Information Security

To understand the current state of cybersecurity, the cyberthreats it faces and how to manage them.

Modules:

• Global cyber security landscape
• Current cybersecurity overview
• Cybersecurity labor market
• General cybersecurity concepts
• Defense in depth: technology, processes, and people.
• Cybersecurity domains: management, architecture, services.
• The future of cybersecurity: Megatrends (Blockchain, IoT, 5G, quantum computing, IA/ML).
• Cyberthreats
• Cyberthreat actors: motivation, activity and TTPs.
• Cybersecurity governance
• Risk management
• Regulation and compliance
• Security standards

Scripting, communications security and malware: what it is, how it works and its life cycle.

Modules:

• Communication Protocols - TCP/IP::
• Security at the physical and link levels
• Security at the network layer
• Security at the transport layer
• Security at the application layer
• Programming fundamentals
• Introduction to Python
• Variables and constants
• Object types (strings, lists, dictionaries and tuples)
• Control structures (if-statement, for-loop and white loop)
• Functions
• Introduction to malware
• What is malware?
• Malware development
• Files susceptible to containing malware
• Infection vectors
• Phases of infection
• Exposure window and Advanced Persistent Threats (APTs)
• Use of AI in the creation of malware
• Malware analysis
• Antivirus & sandboxing
• Static and dynamic analysis
• Malware analysis laboratory

Pentesting. Determining the techniques, procedures and tools used to identify vulnerabilities in networks and systems.

Modules:

• Fundamental concepts, methodologies, and tools
• Information Gathering and enumeration: Footprinting and Fingerprinting
• Exploitation: Service, web and wireless network pentesting
• Post-exploitation

Designing and establishing plans to securely configure systems and networks. Understanding the standards and good practices within the sector

Modules:

• Network Engineering: Network Architecture
• Network bastioning: Implementation of a perimeter firewall
• Bastioning in Windows environments
• Bastioning in Linux environments

Discover standards and techniques to verify network and system security and ensure they are securely set up.

Modules:

• Cryptography
• Symmetric or secret key encryption
• Asymmetric or private key encryption
• hasg functions
• Digital signature and digital certificates
• Introduction to cybersecurity auditing
• Audit function in the company
• Types of audit
• The cybersecurity auditor
• Fieldwork and microplanning
• Auditable universe
• Microplanning
• Generating a deliverable
• Generating a report
• Cybersecurity audit tools & case studies
• Own tools
• Market tools
• Real cases

Developing cybersecurity incident response plans, using identification, containment, and recovery techniques.

Modules:

• Introduction to incident management
• Incident response process
• Incident response team
• Cybersecurity Operations Centre (SOC)
• Organization, roles, and responsibilities
• Cybersecurity incident management
• Incident identification and classification
• Digital forensics
• Incident reporting and response
• Containment and response case studies
• Cyberintelligence
• Evidence collection and analysis
• Reporting and lessons learned
• Threat intelligence
• Good practice in incident management
• Risk prevention and mitigation strategies
• Tools and technologies
• The role of staff awareness and training
• Regulatory and reference frameworks

Application of forensic analysis methodologies and tools characterizing the preservation, collection, analysis and documentation phases.

Modules:

• Use of forensic tools
• Digital forensic tools
• Digital data acquisition
• File system analysis and data recovery
• Automation and scripting
• DFIR on on-premise and cloud servers
• Fundamentals
• Cloud harvesting techniques
• Analysis of security logs and events
• Security incidents
• Dark Web and forensics
• Secure access
• Anonymity and cryptography
• De-anonymisation systems
• Forensic analysis of e-mail servers
• Fundamentals
• Phishing and malware tracking
• Message retrieval and analysis
• Case study