Topics

Security Frameworks

• Control, Program, and Risk Frameworks

Understanding Risk

• Risk Concepts
• Calibration
• Risk Assessment and Management

Security Policy

• Purpose of Policy
• Risk Appetite Statement
• Policy Planning
• Managing Policy

Program Structure

• Reporting Relationships
• Three Lines of Defense
• Roles and Responsibilities
• Security Functions

Security Architecture Overview

• Models and Trends
• Security Architecture Frameworks
• Cyber Defense Matrix

Network Security

• Layer 1 and 2
  • Overview and Attacks
• Layer 3
  • VPNs and IPSec
• Layer 4
  • TCP and UDP
• Application Layer
  • Proxies, NGFW, IDS/IPS, NSM

Host Security

• Malware and Attack Examples
• Host Security Controls
  • EPP, EDR, HIDS/HIPS, FIM, Allowlisting, Sandboxing

Cloud Security

• Cloud Security Fundamentals
• AWS Security Reference Architecture
• AWS Overview
• Cloud Security Attack Example and Controls
• Cloud Security Tools
  • CSPM, CWPP, CASB
• Cloud Security Models
  • Cloud Security Alliance (CSA) Guidance, Well-Architected Frameworks, Cloud Apoption Frameworks

Zero Trust

• Principles and Best Practices
• Zero Trust Network Access (ZTNA)
• Variable Trust

Security Engineering

• Overview

Data Protection

• Cryptography Concepts
  • Confidentiality, Integrity, Authentication, Non-Repudiation
• Encryption Algorithms
  • Symmetric, Asymmetric, Key Exchange, Hashing, Digital Signature
• Encryption Applications
  • TLS, PKI, Blockchain, Quantum

Privacy Primer

• Privacy and Security
• Requirements and Regulations
• Privacy Engineering

Vulnerability Management

• PIACT Process
• Prioritizing Vulnerabilities
  • Common Vulnerability Scoring System (CVSS)
• Finding and Fixing Vulnerabilities
• Communicating and Managing Vulnerabilities

Security Awareness

• Maturity Model
• Human Risks

Negotiations Primer

• Negotiations Strategies

Vendor Analysis

• Product Analysis and Selection
• Analytical Hierachy Process (AHP)
• Managing and Leading Teams

Managing Projects

• Leading Teams
• Going From Good to Great

Logging and Monitoring

• SIEM Deployment Best Practices

Security Operations Center (SOC)

• SOC Functional Components
• Models and Structure
• Tiered vs. Tierless SOCs
• Managing and Organizing a SOC

Incident Handling

• PICERL Process
• Incident Handling Lifecycle

Contingency Planning

• Business Continuity Planning (BCP)
• Disaster Recovery (DR)

Physical Security

• Issues and Controls

The Scandinavian Academy for Training and Development employs modern methods in training and skills development, enhancing the efficiency of human resource development. We follow these practices:

• Theoretical Lectures: 
  • We deliver knowledge through advanced presentations such as PowerPoint and visual materials, including videos and short films.
• Scientific Assessment:
  • We evaluate trainees skills before and after the course to ensure their progress.
• Brainstorming and Interaction: 
  • We encourage active participation through brainstorming sessions and applying concepts through role play.
• Practical Cases:
  • We provide practical cases that align with the scientific content and the participants specific needs.
• Examinations: 
  • Tests are conducted at the end of the program to assess knowledge retention.
• Educational Materials:
  • We provide both printed and digital scientific and practical materials to participants.
• Attendance and Final Result Reports:
  • We prepare detailed attendance reports for participants and offer a comprehensive program evaluation.
• Professionals and Experts: 
  • The programs scientific content is prepared by the best professors and trainers in various fields.
• Professional Completion Certificate: 
  • Participants receive a professional completion certificate issued by the Scandinavian Academy for Training and Development in the Kingdom of Sweden, with the option for international authentication.
• Program Timings:
  • Training programs are held from 10:00 AM to 2:00 PM and include buffet sessions for light meals during lectures.

Objective

Security leaders need both technical knowledge and leadership skills to gain the respect of technical team members, understand what technical staff are actually doing, and appropriately plan and manage security projects and initiatives. This is a big and important job that requires an understanding of a wide array of security topics. This course empowers you to become an effective security leader and get up to speed quickly on information security issues and terminology. You won`t just learn about security, you will learn how to lead security teams and manage programs.

What You Will Learn

Take this course to learn the key elements of any modern security program. it covers a wide range of security topics across the entire security stack. Learn to quickly grasp critical information security issues and terminology, with a focus on security frameworks, security architecture, security engineering, computer/network security, vulnerability management, cryptography, data protection, security awareness, application security, cloud security, and security operations.

BUSINESS TAKEAWAYS

• Develop leaders that know how to build a modern security program.
• Anticipate what security capabilities need to build to enable the business and mitigate threats
• Create higher performing security teams.

SKILLS LEARNED:

• Make sense of different cybersecurity frameworks
• Understand and analyze risk.
• Understand the pros and cons of different reporting relationships.
• Manage and lead technical teams and projects.
• Build a vulnerability management program.
• Inject security into modern DevOps workflows.
• Strategically leverage a SIEM
• Lead a Security Operations Center (SOC)
• Change behavior and build a security-aware culture.
• Effectively manage security projects
• Enable modern security architectures and the cloud.
• Build security engineering capabilities using automation and Infrastructure as Code (IaC)
• Get up to speed quickly on information security issues and terminology.
• Establish a minimum standard of security knowledge, skills, and abilities.
• Speak the same language as technical security professionals.