Cyber Security Certification Training Course

Introduction to Cybersecurity 

• The evolution of Cybersecurity 
• Cybersecurity & situational awareness 
• The Cybersecurity skills gap

Difference between Information Security & Cybersecurity 

• Protecting digital assets 

Cybersecurity objectives 

• Confidentiality, integrity, & availability 
• Nonrepudiation

Cybersecurity Roles 

• Governance, risk management, & compliance 
• What does a Cybersecurity professional do? 
• Information Security roles 
• Board of Directors 
• Executive management 
• Senior Information security management 
• Cybersecurity practitioners 

Risk 

• Approaches to Cybersecurity 
• Key terms & definitions 
• Likelihood & impact 
• Approaches to risk 
• Third-party risk 
• Risk management

Common Attack Types & Vectors 

• Threat agents 
• Attack attributes 
• Generalized attack process 
• Non-adversarial threat events 
• Malware & attack types 

Policies & Procedures 

• Policy life cycle 
• Guidelines 
• Policy frameworks 
• Types of Information Security policies 
• Access control policy 
• Personnel Information Security policy 
• Security incident response policy 

Cybersecurity Controls 

• Identity management 
• Provisioning & de-provisioning 
• Authorization 
• Access control lists 
• Privileged user management 
• Change management 
• Configuration management 
• Patch management 

Overview of security architecture 

• The security perimeter 
• Interdependencies 
• Security architectures & frameworks 
• SABSA & the Zachman framework 
• The open group architecture framework (TOGAF)

The OSI model 

• TCP/IP 

Defense in Depth  

Firewalls 

• Firewall general features 
• Network firewall types 
• Packet filtering firewalls 
• Stateful inspection firewalls 
• Stateless vs. stateful 
• Examples of firewall implementations 
• Firewall issues 
• Firewall platforms 

Isolation & segmentation 

• VLANs 
• Security zones & DMZs 

Monitoring, Detection, and Logging 

• Ingress, egress, & data loss prevention (DLP) 
• Antivirus & anti-malware 
• Intrusion detection systems 
• IDS limitations 
• IDS policy 
• Intrusion prevention systems 

Cryptography Fundamentals 

• Key elements of cryptographic systems 
• Key systems 

Encryption Techniques 

• Symmetric (private) key encryption 
• Asymmetric (private) key encryption 
• Elliptical curve cryptography 
• Quantum cryptography 
• Advanced encryption standard 
• Digital signature 
• Virtual private network 
• Wireless network protection 
• Stored data 
• Public key infrastructure 

Encryption Applications 

• Applications of cryptographic systems 

Process Controls – Risk Assessments 

• Attributes of risk 
• Risk response workflow 
• Risk analysis 
• Evaluating security controls 
• Risk assessment success criteria 
• Managing risk 
• Using the results of the risk assessment 

Process Controls – Vulnerability Management 

• Vulnerability management 
• Vulnerability scans 
• Vulnerability assessment 
• Remediation 
• Reporting & metrics 

Process Controls – Penetration Testing 

• Penetration testers
• Penetration testing phases  

Network Security 

• Network management 
• LAN/WAN security 
• Network risks 
• Wireless local area networks 
• Wired equivalent privacy & Wi-Fi protected access (WPA/WPA2) 
• Ports & protocols 
• Port numbers 
• Protocol numbers & assignment services 
• Virtual private networks 
• Remote access 

Operating System Security

• System/platform hardening 
• Modes of operations 
• File system permissions 
• Credentials & privileges 
• Command-line knowledge 
• Logging & system monitoring 
• Virtualization 
• Specialized systems

Application Security 

• System development life cycle (SDLC) 
• Security within SDLC 
• Design requirements 
• Testing 
• Review process  
• Separation of development, testing, & production environments 
• OWASP top ten 
• Wireless application protocol (WAP)

Data Security 

• Data classification 
• Data owners 
• Data classification requirements 
• Database security 

Event vs. Incident 

• Events vs. incident 
• Types of incidents 

Security Incident Response 

• What is the incident response? 
• Why do we need an incident response? 
• Elements of an incident response plan 
• Security event management 

Investigations, Legal Holds, & Preservation 

• Investigations 
• Evidence preservation 
• Legal requirements 

Forensics 

• Data protection 
• Data acquisition 
• Imaging 
• Extraction 
• Interrogation 
• Ingestion/normalization 
• Reporting 
• Network traffic analysis 
• Log file analysis 
• Time lines 
• Anti-forensics 

Disaster recovery & business continuity plans 

• What is a disaster? 
• Business continuity & disaster recovery 
• Business impact analysis 
• Recovery time objectives (RTO) 
• Recovery point objective (RPO) 
• IS business continuity planning 
• Recovery concepts 
• Backup procedures 

Current Threat Landscape  Advanced persistent threats (APT’s) 

• Evolution of the threat landscape 
• Defining APTs 
• APT characteristics 
• APT targets 
• Stages of an APT attack 

Mobile Technology – Vulnerabilities, Threats, & Risk 

• Physical risk 
• Organizational risk 
• Technical risk 
• Activity monitoring & data retrieval 
• Unauthorized network connectivity 
• Web view/user interface (UI) impersonation
• Sensitive data leakage 
• Unsafe sensitive data storage 
• Unsafe sensitive data transmission 
• Drive-by vulnerabilities 

Consumerization of IT & Mobile Devices 

• Consumerization of IT 
• BYOD 

Cloud & Digital Collaboration 

• Risk of cloud computing 
• Web application risk 
• Benefits of cloud computing