COURSE OUTLINE 

​

Threats and Vulnerabilities

• Threats

• Physical Threats

• Vulnerabilities

The Information Security Manager

• Information Security Job Roles

• Training, Experience, and Professionalism

• Started in Security Management

Organizational Security

• Security in Organizational Structures

• Working with Specialist Groups

• Working with Standards and Regulations

• Working with Risk Management

• Working with Enterprise Architecture

• Working with Facilities Management

Information Security Implementation

• Integration with Risk Management

• Secure Development

• Organizational Interfaces

• Post Implementation

Standards, Frameworks, Guidelines, and Legislation

• Why Do We Need Standards?

• Legislation

• ISO/IEC 27000 Series of Standards

• Business Continuity

• Risk Management Standards

Protection of Information

• Information Classification

• Identification, Authentication, and Authorization

Protection of People

• Human Vulnerabilities

• Building a Security Culture

• Personnel Security Life Cycle

Protection of Premises

• What Is Physical Security?

• Start with a Risk Assessment

• Perimeter Design

• Internal Building Security

Protection of Systems

• Introducing Malware

• Threat Vectors

• Technical Countermeasures

• Network Security

Digital Evidence and Incident Response

• The Digital Forensic Process

• Forensic Readiness

• Incident Response and Digital Investigations

• Investigating a Malware Outbreak

Cloud Computing Security

• Cloud Computing

• Cloud Security

• Cloud Security Architectures

• Old Threat with New Targets

• Virtualization

Secure Systems Development

• Secure Development

• Secure Development Business Processes

• Security Testing

• Auditing