Description

Course: Security Essentials

About this course

The class is broken up into three broad sections, awareness, threats (offense), and remediation (defense). The course is taught by a CISSP with over a decade of experience in the Security field and provides a jumping off point for further study of Security concepts, Ethical Hacking, Secure Coding, and/or Security Management. The security landscape is always changing and the course includes discussions of current exploits and security events in the news.

Audience Profile

This course is designed for individuals with an IT background but limited security experience and is relevant for both managers and practitioners alike.

At Course Completion

The student will have a good high-lever understanding of security issued faced by organizations and jumping off point for further study of Security concepts, Ethical Hacking, Secure Coding, and/or Security Management.

Course Outline

DAY 1: Security Awareness – Review of ISO 27002

• Structure
• Security Policy
• Organization of Information Security
• Human Resources Security
• Asset Management
• Access Control
• Cryptography
• Physical and Environmental Security
• Operations security
• Communications Security
• Information Systems Acquisition, Development, Maintenance
• Supplier Relationships
• Information Security Incident management
• Information Security Aspects of Business Continuity
• Compliance

DAY 2: Attack Methodology (Offense)

• Reconnaissance
• Scanning Networks
• Gain Access
• Maintain Access
• Clearing Tracks

DAY 3: Security Domains (Defense)

Review of portions of the CISSP Common Body of Knowledge (CBK) as they relate to securing the computing environment, defending against attacks, and responding to attack.

• Asset Security (Protecting Security of Assets)
• Security Engineering (Engineering and Management of Security)
• Communication and Network Security (Designing and Protecting Network Security)
• Identity and Access Management (Controlling Access and Managing Identity)
• Software Development Security (Understanding, Applying, and Enforcing Software Security)

Prerequisites

Students should have an IT background as a practitioner or manager.