course : Security Leadership Essentials for Managers

Topics

Security Frameworks

• Control, Program, and Risk Frameworks

Understanding Risk

• Risk Concepts
• Calibration
• Risk Assessment and Management

Security Policy

• Purpose of Policy
• Risk Appetite Statement
• Policy Planning
• Managing Policy

Program Structure

• Reporting Relationships
• Three Lines of Defense
• Roles and Responsibilities
• Security Functions

Security Architecture Overview

• Models and Trends
• Security Architecture Frameworks
• Cyber Defense Matrix

Network Security

• Layer 1 and 2
  • Overview and Attacks
• Layer 3
  • VPNs and IPSec
• Layer 4
  • TCP and UDP
• Application Layer
  • Proxies, NGFW, IDS/IPS, NSM

Host Security

• Malware and Attack Examples
• Host Security Controls
  • EPP, EDR, HIDS/HIPS, FIM, Allowlisting, Sandboxing

Cloud Security

• Cloud Security Fundamentals
• AWS Security Reference Architecture
• AWS Overview
• Cloud Security Attack Example and Controls
• Cloud Security Tools
  • CSPM, CWPP, CASB
• Cloud Security Models
  • Cloud Security Alliance (CSA) Guidance, Well-Architected Frameworks, Cloud Apoption Frameworks

Zero Trust

• Principles and Best Practices
• Zero Trust Network Access (ZTNA)
• Variable Trust

Security Engineering

• Overview

Data Protection

• Cryptography Concepts
  • Confidentiality, Integrity, Authentication, Non-Repudiation
• Encryption Algorithms
  • Symmetric, Asymmetric, Key Exchange, Hashing, Digital Signature
• Encryption Applications
  • TLS, PKI, Blockchain, Quantum

Privacy Primer

• Privacy and Security
• Requirements and Regulations
• Privacy Engineering

Vulnerability Management

• PIACT Process
• Prioritizing Vulnerabilities
  • Common Vulnerability Scoring System (CVSS)
• Finding and Fixing Vulnerabilities
• Communicating and Managing Vulnerabilities

Security Awareness

• Maturity Model
• Human Risks

Negotiations Primer

• Negotiations Strategies

Vendor Analysis

• Product Analysis and Selection
• Analytical Hierachy Process (AHP)
• Managing and Leading Teams

Managing Projects

• Leading Teams
• Going From Good to Great

Logging and Monitoring

• SIEM Deployment Best Practices

Security Operations Center (SOC)

• SOC Functional Components
• Models and Structure
• Tiered vs. Tierless SOCs
• Managing and Organizing a SOC

Incident Handling

• PICERL Process
• Incident Handling Lifecycle

Contingency Planning

• Business Continuity Planning (BCP)
• Disaster Recovery (DR)

Physical Security

• Issues and Controls

The Scandinavian Academy for Training and Development adopts the latest scientific and professional methodologies in training and human resource development, aiming to enhance the efficiency of individuals and organizations. Training programs are delivered through a comprehensive approach that includes:

• Theoretical lectures supported by PowerPoint presentations and visual materials (videos and short films).
• Scientific evaluation of participants before and after the program to measure progress and knowledge acquisition.
• Brainstorming sessions and practical role-playing to simulate real-life scenarios.
• Case studies tailored to align with the training content and participants work nature.
• Assessment tests conducted at the end of the program to evaluate the achievement of training objectives.

Each participant receives the training material (both theoretical and practical) in printed form and saved on a CD or flash drive. Detailed reports, including attendance records, final results, and overall program evaluations, are also provided.

Training materials are prepared professionally by a team of experts and specialists in various fields. At the end of the program, participants are awarded a professional attendance certificate, signed and accredited by the Scandinavian Academy for Training and Development.

Program Timings:

• 9:00 AM to 2:00 PM in Arab cities.
• 10:00 AM to 3:00 PM in European and Asian cities.

The program includes:

• A daily buffet provided during the sessions to ensure participants comfort.

Objective

Security leaders need both technical knowledge and leadership skills to gain the respect of technical team members, understand what technical staff are actually doing, and appropriately plan and manage security projects and initiatives. This is a big and important job that requires an understanding of a wide array of security topics. This course empowers you to become an effective security leader and get up to speed quickly on information security issues and terminology. You won`t just learn about security, you will learn how to lead security teams and manage programs.

What You Will Learn

Take this course to learn the key elements of any modern security program. it covers a wide range of security topics across the entire security stack. Learn to quickly grasp critical information security issues and terminology, with a focus on security frameworks, security architecture, security engineering, computer/network security, vulnerability management, cryptography, data protection, security awareness, application security, cloud security, and security operations.

BUSINESS TAKEAWAYS

• Develop leaders that know how to build a modern security program.
• Anticipate what security capabilities need to build to enable the business and mitigate threats
• Create higher performing security teams.

SKILLS LEARNED:

• Make sense of different cybersecurity frameworks
• Understand and analyze risk.
• Understand the pros and cons of different reporting relationships.
• Manage and lead technical teams and projects.
• Build a vulnerability management program.
• Inject security into modern DevOps workflows.
• Strategically leverage a SIEM
• Lead a Security Operations Center (SOC)
• Change behavior and build a security-aware culture.
• Effectively manage security projects
• Enable modern security architectures and the cloud.
• Build security engineering capabilities using automation and Infrastructure as Code (IaC)
• Get up to speed quickly on information security issues and terminology.
• Establish a minimum standard of security knowledge, skills, and abilities.
• Speak the same language as technical security professionals.

The Scandinavian Academy for Training and Development is committed to hosting all training programs in dedicated and well-equipped hotel facilities specifically designed for conducting and delivering training sessions, unless explicitly stated otherwise on our website. Participants will be notified of the program venue within 7 to 21 days prior to the programs start date, based on the Academys assessment and the programs circumstances. The Scandinavian Academy for Training and Development emphasizes that it holds no responsibility for any force majeure events that may prevent the program from being held at the designated venue. Nevertheless, the Scandinavian Academy for Training and Development will make every effort to provide suitable alternatives and extend the necessary support to participants in the event of a venue change due to unforeseen circumstances.