knowledge transfer. Training is accompanied by critical thinking challenges and immersive lab experiences that allow candidates to apply their knowledge and move into the skill development phase in the class itself. Upon completing the program, C|CT-certified professionals will have a strong foundation in cybersecurity principles and techniques as well as hands-on exposure to the tasks required in real-world jobs. Course Outline Information Security Threats and Vulnerabilities Information Security Attacks Network Security Fundamentals Identification, Authentication, and Authorization Network Security Controls: Administrative Controls Network Security Controls: Physical Controls Network Security Controls: Technical Controls Network Security Assessment Techniques and Tools Application Security Virtualization and Cloud Computing Wireless Network Security Mobile Device Security Internet of Things (IoT) and Operational Technology (OT) Security Cryptography Data Security Network Troubleshooting Network Traffic Monitoring Network Log Monitoring and Analysis Incident Response Computer Forensics Business Continuity and Disaster Recovery Risk Management
This Strategy Challenge workshop is designed to provide an opportunity for senior management teams to practice and develop their strategic thinking skills - individually and collectively. It gives a 'safe space' and uses examples designed to 'stretch the strategic thinking muscles'
Facilitation Skills for Business Analysts: Virtual In-House Training This course is part of IIL's Business Analysis Certificate Program (BACP), a program designed to help prepare individuals pass the IIBA® Certification exam to become a Certified Business Analysis Professional (CBAP™). Business analysts are communicators who bridge the gap between people with business needs and knowledge and the people who will provide solutions. Business analysts are continuously involved in communications with stakeholders and developers as they create the solution to business problems. They participate in information-gathering sessions including interviewing, joint requirements definition, and Joint Application Design (JAD) workshops which are used to streamline information gathering and get immediate validation from user representatives. The business analyst is also involved with negotiating the solution with the stakeholders, upper-level management, and the developers, mediating among the groups when disagreements take place, and influencing the results of decisions during the solution cycle. This course teaches the methods needed to organize and run information-gathering events. It combines the basics of graphic decision making and modeling with facilitation, communication, and meeting management skills. What you will Learn At the end of this program, you will be able to: Identify the major touch points between key BABOK® Guide knowledge areas and business analysis communication Describe the facilitation skills that are most supportive of those intersections Improve your ability to apply these skills in the context of your business analyst functions Foundation Concepts The role of the Business analyst (BA) An Introduction to the BABOK® Guide Business analyst roles and the product / project life cycle (PLC) Facilitation skills for the business analyst The BABOK® Guide and Communication An introduction to the communication process Addressing basic communications challenges Planning business analysis communication Communication and BABOK® Guide tasks Targeted Elicitation Techniques Synergy between communication and targeted elicitation techniques Preparing for elicitation Cornerstone targeted technique: interviews Other targeted elicitation techniques Related general communication skills Group Elicitation Techniques Synergy between requirements communication and group elicitation techniques Cornerstone group elicitation technique - requirements workshops Other group elicitation techniques Related general communication skills - meeting management best practices Related general communication skills - facilitating best practices Process / Model-Based Elicitation Techniques Synergy between requirements communication and process / model-based elicitation techniques Process / model-based elicitation techniques Related interpersonal skills - problem solving and decision making Investigative Elicitation Techniques Synergy between requirements communication and investigative elicitation techniques Cornerstone investigative elicitation technique - document analysis Other investigative elicitation techniques Summary of elicitation techniques by usage in the requirements process Using Presentations, Structured Walkthroughs, and Influencing Structured walkthroughs, presentations, and influencing within BABOK® Guide tasks Cornerstone technique - structured walkthroughs General communication skill - presenting Related interpersonal skill - influencing Special Facilitation Skills - Negotiating and Mediating Negotiating Mediating
Duration 5 Days 30 CPD hours This course is intended for This course is designed primarily for cybersecurity practitioners preparing for or who currently perform job functions related to protecting information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. It is ideal for those roles within federal contracting companies and private sector firms whose mission or strategic objectives require the execution of Defensive Cyber Operations (DCO) or DoD Information Network (DoDIN) operation and incident handling. This course focuses on the knowledge, ability, and skills necessary to provide for the defense of those information systems in a cybersecurity context, including protection, detection, analysis, investigation, and response processes. Overview In this course, you will identify, assess, respond to, and protect against security threats and operate a system and network security analysis platform. You will: Assess cybersecurity risks to the organization. Analyze the threat landscape. Analyze various reconnaissance threats to computing and network environments. Analyze various attacks on computing and network environments. Analyze various post-attack techniques. Assess the organization's security posture through auditing, vulnerability management, and penetration testing. Collect cybersecurity intelligence from various network-based and host-based sources. Analyze log data to reveal evidence of threats and incidents. Perform active asset and network analysis to detect incidents. Respond to cybersecurity incidents using containment, mitigation, and recovery tactics. Investigate cybersecurity incidents using forensic analysis techniques. This course covers network defense and incident response methods, tactics, and procedures that are in alignment with industry frameworks such as NIST 800-61r2 (Computer Security Incident Handling Guide), US-CERT's National Cyber Incident Response Plan (NCIRP), and Presidential Policy Directive (PPD)-41 on Cyber Incident Coordination. It is ideal for candidates who have been tasked with the responsibility of monitoring and detecting security incidents in information systems and networks, and for executing standardized responses to such incidents. The course introduces tools, tactics, and procedures to manage cybersecurity risks, defend cybersecurity assets, identify various types of common threats, evaluate the organization's security, collect and analyze cybersecurity intelligence, and remediate and report incidents as they occur. This course provides a comprehensive methodology for individuals responsible for defending the cybersecurity of their organization. This course is designed to assist students in preparing for the CertNexus CyberSec First Responder (Exam CFR-410) certification examination. What you learn and practice in this course can be a significant part of your preparation. In addition, this course and subsequent certification (CFR-410) meet all requirements for personnel requiring DoD directive 8570.01-M position certification baselines: CSSP Analyst CSSP Infrastructure Support CSSP Incident Responder CSSP Auditor The course and certification also meet all criteria for the following Cybersecurity Maturity Model Certification (CMMC) domains: Incident Response (IR) Audit and Accountability (AU) Risk Management (RM) Lesson 1: Assessing Cybersecurity Risk Topic A: Identify the Importance of Risk Management Topic B: Assess Risk Topic C: Mitigate Risk Topic D: Integrate Documentation into Risk Management Lesson 2: Analyzing the Threat Landscape Topic A: Classify Threats Topic B: Analyze Trends Affecting Security Posture Lesson 3: Analyzing Reconnaissance Threats to Computing and Network Environments Topic A: Implement Threat Modeling Topic B: Assess the Impact of Reconnaissance Topic C: Assess the Impact of Social Engineering Lesson 4: Analyzing Attacks on Computing and Network Environments Topic A: Assess the Impact of System Hacking Attacks Topic B: Assess the Impact of Web-Based Attacks Topic C: Assess the Impact of Malware Topic D: Assess the Impact of Hijacking and Impersonation Attacks Topic E: Assess the Impact of DoS Incidents Topic F: Assess the Impact of Threats to Mobile Security Topic G: Assess the Impact of Threats to Cloud Security Lesson 5: Analyzing Post-Attack Techniques Topic A: Assess Command and Control Techniques Topic B: Assess Persistence Techniques Topic C: Assess Lateral Movement and Pivoting Techniques Topic D: Assess Data Exfiltration Techniques Topic E: Assess Anti-Forensics Techniques Lesson 6: Assessing the Organization's Security Posture Topic A: Implement Cybersecurity Auditing Topic B: Implement a Vulnerability Management Plan Topic C: Assess Vulnerabilities Topic D: Conduct Penetration Testing Lesson 7: Collecting Cybersecurity Intelligence Topic A: Deploy a Security Intelligence Collection and Analysis Platform Topic B: Collect Data from Network-Based Intelligence Sources Topic C: Collect Data from Host-Based Intelligence Sources Lesson 8: Analyzing Log Data Topic A: Use Common Tools to Analyze Logs Topic B: Use SIEM Tools for Analysis Lesson 9: Performing Active Asset and Network Analysis Topic A: Analyze Incidents with Windows-Based Tools Topic B: Analyze Incidents with Linux-Based Tools Topic C: Analyze Indicators of Compromise Lesson 10: Responding to Cybersecurity Incidents Topic A: Deploy an Incident Handling and Response Architecture Topic B: Mitigate Incidents Topic C: Hand Over Incident Information to a Forensic Investigation Lesson 11: Investigating Cybersecurity Incidents Topic A: Apply a Forensic Investigation Plan Topic B: Securely Collect and Analyze Electronic Evidence Topic C: Follow Up on the Results of an Investigation Additional course details: Nexus Humans CertNexus Certified CyberSec First Responder (CFR-410) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success. While we feel this is the best course for the CertNexus Certified CyberSec First Responder (CFR-410) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you. Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.
CPD Accredited, Interactive Short Course - 1.5 hr session - Learn from the comfort of your own home or workplace - Learn how to deal with wounds, burns, sprains & strains, and other injuries Course Contents: What is classed as Display Screen Equipment (DSE) Who is a DSE user Illnesses and Injuries caused by the incorrect use of DSE How to set up your workstation so as to avoid injuries and musculoskeletal disorders DSE Assessment Checklist Work routine and the importance of taking breaks Eyes and eyesight testing Identifying training needs Working from home and home working assessments Benefits of this Short Course: In 2018/2019, nearly half a million people suffered from work-related musculoskeletal disorders, most of them having suffered from this for a while Though 138,000 of them only started having problems this year These conditions can significantly affect a person's life, and limit their mobility and dexterity This leads to being forced to retire early from work, earn less and have less of a social life I enjoyed the minor injuries webinar as it refreshed my memory in these areas and gave me the confidence to deal with any of these now. The training was delivered with practical demonstrations and I enjoyed the chance to use my brain during the lockdown.DEBBIE GROSCH-SQUANCE
Duration 3 Days 18 CPD hours This three-day instructor-led course is aimed at modern device management professionals looking to manage their enterprise devices using Microsoft Intune. This course will cover Enrolment, Application Management, Endpoint Security and Windows Autopilot as well as Azure Active Directory Conditional Access and Identity Protection. The delegates will learn how to enroll devices, deploy applications and manage them to maximize user productivity and device security. 1: Introduction to Microsoft Intune Mobile Device Management Microsoft Intune Azure Active Directory AAD Identity Protection AAD Conditional Access 2: Microsoft Intune Device Management Enrolling Devices Device Compliance Device Profiles Device Updates 3: Microsoft Intune Application Management Application Management Deploying Applications Application Configuration Managing Applications Policy Sets and Guided Scenarios 4: Microsoft Intune Endpoint Security Security Baselines and tasks Antivirus Disk Encryption Firewall Atack Surface reduction Endpoint detection and response Account Protection 5: Deploying Windows with Windows Autopilot Windows Autopilot overview Preparing for Windows Autopilot deployment Deploying Windows 11 using Windows Autopilot 6: Microsoft Intune Additional and Premium Features Remote Help Tunnel for Mobile Application Management Endpoint Privilege Management Advanced Endpoint Analytics Additional course details: Nexus Humans 55399 Implementing and Managing Microsoft Intune training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success. While we feel this is the best course for the 55399 Implementing and Managing Microsoft Intune course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you. Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.
About this Virtual Instructor Led Training (VILT) This 5 half-day VILT course will comprehensively cover the technical aspects of gas processing. The scope will be from the wellhead through the typical gas processing plant and discuss gas gathering (pipeline hydraulics), natural gas treating (H2S, CO2 removal), acid gas injection and sulfur recovery. One unique aspect of this training course is the operations and troubleshooting discussions in each module. This VILT course is suited to technical personnel or technical management. Training Objectives After the completion of this VILT course, participants will be able to: Grasp the key specifications of natural gas and liquid products Understand the physical and transport properties of gases and liquids and liquid-vapor phase behavior Explore the various technologies for processing natural gas and to make the specifications Examine the design of the technologies Learn how to diagnose operating problems to keep facilities running reliably Target Audience This VILT course is intended for all surface technical personnel such as process engineers & technologists, facility engineers and production engineers & technologists. This VILT course will greatly benefit but not limited to: Process, petroleum and production engineers Field operators and technicians Personnel involved in gas treatment and processing Managers and Supervisors involved with gas processing operations Course Level Basic or Foundation Intermediate Training Methods The VILT course will be delivered online in 5 half-day sessions comprising 4 hours per day, with 2 breaks of 10 minutes per day. Course Duration: 5 half-day sessions, 4 hours per session (20 hours in total). The maximum number of participants for this course is 20 persons. Case studies and Exercises: This VILT course will use actual case references throughout its duration in various forms. This will allow the application of the participants' newly-acquired knowledge. Case studies also stimulate independent thinking and discussion among the participants Trainer Your expert course leader has written several papers that have been published in both academic and industry journals. He has over 30 years of industry experience, specializing in gas processing (pipeline hydraulics, separation, dehydration, treating, sulphur recovery and refrigeration processes) and also has experience with crude oil dehydration, stabilization and micro-refining topping plants. He has experience with developing new technology and is recently involved in lithium, waste biomass and used motor oil pyrolysis and geothermal projects. He has recognized expertise in thermodynamics and physical and transport properties of fluids. He has consulted for several EPC and operating companies through his company Chem-Pet Process Tech., and currently holds the role of Director of Technology in an integrated engineering and solutions provider to the energy industry. He is currently involved with a small power-based carbon capture project as well as helping clients determine the best options for utilities decisions. He has been involved with CO2 dehydration and CO2 flood gas treating as well as acid gas injection projects for several years. Highlighted Achievements: Developed ORC geothermal model to determine the available power from wells in Alberta Acting on the Technical Advisory Board for E3 Metals, extracting lithium from formation water. Acted as a Subject Matter Expert for assessing the performance of the Plains Midstream Canada, Empress 1 Deep Cut Straddle Plant in a potential litigation. Acted as an Expert Witness for JL Transportation patent defence of a dense phase technology. Process engineer lead on the addition of the new Orloff gas plant for Deltastream. Also troubleshooted the oil battery shipping pump, plate exchanger and FWKO and treater. Evaluated gas processing and sulphur recovery options for new feeds to the Zhaikmunai Zelenovsky Gas Plant, Kazakhstan (with PM Lucas, Serbia). Completed capacity analysis for hydrocarbon dew point versus liquid recovery of three trains at Birchcliff Pouce Coupe facility including amine unit, refrigerated gas plant and acid gas injection. Completed process design for CO2 flue gas dehydration for Husky Energy Inc (with Status Engineering) Provided simulations of EnCana Foster Creek and Christina Lake and Husky McMullen SAGD facilities (with Vista Projects). Performed process engineering for Cenovus Pelican Lake SAGD pilot (with GRB Engineering) Bear Lake heavy oil polymer injection pilot (with GRB Engineering). Lead process engineer on the design of IEC Kerrobert crude oil micro-refinery (topping plant). Provided engineering support and troubleshooting for Enerchem Slave Lake Crude tower and product blending (with Status Engineering). POST TRAINING COACHING SUPPORT (OPTIONAL) To further optimise your learning experience from our courses, we also offer individualized 'One to One' coaching support for 2 hours post training. We can help improve your competence in your chosen area of interest, based on your learning needs and available hours. This is a great opportunity to improve your capability and confidence in a particular area of expertise. It will be delivered over a secure video conference call by one of our senior trainers. They will work with you to create a tailor-made coaching program that will help you achieve your goals faster. Request for further information post training support and fees applicable Accreditions And Affliations
The NCSP® ISO 27001 Specialist accredited (APMG International), certified (NCSC/GCHQ-UK), and recognized (DHS-CISA-USA) certification course teaches Digital Business, Operational Stakeholders, Auditors, and Risk Practitioners a Fast-Track approach to adopting and adapting the ISO 27001 controls in the context of a NIST Cybersecurity Framework program.This course looks at the impact of adapting a principled approach to an enterprise risk management framework to better support cybersecurity decisions within the context of the selected informative reference. It guides participants on the best approach to adapt, implement, and operate (AIO) a comprehensive cybersecurity program that integrates into existing organizational capabilities and incorporates the selected Informative Reference. NCSP® ISO 27001 Specialist introduces the integration of typical enterprise capabilities with cybersecurity from the perspective of the selected cybersecurity informative reference. The overall approach places these activities into systems thinking context by introducing the Service Value Management System composed of three aspects, governance, assurance, and the Z-X Model. With this in place, the course presents the approach to adapt, implement, operate, and improve the organizational cybersecurity posture that builds on the application of the FastTrack™ presented in the NCSP Practitioner. The NIST Cybersecurity Professional (NCSP®) program is the industry's first accredited certification training program that teaches organizations how to build a Digital Value Management Overlay System capable of leveraging the NIST Cybersecurity Framework to deliver the secure, digital business outcomes expected by executives, government regulators, and legal advisors.
RESILIA™ Foundation: In-House Training AXELOS RESILIA™: Cyber Resilience Best Practice is designed to help commercial and government organizations around the world prevent, detect, and correct any impact cyber attacks will have on the information required to do business. Adding RESILIA to the existing AXELOS global best practice portfolio, including ITIL® and PRINCE2®, brings a common cyber resilience best practice for security, IT service management, and business. Active cyber resilience is achieved through people, process, and technology. The RESILIA™ Foundation course starts with the purpose, key terms, the distinction between resilience and security, and the benefits of implementing cyber resilience. It introduces risk management and the key activities needed to address risks and opportunities. Further, it explains the relevance of common management standards and best practice frameworks to achieve cyber resilience. Subsequently, it identifies the cyber resilience processes, the associated control objectives, interactions, and activities that should be aligned with corresponding ITSM activities. In the final part of the course, it describes the segregation of duties and dual controls related to cyber resilience roles and responsibilities. What you will Learn At the end of this course, you will be able to: Demonstrate your knowledge of the purpose, benefits, and key terms of cyber resilience Demonstrate your knowledge of the risk management and the key activities needed to address risks and opportunities Demonstrate your knowledge of the purpose of a management system and how best practices and standards can contribute Demonstrate your knowledge of the cyber resilience strategy, the associated control objectives, and their interactions with ITSM activities Demonstrate your knowledge of cyber resilience design, the associated control objectives, and their interactions with ITSM activities Demonstrate your knowledge of cyber resilience transition, the associated control objectives, and their interactions with ITSM activities Demonstrate your knowledge of cyber resilience operation, the associated control objectives, and their interactions with ITSM activities Demonstrate your knowledge of cyber resilience continual improvement, the associated control objectives, and their interactions with ITSM activities Demonstrate your knowledge of the purpose and benefits of segregation of duties and dual controls Course Introduction Course Learning Objectives Course Agenda Activities Course Book Structure RESILIA Certification Introduction to Cyber Resilience What is Cyber Resilience? Defining Cyber Resilience Balancing in Cyber Resilience Characteristics of Cyber Resilience Risk Management Understanding Risk Management: Discussion Defining Risk Management Addressing Risks and Opportunities Managing Cyber Resilience Why and What of Management Systems? Management Systems Common Management Standards and Frameworks Cyber Resilience Strategy What is Strategy? Cyber Resilience Strategy and Activities Security Controls at Cyber Resilience Strategy Interaction Between ITSM Processes and Cyber Resilience Cyber Resilience Design Why Cyber Resilience Design? Cyber Resilience Design Activities Security Controls at Cyber Resilience Design Aligning ITSM Processes with Cyber Resilience Processes Cyber Resilience Transition Why Cyber Resilience Transition? Basics of Cyber Resilience Transition Cyber Resilience Transition: Controls Interaction Between ITSM Processes and Cyber Resilience Cyber Resilience Operation The Purpose of Cyber Resilience Operation Security Controls in Cyber Resilience Operation Interaction Between IT Processes and Cyber Resilience Interaction Between ITSM Functions and Cyber Resilience Cyber Resilience Continual Improvement Continual or Continuous Improvement Maturity Models Continual Improvement Controls The Seven-Step Improvement Process The ITIL CSI Approach Cyber Resilience Roles & Responsibilities Segregating Duties Dual Controls