Introduction:

This course serves as an in depth introduction to the field of Information Security - it is not aligned to a specific examination or vendor accreditation and therefore the content can be updated on a regular basis. The course allows delegate extensive hands-on experience with a variety of security software and techniques. The content is vendor-agnostic and focuses on general information security. This course is designed for IT professionals and technical managers who want to understand key IT security issues and how best to address them. The course will also be of benefit to IT systems analysts, designers and software developers.

Course Objectives:

By the end of this course, delegates will be able to:

• Understand the IT security threats faced by a modern network
• Understand the techniques used to mitigate these threats
• Respond to IT security incidents
• Understand IT security policies
• Understand cryptography and its uses
• Understand authentication mechanisms
• Understand the importance of physical security
• Understand the compliance and legal requirements of an organization

Who Should Attend?

IT Engineers, IT Professionals, IT Directors, Engineers, IT Project Managers, IT Auditors, IT Compliance Managers, IT Coordinators, IT Support Managers, IT Officers, IT Support Specialists, IT System Administration, Technical Support Professionals, Chief Information Officers, Chief Risk Officers, Information Assurance Officers, Program Managers, Network Systems Analysts, Government Program Managers, R&D Project Managers, Software and System Developers, Chief Security Officers, Security Specialists, Chief Information Security Officers, Directors of Security, Security Architects, Security Operation Center Managers, Security Consultants, Security Managers, Security Auditors, Security Directors, Systems Administrators, Incident Response Analysts, Business Owners, Security Analysts, Security Systems Engineer, Network Architect, Operations Managers, Risk Management Professionals, Network Administration Professionals, Application Developers, Application Support Analysts, Application Engineers, Associate Developers, Technology Officers, Information Officers, Help Desk Specialist, Help Desk Technician, Database Administrators, Network Architects, Network Engineers, Network System Administrators, System Analysts, System Architects, System Designers

Course Outline:

Introduction to Information Security

• Information Security fundamentals
• Information Security models
• IS standards
• Attack overviews

Risk Management

• Risk management process
• Risk analysis
• Risk control

Operating System Security

• Popular operating systems
• OS hardening
• Vulnerabilities and the patch cycle
• OS scanning

Access Control

• Types of access control
• Physical access
• Controlling resource access
• Microsoft Windows NTFS
• Linux ext3/4
• Cloud security

Encryption

• Introduction to cryptography
• Hashing
• Encrypting stored data
• Digital signatures
• Public Key Infrastructure (PKI)
• Encrypting network data
• Transport Layer Security
• Virtual private networks

Authentication

• Authentication mechanisms
• Good password strategies
• Microsoft Windows Kerberos
• Attacking Windows authentication
• Linux authentication mechanisms
• Certificate-based authentication
• Biometric authentication

Legal Compliance & Security Policies

• UK legal regulations
• The role of security policies
• Writing security policies
• Ensuring business continuity

Application Security

• General guidelines for application security
• Securing web applications
• Securing mail applications
• Securing databases

Malware

• Types of malware
• Malware detection
• Malware removal
• Trojans
• Rootkits
• Botnets
• Spam delivery

Perimeter Security

• Network designs
• Mobile workers
• Firewalls
• Proxy servers

Attacking TCP/IP

• Weaknesses in TCP/IP
• Securing network devices
• IPSec
• Network Intrusion Detection
• SNORT

Wireless Network Security

• Introduction to wireless networking
• Problems with WEP
• WPA2
• Mobile IP

COURSE LOCATIONS