Course Description & Learning Outcomes

During Day 1 of the workshop, the participants will discover that they have the capacity to enhance their thinking process based on Critical Thinking methodology and apply the learning to develop robust solutions to the problems they face in the Engineering and Technology industry. 

Day 1 Objectives

1. To equip Engineers and Engineering Leaders with a practical knowledge in critical thinking

2. To enable Engineers and Engineering Leaders to understand their habitual thinking and mental blocks that may be preventing them to think effectively

3. To enable Engineers to cope with new problems and complex decisions in a volatile world with critical thinking

In today's interconnected world, Engineers and Engineering leaders often collaborate with colleagues and clients from diverse cultural backgrounds. Having strong emotional intelligence, effective communication and cultural awareness are indispensable skills for establishing robust working relationships and ensuring success in Engineering projects with diverse teams. Participants will become better prepared to facilitate inclusive collaborations, cultivate strong relationships among team members, and contribute meaningfully to achieve success in complex and/or global Engineering projects.

During Day 2 of the workshop, the program is designed to equip Engineers and Engineering Leaders with the essential tools they require to navigate cross-cultural interactions with sensitivity, empathy, and a profound grasp of emotional intelligence

Day 2 Objectives

1.    To equip Engineers and Engineering Leaders with a heightened understanding of emotional intelligence, fortified cross-cultural communication skills

2.    To gain confidence to adeptly navigate diverse engineering environments with empathy and cultural sensitivity

3.    To be better prepared to facilitate inclusive collaborations, cultivate strong relationships among team members, and contribute meaningfully to achieve success in complex and/or global Engineering projects

This Professional Development Program is delivered by one of our professional trainers with substantial experiences in the use of thinking skills and applying emotional intelligence, the participants are expected to walk away with a good understanding of how they could apply these skills at work.

Course Fees (including GST)

IES Members: $700 / Non-Members: $900

Please click HERE for Course Flyer & Registration Form

Course Description & Learning Outcomes

Objectives:

1. To equip Engineers and Engineering Leaders with a practical knowledge of accounting and finance

2. To build a foundation for Tech Venture founders knowledge in accounting, finance and fundraising

3. To encourage self-learning by Engineers in the areas of corporate finance and financial planning for Engineering and Technology companies

At the end of workshop, participants will be able to:

• Understanding and analysing financial statements for insights and effective decision making for Engineering and Technology Companies

• Understand Financial Modelling and how to apply it to business planning in Engineering and Technology Companies

• Understand what is share equity and maximising shareholder value

• Understand how to do Fundraising for growth, options for source funds

• Understand what is good financial planning and control and the key to building successful Engineering and Technology companies 

• Understand Taxation and other regulatory requirements in Singapore and how to make better financial plans for Engineering & Technology companies

Course Fees (including 9% GST): IES Members: $400 Non-Members: $500

Please click HERE for Course Flyer & Registration Form

Course Description & Learning Outcomes

This workshop also covers the topic on How To Be An Effective Boss. This will provide Engineers interesting insights on how to manage your workforce and how your workforce thinks.

Objectives:

• Identify your Business Needs

• How to Introduce, Develop and Retain your Engineering Talents

• Understand Your Workforce

• How To Be An Effective Boss in an Engineering & Technology Firm

Course Outline

The one (1) day workshop will cover the following:

1.    Understand Your Business

2.    Process of Business Needs Analysis

3.    How to Identify and Validate Talent’s Capabilities & Competencies

4.    How to Introduce Talents into Your Engineering & Technology Business

5.    How to Develop and Retain Talents

6.    Case Studies of Engineering & Technology Companies

7.    Understand Your Workforce (Baby Boomers, Gen X,Y,Z)

8.    How To Be An Effective Boss, managing engineering talent

Course Fees (including GST):

IES Members: $400 / Non-Members: $500

Sign up before 29th May 24 for early bird 10% discount; Email [email protected] to enquire

Please click HERE for Course Flyer & Registration Form, fill up and email to [email protected] to register.

Course Description & Learning Outcomes

Course Outline

The 5-day course heavily focuses on the eight fundamental domains of Information Security.

Domain 1: Risk and Security Management

1.1 Understand and apply concepts of integrity, confidentiality and availability

1.2 Assess and apply security governance principles

1.3 Establish compliance requirements

1.4 Understand regulatory and legal issues that concern information security in a global context

1.5 Understand, promote, and adhere to professional ethics

1.6 Develop, document, and implement security policy, procedures, standards and guidelines

1.7 Analyse, identify and prioritise Business Continuity (BC) requirements

1.8 Enforce and contribute to personnel security guidelines and procedures

1.9 Apply and understand risk management concepts

1.10 Apply and understand threat modelling methodologies and concepts

1.11 Implement risk-based management concepts in the supply chain

1.12 Maintain and establish a security education, awareness and training program

Domain 2: Asset Security

2.1 Identify and classify assets and information

2.2 Determine and maintain asset ownership and information

2.3 Protect privacy

2.4 Ensure proper asset retention

2.5 Determine data security controls

2.6 Establish information and asset handling requirements

Domain 3: Security Architecture and Engineering

3.1 Manage and Implement engineering processes using secure design principles

3.2 Recognise the basic concepts of security models

3.3 Select controls based on systems security requirements

3.4 Recognise security capabilities of information systems (e.g., encryption/decryption, memory protection, Trusted Platform Module (TPM),

3.5 Mitigate and assess the vulnerabilities of security architectures, solution elements and designs

3.6 Mitigate and assess weaknesses in web-based systems

3.7 Mitigate and assess weaknesses in mobile systems

3.8 Mitigate and assess weaknesses in embedded devices

3.9 Apply cryptography

3.10 Apply security principles to facility and site design

3.11 Implement facility and site security controls

Domain 4: Communication and Network Security

4.1 Apply secure design concepts in network architectures

4.2 Secure network components

4.3 Apply secure communication channels according to design

Domain 5: Identity and Access Management (IAM)

5.1 Control logical and physical access to assets

5.2 Manage authentication and identification of people, devices, and service

5.3 Integrate identity as a third-party service

5.4 Manage and implement authorisation mechanisms

5.5 Manage the identity and access provisioning lifecycle

Domain 6: Security Assessment and Testing

6.1 Design and verify tests, assessments and audit strategies

6.2 Manage security control testing

6.3 Manage security process data (e.g., technical and administrative)

6.4 Examine test output and generate a report

6.5 Manage or facilitate security audits

Domain 7: Security Operations

7.1 Support and understand investigations

7.2 Understand requirements for investigation types

7.3 Conduct monitoring and logging activities

7.4 Securely provisioning resources

7.5 Apply and understand foundational security operations concepts

7.6 Apply resource protection techniques

7.7 Conduct incident management

7.8 Maintain and operate detective and preventive measures

7.9 Support and implement patch and vulnerability management

7.10 Understand and Engage in change management processes

7.11 Apply recovery strategies

7.12 Apply Disaster Recovery (DR) processes

7.13 Test Disaster Recovery Plans (DRP)

7.14 Participate in Business Continuity (BC) exercises and planning

7.15 Manage and implement physical security

7.16 Address security concerns and personnel safety

Domain 8: Software Development Security

8.1 Understand and incorporate security in the Software Development Life Cycle (SDLC)

8.2 Recognise and apply security controls in development environments

8.3 Evaluate the benefits of software security

8.4 Evaluate the security impact of acquired software

8.5 Define and implement secure coding standards and guidelines

For more information, please click here.

Course Description & Learning Outcomes

The CISA course is conducted over four days, and the content is organised into five domains. Topics covered in each of the domains are as shown below:

Domain 1: Information System Auditing Process

• Planning

  - IS Audit Standards, Guidelines, and Codes of Ethics

  - Types of Controls

  - Types of Audits and Assessments

  - Risk-Based Audit Planning

  - Business Processes

• Execution

  - Data Analytics

  - Quality Assurance and Improvement of the Audit Process

  - Sampling Methodology

  - Audit Evidence Collection Techniques

  - Audit Project Management

  - Reporting and Communication and Reporting Techniques

Domain 2: Governance and Management of IT 

•  IT Governance

  - IT Strategy and IT Governance

  - IT-Related Frameworks

  - IT Policies, Procedures and Standards

  - Organisational Structure

  - Enterprise Architecture

  - Enterprise Risk Management

  - Maturity Models

  - Organisation Affecting Laws, Regulations, and Industry Standards

• IT Management

  - IT Resource Management

  - IT Service Provider Management and Acquisition

  - IT Performance Monitoring and Reporting

  - Quality Assurance and Quality Management of IT

Domain 3: Information Systems Acquisition, Development and implementation 

• Quality Assurance and Quality Management of IT

  - Project Management and Governance

  - Feasibility Analysis and Business Case

  - System Development Methodologies

  - Control Identification and Design

• Implementation of Information Systems

  - Testing Methodologies

  - Configuration and Release Management

  - System Migration, Infrastructure Deployment, and Data Conversion

  - Post-implementation Review

Domain 4: Business Resilience and Information Systems Operation

• Information Systems Operations

  - Common Technology Components

  - IT Asset Management

  - Production Process Automation and Job Scheduling

  - System Interfaces

  - End-User Computing

  - Data Governance

  - Systems Performance Management

  - Problem and Incident Management

  - Configuration, Change, Release, and Patch Management

  - IT Service Level Management

  - Database Management

•  Business Resilience

  - Business Impact Analysis (BIA)

  - System Resiliency

  - Data Backup, Storage, and Restoration

  - Business Continuity Plan (BCP)

  - Disaster Recovery Plans (DRP)

Domain 5: Protection of Information Assets 

• Information Asset Security and Control

  - Information Asset Security Frameworks, Standards, and Guidelines

  - Privacy Principles

  - Environmental Controls and Physical Access

  - Identity and Access Management

  - Network and End-Point Security

  - Data Classification

  - Data Encryption and Encryption-Related Techniques

  - Public Key Infrastructure (PKI)

  - Web-Based Communication Techniques

  - Virtualised Environments

  - Wireless, Mobile, and Internet-of-Things (IoT) Devices

•  Security Event Management

  - Security Awareness Programs and Trainings

  - Information System Attack Techniques and Methods

  - Security Testing Techniques and Tools

  - Security Monitoring Techniques and Tools

  - Incident Response Management

  - Forensics and Evidence Collection

At the end of this course you will:

- Understand the methodology, phases and activities required to plan, assess risk, conduct an audit and communicate the audit progress, findings and recommendations, including relevant considerations for CISA certification in Singapore.

- Understand the methodology and activities required for IT Strategy Alignment, IT Organisational structure, Implementation and Management of T policies and policies and Practices Compliance to regulatory and legislation requirements and knowledge to evaluate their effectiveness.

- Understand the definitions, methodology and activities required for systems development life cycle, systems implementation and knowledge required to evaluate their effectiveness.

- Understand the definitions, methodology and phases involved in Business continuity, IT Service Operations.

- Understand the components of Physical Security, Logical Access Security, data classification, data life cycle, Security Controls, Threat and Vulnerability Assessment, Security Testing, Security Operations, Security Incident Process, and evaluate their effectiveness, aligning with the principles covered in a CISA course.