Are you looking to learn the basics of information security management? Are you a business , corporate entity or aspiring IT professional that needs to better understand on how information security works? If so, this is the perfect course for you!
This certification covers -
Identify malicious software and implement countermeasures
Identify common attacks and develop appropriate countermeasures
Recognize social engineering and reduce the risks associated with it
Recognize threats and types of attacks on wireless networks
Recognize threats and types of attacks on web applications
What risk management is
How BIA, BCP, and DRP differ one another and how they are the same
How to describe the impact of risks, threat, and vulnerabilities on an organization
How to close the information security gap
How to mitigate risk and achieve compliance with laws, regulations, and requirements
How to keep private data confidential
How to mitigate the risk of mobile workers and use of personal devices
What security administration is
What compliance is
What professional ethics are
What the infrastructure for an IT security policy is
What data classification standards are
What configuration management is
What the change management process is
What the system life cycle (SLC) and System development life cycle (SDLC) are
How software development relates to security
What standards organizations apply to information security
What ISO 17799 is
What ISO/IEC 27002 is
What PCI DSS is
What security auditing and analysis are
How to define your audit plan
What auditing benchmarks are
How to collect audit data
Which post-audit activities you need to perform
How to perform security monitoring
Which typed of log information you should capture
How to verify security controls
How to monitor and test your security systems
How risk management relates to data security
What the process of risk management is
What a risk assessment is
What the differences are between the quantitative and qualitative approaches to risk assessment
How to develop a strategy for managing risk
What countermeasures are and what factors you must consider when evaluating them
What the 3 types of activity controls and how they correspond to the security life cycle
What a business continuity plan (BCP) is and how organizations use it to make sure a disruption doesn't put them out of business
What role backups play in disaster recovery
What steps you should take to respond to security incidents
What a disaster recovery plan (DRP) does
What the primary steps to disaster recovery are
What the Open Systems Interconnection (OSI) Reference Model is
What the main types of networks are
What TCP/IP is and how it works
What network security risks are
What basic network security defense tools are
How wireless networks work and what threats they pose to network security
ISO/IEC 27001 is the world's best-known standard for information security management systems (ISMS). It defines requirements an ISMS must meet.
The ISO/IEC 27001 standard provides companies of any size and from all sectors of activity with guidance for establishing, implementing, maintaining and continually improving an information security management system.
Conformity with ISO/IEC 27001 means that an organization or business has put in place a system to manage risks related to the security of data owned or handled by the company, and that this system respects all the best practices and principles enshrined in this International Standard.
Implementing ISO/IEC 27001 means your organization has put in place effective processes and trained staff to implement and maintain information security measures from time after time.
With cyber-crime on the rise and new threats constantly emerging, it can seem difficult or even impossible to manage cyber-risks. ISO/IEC 27001 helps organizations become risk-aware and proactively identify and address weaknesses.
ISO/IEC 27001 promotes a holistic approach to information security: vetting people, policies and technology. An information security management system implemented according to this standard is a tool for risk management, cyber-resilience and operational excellence.
As the Admin of our platform, I bring over a decade of experience in managing and leading digital transformation initiatives. My journey began in the tech industry as a developer, and I have since evolved into a strategic leader with a focus on innovation and operational excellence. I am passionate about leveraging technology to solve complex problems and drive organizational growth. Outside of work, I enjoy mentoring aspiring tech professionals and staying updated with the latest industry trends.
No Review found