Course Description & Learning Outcomes

You will learn about computer forensics and its role in handling and responding to incidents.

The course also covers incident response teams, incident reporting methods, and incident recovery techniques in detail.

Module 01: Introduction to Incident Response and Handling

Module 02: Risk Assessment

Module 03: Incident Response and Handling Steps

Module 04: CSIRT

Module 05: Handling Network Security Incidents

Module 06: Handling Malicious Code Incidents

Module 07: Handling Insider Threats

Module 08: Forensic Analysis and Incident Response

Module 09: Incident Reporting

Module 10: Incident Recovery

Module 11: Security Policies and Laws

At the end of this course, you will be able to create incident handling and response policies and deal with various types of computer security incidents. You will be proficient in handling and responding to various security incidents such as network security  incidents, malicious code incidents, and insider attack threats.

For more information, please click here.

Course Description & Learning Outcomes

Course Outline

Some of the core topics featured in the CISM course syllabus include:

Introduction

- CISM Certification Prerequisites

- Examination information

- CISM Certification Application

- CISM Certification Maintenance and Renewal

Domain 1 : Information Security Governance

- Introduction and Benefits of Information Security Governance

- Components of Governance Framework

- Roles & Responsibilities

- Information Security Metrics

- Information Security Strategy Frameworks

- Information Security Implementation Program Frameworks

Domain 2 : Information Risk Management and Compliance

- Topics

- Introduction

- Information Asset Classification and Protection

- Roles & Responsibilities

- Introduction to Risk Management

- Risk Management Process

- Risk Identification

- Risk Treatment

- Controls

- Risk Monitoring and Analysis

- HR Risk

- Risk Reporting

Domain 3 : Information Security Programme Development and Management

- Introduction

- Outcomes

- IS Program

- Framework Components

- IS Program Roadmap

- Information Security Infrastructure and Architecture

- Security Program Management Administration

- Services and Operational Activities

- Controls

- Review and Audit

Domain 4 : Information Security Incident Management

- Introduction

- Objectives

- Incident Management Procedures

- Developing Incident Response Plan

- Roles and Responsibilities

- Content of the Incident Response Plan

- Disaster Recovery Procedures and Business Continuity

Examination Preparation and Techniques

- Administration

- Techniques

- Tips and Hints

- FAQ

For more information, please click here

Course Description & Learning Outcomes

Course Outline

1. Security Fundamentals

   - Information Security Controls & Cycle

   - Fundamentals of Cryptography

   - Fundamentals of Security Policy

   - Methods of Authentication

2. Identifying Security Threats and Vulnerabilities

   - Malware

   - Social Engineering

   - Software-Based Threats

   - Network-Based Threats

   - Physical Vulnerabilities and Threats

   - Wireless Vulnerabilities and Threats

3. Managing Data, Application, and Host Security

   - Manage Data Security

   - Manage Application Security

   - Manage Device and Host Security

   - Manage Mobile Security

4. Implementing Network Security

   - Configure Security Parameters on Network Devices and Technologies

   - Network Design Components and Elements

   - Secure Wireless Traffic

   - Apply Principles of Secure Network Administration

   - Implement Networking Services and Protocols

5. Implementing Account Management, Access Control and Authentication

   - Implement Account Management Security Controls

   - Authentication Services and Access Control

6. Managing Certificates

   - Install a Certificate Authority (CA) Hierarchy

   - Enrol Certificates

   - Secure Network Traffic by Using Certificates

   - Restore and Back Up Certificates and Private Keys

   - Revoke and Renew Certificates

   - Restore Certificates and Private Keys

7. Implementing Compliance and Operational Security

   - Physical Security

   - Legal Compliance

   - Security Training and Awareness

   - Integrate Systems and Data with Third Parties

8. Management of Risk

   - Risk Analysis

   - Implement Vulnerability Assessment Tools and Techniques

   - Scan for Vulnerabilities

   - Mitigation and Deterrent Techniques

9. Managing and Troubleshooting Security Incidents

   - Recover from a Security Incident

   - Respond to Security Incidents

10. Business Continuity and Disaster Recovery Planning

    - Business Continuity

    - Plan for Disaster Recovery

Threats, Vulnerabilities & Mitigations

This course focuses on responding to common threats, security incidents, vulnerabilities, and cyberattacks, as well as effective mitigation strategies and safeguarding hybrid settings.

Security Architecture

Includes security implications of various architecture models, enterprise infrastructure security concepts, and data protection measures.

General Security Concepts

Includes fundamental cybersecurity concepts and language to lay the groundwork for security controls reviewed throughout the examination.

Security Program Management & Oversight

Updated to better represent the communication and reporting abilities necessary for Security+ job responsibilities in compliance, governance, assessment, security awareness and risk management.

Security Operations

This includes implementing and improving security and vulnerability management approaches, as well as understanding the security implications of proper software, hardware, and data management.

Fo more information, please click here.

Course Description & Learning Outcomes

In its 11th version, CEH continues to evolve, adapting to the newest operating systems, 

exploits, tools, technologies and strategies. Here are some significant enhancements introduced in CEH v11.

- Incorporating Parrot Security OS

- Re-Mapped to NIST/NICE Framework

- Enhanced Cloud Security, IoT, and OT Modules

-  Modern Malware Analysis

- Covering the Latest Threats – Fileless Malware

- New Lab Designs and Operating Systems

- Increased Lab Time and Hands−on Focus

- Industry’s Most Comprehensive Tools Library

What You Will Learn ?

- Key issues plaguing the information security world include ethical hacking, information security controls, laws, and standards.

- Conduct foot printing and reconnaissance utilising cutting-edge techniques and tools as an essential pre-attack phase required in ethical hacking.

- Network scanning countermeasures and techniques.

- Enumeration countermeasures and techniques.

- Conducting vulnerability analysis, which involved identifying security weaknesses within the network, communication infrastructure, and end systems of the target organization.

- Unveiling system and network weaknesses using techniques such as steganalysis attacks, system hacking methodology, covering traced and steganography.

- Social engineering techniques and how to identify theft attacks to audit human- level vulnerabilities and suggest social engineering countermeasures.

- DoS/DDoS tools and attack techniques to audit a target and DoS/DDoS countermeasures.

- Various forms of malware (such as Trojans, viruses, worms, etc.), conducting system audits to detect malware attacks, analysing malware, and implementing countermeasures.

- Countermeasures, session hijacking techniques to uncover session management at network-level, authentication/authorisation, and cryptographic weaknesses.

- Packet sniffing techniques to discover network vulnerabilities and countermeasures to defend sniffing.

- Assessing vulnerabilities in web applications involves utilizing a comprehensive web application hacking methodology to identify web application attacks and implementing appropriate countermeasures.

- Countermeasures, injection detection tools to detect SQL injection attempts, and SQL injection attack techniques.

- Web server attacks and a comprehensive attack methodology to audit vulnerabilities in web server infrastructure, and countermeasures.

- IDS, honeypot and firewall evasion techniques, evasion tools and techniques to audit a network perimeter for weaknesses, and countermeasures.

- Attack vectors on mobile platforms, exploits targeting Android vulnerabilities, and guidelines along with tools for enhancing mobile security.

- Discover potential risks targeting IoT and OT platforms and acquire strategies for securely safeguarding IoT and OT devices.

- Wireless encryption, wireless hacking tools, wireless hacking methodology, and Wi-Fi security tools.

- Penetration testing, security audit, vulnerability assessment, and penetration testing roadmap.

- Public Key Infrastructure (PKI), cryptography ciphers, cryptanalysis tools, and cryptography attacks.

- Cloud computing concepts (Server less computing, container technology), various threats/attacks, and security techniques and tools.

Course Outline

- Introduction to Ethical Hacking

- Reconnaissance and Foot printing

- Scanning Networks
 Enumeration

- Vulnerability Analysis

- Malware Threats

- System Hacking

- Session Hijacking

- Honeypots, firewalls and IDS

- SQL Injection

- Hacking Wireless Networks

- Hacking Web Applications

- Hacking Mobile Platforms

- Hacking Web Servers

- Sniffing

- IoT Hacking

- Cloud Computing

- Social Engineering
 Denial-of-Service

- Cryptography

The objective of this funded CEH course is to assist you in becoming a master of ethical hacking methodology that can be used in an ethical hacking or penetration testing situation. Our expert-led, funded programs can elevate your cybersecurity journey. With online flexibility and comprehensive content, become a certified ethical hacker ready for any penetration testing scenario, all through our convenient online training courses.

At the end of this course, you will be prepared for EC-Council Certified Ethical Hacker exam 312-50.

For more information, please click here.

Course Description & Learning Outcomes

You will learn about computer forensics and its role in handling and responding to incidents.

The course also covers incident response teams, incident reporting methods, and incident recovery techniques in detail.

Module 01: Introduction to Incident Response and Handling

Module 02: Risk Assessment

Module 03: Incident Response and Handling Steps

Module 04: CSIRT

Module 05: Handling Network Security Incidents

Module 06: Handling Malicious Code Incidents

Module 07: Handling Insider Threats

Module 08: Forensic Analysis and Incident Response

Module 09: Incident Reporting

Module 10: Incident Recovery

Module 11: Security Policies and Laws

At the end of this course, you will be able to create incident handling and response policies and deal with various types of computer security incidents. You will be proficient in handling and responding to various security incidents such as network security  incidents, malicious code incidents, and insider attack threats.

For more information, please click here.

Course Description & Learning Outcomes

Course Outline

1. Security Fundamentals

   - Information Security Controls & Cycle

   - Fundamentals of Cryptography

   - Fundamentals of Security Policy

   - Methods of Authentication

2. Identifying Security Threats and Vulnerabilities

   - Malware

   - Social Engineering

   - Software-Based Threats

   - Network-Based Threats

   - Physical Vulnerabilities and Threats

   - Wireless Vulnerabilities and Threats

3. Managing Data, Application, and Host Security

   - Manage Data Security

   - Manage Application Security

   - Manage Device and Host Security

   - Manage Mobile Security

4. Implementing Network Security

   - Configure Security Parameters on Network Devices and Technologies

   - Network Design Components and Elements

   - Secure Wireless Traffic

   - Apply Principles of Secure Network Administration

   - Implement Networking Services and Protocols

5. Implementing Account Management, Access Control and Authentication

   - Implement Account Management Security Controls

   - Authentication Services and Access Control

6. Managing Certificates

   - Install a Certificate Authority (CA) Hierarchy

   - Enrol Certificates

   - Secure Network Traffic by Using Certificates

   - Restore and Back Up Certificates and Private Keys

   - Revoke and Renew Certificates

   - Restore Certificates and Private Keys

7. Implementing Compliance and Operational Security

   - Physical Security

   - Legal Compliance

   - Security Training and Awareness

   - Integrate Systems and Data with Third Parties

8. Management of Risk

   - Risk Analysis

   - Implement Vulnerability Assessment Tools and Techniques

   - Scan for Vulnerabilities

   - Mitigation and Deterrent Techniques

9. Managing and Troubleshooting Security Incidents

   - Recover from a Security Incident

   - Respond to Security Incidents

10. Business Continuity and Disaster Recovery Planning

    - Business Continuity

    - Plan for Disaster Recovery

Threats, Vulnerabilities & Mitigations

This course focuses on responding to common threats, security incidents, vulnerabilities, and cyberattacks, as well as effective mitigation strategies and safeguarding hybrid settings.

Security Architecture

Includes security implications of various architecture models, enterprise infrastructure security concepts, and data protection measures.

General Security Concepts

Includes fundamental cybersecurity concepts and language to lay the groundwork for security controls reviewed throughout the examination.

Security Program Management & Oversight

Updated to better represent the communication and reporting abilities necessary for Security+ job responsibilities in compliance, governance, assessment, security awareness and risk management.

Security Operations

This includes implementing and improving security and vulnerability management approaches, as well as understanding the security implications of proper software, hardware, and data management.

Fo more information, please click here.

Course Description & Learning Outcomes

In its 11th version, CEH continues to evolve, adapting to the newest operating systems, 

exploits, tools, technologies and strategies. Here are some significant enhancements introduced in CEH v11.

- Incorporating Parrot Security OS

- Re-Mapped to NIST/NICE Framework

- Enhanced Cloud Security, IoT, and OT Modules

-  Modern Malware Analysis

- Covering the Latest Threats – Fileless Malware

- New Lab Designs and Operating Systems

- Increased Lab Time and Hands−on Focus

- Industry’s Most Comprehensive Tools Library

What You Will Learn ?

- Key issues plaguing the information security world include ethical hacking, information security controls, laws, and standards.

- Conduct foot printing and reconnaissance utilising cutting-edge techniques and tools as an essential pre-attack phase required in ethical hacking.

- Network scanning countermeasures and techniques.

- Enumeration countermeasures and techniques.

- Conducting vulnerability analysis, which involved identifying security weaknesses within the network, communication infrastructure, and end systems of the target organization.

- Unveiling system and network weaknesses using techniques such as steganalysis attacks, system hacking methodology, covering traced and steganography.

- Social engineering techniques and how to identify theft attacks to audit human- level vulnerabilities and suggest social engineering countermeasures.

- DoS/DDoS tools and attack techniques to audit a target and DoS/DDoS countermeasures.

- Various forms of malware (such as Trojans, viruses, worms, etc.), conducting system audits to detect malware attacks, analysing malware, and implementing countermeasures.

- Countermeasures, session hijacking techniques to uncover session management at network-level, authentication/authorisation, and cryptographic weaknesses.

- Packet sniffing techniques to discover network vulnerabilities and countermeasures to defend sniffing.

- Assessing vulnerabilities in web applications involves utilizing a comprehensive web application hacking methodology to identify web application attacks and implementing appropriate countermeasures.

- Countermeasures, injection detection tools to detect SQL injection attempts, and SQL injection attack techniques.

- Web server attacks and a comprehensive attack methodology to audit vulnerabilities in web server infrastructure, and countermeasures.

- IDS, honeypot and firewall evasion techniques, evasion tools and techniques to audit a network perimeter for weaknesses, and countermeasures.

- Attack vectors on mobile platforms, exploits targeting Android vulnerabilities, and guidelines along with tools for enhancing mobile security.

- Discover potential risks targeting IoT and OT platforms and acquire strategies for securely safeguarding IoT and OT devices.

- Wireless encryption, wireless hacking tools, wireless hacking methodology, and Wi-Fi security tools.

- Penetration testing, security audit, vulnerability assessment, and penetration testing roadmap.

- Public Key Infrastructure (PKI), cryptography ciphers, cryptanalysis tools, and cryptography attacks.

- Cloud computing concepts (Server less computing, container technology), various threats/attacks, and security techniques and tools.

Course Outline

- Introduction to Ethical Hacking

- Reconnaissance and Foot printing

- Scanning Networks
 Enumeration

- Vulnerability Analysis

- Malware Threats

- System Hacking

- Session Hijacking

- Honeypots, firewalls and IDS

- SQL Injection

- Hacking Wireless Networks

- Hacking Web Applications

- Hacking Mobile Platforms

- Hacking Web Servers

- Sniffing

- IoT Hacking

- Cloud Computing

- Social Engineering
 Denial-of-Service

- Cryptography

The objective of this funded CEH course is to assist you in becoming a master of ethical hacking methodology that can be used in an ethical hacking or penetration testing situation. Our expert-led, funded programs can elevate your cybersecurity journey. With online flexibility and comprehensive content, become a certified ethical hacker ready for any penetration testing scenario, all through our convenient online training courses.

At the end of this course, you will be prepared for EC-Council Certified Ethical Hacker exam 312-50.

For more information, please click here.

Course Description & Learning Outcomes

Course Outline

The CISA course is conducted over four days, and the content is organised into five domains. Topics covered in each of the domains are as shown below:

Domain 1: Information System Auditing Process

• Planning

  - IS Audit Standards, Guidelines, and Codes of Ethics

  - Types of Controls

  - Types of Audits and Assessments

  - Risk-Based Audit Planning

  - Business Processes

• Execution

  - Data Analytics

  - Quality Assurance and Improvement of the Audit Process

  - Sampling Methodology

  - Audit Evidence Collection Techniques

  - Audit Project Management

  - Reporting and Communication and Reporting Techniques

Domain 2: Governance and Management of IT 

•  IT Governance

  - IT Strategy and IT Governance

  - IT-Related Frameworks

  - IT Policies, Procedures and Standards

  - Organisational Structure

  - Enterprise Architecture

  - Enterprise Risk Management

  - Maturity Models

  - Organisation Affecting Laws, Regulations, and Industry Standards

• IT Management

  - IT Resource Management

  - IT Service Provider Management and Acquisition

  - IT Performance Monitoring and Reporting

  - Quality Assurance and Quality Management of IT

Domain 3: Information Systems Acquisition, Development and implementation 

• Quality Assurance and Quality Management of IT

  - Project Management and Governance

  - Feasibility Analysis and Business Case

  - System Development Methodologies

  - Control Identification and Design

• Implementation of Information Systems

  - Testing Methodologies

  - Configuration and Release Management

  - System Migration, Infrastructure Deployment, and Data Conversion

  - Post-implementation Review

Domain 4: Business Resilience and Information Systems Operation

• Information Systems Operations

  - Common Technology Components

  - IT Asset Management

  - Production Process Automation and Job Scheduling

  - System Interfaces

  - End-User Computing

  - Data Governance

  - Systems Performance Management

  - Problem and Incident Management

  - Configuration, Change, Release, and Patch Management

  - IT Service Level Management

  - Database Management

•  Business Resilience

  - Business Impact Analysis (BIA)

  - System Resiliency

  - Data Backup, Storage, and Restoration

  - Business Continuity Plan (BCP)

  - Disaster Recovery Plans (DRP)

Domain 5: Protection of Information Assets 

• Information Asset Security and Control

  - Information Asset Security Frameworks, Standards, and Guidelines

  - Privacy Principles

  - Environmental Controls and Physical Access

  - Identity and Access Management

  - Network and End-Point Security

  - Data Classification

  - Data Encryption and Encryption-Related Techniques

  - Public Key Infrastructure (PKI)

  - Web-Based Communication Techniques

  - Virtualised Environments

  - Wireless, Mobile, and Internet-of-Things (IoT) Devices

•  Security Event Management

  - Security Awareness Programs and Trainings

  - Information System Attack Techniques and Methods

  - Security Testing Techniques and Tools

  - Security Monitoring Techniques and Tools

  - Incident Response Management

  - Forensics and Evidence Collection

At the end of this course you will:

- Understand the methodology, phases and activities required to plan, assess risk, conduct an audit and communicate the audit progress, findings and recommendations, including relevant considerations for CISA certification in Singapore.

- Understand the methodology and activities required for IT Strategy Alignment, IT Organisational structure, Implementation and Management of T policies and policies and Practices Compliance to regulatory and legislation requirements and knowledge to evaluate their effectiveness.

- Understand the definitions, methodology and activities required for systems development life cycle, systems implementation and knowledge required to evaluate their effectiveness.

- Understand the definitions, methodology and phases involved in Business continuity, IT Service Operations.

- Understand the components of Physical Security, Logical Access Security, data classification, data life cycle, Security Controls, Threat and Vulnerability Assessment, Security Testing, Security Operations, Security Incident Process, and evaluate their effectiveness, aligning with the principles covered in a CISA course.

Course Description & Learning Outcomes

Course Outline

Some of the core topics featured in the CISM course syllabus include:

Introduction

- CISM Certification Prerequisites

- Examination information

- CISM Certification Application

- CISM Certification Maintenance and Renewal

Domain 1 : Information Security Governance

- Introduction and Benefits of Information Security Governance

- Components of Governance Framework

- Roles & Responsibilities

- Information Security Metrics

- Information Security Strategy Frameworks

- Information Security Implementation Program Frameworks

Domain 2 : Information Risk Management and Compliance

- Topics

- Introduction

- Information Asset Classification and Protection

- Roles & Responsibilities

- Introduction to Risk Management

- Risk Management Process

- Risk Identification

- Risk Treatment

- Controls

- Risk Monitoring and Analysis

- HR Risk

- Risk Reporting

Domain 3 : Information Security Programme Development and Management

- Introduction

- Outcomes

- IS Program

- Framework Components

- IS Program Roadmap

- Information Security Infrastructure and Architecture

- Security Program Management Administration

- Services and Operational Activities

- Controls

- Review and Audit

Domain 4 : Information Security Incident Management

- Introduction

- Objectives

- Incident Management Procedures

- Developing Incident Response Plan

- Roles and Responsibilities

- Content of the Incident Response Plan

- Disaster Recovery Procedures and Business Continuity

Examination Preparation and Techniques

- Administration

- Techniques

- Tips and Hints

- FAQ

For more information, please click here