Course Description & Learning Outcomes

CEH provides the most extensive, immersive hands-on lab and practice range experience in the market, along with a thorough training program designed to prepare you for the certification exam.

What You Will Learn ?

- Leverage AI-driven techniques to enhance your ethical hacking skills, automate threat detection, predict breaches, and stay ahead of evolving cyber threats.

- Key issues plaguing the information security world include ethical hacking, information security controls, laws, and standards.

- Conduct foot printing and reconnaissance utilising cutting-edge techniques and tools as an essential pre-attack phase required in ethical hacking.

- Network scanning countermeasures and techniques.

- Enumeration countermeasures and techniques.

- Conducting vulnerability analysis, which involved identifying security weaknesses within the network, communication infrastructure, and end systems of the target organization.

- Unveiling system and network weaknesses using techniques such as steganalysis attacks, system hacking methodology, covering traced and steganography.

- Social engineering techniques and how to identify theft attacks to audit human- level vulnerabilities and suggest social engineering countermeasures.

- DoS/DDoS tools and attack techniques to audit a target and DoS/DDoS countermeasures.

- Various forms of malware (such as Trojans, viruses, worms, etc.), conducting system audits to detect malware attacks, analysing malware, and implementing countermeasures.

- Countermeasures, session hijacking techniques to uncover session management at network-level, authentication/authorisation, and cryptographic weaknesses.

- Packet sniffing techniques to discover network vulnerabilities and countermeasures to defend sniffing.

- Assessing vulnerabilities in web applications involves utilizing a comprehensive web application hacking methodology to identify web application attacks and implementing appropriate countermeasures.

- Countermeasures, injection detection tools to detect SQL injection attempts, and SQL injection attack techniques.

- Web server attacks and a comprehensive attack methodology to audit vulnerabilities in web server infrastructure, and countermeasures.

- IDS, honeypot and firewall evasion techniques, evasion tools and techniques to audit a network perimeter for weaknesses, and countermeasures.

- Attack vectors on mobile platforms, exploits targeting Android vulnerabilities, and guidelines along with tools for enhancing mobile security.

- Discover potential risks targeting IoT and OT platforms and acquire strategies for securely safeguarding IoT and OT devices.

- Wireless encryption, wireless hacking tools, wireless hacking methodology, and Wi-Fi security tools.

- Penetration testing, security audit, vulnerability assessment, and penetration testing roadmap.

- Public Key Infrastructure (PKI), cryptography ciphers, cryptanalysis tools, and cryptography attacks.

- Cloud computing concepts (Server less computing, container technology), various threats/attacks, and security techniques and tools.

Course Outline

Module 01: Introduction to Ethical Hacking

Module 02: Foot printing and Reconnaissance

Module 03: Scanning Networks

Module 04: Enumeration

Module 05: Vulnerability Analysis

Module 06: System Hacking

Module 07: Malware Threats

Module 08: Sniffing

Module 09: Social Engineering

Module 10: Denial-of-Service

Module 11: Session Hijacking

Module 12: Evading IDS, Firewalls, and Honeypot

Module 13: Hacking Web Servers

Module 14: Hacking Web Applications

Module 15: SQL Injection

Module 17: Hacking Mobile Platforms

Module 18: IoT and OT Hacking

Module 19: Cloud Computing

Module 20: Cryptography

The objective of this funded CEH course is to assist you in becoming a master of ethical hacking methodology that can be used in an ethical hacking or penetration testing situation. Our expert-led, funded programs can elevate your cybersecurity journey. With online flexibility and comprehensive content, become a certified ethical hacker ready for any penetration testing scenario, all through our convenient online training courses.

At the end of this course, you will be prepared for EC-Council Certified Ethical Hacker exam 312-50.

For more information, please click here.

Course Description & Learning Outcomes

The CISA course is conducted over four days, and the content is organised into five domains. Topics covered in each of the domains are as shown below:

Domain 1: Information System Auditing Process

• Planning

  - IS Audit Standards, Guidelines, and Codes of Ethics

  - Types of Controls

  - Types of Audits and Assessments

  - Risk-Based Audit Planning

  - Business Processes

• Execution

  - Data Analytics

  - Quality Assurance and Improvement of the Audit Process

  - Sampling Methodology

  - Audit Evidence Collection Techniques

  - Audit Project Management

  - Reporting and Communication and Reporting Techniques

Domain 2: Governance and Management of IT 

•  IT Governance

  - IT Strategy and IT Governance

  - IT-Related Frameworks

  - IT Policies, Procedures and Standards

  - Organisational Structure

  - Enterprise Architecture

  - Enterprise Risk Management

  - Maturity Models

  - Organisation Affecting Laws, Regulations, and Industry Standards

• IT Management

  - IT Resource Management

  - IT Service Provider Management and Acquisition

  - IT Performance Monitoring and Reporting

  - Quality Assurance and Quality Management of IT

Domain 3: Information Systems Acquisition, Development and implementation 

• Quality Assurance and Quality Management of IT

  - Project Management and Governance

  - Feasibility Analysis and Business Case

  - System Development Methodologies

  - Control Identification and Design

• Implementation of Information Systems

  - Testing Methodologies

  - Configuration and Release Management

  - System Migration, Infrastructure Deployment, and Data Conversion

  - Post-implementation Review

Domain 4: Business Resilience and Information Systems Operation

• Information Systems Operations

  - Common Technology Components

  - IT Asset Management

  - Production Process Automation and Job Scheduling

  - System Interfaces

  - End-User Computing

  - Data Governance

  - Systems Performance Management

  - Problem and Incident Management

  - Configuration, Change, Release, and Patch Management

  - IT Service Level Management

  - Database Management

•  Business Resilience

  - Business Impact Analysis (BIA)

  - System Resiliency

  - Data Backup, Storage, and Restoration

  - Business Continuity Plan (BCP)

  - Disaster Recovery Plans (DRP)

Domain 5: Protection of Information Assets 

• Information Asset Security and Control

  - Information Asset Security Frameworks, Standards, and Guidelines

  - Privacy Principles

  - Environmental Controls and Physical Access

  - Identity and Access Management

  - Network and End-Point Security

  - Data Classification

  - Data Encryption and Encryption-Related Techniques

  - Public Key Infrastructure (PKI)

  - Web-Based Communication Techniques

  - Virtualised Environments

  - Wireless, Mobile, and Internet-of-Things (IoT) Devices

•  Security Event Management

  - Security Awareness Programs and Trainings

  - Information System Attack Techniques and Methods

  - Security Testing Techniques and Tools

  - Security Monitoring Techniques and Tools

  - Incident Response Management

  - Forensics and Evidence Collection

At the end of this course you will:

- Understand the methodology, phases and activities required to plan, assess risk, conduct an audit and communicate the audit progress, findings and recommendations, including relevant considerations for CISA certification in Singapore.

- Understand the methodology and activities required for IT Strategy Alignment, IT Organisational structure, Implementation and Management of T policies and policies and Practices Compliance to regulatory and legislation requirements and knowledge to evaluate their effectiveness.

- Understand the definitions, methodology and activities required for systems development life cycle, systems implementation and knowledge required to evaluate their effectiveness.

- Understand the definitions, methodology and phases involved in Business continuity, IT Service Operations.

- Understand the components of Physical Security, Logical Access Security, data classification, data life cycle, Security Controls, Threat and Vulnerability Assessment, Security Testing, Security Operations, Security Incident Process, and evaluate their effectiveness, aligning with the principles covered in a CISA course.

Course Description & Learning Outcomes

Course Outline

The 5-day course heavily focuses on the eight fundamental domains of Information Security.

Domain 1: Risk and Security Management

1.1 Understand and apply concepts of integrity, confidentiality and availability

1.2 Assess and apply security governance principles

1.3 Establish compliance requirements

1.4 Understand regulatory and legal issues that concern information security in a global context

1.5 Understand, promote, and adhere to professional ethics

1.6 Develop, document, and implement security policy, procedures, standards and guidelines

1.7 Analyse, identify and prioritise Business Continuity (BC) requirements

1.8 Enforce and contribute to personnel security guidelines and procedures

1.9 Apply and understand risk management concepts

1.10 Apply and understand threat modelling methodologies and concepts

1.11 Implement risk-based management concepts in the supply chain

1.12 Maintain and establish a security education, awareness and training program

Domain 2: Asset Security

2.1 Identify and classify assets and information

2.2 Determine and maintain asset ownership and information

2.3 Protect privacy

2.4 Ensure proper asset retention

2.5 Determine data security controls

2.6 Establish information and asset handling requirements

Domain 3: Security Architecture and Engineering

3.1 Manage and Implement engineering processes using secure design principles

3.2 Recognise the basic concepts of security models

3.3 Select controls based on systems security requirements

3.4 Recognise security capabilities of information systems (e.g., encryption/decryption, memory protection, Trusted Platform Module (TPM),

3.5 Mitigate and assess the vulnerabilities of security architectures, solution elements and designs

3.6 Mitigate and assess weaknesses in web-based systems

3.7 Mitigate and assess weaknesses in mobile systems

3.8 Mitigate and assess weaknesses in embedded devices

3.9 Apply cryptography

3.10 Apply security principles to facility and site design

3.11 Implement facility and site security controls

Domain 4: Communication and Network Security

4.1 Apply secure design concepts in network architectures

4.2 Secure network components

4.3 Apply secure communication channels according to design

Domain 5: Identity and Access Management (IAM)

5.1 Control logical and physical access to assets

5.2 Manage authentication and identification of people, devices, and service

5.3 Integrate identity as a third-party service

5.4 Manage and implement authorisation mechanisms

5.5 Manage the identity and access provisioning lifecycle

Domain 6: Security Assessment and Testing

6.1 Design and verify tests, assessments and audit strategies

6.2 Manage security control testing

6.3 Manage security process data (e.g., technical and administrative)

6.4 Examine test output and generate a report

6.5 Manage or facilitate security audits

Domain 7: Security Operations

7.1 Support and understand investigations

7.2 Understand requirements for investigation types

7.3 Conduct monitoring and logging activities

7.4 Securely provisioning resources

7.5 Apply and understand foundational security operations concepts

7.6 Apply resource protection techniques

7.7 Conduct incident management

7.8 Maintain and operate detective and preventive measures

7.9 Support and implement patch and vulnerability management

7.10 Understand and Engage in change management processes

7.11 Apply recovery strategies

7.12 Apply Disaster Recovery (DR) processes

7.13 Test Disaster Recovery Plans (DRP)

7.14 Participate in Business Continuity (BC) exercises and planning

7.15 Manage and implement physical security

7.16 Address security concerns and personnel safety

Domain 8: Software Development Security

8.1 Understand and incorporate security in the Software Development Life Cycle (SDLC)

8.2 Recognise and apply security controls in development environments

8.3 Evaluate the benefits of software security

8.4 Evaluate the security impact of acquired software

8.5 Define and implement secure coding standards and guidelines

For more information, please click here.

Course Description & Learning Outcomes

The intensive five-day Project Management Professional (PMP®) preparation course is designed to equip aspiring project managers with a comprehensive understanding of contemporary project management practices aligned with the PMBOK® Guide — Eighth Edition. The course progresses systematically from foundational concepts of project management and value delivery systems through advanced performance domains including governance, scope, schedule, finance, stakeholders, resources, and risk. Participants will explore project life cycles, development approaches, tailoring techniques, and emerging topics such as artificial intelligence, procurement, and the role of Project Management Offices. Each day combines theoretical knowledge with practical tools, techniques, and real-world applications to ensure candidates are fully prepared for the PMP examination and ready to lead projects effectively in any industry.

Course Outline

Duration – 5 days

1) Foundations of Project Management

• Key terms and concepts in project management

• Foundational elements: project characteristics, governance, and operations

• Relationship of portfolio, program, project, and operations management

• Creating value and the system for value delivery

• Project environment, organizational process assets, and product management considerations

• Functions associated with projects and project management roles

• The project management mindset and the six guiding principles

2) Project Life Cycles and Governance Domain

• Project phases and project development approaches: predictive, adaptive, and hybrid

• Considerations for selecting a development approach and delivery cadence

• Project Management Focus Areas: Initiating, Planning, Executing, Monitoring and Controlling, and Closing

• Governance Performance Domain: project value creation and governance models

• Metrics and mechanisms for effective project governance

• Governance processes including initiating, integrating plans, sourcing, execution, quality assurance, and change

• Tailoring considerations and interactions with other performance domains

3) Scope, Schedule and Finance Domains

• Scope Performance Domain: planning, eliciting requirements, defining and developing scope

• Monitoring, controlling, and validating scope to prevent scope creep

• Schedule Performance Domain: planning, developing, monitoring, and controlling the schedule

• Steps for developing the schedule and managing schedule baselines

• Finance Performance Domain: planning financial management and estimating costs

• Developing the project budget and monitoring and controlling project finances

• Cost baseline, expenditures, and funding requirements

4) Stakeholders, Resources, and Risk Domains

• Stakeholders Performance Domain: identifying stakeholders and planning engagement

• Planning, managing, and monitoring communications throughout the project life cycle

• Managing and monitoring stakeholder engagement effectively

• Resources Performance Domain: planning, estimating, and acquiring project resources

• Leading the team, building team competencies, and monitoring and controlling resourcing

• Risk Performance Domain: planning risk management and identifying project risks

• Performing risk analysis, planning risk responses and implementing risk responses

• Monitoring risks, risk classification, and tailoring considerations across all three domains

5) Inputs, Outputs, Tools, Techniques and Emerging Topics

• Inputs and outputs across project management processes

• Tools and techniques including earned value, decision trees, work breakdown structures and Kanban boards

• Manage and control changes

• Evaluate external business environment changes

• Remove impediments and manage issues

• Continuous improvement

• Artificial Intelligence in project management: use cases, ethical concerns and responsible adoption

• Procurement: make-or-buy analysis, contract types, source selection and claims administration

Fo more information, please click here.

Course Description & Learning Outcomes

CEH provides the most extensive, immersive hands-on lab and practice range experience in the market, along with a thorough training program designed to prepare you for the certification exam.

What You Will Learn ?

- Leverage AI-driven techniques to enhance your ethical hacking skills, automate threat detection, predict breaches, and stay ahead of evolving cyber threats.

- Key issues plaguing the information security world include ethical hacking, information security controls, laws, and standards.

- Conduct foot printing and reconnaissance utilising cutting-edge techniques and tools as an essential pre-attack phase required in ethical hacking.

- Network scanning countermeasures and techniques.

- Enumeration countermeasures and techniques.

- Conducting vulnerability analysis, which involved identifying security weaknesses within the network, communication infrastructure, and end systems of the target organization.

- Unveiling system and network weaknesses using techniques such as steganalysis attacks, system hacking methodology, covering traced and steganography.

- Social engineering techniques and how to identify theft attacks to audit human- level vulnerabilities and suggest social engineering countermeasures.

- DoS/DDoS tools and attack techniques to audit a target and DoS/DDoS countermeasures.

- Various forms of malware (such as Trojans, viruses, worms, etc.), conducting system audits to detect malware attacks, analysing malware, and implementing countermeasures.

- Countermeasures, session hijacking techniques to uncover session management at network-level, authentication/authorisation, and cryptographic weaknesses.

- Packet sniffing techniques to discover network vulnerabilities and countermeasures to defend sniffing.

- Assessing vulnerabilities in web applications involves utilizing a comprehensive web application hacking methodology to identify web application attacks and implementing appropriate countermeasures.

- Countermeasures, injection detection tools to detect SQL injection attempts, and SQL injection attack techniques.

- Web server attacks and a comprehensive attack methodology to audit vulnerabilities in web server infrastructure, and countermeasures.

- IDS, honeypot and firewall evasion techniques, evasion tools and techniques to audit a network perimeter for weaknesses, and countermeasures.

- Attack vectors on mobile platforms, exploits targeting Android vulnerabilities, and guidelines along with tools for enhancing mobile security.

- Discover potential risks targeting IoT and OT platforms and acquire strategies for securely safeguarding IoT and OT devices.

- Wireless encryption, wireless hacking tools, wireless hacking methodology, and Wi-Fi security tools.

- Penetration testing, security audit, vulnerability assessment, and penetration testing roadmap.

- Public Key Infrastructure (PKI), cryptography ciphers, cryptanalysis tools, and cryptography attacks.

- Cloud computing concepts (Server less computing, container technology), various threats/attacks, and security techniques and tools.

Course Outline

Module 01: Introduction to Ethical Hacking

Module 02: Foot printing and Reconnaissance

Module 03: Scanning Networks

Module 04: Enumeration

Module 05: Vulnerability Analysis

Module 06: System Hacking

Module 07: Malware Threats

Module 08: Sniffing

Module 09: Social Engineering

Module 10: Denial-of-Service

Module 11: Session Hijacking

Module 12: Evading IDS, Firewalls, and Honeypot

Module 13: Hacking Web Servers

Module 14: Hacking Web Applications

Module 15: SQL Injection

Module 17: Hacking Mobile Platforms

Module 18: IoT and OT Hacking

Module 19: Cloud Computing

Module 20: Cryptography

The objective of this funded CEH course is to assist you in becoming a master of ethical hacking methodology that can be used in an ethical hacking or penetration testing situation. Our expert-led, funded programs can elevate your cybersecurity journey. With online flexibility and comprehensive content, become a certified ethical hacker ready for any penetration testing scenario, all through our convenient online training courses.

At the end of this course, you will be prepared for EC-Council Certified Ethical Hacker exam 312-50.

For more information, please click here.

Course Description & Learning Outcomes

Course Outline

The 5-day course heavily focuses on the eight fundamental domains of Information Security.

Domain 1: Risk and Security Management

1.1 Understand and apply concepts of integrity, confidentiality and availability

1.2 Assess and apply security governance principles

1.3 Establish compliance requirements

1.4 Understand regulatory and legal issues that concern information security in a global context

1.5 Understand, promote, and adhere to professional ethics

1.6 Develop, document, and implement security policy, procedures, standards and guidelines

1.7 Analyse, identify and prioritise Business Continuity (BC) requirements

1.8 Enforce and contribute to personnel security guidelines and procedures

1.9 Apply and understand risk management concepts

1.10 Apply and understand threat modelling methodologies and concepts

1.11 Implement risk-based management concepts in the supply chain

1.12 Maintain and establish a security education, awareness and training program

Domain 2: Asset Security

2.1 Identify and classify assets and information

2.2 Determine and maintain asset ownership and information

2.3 Protect privacy

2.4 Ensure proper asset retention

2.5 Determine data security controls

2.6 Establish information and asset handling requirements

Domain 3: Security Architecture and Engineering

3.1 Manage and Implement engineering processes using secure design principles

3.2 Recognise the basic concepts of security models

3.3 Select controls based on systems security requirements

3.4 Recognise security capabilities of information systems (e.g., encryption/decryption, memory protection, Trusted Platform Module (TPM),

3.5 Mitigate and assess the vulnerabilities of security architectures, solution elements and designs

3.6 Mitigate and assess weaknesses in web-based systems

3.7 Mitigate and assess weaknesses in mobile systems

3.8 Mitigate and assess weaknesses in embedded devices

3.9 Apply cryptography

3.10 Apply security principles to facility and site design

3.11 Implement facility and site security controls

Domain 4: Communication and Network Security

4.1 Apply secure design concepts in network architectures

4.2 Secure network components

4.3 Apply secure communication channels according to design

Domain 5: Identity and Access Management (IAM)

5.1 Control logical and physical access to assets

5.2 Manage authentication and identification of people, devices, and service

5.3 Integrate identity as a third-party service

5.4 Manage and implement authorisation mechanisms

5.5 Manage the identity and access provisioning lifecycle

Domain 6: Security Assessment and Testing

6.1 Design and verify tests, assessments and audit strategies

6.2 Manage security control testing

6.3 Manage security process data (e.g., technical and administrative)

6.4 Examine test output and generate a report

6.5 Manage or facilitate security audits

Domain 7: Security Operations

7.1 Support and understand investigations

7.2 Understand requirements for investigation types

7.3 Conduct monitoring and logging activities

7.4 Securely provisioning resources

7.5 Apply and understand foundational security operations concepts

7.6 Apply resource protection techniques

7.7 Conduct incident management

7.8 Maintain and operate detective and preventive measures

7.9 Support and implement patch and vulnerability management

7.10 Understand and Engage in change management processes

7.11 Apply recovery strategies

7.12 Apply Disaster Recovery (DR) processes

7.13 Test Disaster Recovery Plans (DRP)

7.14 Participate in Business Continuity (BC) exercises and planning

7.15 Manage and implement physical security

7.16 Address security concerns and personnel safety

Domain 8: Software Development Security

8.1 Understand and incorporate security in the Software Development Life Cycle (SDLC)

8.2 Recognise and apply security controls in development environments

8.3 Evaluate the benefits of software security

8.4 Evaluate the security impact of acquired software

8.5 Define and implement secure coding standards and guidelines

For more information, please click here.

Course Description & Learning Outcomes

The intensive five-day Project Management Professional (PMP®) preparation course is designed to equip aspiring project managers with a comprehensive understanding of contemporary project management practices aligned with the PMBOK® Guide — Eighth Edition. The course progresses systematically from foundational concepts of project management and value delivery systems through advanced performance domains including governance, scope, schedule, finance, stakeholders, resources, and risk. Participants will explore project life cycles, development approaches, tailoring techniques, and emerging topics such as artificial intelligence, procurement, and the role of Project Management Offices. Each day combines theoretical knowledge with practical tools, techniques, and real-world applications to ensure candidates are fully prepared for the PMP examination and ready to lead projects effectively in any industry.

Course Outline

Duration – 5 days

1) Foundations of Project Management

• Key terms and concepts in project management

• Foundational elements: project characteristics, governance, and operations

• Relationship of portfolio, program, project, and operations management

• Creating value and the system for value delivery

• Project environment, organizational process assets, and product management considerations

• Functions associated with projects and project management roles

• The project management mindset and the six guiding principles

2) Project Life Cycles and Governance Domain

• Project phases and project development approaches: predictive, adaptive, and hybrid

• Considerations for selecting a development approach and delivery cadence

• Project Management Focus Areas: Initiating, Planning, Executing, Monitoring and Controlling, and Closing

• Governance Performance Domain: project value creation and governance models

• Metrics and mechanisms for effective project governance

• Governance processes including initiating, integrating plans, sourcing, execution, quality assurance, and change

• Tailoring considerations and interactions with other performance domains

3) Scope, Schedule and Finance Domains

• Scope Performance Domain: planning, eliciting requirements, defining and developing scope

• Monitoring, controlling, and validating scope to prevent scope creep

• Schedule Performance Domain: planning, developing, monitoring, and controlling the schedule

• Steps for developing the schedule and managing schedule baselines

• Finance Performance Domain: planning financial management and estimating costs

• Developing the project budget and monitoring and controlling project finances

• Cost baseline, expenditures, and funding requirements

4) Stakeholders, Resources, and Risk Domains

• Stakeholders Performance Domain: identifying stakeholders and planning engagement

• Planning, managing, and monitoring communications throughout the project life cycle

• Managing and monitoring stakeholder engagement effectively

• Resources Performance Domain: planning, estimating, and acquiring project resources

• Leading the team, building team competencies, and monitoring and controlling resourcing

• Risk Performance Domain: planning risk management and identifying project risks

• Performing risk analysis, planning risk responses and implementing risk responses

• Monitoring risks, risk classification, and tailoring considerations across all three domains

5) Inputs, Outputs, Tools, Techniques and Emerging Topics

• Inputs and outputs across project management processes

• Tools and techniques including earned value, decision trees, work breakdown structures and Kanban boards

• Manage and control changes

• Evaluate external business environment changes

• Remove impediments and manage issues

• Continuous improvement

• Artificial Intelligence in project management: use cases, ethical concerns and responsible adoption

• Procurement: make-or-buy analysis, contract types, source selection and claims administration

Fo more information, please click here.

Course Description & Learning Outcomes

Course Outline

The 5-day course heavily focuses on the eight fundamental domains of Information Security.

Domain 1: Risk and Security Management

1.1 Understand and apply concepts of integrity, confidentiality and availability

1.2 Assess and apply security governance principles

1.3 Establish compliance requirements

1.4 Understand regulatory and legal issues that concern information security in a global context

1.5 Understand, promote, and adhere to professional ethics

1.6 Develop, document, and implement security policy, procedures, standards and guidelines

1.7 Analyse, identify and prioritise Business Continuity (BC) requirements

1.8 Enforce and contribute to personnel security guidelines and procedures

1.9 Apply and understand risk management concepts

1.10 Apply and understand threat modelling methodologies and concepts

1.11 Implement risk-based management concepts in the supply chain

1.12 Maintain and establish a security education, awareness and training program

Domain 2: Asset Security

2.1 Identify and classify assets and information

2.2 Determine and maintain asset ownership and information

2.3 Protect privacy

2.4 Ensure proper asset retention

2.5 Determine data security controls

2.6 Establish information and asset handling requirements

Domain 3: Security Architecture and Engineering

3.1 Manage and Implement engineering processes using secure design principles

3.2 Recognise the basic concepts of security models

3.3 Select controls based on systems security requirements

3.4 Recognise security capabilities of information systems (e.g., encryption/decryption, memory protection, Trusted Platform Module (TPM),

3.5 Mitigate and assess the vulnerabilities of security architectures, solution elements and designs

3.6 Mitigate and assess weaknesses in web-based systems

3.7 Mitigate and assess weaknesses in mobile systems

3.8 Mitigate and assess weaknesses in embedded devices

3.9 Apply cryptography

3.10 Apply security principles to facility and site design

3.11 Implement facility and site security controls

Domain 4: Communication and Network Security

4.1 Apply secure design concepts in network architectures

4.2 Secure network components

4.3 Apply secure communication channels according to design

Domain 5: Identity and Access Management (IAM)

5.1 Control logical and physical access to assets

5.2 Manage authentication and identification of people, devices, and service

5.3 Integrate identity as a third-party service

5.4 Manage and implement authorisation mechanisms

5.5 Manage the identity and access provisioning lifecycle

Domain 6: Security Assessment and Testing

6.1 Design and verify tests, assessments and audit strategies

6.2 Manage security control testing

6.3 Manage security process data (e.g., technical and administrative)

6.4 Examine test output and generate a report

6.5 Manage or facilitate security audits

Domain 7: Security Operations

7.1 Support and understand investigations

7.2 Understand requirements for investigation types

7.3 Conduct monitoring and logging activities

7.4 Securely provisioning resources

7.5 Apply and understand foundational security operations concepts

7.6 Apply resource protection techniques

7.7 Conduct incident management

7.8 Maintain and operate detective and preventive measures

7.9 Support and implement patch and vulnerability management

7.10 Understand and Engage in change management processes

7.11 Apply recovery strategies

7.12 Apply Disaster Recovery (DR) processes

7.13 Test Disaster Recovery Plans (DRP)

7.14 Participate in Business Continuity (BC) exercises and planning

7.15 Manage and implement physical security

7.16 Address security concerns and personnel safety

Domain 8: Software Development Security

8.1 Understand and incorporate security in the Software Development Life Cycle (SDLC)

8.2 Recognise and apply security controls in development environments

8.3 Evaluate the benefits of software security

8.4 Evaluate the security impact of acquired software

8.5 Define and implement secure coding standards and guidelines

For more information, please click here.