Name: Securing UNIX systems
Price: 4997 GBP
Availability: InStock

Redhill

<h3><b>Kerberos for engineers training course description</b></h3>
        <p>
        This hands on course covers the details of Kerberos,
from installation and administration through to how it all
works including the protocols.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
  
                         <li>Describe what Kerberos is.</li>
                          <li>Explain how Kerberos works.</li>
                          <li>Install Kerberos.</li>
																										<li>Configure Kerberos.</li>
                          <li>Troubleshoot Kerberos.</li>
                 
                  </ul>
        <h5>
        <b>Kerberos for engineers training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Engineers interested in security.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Kerberos for engineers training course contents</b></h3>
				<ul>	<li>What is Kerberos? </li><p>
Single Sign On, The protocol, the standard, history, v4, v5, RFCs, Linux, Windows.

</p><li>Kerberos concepts and technology </li><p>
AAA, Authentication, Authorization, Accounting. Kerberos vs LDAP and directories. Privacy, integrity. Kerberos realms, principles, instances. Keys, salts, passwords. Key Distribution Centre, Authentication server, ticket granting server. Tickets.

</p><li>Installation and administration of Kerberos </li><p>
Installing Kerberos, creating realms, testing. DNS and Kerberos, Kerberos clients. <br /><span>Hands on</span> Windows and Linux Kerberos.

</p><li>Kerberos protocols </li><p>
The Needham-Schroeder protocol, Kerberos v4. Authentication server, ticket granting server, Kerberos v5, encryption options, ticket options, other protocol features and extensions. Related protocols: GSSAPI, SPNEGO. <br /><span>Hands on</span> Using Wireshark to 'see' Kerberos.

</p><li>Troubleshooting Kerberos </li><p>
Approach, debugging tools, errors and solutions. <br /><span>Hands on</span> Kerberos troubleshooting.

</p><li>Kerberos security concerns </li><p>
Kerberos attacks, protocol security issues. Dictionary attacks, brute force attacks, replay attacks, MITM attacks, security solutions, protecting the KDC, firewalls, NAT and Kerberos. <br /><span>Hands on</span> Kerberos logging.

</p><li>Software which uses Kerberos </li><p>
Kerberos logins, Kerberos and web based applications, Directory services.

</p><li>Advanced Kerberos issues </li><p>
Cross realm authentication, Windows issues, Windows and UNIX interoperability, <br /><span>Hands on</span> Using a Windows DC for UNIX clients.
</p>
				</ul>

Systems & Network Training

Network & Security

Network Engineer

Definitive Kerberos for engineers

General Admission

<h3><b>Firewalls training course description</b></h3>
        <p>
     A technical hands on training course covering firewall technologies. This focuses on the whys and hows of firewall technology rather than looking at manufacturer specific issues.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Design secure firewall protected networks.</li>
					     <li>Test firewalls.</li>
					     <li>Evaluate firewalls</li>
                         <li>Configure firewalls</li>
                  </ul>
        <h5>
        <b>Firewalls training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical staff wanting to learn about Filrewalls including: <br />
                    Technical network staff.<br />
                    Technical security staff.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>IP security foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Firewalls training course contents</b></h3>
				<ul>	<li>Firewall introduction</li><p>
Security review, what is a firewall? What do
firewalls do? Firewall benefits, concepts. <br /><span>Hands on</span>
Configuring the network to be used in later labs,
launching various attacks on a target.
					</p><li>Firewall types</li><p>
Packet filtering, SPI, Proxy, Personal. Software
firewalls, hardware firewalls, blade based firewalls,
personal firewalls, which firewall should you use?
Firewall products. <br /><span>Hands on</span> Configuring a simple
firewall.
</p><li>Packet filtering firewalls</li><p>
Things to filter in the IP header, stateless vs.
stateful filtering. ACLs. Advantages of packet
filtering. <br /><span>Hands on</span> Configuring packet filtering
firewalls.
</p><li>Stateful packet filtering</li><p>
Stateful algorithms, packet-by-packet inspection,
application content filtering, tracks, special
handling (fragments, IP options), sessions with
TCP and UDP. Firewall hacking detection: SYN
attacks, SSL, SSH interception. <br /><span>Hands on</span> Stateful
packet inspection firewalls.
</p><li>Proxy firewalls</li><p>
Circuit level, application level, SOCKS. Proxy
firewall advantages and disadvantages. <br /><span>Hands on</span>
Proxy firewalls.
</p><li>Personal firewalls</li><p>
The role of personal firewalls, Windows XP,
Zonealarm. <br /><span>Hands on</span> Configuring a personal
firewall.
</p><li>Firewall architectures</li><p>
Home based, small office, enterprise, service
provider, what is a DMZ? DMZ architectures,
bastion hosts, multi DMZ. Virtual firewalls,
transparent firewalls. Dual firewall design, high
availability, load balancing, VRRP. <br /><span>Hands on</span>
Resilient firewall architecture.
</p><li>Securing communications</li><p>
VPNs, IPsec. Firewall configuration of VPNs,
integration of dedicated VPN devices and
firewalls. <br /><span>Hands on</span> IPSec VPN configuration.
</p><li>Testing firewalls</li><p>
Configuration checklist, testing procedure,
monitoring firewalls, logging, syslog. <br /><span>Hands on</span>
Testing firewalls. 

</p>
				</ul>

Definitive Firewalls for engineers

<h4>Overview</h4>
						<hr />
						<div></div>
							<p>
							</p><p><strong>Objective</strong></p>

<ul>
	<li>Understand the requirement of Information Security </li>
	<li>Concepts and Definitions of Information Security Management Systems</li>
	<li>Deeply Analysing the policies, Standards and procedures</li>
	<li>How to deliver a balanced ISMS and following its security procedures</li>
	<li>Analysing the Information risk management </li>
	<li>Evaluating the organisational responsibilities </li>
	<li>Understanding the Information security controls </li>
	<li>Scrutinising Legal framework </li>
	<li>Techniques of Cryptographic models</li>
</ul>
<p>
							
							</p><div>
						
					</div>

GBA Corporate

Information Security Management Principle

Online

On Site

Loughborough

<div>
		

		<div>
			
			<p>This course presents an approach for dealing with security and privacy throughout the entire software development lifecycle. You will learn about vulnerabilities that undermine security, and how to identify and remediate them in your own projects.</p>
			<div><i></i> 3 Days</div>
			<div><i></i>  £350.00 incl. VAT</div>
			
			
		</div>
	</div>

	

	<div id="filters">
		
		
	</div>

	

    <div>

		
		 
		

		<div></div>

		<div>
			<p>Want to run this event in-house?  Enquire about running this event in-house </p>
			
		</div>

		<div>
			<p>Interested in attending? Have a suggestion about running this event near you?<br />Register your interest now</p>
			
		</div>
	</div>
	<div></div>
	
		
        <div>
			
		</div>
				

	
		<h3>Description</h3>
		<p></p><p>The stakes for software security are very high, and yet many development teams deal with software security only after the code has been developed and the software is being prepared for delivery. As with any aspect of software quality, to ensure successful implementation, security and privacy issues should be managed throughout the entire software development lifecycle. </p>
<p>This course presents an approach for dealing with security and privacy throughout the entire software development lifecycle. You will learn about vulnerabilities that undermine security, and how to identify and remediate them in your own projects. You will learn general strategies for dealing with security defects and misconfiguration, how to design software to deal with the human element in security, and how to incorporate security into all phases of development. </p>
<h3>Course Objectives:</h3>
<p>In this course, you will employ best practices in software development to develop secure software. You will:</p>
<ul>
<li>Identify the need for security in your software projects.</li>
<li>Eliminate vulnerabilities within software.</li>
<li>Use a Security by Design approach to design a secure architecture for your software.</li>
<li>Implement common protections to protect users and data.</li>
<li>Apply various testing methods to find and correct security defects in your software.</li>
<li>Maintain deployed software to ensure ongoing security.</li>
</ul>
<p><b><i>This course includes hands-on activities for each topic area. The goal of these activities is to demonstrate concepts utilizing two universal languages Python and JavaScript. Developers who use alternate languages will be able to apply the principles from the activities to any coding languages.</i></b></p>
<p><b><i>Hands-on exercises are designed to keep the typing of code to a bare minimum. We provide students with all of the code they need to complete activities. The activities do not require a 'deep dive' into code to understand the principles being covered.</i></b></p>
<p></p>
	
		<h3>Target Student</h3>
		<p></p><p>This course is designed for software developers, testers, and architects who design and develop software in various programming languages and platforms, including desktop, web, cloud, and mobile, and who want to improve their ability to deliver software that is of high quality, particularly regarding security and privacy.</p>
<p>This course is also designed for students who are seeking the CertNexus Cyber Secure Coder certification.</p>
<p></p>
	
		<h3>Prerequisites</h3>
		<p></p><p>This course presents secure programming concepts that apply to many different types of software development projects. Although this course uses Python®, HTML, and JavaScript® to demonstrate various programming concepts, you do not need to have experience in these languages to benefit from this course. However, you should have some programming experience, whether it be developing desktop, mobile, web, or cloud applications. </p>
<div>
<h3>Course-specific Technical Requirements</h3>
</div>
<h4>Hardware</h4>
<p>For this course, you will need one computer for each student and one for the instructor. Each computer will need the following minimum hardware configurations:</p>
<ul>
<li>1 GHz or faster 32-bit (x86) or 64-bit (x64) processor</li>
<li>2 gigabytes (GB) RAM (32-bit or 64-bit)</li>
<li>20 GB available hard disk space (32-bit or 64-bit)</li>
<li>Keyboard and mouse (or other pointing device)</li>
<li>1,024 x 768 resolution monitor recommended</li>
<li>Projection system to display the instructor's computer screen</li>
<li>Local area network and Internet connection</li>
</ul>
<h4>Software</h4>
<ul>
<li>Windows® 10/8.1/8/7/Vista (64-bit). This course was successfully keyed on Windows 10. Some activity steps may not key exactly as written if students key on a different version of Windows.</li>
<li>Python version 3.8.1 (python-3.8.1.amd64.msi, provided with the course data files).</li>
<li>PyCharm Community Edition version 2019.3.3 (pycharm-community-2019.3.3.exe, provided with the course data files). Python is distributed under the Python Software Foundation License (PSFL). PyCharm Community Edition is distributed under the Apache® License 2.0.</li>
</ul>
<p></p>
	
		<h3>Modules/Lessons</h3>
		<p></p><h4>Lesson 1: Identifying the Need for Security in Your Software Projects</h4>
<p>Topic A: Identify Security Requirements and Expectations <br />Topic B: Identify Factors That Undermine Software Security <br />Topic C: Find Vulnerabilities in Your Software<br />Topic D: Gather Intelligence on Vulnerabilities and Exploits</p>
<h4>Lesson 2: Handling Vulnerabilities</h4>
<p>Topic A: Handle Vulnerabilities Due to Software Defects and Misconfiguration <br />Topic B: Handle Vulnerabilities Due to Human Factors<br />Topic C: Handle Vulnerabilities Due to Process Shortcomings</p>
<h4>Lesson 3: Designing for Security</h4>
<p>Topic A: Apply General Principles for Secure Design <br />Topic B: Design Software to Counter Specific Threats</p>
<h4>Lesson 4: Developing Secure Code</h4>
<p>Topic A: Follow Best Practices for Secure Coding <br />Topic B: Prevent Platform Vulnerabilities<br />Topic C: Prevent Privacy Vulnerabilities</p>
<h4>Lesson 5: Implementing Common Protections</h4>
<p>Topic A: Limit Access Using Login and User Roles <br />Topic B: Protect Data in Transit and At Rest <br />Topic C: Implement Error Handling and Logging <br />Topic D: Protect Sensitive Data and Functions <br />Topic E: Protect Database Access</p>
<h4>Lesson 6: Testing Software Security</h4>
<p>Topic A: Perform Security Testing<br />Topic B: Analyze Code to find Security Problems<br />Topic C: Use Automated Testing Tools to Find Security Problems</p>
<h4>Lesson 7: Maintaining Security in Deployed Software</h4>
<p>Topic A: Monitor and Log Applications to Support Security <br />Topic B: Maintain Security after Deployment</p>
<p></p>

Mpi Learning - Professional Learning And Development Provider

This course presents an approach for dealing with security and privacy throughout the entire software development lifecycle. You will learn about vulnerabilities that undermine security, and how to identify and remediate them in your own projects.

Cyber Secure Coder

<h3><b>OpenSSL for engineers training course description</b></h3>
        <p>
      A hands on course covering OpenSSL. The course
focusses on the use of OpenSSL from the command
line as opposed to using its extensive libraries.
Certificate authorities are configured along with key
generation, HTTPS and a SSL VPN. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
  <li>Describe OpenSSL.</li>
                          <li>Use OpenSSL.</li>
                          <li>Describe and implement:</li>
																										<li>Explain how the various technologies involved in an
OpenSSL work.</li>
                 
                  </ul>
        <h5>
        <b>OpenSSL for engineers training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Network personnel.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>IP security foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>OpenSSL for engineers training course contents</b></h3>
				<ul>	<li>What is OpenSSL? </li><p>
What is SSL? SSL versions, TLS, TLS negotiation, TLS authentication, What is OpenSSL, Command line tool, SSL library. OpenSSH, OpenVPN.
<br /><span>Hands on</span> TLS packet analysis.

</p><li>Getting started with OpenSSL </li><p>
Downloading, source code, packages, installing, versions, configuration, openssl command. Cipher suite selection.
<br /><span>Hands on</span> Encrypting a file with openssl.

</p><li>Public and private keys </li><p>
Algorithms, creating keys, public keys, private keys, encrypting the private key.
<br /><span>Hands on</span> Encrypting a file with keys.

</p><li>Digital signatures </li><p>
Creating signatures, checking validity of signatures, Self signing SSL certificates. Viewing certificates. Certificate files. Converting between formats.
<br /><span>Hands on</span> Securing a web server with HTTPS.

</p><li>Simple PKI with OpenSSL </li><p>
Root CA, signing CA, configuration files, Certificate signing requests. Email certificates, TLS server certificates.
<br /><span>Hands on</span> Implementing a simple PKI with OpenSSL.
</p>
				</ul>

Definitive OpenSSL for engineers

<h3><b>Lawful Intercept training course description</b></h3>
        <p>Packet based networks require a different approach to Lawful Intercept (LI) than that used in circuit switched networks. This course focuses on what Lawful Interception and Data Retention (DR) means to communications service providers in the IP and NGN areas. The course assumes a basic knowledge of IP networking (i.e. DNS, TCP/UDP, IP, RTP) and the building of services on an IP platform (e.g. SIP, SDP, FTP, HTTP). The course first looks at the regulatory context for LI and DR and how this is translated to a practical architecture.
</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
					<li>Recognise the legal and regulatory obligations to provide LI and DR.</li>
					<li>Identify the components of the handover architecture for each of LI and DR.</li>
					<li>Identify the preferred location of points of interception and points of retention in the IP network.</li>
					<li>Map intercepted material to handover protocols.</li>
					<li>Understand the data mapping defined in the available standards for both LI and DR.</li>
                  </ul>
        <h5>
        <b>Lawful Intercept training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical and managerial staff needing to implement public networks.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p> TCP/IP Foundation</p>
              
							<li><b>Duration</b></li>
							
              <p>1 day</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Lawful Intercept training course contents</b></h3>
      <ul>
        <li>What is meant by LI and DR? </li><p>


Review of regulation: Data protection Directive; Data Retention Directive; RIPA.
</p><li>LI architectures </li><p>
Handover and Interception: ETSI standards ES 201 671 and TS 102 232.

</p><li>LI handover protocol </li><p>
IRI and CC handover; correlation; manual interfaces.

</p><li>DR architectures </li><p>
Handover of query results; points of retention.

</p><li>DR query command set </li><p>
	Retrieval of retained records.

</p><li>Security concerns </li><p>
Operation privacy; target privacy; storage and transmission integrity.

</p><li>Implementation </li><p>
Identifying PoI and PoR for provided services.

</p><li>LI and DR wrap up </li><p>
Interaction with other services, storage obligations (volume, time, availability).</p>
      </ul>

Essential Lawful Intercept

<div>
</div>
<section>
<div>
<h2><strong>About this Virtual Instructor Led Training (VILT)</strong></h2>
<p><span>This 3 half-day Virtual Instructor Led Training (VILT) course will help participants grasp the idea of real-world risk management and how this relates to the cyber world. The VILT course will cover topics surrounding identifying cyber risks and vulnerabilities, guidance on applying administrative actions, and comprehensive solutions to ensure your organization is adequately secure and protected.</span></p>
<p><span>The VILT course will guide participants on how to conduct a security risk assessment for their organization, and equip them with the skills to develop a risk compliance assessment plan as well as methods to develop risk management strategies which can improve their organization's security posture. The VILT course has at least a 30% hands-on approach through the use of Table Top Exercises.</span></p>
<p><span>The VILT course will cover the following modules:</span></p>
<ol>
<li><span>Introduction to Risk Assessments (RA)</span></li>
<li><span>Threat Actors and Their Motivations</span></li>
<li><span>Threat and Risk Assessment</span></li>
<li><span>Critical Controls Identification</span></li>
<li><span>Maturity Assessment</span></li>
<li><span>Treated Cyber Risk Profile</span></li>
<li><span>Target Cyber Risk Profile and Strategy</span></li>
</ol>
<p>
</p></div>
</section>
<section>
<div id="accordion">
<div>
<div>

Target Audience 

</div>
<div id="collapseTwo">
<div>
<p><span>The VILT course is intended for professionals responsible for organizational information and security system and those involved in operating and maintenance of critical information and IT network &amp; sotware systems. Professionals who are designated as the Single Point of Accountability (SPoA) as well as system auditors will find this course useful.</span></p>
</div>
</div>
</div>
<div>
<div>

Course Level 

</div>
<div id="collapsecl">
<div>
<ul>
<li>Basic or Foundation</li>
</ul>
</div>
</div>
</div>
<div>
<div>

Training Methods 

</div>
<div id="collapseThree">
<div>
<p><span>The VILT course will be delivered online in 3 half-day sessions comprising 4 hours per day, with 2 x 10 minutes break per day, including time for lectures, discussion, quizzes and short classroom exercises.</span></p>
<p><span>Course Duration: 3 half-day sessions, 4 hours per session (12 hours in total).</span></p>
<p><span>This VILT course is delivered in partnership with ENGIE Laborelec.</span></p>
<p></p>
</div>
</div>
</div>
<div>
<div>

Trainer

</div>
<div id="collapseFive">
<div>
<p><span>Your expert course leader is a is specialized in cybersecurity risk management. Before joining ENGIE, she worked for The National Cybersecurity Agency of France (ANSSI) based in Paris (France) and for Deloitte Belgium located in Zaventem (Belgium).</span></p>
<p><span>She has been involved in cybersecurity projects focusing on the principle of protecting critical infrastructures.</span></p>
<p><span>Her different experiences in Cyber Security, Anti-Money Laundering and Global Trade Compliance (including Export Control and Customs) gave her the opportunity to use methodologies tackling strategic, operational and financial control issues at all levels of an organization: people, business processes, IT applications and infrastructure, legal and regulatory compliance.</span></p>
<p><span>She was an EBIOS Risk Manager (RM) trainer while she worked for the French government; EBIOS RM is the French method for assessing and treating digital risks. She also had the opportunity to represent France towards European institutions and other relevant stakeholders for topics related to cybersecurity risk management.</span></p>
</div>
</div>
</div>
<div>
<div>

POST TRAINING COACHING SUPPORT (OPTIONAL)

</div>
<div id="collapseCS">
<div>
<p>To further optimise your learning experience from our courses, we also offer individualized 'One to One' coaching support for 2 hours post training. We can help improve your competence in your chosen area of interest, based on your learning needs and available hours. This is a great opportunity to improve your capability and confidence in a particular area of expertise. It will be delivered over a secure video conference call by one of our senior trainers. They will work with you to create a tailor-made coaching program that will help you achieve your goals faster.<br />
Request for further information about post training coaching support and fees applicable for this.</p>
</div>
</div>
</div>
<div>
<div>

Accreditions And Affliations

</div>
<div id="collapseSeven">
<div>
               </div>
</div>
</div>
</div>
</section>

EnergyEdge - Training for a Sustainable Energy Future

Renewable Energy

Oil & Gas

Assessing and Managing Cyber Security Risks for Essential Services Operators

Team of 10, pp

Normal Fee, pp

<div>
		

		<div>
			
			<p>Regardless of your computer experience, this class will help you become more aware of technology-related risks and what you can do to protect yourself and your organization from them.</p>
			<div><i></i> 60 minutes</div>
			<div><i></i>  £30.00 incl. VAT</div>
			
			
		</div>
	</div>

	

	<div id="filters">
		
		
	</div>

	

    <div>

		
		 
		

		<div></div>

		<div>
			<p>Want to run this event in-house?  Enquire about running this event in-house </p>
			
		</div>

		<div>
			<p>Interested in attending? Have a suggestion about running this event near you?<br />Register your interest now</p>
			
		</div>
	</div>
	<div></div>
	
		
        <div>
			
		</div>
				

	
		<h3>Description</h3>
		<p></p><p>Regardless of your computer experience, this class will help you become more aware of technology-related risks and what you can do to protect yourself and your organization from them. This course will help you to:</p>
<p>• Understand security compliance needs and requirements.<br />• Recognize and avoid phishing and other social engineering.<br />• Recognize and avoid viruses, ransomware, and other malware.<br />• Help ensure data security on computers, mobile devices, networks, the Internet, and in the cloud.</p>
<p>In this course, you will use discussions, case studies, and the experiences of your instructor and fellow students to explore the hazards and pitfalls of technology and learn how to use that technology safely and securely.</p>
<p><strong>Objectives:</strong><br />In this course, you will identify many of the common risks involved in using conventional end-user technology, as well as ways to use it safely, to protect yourself from those risks.</p>
<p><strong>You will:</strong><br />• Identify the need for security.<br />• Secure devices like desktops, laptops, smartphones, and more.<br />• Use the Internet securely.</p>
<p></p>
	
		<h3>Modules/Lessons</h3>
		<p></p><h4><span><strong>Lesson 1:</strong> Identifying the Need for Security</span></h4>
<p>Topic A: Identify Security Compliance Requirements<br />Topic B: Recognize Social Engineering and Avoid Phishing and Other Attacks</p>
<h4><span><strong>Lesson 2:</strong> Securing Devices</span></h4>
<p>Topic A: Maintain Physical Security of Devices<br />Topic B: Use Passwords for Security</p>
<p></p>
	
		<h3>Prerequisites</h3>
		<p></p><p>To ensure your success in this course, you should have experience with the basic use of conventional end-user technology, including desktop, laptop, or tablet computers; mobile phones; and basic Internet functions, such as web browsing and email.</p>
<p></p>
	
		<h3>Target Student</h3>
		<p></p><p>This course is designed for you as a non-technical end user of computers, mobile devices, networks, and the Internet, to enable you to use technology more securely to minimize digital risks.</p>
<p>This course is also designed for you to prepare for the Certified CyberSAFE credential. You can obtain your Certified CyberSAFE certificate by completing the Certified CyberSAFE credential process on the CHOICE platform following the course presentation.</p>
<p></p>

Regardless of your computer experience, this class will help you become more aware of technology-related risks and what you can do to protect yourself and your organization from them.

Cyber Safe

<h3><b>Microsoft security training course description</b></h3>
        <p>
     A hands on training course focusing on security in the
Microsoft environment. The course progresses from
patch management onto the use of Microsoft security
tools. Then server, desktop and network security are
studied in the Microsoft environment.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Use Microsoft security tools.</li>
					<li>Secure Microsoft servers.</li>
                    <li>Secure Microsoft desktops.</li>
					<li>Secure Microsoft networks.</li>
                  </ul>
				
        <h5><b>Microsoft security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical server support staff.<br />
                    Technical desktop support staff.<br />
                    Technical network staff.<br />
                    Technical security staff.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Supporting Windows server 2016<br />
                    Networking Microsoft systems. </p>
              
							<li><b>Duration</b></li>
							
              <p>3 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Microsoft security training course contents</b></h3>
				<ul>	<li>Introduction</li><p>
Security threats, Microsoft defaults, admin
accounts, security patches, patch management,
patch tools. Hands on: Studying Microsoft
defaults, applying security patches.
					</p><li>Microsoft security tools</li><p>
Microsoft updates, WSUS, Inventory tool, baseline
security analyser, URLscan, EventCombMT,
Cipher security tool, Port reporter, PortQry. Tools
hackers use. Hands on: Using Microsoft security
tools.
</p><li>Server security</li><p>
Checklists, core server security, AD, Member
server security, Domain controller security,
Specific roles. <br /><span>Hands on</span> Hardening Microsoft
servers, security templates.
</p><li>Active Directory</li><p>
Admin authority in AD, group policy, trust and
authentication.
</p><li>Desktop security</li><p>
Checklists, core client security, anti virus software,
anti spyware software, firewalls, securing clients
with AD, securing clients with group policy,
software restriction policies. <br /><span>Hands on</span> Securing
Microsoft desktops.
</p><li>Network security</li><p>
Checklist, IP security, VPNs, PKI, certificate
authorities, RAS, RRAS, IAS. <br /><span>Hands on</span>: VPN
configuration, IAS configuration.
</p><li>Monitoring</li><p>
Auditing, authorisation and logons, tracking,
system monitoring, detecting attacks. <br /><span>Hands on</span>:
Monitoring Microsoft systems.
</p><li>Summary</li><p>
Microsoft security response centre, security
advisories.


</p>
				</ul>

Securing Microsoft systems

<h3><b>Securing UNIX systems training course description</b></h3>
      <p>This course teaches you everything you need to know
to build a safe Linux environment. The first section
handles cryptography and authentication with
certificates, openssl, mod_ssl, DNSSEC and filesystem
encryption. Then Host security and hardening is
covered with intrusion detection, and also user
management and authentication. Filesystem Access
control is then covered. Finally network security is
covered with network hardening, packet filtering and
VPNs. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
      <li>Secure UNIX accounts.</li>
					              <li>Secure UNIX file systems.</li>
                   <li>Secure UNIX access through the network.</li>
                  </ul>
                  
       
        <h5>
        <b>Securing UNIX systems course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Linux technical staff needing to secure their systems.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Linux system administration (LPIC-1)</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Securing UNIX systems course contents</b></h3>
      <ul>
				<li><span>Cryptography</span></li><p>
</p><li>Certificates and Public Key Infrastructures</li><p>
				X.509 certificates, lifecycle, fields and certificate
extensions. Trust chains and PKI. openssl. Public and
private keys. Certification authority. Manage server and
client certificates. Revoke certificates and CAs.
</p><li>Encryption, signing and authentication</li><p>
SSL, TLS, protocol versions. Transport layer security
threats, e.g. MITM. Apache HTTPD with mod_ssl for
HTTPS service, including SNI and HSTS. HTTPD with
mod_ssl to authenticate users using certificates. HTTPD
with mod_ssl to provide OCSP stapling. Use OpenSSL
for SSL/TLS client and server tests.
</p><li>Encrypted File Systems</li><p>
Block device and file system encryption. dm-crypt with
LUKS to encrypt block devices. eCryptfs to encrypt file
systems, including home directories and, PAM
integration, plain dm-crypt and EncFS.
</p><li>DNS and cryptography</li><p>
DNSSEC and DANE. BIND as an authoritative name
server serving DNSSEC secured zones. BIND as an
recursive name server that performs DNSSEC validation,
KSK, ZSK, Key Tag, Key generation, key storage, key
management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG.
				</p><li><span>Host Security</span></li><p>
</p><li>Host Hardening</li><p>
BIOS and boot loader (GRUB 2) security. Disable
useless software and services, sysctl for security related
kernel configuration, particularly ASLR, Exec-Shield and
IP / ICMP configuration, Exec-Shield and IP / ICMP
configuration, Limit resource usage. Work with chroot
environments, Security advantages of virtualization.
</p><li>Host Intrusion Detection</li><p>
The Linux Audit system, chkrootkit, rkhunter, including
updates, Linux Malware Detect, Automate host scans
using cron, AIDE, including rule management,
OpenSCAP.
</p><li>User Management and Authentication</li><p>
NSS and PAM, Enforce password policies. Lock
accounts automatically after failed login attempts,
SSSD, Configure NSS and PAM for use with SSSD,
SSSD authentication against Active Directory, IPA,
LDAP, Kerberos and local domains, Kerberos and local
domains, Kerberos tickets.
</p><li>FreeIPA Installation and Samba Integration</li><p>
FreeIPA, architecture and components. Install and
manage a FreeIPA server and domain, Active Directory
replication and Kerberos cross-realm trusts, sudo,
autofs, SSH and SELinux integration in FreeIPA.
				</p><li><span>Access Control</span></li><p>
</p><li>Discretionary Access Control</li><p>
File ownership and permissions, SUID, SGID. Access
control lists, extended attributes and attribute classes.
</p><li>Mandatory Access Control</li><p>
TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack.
</p><li>etwork File Systems</li><p>
NFSv4 security issues and improvements, NFSv4
server and clients, NFSv4 authentication mechanisms
(LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system,
NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS
security modes (NTLM, Kerberos), mapping and
handling of CIFS ACLs and SIDs in a Linux system.<br />
				</p><li><span>Network Security</span></li><p>
</p><li>Network Hardening</li><p>
FreeRADIUS, nmap, scan methods. Wireshark, filters
and statistics. Rogue router advertisements and DHCP
messages.
</p><li>Network Intrusion Detection</li><p>
ntop, Cacti, bandwidth usage monitoring, Snort, rule
management, OpenVAS, NASL.
</p><li>Packet Filtering</li><p>
Firewall architectures, DMZ, netfilter, iptables and
ip6tables, standard modules, tests and targets. IPv4 and
IPv6 packet filtering. Connection tracking, NAT. IP sets
and netfilter rules, nftables and nft. ebtables. conntrackd
</p><li>Virtual Private Networks</li><p>
OpenVPN server and clients for both bridged and routed
VPN networks. IPsec server and clients for routed VPN
networks using IPsec-Tools / racoon. L2TP.
</p>
      </ul>

Securing UNIX systems

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is intended for experienced IT security-related practitioners, auditors, consultants, investigators, or instructors, including network or security analysts and engineers, network administrators, information security specialists, and risk management professionals, who are pursuing CISSP training and certification to acquire the credibility and mobility to advance within their current computer security careers or to migrate to a related career. Through the study of all eight CISSP Common Body of Knowledge (CBK) domains, students will validate their knowledge by meeting the necessary preparation requirements to qualify to sit for the CISSP certification exam. Additional CISSP certification requirements include a minimum of five years of direct professional work experience in two or more fields related to the eight CBK security domains, or a college degree and four years of experience.</p>Overview<p>#NAME?</p><p>In this course, students will expand upon their knowledge by addressing the essential elements of the 8 domains that comprise a Common Body of Knowledge (CBK)Â© for information systems security professionals.</p>Prerequisites<p></p><ul><li>CompTIA Network+ Certification</li></ul><p></p></div><div id="course-pills-2"><h3>1 - Security and Risk Management</h3> <ul> <li>Security Governance Principles</li> <li>Compliance</li> <li>Professional Ethics</li> <li>Security Documentation</li> <li>Risk Management</li> <li>Threat Modeling</li> <li>Business Continuity Plan Fundamentals</li> <li>Acquisition Strategy and Practice</li> <li>Personnel Security Policies</li> <li>Security Awareness and Training</li> </ul> <h3>2 - Asset Security</h3> <ul> <li>Asset Classification</li> <li>Privacy Protection</li> <li>Asset Retention</li> <li>Data Security Controls</li> <li>Secure Data Handling</li> </ul> <h3>3 - Security Engineering</h3> <ul> <li>Security in the Engineering Lifecycle</li> <li>System Component Security</li> <li>Security Models</li> <li>Controls and Countermeasures in Enterprise Security</li> <li>Information System Security Capabilities</li> <li>Design and Architecture Vulnerability Mitigation</li> <li>Vulnerability Mitigation in Embedded, Mobile, and Web-Based Systems</li> <li>Cryptography Concepts</li> <li>Cryptography Techniques</li> <li>Site and Facility Design for Physical Security</li> <li>Physical Security Implementation in Sites and Facilities</li> </ul> <h3>4 - Information Security Management Goals</h3> <ul> <li>Organizational Security</li> <li>The Application of Security Concepts</li> </ul> <h3>5 - Information Security Classification and Program Development</h3> <ul> <li>Information Classification</li> <li>Security Program Development</li> </ul> <h3>6 - Risk Management and Ethics</h3> <ul> <li>Risk Management</li> <li>Ethics</li> </ul> <h3>7 - Software Development Security</h3> <ul> <li>Software Configuration Management</li> <li>Software Controls</li> <li>Database System Security</li> </ul> <h3>8 - Cryptography</h3> <ul> <li>Ciphers and Cryptography</li> <li>Symmetric-Key Cryptography</li> <li>Asymmetric-Key Cryptography</li> <li>Hashing and Message Digests</li> <li>Email, Internet, and Wireless Security</li> <li>Cryptographic Weaknesses</li> </ul> <h3>9 - Physical Security</h3> <ul> <li>Physical Access Control</li> <li>Physical Access Monitoring</li> <li>Physical Security Methods</li> <li>Facilities Security</li> </ul></div>

Nexus Human

Certified in Cybersecurity (CC)

Certificate in Information Security Management Principles (CISMP)

Certified Cloud Security Professional (CCSP)

Certified Information Security Manager (CISM)

Cissp

CompTIA Security+

Certified Information Security Systems Professional (CISSP)

<p id="isPasted" fr-original-style="" style="color: var(--text); font-size: var(--font-size); box-sizing: border-box;">The professional working world has changed more rapidly than could have been envisaged at the time of the introduction of GDPR and the Data Protection Act 2018. With more people working from home post-Covid and the ever increasing risk of cyber-attacks, this short course is aimed at taking stock of current practice and risk, as well as considering ICO enforcement action and the implications of hybrid working. &nbsp;It is also a great recap on the rules as they stand and what you need to know to comply. &nbsp;The course will cover:</p><ul type="disc" fr-original-style="" style="box-sizing: border-box;"><li style="font-size: 16px; box-sizing: border-box;" fr-original-style="font-size: 16px;">UK GDPR - A timely reminder of the rules</li><li style="font-size: 16px; box-sizing: border-box;" fr-original-style="font-size: 16px;">ICO enforcement action and what we can learn</li><li style="font-size: 16px; box-sizing: border-box;" fr-original-style="font-size: 16px;">Data Protection Impact Assessments - when and how to do them</li><li style="font-size: 16px; box-sizing: border-box;" fr-original-style="font-size: 16px;">Hybrid working and UK GDPR</li><li style="font-size: 16px; box-sizing: border-box;" fr-original-style="font-size: 16px;">Managing cyber attacks from a UK GDPR perspective</li></ul><h2 data-key="21" style="color: rgb(0, 0, 0); box-sizing: border-box;" fr-original-style=" color: rgb(0, 0, 0);"><span data-key="22" fr-original-style="" style="box-sizing: border-box;"><span data-offset-key="22:0" fr-original-style="" style="box-sizing: border-box;">Target Audience</span></span></h2><p data-key="23" data-slate-fragment="JTdCJTIyb2JqZWN0JTIyJTNBJTIyZG9jdW1lbnQlMjIlMkMlMjJkYXRhJTIyJTNBJTdCJTdEJTJDJTIybm9kZXMlMjIlM0ElNUIlN0IlMjJvYmplY3QlMjIlM0ElMjJibG9jayUyMiUyQyUyMnR5cGUlMjIlM0ElMjJoZWFkaW5nLXRocmVlJTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMmNsYXNzTmFtZSUyMiUzQW51bGwlN0QlMkMlMjJub2RlcyUyMiUzQSU1QiU3QiUyMm9iamVjdCUyMiUzQSUyMnRleHQlMjIlMkMlMjJsZWF2ZXMlMjIlM0ElNUIlN0IlMjJvYmplY3QlMjIlM0ElMjJsZWFmJTIyJTJDJTIydGV4dCUyMiUzQSUyMlRhcmdldCUyMEF1ZGllbmNlJTIyJTJDJTIybWFya3MlMjIlM0ElNUIlNUQlN0QlNUQlN0QlNUQlN0QlMkMlN0IlMjJvYmplY3QlMjIlM0ElMjJibG9jayUyMiUyQyUyMnR5cGUlMjIlM0ElMjJwYXJhZ3JhcGglMjIlMkMlMjJkYXRhJTIyJTNBJTdCJTIyY2xhc3NOYW1lJTIyJTNBbnVsbCU3RCUyQyUyMm5vZGVzJTIyJTNBJTVCJTdCJTIyb2JqZWN0JTIyJTNBJTIydGV4dCUyMiUyQyUyMmxlYXZlcyUyMiUzQSU1QiU3QiUyMm9iamVjdCUyMiUzQSUyMmxlYWYlMjIlMkMlMjJ0ZXh0JTIyJTNBJTIyVGhlJTIwb25saW5lJTIwY291cnNlJTIwaXMlMjBzdWl0YWJsZSUyMGZvciUyMHN0YWZmJTIwb2YlMjBhbGwlMjBsZXZlbHMlMkMlMjBmcm9tJTIwc3VwcG9ydCUyMHN0YWZmJTIwdG8lMjBzZW5pb3IlMjBwYXJ0bmVycy4lMjIlMkMlMjJtYXJrcyUyMiUzQSU1QiU1RCU3RCU1RCU3RCU1RCU3RCU1RCU3RA==" style="color: rgb(0, 0, 0); font-size: var(--font-size); box-sizing: border-box;" fr-original-style=" color: rgb(0, 0, 0);"><span data-key="24" fr-original-style="" style="box-sizing: border-box;"><span data-offset-key="24:0" fr-original-style="" style="box-sizing: border-box;">The online course is suitable for staff of all levels, from support staff to senior partners.</span></span></p><h2 style="color: rgb(0, 0, 0); box-sizing: border-box;" id="isPasted" fr-original-style=" color: rgb(0, 0, 0);">Resources</h2><p data-key="28" style="color: rgb(0, 0, 0); font-size: var(--font-size); box-sizing: border-box;" fr-original-style=" color: rgb(0, 0, 0);"><span data-key="29" fr-original-style="" style="box-sizing: border-box;"><span data-offset-key="29:0" fr-original-style="" style="box-sizing: border-box;">Course notes will be provided to all delegates which may be useful for ongoing reference or cascade training.</span></span></p><p data-key="30" data-slate-fragment="JTdCJTIyb2JqZWN0JTIyJTNBJTIyZG9jdW1lbnQlMjIlMkMlMjJkYXRhJTIyJTNBJTdCJTdEJTJDJTIybm9kZXMlMjIlM0ElNUIlN0IlMjJvYmplY3QlMjIlM0ElMjJibG9jayUyMiUyQyUyMnR5cGUlMjIlM0ElMjJoZWFkaW5nLXRocmVlJTIyJTJDJTIyZGF0YSUyMiUzQSU3QiUyMmNsYXNzTmFtZSUyMiUzQW51bGwlN0QlMkMlMjJub2RlcyUyMiUzQSU1QiU3QiUyMm9iamVjdCUyMiUzQSUyMnRleHQlMjIlMkMlMjJsZWF2ZXMlMjIlM0ElNUIlN0IlMjJvYmplY3QlMjIlM0ElMjJsZWFmJTIyJTJDJTIydGV4dCUyMiUzQSUyMkNvdXJzZSUyME5vdGVzJTIyJTJDJTIybWFya3MlMjIlM0ElNUIlNUQlN0QlNUQlN0QlNUQlN0QlMkMlN0IlMjJvYmplY3QlMjIlM0ElMjJibG9jayUyMiUyQyUyMnR5cGUlMjIlM0ElMjJwYXJhZ3JhcGglMjIlMkMlMjJkYXRhJTIyJTNBJTdCJTIyY2xhc3NOYW1lJTIyJTNBbnVsbCU3RCUyQyUyMm5vZGVzJTIyJTNBJTVCJTdCJTIyb2JqZWN0JTIyJTNBJTIydGV4dCUyMiUyQyUyMmxlYXZlcyUyMiUzQSU1QiU3QiUyMm9iamVjdCUyMiUzQSUyMmxlYWYlMjIlMkMlMjJ0ZXh0JTIyJTNBJTIyQ29tcHJlaGVuc2l2ZSUyMGFuZCUyMHVwJTIwdG8lMjBkYXRlJTIwY291cnNlJTIwbm90ZXMlMjB3aWxsJTIwYmUlMjBwcm92aWRlZCUyMHRvJTIwYWxsJTIwZGVsZWdhdGVzJTIwd2hpY2glMjBtYXklMjBiZSUyMHVzZWZ1bCUyMGZvciUyMG9uZ29pbmclMjByZWZlcmVuY2UlMjBvciUyMGNhc2NhZGUlMjB0cmFpbmluZy4lMjIlMkMlMjJtYXJrcyUyMiUzQSU1QiU1RCU3RCU1RCU3RCU1RCU3RCUyQyU3QiUyMm9iamVjdCUyMiUzQSUyMmJsb2NrJTIyJTJDJTIydHlwZSUyMiUzQSUyMnBhcmFncmFwaCUyMiUyQyUyMmRhdGElMjIlM0ElN0IlMjJjbGFzc05hbWUlMjIlM0FudWxsJTdEJTJDJTIybm9kZXMlMjIlM0ElNUIlN0IlMjJvYmplY3QlMjIlM0ElMjJ0ZXh0JTIyJTJDJTIybGVhdmVzJTIyJTNBJTVCJTdCJTIyb2JqZWN0JTIyJTNBJTIybGVhZiUyMiUyQyUyMnRleHQlMjIlM0ElMjJQbGVhc2UlMjBub3RlJTIwYSUyMHJlY29yZGluZyUyMG9mJTIwdGhlJTIwY291cnNlJTIwd2lsbCUyMCUyMiUyQyUyMm1hcmtzJTIyJTNBJTVCJTVEJTdEJTJDJTdCJTIyb2JqZWN0JTIyJTNBJTIybGVhZiUyMiUyQyUyMnRleHQlMjIlM0ElMjJub3QlMjAlMjIlMkMlMjJtYXJrcyUyMiUzQSU1QiU3QiUyMm9iamVjdCUyMiUzQSUyMm1hcmslMjIlMkMlMjJ0eXBlJTIyJTNBJTIyYm9sZCUyMiUyQyUyMmRhdGElMjIlM0ElN0IlN0QlN0QlNUQlN0QlMkMlN0IlMjJvYmplY3QlMjIlM0ElMjJsZWFmJTIyJTJDJTIydGV4dCUyMiUzQSUyMmJlJTIwbWFkZSUyMGF2YWlsYWJsZS4lMjIlMkMlMjJtYXJrcyUyMiUzQSU1QiU1RCU3RCU1RCU3RCU1RCU3RCU1RCU3RA==" style="color: rgb(0, 0, 0); font-size: var(--font-size); box-sizing: border-box;" fr-original-style=" color: rgb(0, 0, 0);"><span data-key="31" fr-original-style="" style="box-sizing: border-box;"><span data-offset-key="31:0" fr-original-style="" style="box-sizing: border-box;">Please note a recording of the course will&nbsp;</span><span data-offset-key="31:1" fr-original-style="" style="box-sizing: border-box;"><strong data-slate-leaf="true" fr-original-style="" style="font-weight: 700; box-sizing: border-box;">not&nbsp;</strong></span><span data-offset-key="31:2" fr-original-style="" style="box-sizing: border-box;">be made available.</span></span></p><h2 data-key="35" style="color: rgb(0, 0, 0); box-sizing: border-box;" fr-original-style=" color: rgb(0, 0, 0);"><span data-key="36" fr-original-style="" style="box-sizing: border-box;"><span data-offset-key="36:0" fr-original-style="" style="box-sizing: border-box;">Speaker</span></span></h2><h3 data-key="37" style="color: rgb(0, 0, 0); box-sizing: border-box;" id="isPasted" fr-original-style=" color: rgb(0, 0, 0);"><a href="http://dglegal.co.uk/the-team/matthew-howgate/" style="color: rgb(0, 140, 165); user-select: auto; font-size: var(--font-size); box-sizing: border-box; cursor: pointer; text-decoration: inherit;" fr-original-style=" color: rgb(0, 140, 165);"><span style="color: rgb(0, 180, 205); box-sizing: border-box;" fr-original-style="color: rgb(0, 180, 205);">Matthew Howgate, Consultant, DG Legal</span></a></h3><p data-key="39" style="color: rgb(0, 0, 0); font-size: var(--font-size); box-sizing: border-box;" fr-original-style=" color: rgb(0, 0, 0);"><span style="color: rgb(0, 0, 0); box-sizing: border-box;" fr-original-style="color: rgb(0, 0, 0);">Matt is a non-practising solicitor who has considerable experience in regulatory issues and advising on complex issues of compliance and ethics. He is also an expert in data protection, UK GDPR and on the civil legal aid scheme.</span></p><p data-key="39" style="color: rgb(0, 0, 0); font-size: var(--font-size); box-sizing: border-box;" fr-original-style=" color: rgb(0, 0, 0);"><span style="color: rgb(0, 0, 0); box-sizing: border-box;" fr-original-style="color: rgb(0, 0, 0);"><span style="color: rgb(0, 0, 0); box-sizing: border-box;" id="isPasted" fr-original-style="color: rgb(0, 0, 0);">Matthew is a lead trainer on and co-developed the LAPG Certificate in Practice Management (a training programme for legal managers and law firm owners) as well as regularly providing training on legal aid Supervision, costs maximisation, data protection and security and on general SRA compliance. &nbsp;</span></span></p>

The professional working world has changed more rapidly than could have been envisaged at the time of the introduction of GDPR and the Data Protection Act 2018. With more people working from home post-Covid and the ever increasing risk of cyber-attacks, this short course is aimed at taking stock of current practice and risk, as well as considering ICO enforcement action and the implications of hybrid working. It is also a great recap on the rules as they stand and what you need to know to comply. The course will cover:
UK GDPR - A timely reminder of the rules
ICO enforcement action and what we can learn
Data Protection Impact Assessments - when and how to do them
Hybrid working and UK GDPR
Managing cyber attacks from a UK GDPR perspective
Target Audience
The online course is suitable for staff of all levels, from support staff to senior partners.
Resources
Course notes will be provided to all delegates which may be useful for ongoing reference or cascade training.
Please note a recording of the course will not be made available.
Speaker
Matthew Howgate, Consultant, DG Legal
Matt is a non-practising solicitor who has considerable experience in regulatory issues and advising on complex issues of compliance and ethics. He is also an expert in data protection, UK GDPR and on the civil legal aid scheme.
Matthew is a lead trainer on and co-developed the LAPG Certificate in Practice Management (a training programme for legal managers and law firm owners) as well as regularly providing training on legal aid Supervision, costs maximisation, data protection and security and on general SRA compliance. 

DG Legal

Data Protection

Cyber Security

GDPR

Data Protection & Cyber Security: Remaining Compliant Against Today's Risks

General Delegate

A discount is available for delegates attending from firms with a current retainer contract with DG Legal (please contact us by email to admin@dglegal.co.uk for confirmation of eligibility).   If you choose this option and are not eligible, you are still bound to pay the full rate and will be invoiced accordingly.

Retainer Delegate

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is designed for people who are seeking to launch a career in cybersecurity.</p>Overview<p>Assess the security posture of an enterprise environment and recommend and implement appropriate security solutions; Monitor and secure hybrid environments, including cloud, mobile, and IoT; Operate with an awareness of applicable laws and policies, including principles of governance, risk, and compliance; Identify, analyze, and respond to security events and incidents.</p><p>CompTIA Security+ is a global certification that validates the baseline skills necessary to perform core security functions and is the first security certification a candidate should earn.<br /> <br /> CompTIA Security+ establishes the core knowledge required of any cybersecurity role and provides a springboard to intermediate-level cybersecurity jobs.</p></div><div id="course-pills-2"><h3>Lesson 1: Summarize Fundamental Security Concepts</h3> <ul> <li>Security Concepts</li> <li>Security Controls</li> </ul> <h3>Lesson 2: Compare Threat Types</h3> <ul> <li>Threat Actors</li> <li>Attack Surfaces</li> <li>Social Engineering</li> </ul> <h3>Lesson 3: Explain Cryptographic Solutions</h3> <ul> <li>Cryptographic Algorithms</li> <li>Public Key Infrastructure</li> <li>Cryptographic Solutions</li> </ul> <h3>Lesson 4: Implement Identity and Access Management</h3> <ul> <li>Authentication</li> <li>Authorization</li> <li>Identity Management</li> </ul> <h3>Lesson 5: Secure Enterprise Network Architecture</h3> <ul> <li>Enterprise Network Architecture</li> <li>Network Security Appliances</li> <li>Secure Communications</li> </ul> <h3>Lesson 6: Secure Cloud Network Architecture</h3> <ul> <li>Cloud Infrastructure</li> <li>Embedded Systems and Zero Trust Architecture</li> </ul> <h3>Lesson 7: Explain Resiliency and Site Security Concepts</h3> <ul> <li>Asset Management</li> <li>Redundancy Strategies</li> <li>Physical Security</li> </ul> <h3>Lesson 8: Explain Vulnerability Management</h3> <ul> <li>Device and OS Vulnerabilities</li> <li>Application and Cloud Vulnerabilities</li> <li>Vulnerability Identification Methods</li> <li>Vulnerability Analysis and Remediation</li> </ul> <h3>Lesson 9: Evaluate Network Security Capabilities</h3> <ul> <li>Network Security Baselines</li> <li>Network Security Capability Enhancement</li> </ul> <h3>Lesson 10: Assess Endpoint Security Capabilities</h3> <ul> <li>Implement Endpoint Security</li> <li>Mobile Device Hardening</li> </ul> <h3>Lesson 11: Enhance Application Security Capabilities</h3> <ul> <li>Application Protocol Security Baselines</li> <li>Cloud and Web Application Security Concepts</li> </ul> <h3>Lesson 12: Explain Incident Response and Monitoring Concepts</h3> <ul> <li>Incident Response</li> <li>Digital Forensics</li> <li>Data Sources</li> <li>Alerting and Monitoring Tools</li> </ul> <h3>Lesson 13: Analyze Indicators of Malicious Activity</h3> <ul> <li>Malware Attack Indicators</li> <li>Physical and Network Attack Indicators</li> <li>Application Attack Indicators</li> </ul> <h3>Lesson 14: Summarize Security Governance Concepts</h3> <ul> <li>Policies, Standards, and Procedures</li> <li>Change Management</li> <li>Automation and Orchestration</li> </ul> <h3>Lesson 15: Explain Risk Management Processes</h3> <ul> <li>Risk Management Processes and Concepts</li> <li>Vendor Management Concepts</li> <li>Audits and Assessments</li> </ul> <h3>Lesson 16: Summarize Data Protection and Compliance Concepts</h3> <ul> <li>Data Classification and Compliance</li> <li>Personnel Policies</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans CompTIA Security Plus Certification (Exam SY0-601) training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the CompTIA Security Plus Certification (Exam SY0-601) course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

CompTIA Network+

Certified Cyber Professional (CCP)

CompTIA A+

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>The intended audience for this course is information security and IT professionals, such as network administrators and engineers, IT managers, and IT auditors, and other individuals who want to learn more about information security, who are interested in learning in-depth information about information security management, who are looking for career advancement in IT security, or who are interested in earning the CISM certification.</p>Overview<p>Establish and maintain a framework to provide assurance that information security strategies are aligned with business objectives and consistent with applicable laws and regulations. Identify and manage information security risks to achieve business objectives. Create a program to implement the information security strategy. Implement an information security program. Oversee and direct information security activities to execute the information security program. Plan, develop, and manage capabilities to detect, respond to, and recover from information security incidents.</p><p>In this course, students will establish processes to ensure that information security measures align with established business needs.</p>Prerequisites<p></p><li>Information security governance</li>  <li>Information risk management</li>  <li>Information security program development</li>  <li>Information security program management</li>  <li>Incident management and response</li><p></p></div><div id="course-pills-2"><h3>1 - Information Security Governance</h3> <ul> <li>Develop an Information Security Strategy</li> <li>Align Information Security Strategy with Corporate Governance</li> <li>Identify Legal and Regulatory Requirements</li> <li>Justify Investment in Information Security</li> <li>Identify Drivers Affecting the Organization</li> <li>Obtain Senior Management Commitment to Information Security</li> <li>Define Roles and Responsibilities for Information Security</li> <li>Establish Reporting and Communication Channels</li> </ul> <h3>2 - Information Risk Management</h3> <ul> <li>Implement an Information Risk Assessment Process</li> <li>Determine Information Asset Classification and Ownership</li> <li>Conduct Ongoing Threat and Vulnerability Evaluations</li> <li>Conduct Periodic BIAs</li> <li>Identify and Evaluate Risk Mitigation Strategies</li> <li>Integrate Risk Management into Business Life Cycle Processes</li> <li>Report Changes in Information Risk</li> </ul> <h3>3 - Information Security Program Development</h3> <ul> <li>Develop Plans to Implement an Information Security Strategy</li> <li>Security Technologies and Controls</li> <li>Specify Information Security Program Activities</li> <li>Coordinate Information Security Programs with Business Assurance Functions</li> <li>Identify Resources Needed for Information Security Program Implementation</li> <li>Develop Information Security Architectures</li> <li>Develop Information Security Policies</li> <li>Develop Information Security Awareness, Training, and Education Programs</li> <li>Develop Supporting Documentation for Information Security Policies</li> </ul> <h3>4 - Information Security Program Implementation</h3> <ul> <li>Integrate Information Security Requirements into Organizational Processes</li> <li>Integrate Information Security Controls into Contracts</li> <li>Create Information Security Program Evaluation Metrics</li> </ul> <h3>5 - Information Security Program Management</h3> <ul> <li>Manage Information Security Program Resources</li> <li>Enforce Policy and Standards Compliance</li> <li>Enforce Contractual Information Security Controls</li> <li>Enforce Information Security During Systems Development</li> <li>Maintain Information Security Within an Organization</li> <li>Provide Information Security Advice and Guidance</li> <li>Provide Information Security Awareness and Training</li> <li>Analyze the Effectiveness of Information Security Controls</li> <li>Resolve Noncompliance Issues</li> </ul> <h3>6 - Incident Management and Response</h3> <ul> <li>Develop an Information Security Incident Response Plan</li> <li>Establish an Escalation Process</li> <li>Develop a Communication Process</li> <li>Integrate an IRP</li> <li>Develop IRTs</li> <li>Test an IRP</li> <li>Manage Responses to Information Security Incidents</li> <li>Perform an Information Security Incident Investigation</li> <li>Conduct Post-Incident Reviews</li> </ul></div>

Certified Cryptocurrency Investigator Course (CCI)

Commercial & Contract Management Certification Program (CCM)

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>The CCSP is ideal for IT and information security leaders responsible for applying best practices to cloud security architecture, design, operations and service orchestration.</p>Overview<p>Upon completing this course, the participants will gain valuable knowledge and skills including the ability to: - Successfully pass the CCSP exam. - Understand the fundamentals of the cloud computing architecture framework. - Understand security challenges associated with different types of cloud services. - Identify and evaluate security risks for their organization?s cloud environments. - Select and implement appropriate controls to ensure secure implementation of cloud services. - Thoroughly understand the 6 essential core domains of the CCSP common body of knowledge:  1. Architectural Concepts &amp; Design Requirements 2. Cloud Data Security  3. Cloud Platform &amp; Infrastructure Security  4. Cloud Application Security  5. Operations  6. Legal &amp; Compliance</p><p>The goal of the course is to prepare professionals for the challenging CCSP exam by covering the objectives of the exam based on the six domains as defined in the (ISC)2 CCSP common body of knowledge.</p></div><div id="course-pills-2"><h3>1 - Architectural Concepts and Design Requirements</h3> <ul> <li>Cloud Computing Concepts</li> <li>Cloud Reference Architecture</li> <li>Cloud Computing Security Concepts</li> <li>Design Principles of Secure Cloud Computing</li> <li>Trusted Cloud Services</li> </ul> <h3>2 - Cloud Data Security</h3> <ul> <li>CSA (Cloud Security Alliance) Cloud Data Lifecycle</li> <li>Cloud Data Storage Architectures</li> <li>Data Security Strategies</li> <li>Data Discovery and Classification Technologies</li> <li>Protecting Privacy and PII (Personally Identifiable Information)</li> <li>Data Rights Management</li> <li>Data Retention, Deletion, and Archiving Policies</li> <li>Auditability, Traceability, and Accountability of Data Events</li> </ul> <h3>3 - Cloud Platform and Infrastructure Security</h3> <ul> <li>Cloud Infrastructure Components</li> <li>Cloud Infrastructure Risks</li> <li>Designing and Planning Security Controls</li> <li>Disaster Recovery and Business Continuity Management</li> </ul> <h3>4 - Cloud Application Security</h3> <ul> <li>The Need for Security Awareness and Training in application Security</li> <li>Cloud Software Assurance and Validation</li> <li>Verified Secure Software</li> <li>SDLC (Software Development Life Cycle) Process</li> <li>Secure SDLC</li> <li>Specifics of Cloud Application Architecture</li> <li>Secure IAM (Identity and Access Management) Solutions</li> </ul> <h3>5 - Operations</h3> <ul> <li>Planning Process for the Data Center Design</li> <li>Installation and Configuration of Physical Infrastructure for Cloud Environment</li> <li>Running Physical Infrastructure for Cloud Environment</li> <li>Managing Physical Infrastructure for Cloud Environment</li> <li>Installation and Configuration of Logical Infrastructure for Cloud Environment</li> <li>Running Logical Infrastructure for Cloud Environment</li> <li>Managing Logical Infrastructure for Cloud Environment</li> <li>Compliance with Regulations and Controls</li> <li>Risk Assessment for Logical and Physical Infrastructure</li> <li>Collection, Acquisition, and Preservation of Digital Evidence</li> <li>Managing Communication with Stakeholders</li> </ul> <h3>6 - Legal and Compliance</h3> <ul> <li>Legal Requirements and Unique Risks within the Cloud Environment</li> <li>Relevant Privacy and PII Laws and Regulations</li> <li>Audit Process, Methodologies, and Required Adaptions for a Cloud Environment</li> <li>Implications of Cloud to Enterprise Risk Management</li> <li>Outsourcing and Cloud Contract Design</li> <li>Vendor Management</li> </ul></div>

AWS Certified Cloud Practitioner

<div id="course-pills-1">Duration<p>3 Days</p><p>18 CPD hours</p>This course is intended for<p>This course is intended for security engineers, security architects, and information security professionals.</p>Overview<p>Identify security benefits and responsibilities of using the AWS Cloud Build secure application infrastructures Protect applications and data from common security threats Perform and automate security checks Configure authentication and permissions for applications and resources Monitor AWS resources and respond to incidents Capture and process logs Create and configure automated and repeatable deployments with tools such as AMIs and AWS CloudFormation</p><p>This course demonstrates how to efficiently use AWS security services to stay secure in the AWS Cloud. The course focuses on the security practices that AWS recommends for enhancing the security of your data and systems in the cloud. The course highlights the security features of AWS key services including compute, storage, networking, and database services. You will also learn how to leverage AWS services and tools for automation, continuous monitoring and logging, and responding to security incidents.</p>Prerequisites<p>We recommend that attendees of this course have: </p><ul> <li>Working knowledge of IT security practices and infrastructure concepts</li> <li>Familiarity with cloud computing concepts</li> <li>Completed AWS Security Essentials and Architecting on AWS courses</li> </ul><p></p></div><div id="course-pills-2"><h3>1 - Security on AWS</h3> <ul> <li>Security in the AWS cloud</li> <li>AWS Shared Responsibility Model</li> <li>Incident response overview</li> <li>DevOps with Security Engineering</li> </ul> <h3>2 - Identifying Entry Points on AWS</h3> <ul> <li>Identify the different ways to access the AWS platform</li> <li>Understanding IAM policies</li> <li>IAM Permissions Boundary</li> <li>IAM Access Analyzer</li> <li>Multi-factor authentication</li> <li>AWS CloudTrail</li> </ul> <h3>3 - Security Considerations: Web Application Environments</h3> <ul> <li>Threats in a three-tier architecture</li> <li>Common threats: user access</li> <li>Common threats: data access</li> <li>AWS Trusted Advisor</li> </ul> <h3>4 - Application Security</h3> <ul> <li>Amazon Machine Images</li> <li>Amazon Inspector</li> <li>AWS Systems Manager</li> </ul> <h3>5 - Data Security</h3> <ul> <li>Data protection strategies</li> <li>Encryption on AWS</li> <li>Protecting data at rest with Amazon S3, Amazon RDS, Amazon DynamoDB</li> <li>Protecting archived data with Amazon S3 Glacier</li> <li>Amazon S3 Access Analyzer</li> <li>Amazon S3 Access Points</li> </ul> <h3>6 - Securing Network Communications</h3> <ul> <li>Amazon VPC security considerations</li> <li>Amazon VPC Traffic Mirroring</li> <li>Responding to compromised instances</li> <li>Elastic Load Balancing</li> <li>AWS Certificate Manager</li> </ul> <h3>7 - Monitoring and Collecting Logs on AWS</h3> <ul> <li>Amazon CloudWatch and CloudWatch Logs</li> <li>AWS Config</li> <li>Amazon Macie</li> <li>Amazon VPC Flow Logs</li> <li>Amazon S3 Server Access Logs</li> <li>ELB Access Logs</li> </ul> <h3>8 - Processing Logs on AWS</h3> <ul> <li>Amazon Kinesis</li> <li>Amazon Athena</li> </ul> <h3>9 - Security Considerations: Hybrid Environments</h3> <ul> <li>AWS Site-to-Site and Client VPN connections</li> <li>AWS Direct Connect</li> <li>AWS Transit Gateway</li> </ul> <h3>10 - Out-Of-Region Protection</h3> <ul> <li>Amazon Route 53</li> <li>AWS WAF</li> <li>Amazon CloudFront</li> <li>AWS Shield</li> <li>AWS Firewall Manager</li> <li>DDoS mitigation on AWS</li> </ul> <h3>11 - Security Considerations: Serverless Environments</h3> <ul> <li>Amazon Cognito</li> <li>Amazon API Gateway</li> <li>AWS Lambda</li> </ul> <h3>12 - Threat Detection and Investigation</h3> <ul> <li>Amazon GuardDuty</li> <li>AWS Security Hub</li> <li>Amazon Detective</li> </ul> <h3>13 - Secrets Management on AWS</h3> <ul> <li>AWS KMS</li> <li>AWS CloudHSM</li> <li>AWS Secrets Manager</li> </ul> <h3>14 - Automation and Security by Design</h3> <ul> <li>AWS CloudFormation</li> <li>AWS Service Catalog</li> </ul> <h3>15 - Account Management and Provisioning on AWS</h3> <ul> <li>AWS Organizations</li> <li>AWS Control Tower</li> <li>AWS SSO</li> <li>AWS Directory Service</li> </ul></div>

IT Security

AWS Certification

AWS Certified Solutions Architect

Security Engineering on AWS

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>The Certified Ethical Hacking v12 course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.</p>Overview<p>Information security controls, laws, and standards. Various types of footprinting, footprinting tools, and countermeasures. Network scanning techniques and scanning countermeasures Enumeration techniques and enumeration countermeasures Vulnerability analysis to identify security loopholes in the target organization?s network, communication infrastructure, and end systems. System hacking methodology, steganography, steganalysis attacks, and covering tracks to discover system and network vulnerabilities. Different types of malware (Trojan, Virus, worms, etc.), system auditing for malware attacks, malware analysis, and countermeasures. Packet sniffing techniques to discover network vulnerabilities and countermeasures to defend against sniffing. Social engineering techniques and how to identify theft attacks to audit human-level vulnerabilities and social engineering countermeasures. DoS/DDoS attack techniques and tools to audit a target and DoS/DDoS countermeasures. Session hijacking techniques to discover network-level session management, authentication/authorization, and cryptographic weaknesses and countermeasures. Webserver attacks and a comprehensive attack methodology to audit vulnerabilities in webserver infrastructure, and countermeasures. Web application attacks, comprehensive web application hacking methodology to audit vulnerabilities in web applications, and countermeasures. SQL injection attack techniques, injection detection tools to detect SQL injection attempts, and countermeasures. Wireless encryption, wireless hacking methodology, wireless hacking tools, and Wi-Fi security tools. Mobile platform attack vector, android vulnerability exploitations, and mobile security guidelines and tools. Firewall, IDS and honeypot evasion techniques, evasion tools and techniques to audit a network perimeter for weaknesses, and countermeasures. Cloud computing concepts (Container technology, serverless computing), the working of various threats and attacks, and security techniques and tools. Penetration testing, security audit, vulnerability assessment, and penetration testing roadmap. Threats to IoT and OT platforms and defending IoT and OT devices. Cryptography ciphers, Public Key Infrastructure (PKI), cryptography attacks, and cryptanalysis tools.</p><p>CEH provides an in-depth understanding of ethical hacking phases, various attack vectors, and preventative countermeasures. It will teach you how hackers think and act maliciously so you will be better positioned to setup your security infrastructure and defend against future attacks. An understanding of system weaknesses and vulnerabilities helps organizations strengthen their system security controls to minimize the risk of an incident. CEH was built to incorporate a hands-on environment and systematic process across each ethical hacking domain and methodology, giving you the opportunity to work towards proving the required knowledge and skills needed to achieve the CEH credential. You will be exposed to an entirely different posture toward the responsibilities and measures required to be secure. Now in its 12th version, CEH continues to evolve with the latest operating systems, tools, tactics, exploits, and technologies.</p></div><div id="course-pills-2"><h3>1 - Introduction to Ethical Hacking</h3> <ul> <li>Information Security Overview</li> <li>Cyber Kill Chain Concepts</li> <li>Hacking Concepts</li> <li>Ethical Hacking Concepts</li> <li>Information Security Controls</li> <li>Information Security Laws and Standards</li> </ul> <h3>2 - 2 - Foot-printing and Reconnaissance</h3> <ul> <li>Footprinting Concepts</li> <li>Footprinting through Search Engines</li> <li>Footprinting through Web Services</li> <li>Footprinting through Social Networking Sites</li> <li>Website Footprinting</li> <li>Email Footprinting</li> <li>Who is Footprinting</li> <li>DNS Footprinting</li> <li>Network Footprinting</li> <li>Footprinting through Social Engineering</li> <li>Footprinting Tools</li> <li>Footprinting Countermeasures</li> </ul> <h3>3 - Scanning Networks</h3> <ul> <li>Network Scanning Concepts</li> <li>Scanning Tools</li> <li>Host Discovery</li> <li>Port and Service Discovery</li> <li>OS Discovery (Banner Grabbing/OS Fingerprinting) </li><li>Scanning Beyond IDS and Firewall</li> <li>Draw Network Diagrams</li> </ul> <h3>4 - Enumeration</h3> <ul> <li>Enumeration Concepts</li> <li>NetBIOS Enumeration</li> <li>SNMP Enumeration</li> <li>LDAP Enumeration</li> <li>NTP and NFS Enumeration</li> <li>SMTP and DNS Enumeration</li> <li>Other Enumeration Techniques</li> <li>Enumeration Countermeasures</li> </ul> <h3>5 - Vulnerability Analysis</h3> <ul> <li>Vulnerability Assessment Concepts</li> <li>Vulnerability Classification and Assessment Types</li> <li>Vulnerability Assessment Solutions and Tools</li> <li>Vulnerability Assessment Reports</li> </ul> <h3>6 - System Hacking</h3> <ul> <li>System Hacking Concepts</li> <li>Gaining Access</li> <li>Escalating Privileges</li> <li>Maintaining Access</li> <li>Clearing Logs</li> </ul> <h3>7 - Malware Threats</h3> <ul> <li>Malware Concepts</li> <li>APT Concepts</li> <li>Trojan Concepts</li> <li>Virus and Worm Concepts</li> <li>Fileless Malware Concepts</li> <li>Malware Analysis</li> <li>Countermeasures</li> <li>Anti-Malware Software</li> </ul> <h3>8 - Sniffing</h3> <ul> <li>Sniffing Concepts</li> <li>Sniffing Technique: MAC Attacks</li> <li>Sniffing Technique: DHCP Attacks</li> <li>Sniffing Technique: ARP Poisoning</li> <li>Sniffing Technique: Spoofing Attacks</li> <li>Sniffing Technique: DNS Poisoning</li> <li>Sniffing Tools</li> <li>Countermeasures</li> <li>Sniffing Detection Techniques</li> </ul> <h3>9 - Social Engineering</h3> <ul> <li>Social Engineering Concepts</li> <li>Social Engineering Techniques</li> <li>Insider Threats</li> <li>Impersonation on Social Networking Sites</li> <li>Identity Theft</li> <li>Countermeasures</li> </ul> <h3>10 - Denial-of-Service</h3> <ul> <li>DoS/DDoS Concepts</li> <li>DoS/DDoS Attack Techniques</li> <li>BotnetsDDoS Case Study</li> <li>DoS/DDoS Attack Tools</li> <li>Countermeasures</li> <li>DoS/DDoS Protection Tools</li> </ul> <h3>11 - Session Hijacking</h3> <ul> <li>Session Hijacking Concepts</li> <li>Application Level Session Hijacking</li> <li>Network Level Session Hijacking</li> <li>Session Hijacking Tools</li> <li>Countermeasures</li> </ul> <h3>12 - Evading IDS, Firewalls, and Honeypots</h3> <ul> <li>IDS, IPS, Firewall, and Honeypot Concepts</li> <li>IDS, IPS, Firewall, and Honeypot Solutions</li> <li>Evading IDS</li> <li>Evading Firewalls</li> <li>IDS/Firewall Evading Tools</li> <li>Detecting Honeypots</li> <li>IDS/Firewall Evasion Countermeasures</li> </ul> <h3>13 - Hacking Web Servers</h3> <ul> <li>Web Server Concepts</li> <li>Web Server Attacks</li> <li>Web Server Attack Methodology</li> <li>Web Server Attack Tools</li> <li>Countermeasures</li> <li>Patch Management</li> <li>Web Server Security Tools</li> </ul> <h3>14 - Hacking Web Applications</h3> <ul> <li>Web Application Concepts</li> <li>Web Application Threats</li> <li>Web Application Hacking Methodology</li> <li>Web API, Webhooks, and Web Shell</li> <li>Web Application Security</li> </ul> <h3>15 - SQL Injection</h3> <ul> <li>SQL Injection Concepts</li> <li>Types of SQL Injection</li> <li>SQL Injection Methodology</li> <li>SQL Injection Tools</li> <li>Evasion Techniques</li> <li>Countermeasures</li> </ul> <h3>16 - Hacking Wireless Networks</h3> <ul> <li>Wireless Concepts</li> <li>Wireless Encryption</li> <li>Wireless Threats</li> <li>Wireless Hacking Methodology</li> <li>Wireless Hacking Tools</li> <li>Bluetooth Hacking</li> <li>Countermeasures</li> <li>Wireless Security Tools</li> </ul> <h3>17 - Hacking Mobile Platforms</h3> <ul> <li>Mobile Platform Attack Vectors</li> <li>Hacking Android OS</li> <li>Hacking iOS</li> <li>Mobile Device Management</li> <li>Mobile Security Guidelines and Tools</li> </ul> <h3>18 - IoT and OT Hacking</h3> <ul> <li>IoT Hacking</li> <li>IoT Concepts</li> <li>IoT Attacks</li> <li>IoT Hacking Methodology</li> <li>IoT Hacking Tools</li> <li>Countermeasures</li> <li>OT Hacking</li> <li>OT Concepts</li> <li>OT Attacks</li> <li>OT Hacking Methodology</li> <li>OT Hacking Tools</li> <li>Countermeasures</li> </ul> <h3>19 - Cloud Computing</h3> <ul> <li>Cloud Computing Concepts</li> <li>Container Technology</li> <li>Serverless Computing</li> <li>Cloud Computing Threats</li> <li>Cloud Hacking</li> <li>Cloud Security</li> </ul> <h3>20 - Cryptography</h3> <ul> <li>Cryptography Concepts</li> <li>Encryption Algorithms</li> <li>Cryptography Tools</li> <li>Public Key Infrastructure (PKI) </li><li>Email Encryption</li> <li>Disk Encryption</li> <li>Cryptanalysis</li> <li>Countermeasures</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans EC-Council Certified Ethical Hacker (CEH) v.12 training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the EC-Council Certified Ethical Hacker (CEH) v.12 course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

IT Certifications

Certified Ethical Hacker (CEH)

Ethical Hacking

EC-Council Certified Ethical Hacker (CEH) v12

<div id="course-pills-1">Duration<p>5 Days</p><p>30 CPD hours</p>This course is intended for<p>This course is intended for entry-level computer support professionals with a basic knowledge of computer hardware, software, and operating systems who wish to increase their knowledge and understanding of networking concepts and acquire the required skills to prepare for a career in network support or administration, or who wish to prepare for the CompTIA Network+ certification. CompTIA Network+ is the first certification IT professionals specializing in network administration and support should earn. Network+ is aimed at IT professionals with job roles such as network administrator, network technician, network installer, help desk technician, and IT cable installer. This course is also designed for students who are seeking the CompTIA Network+ certification and who want to prepare for the CompTIA Network+ N10-008 Certification Exam.</p>Overview<p>In this course, you will describe the major networking technologies and systems of modern networks and configure, manage, and troubleshoot modern networks. Explain the OSI and TCP/IP Models. Explain properties of network traffic. Install and configure switched networks. Configure IP networks. Install and configure routed networks. Configure and monitor ports and protocols. Explain network application and storage issues. Monitor and troubleshoot networks. Explain network attacks and mitigations. Install and configure security devices. Explain authentication and access controls. Deploy and troubleshoot cabling solutions. Implement and troubleshoot wireless technologies. Compare and contrast WAN technologies. Use remote access methods. Identify site policies and best practices.</p><p>CompTIA's Network+ certification is a foundation-level certification designed for IT professionals with around one year of experience, whose job role is focused on network administration.<br /><br />The CompTIA Network+ exam will certify the successful candidate has the knowledge and skills required to troubleshoot, configure, and manage common network devices; establish basic network connectivity; understand and maintain network documentation; identify network limitations and weaknesses; and implement network security, standards, and protocols. The candidate will have a basic understanding of enterprise technologies, including cloud and virtualization technologies.  <br /><br /> The Official CompTIAÂ© Network+Â© (Exam N10-008): will teach you the fundamental principles of installing, configuring, and troubleshooting network technologies and help you to progress a career in network administration. In this course, you will build on your existing user-level knowledge and experience with personal computer operating systems and networks to master the fundamental skills and concepts that you will need to use on the job in any type of networking career.</p>Prerequisites<p></p><ul><li>CompTIA A+ Certification (Exams 220-1001 and 220-1002)</li></ul><p></p></div><div id="course-pills-2"><h3>1 - Explaining the OSI and TCP/IP Models</h3> <ul> <li>Topic A: Explain OSI Model Layers</li> <li> Topic B: Explain the TCP/IP Suite</li> </ul> <h3>2 - Explaining Properties of Network Traffic</h3> <ul> <li>Topic A: Explain Media Types and Access Methods</li> <li> Topic B: Deploy Ethernet Standards</li> <li> Topic C: Configure and Monitor Network Interfaces</li> </ul> <h3>3 - Installing and Configuring Switched Networks</h3> <ul> <li>Topic A: Install and Configure Hubs and Bridges</li> <li> Topic B: Install and Configure Switches</li> <li> Topic C: Compare and Contrast Network Topologies</li> <li> Topic D: Compare and Contrast Network Types</li> </ul> <h3>4 - Configuring IP Networks</h3> <ul> <li>Topic A: Configure IPv4 Addressing Components</li> <li> Topic B: Test IP Interfaces with Command Line Tools</li> <li> Topic C: Configure IPv4 Subnets</li> <li> Topic D: Configure Private and Public IPv4 Addressing Schemes</li> <li> Topic E: Configure IPv6 Addressing Components</li> <li> Topic F: Configure DHCP Services</li> </ul> <h3>5 - Installing and Configuring Routed Networks</h3> <ul> <li>Topic A: Explain Characteristics of Routing</li> <li> Topic B: Install and Configure Routers</li> </ul> <h3>6 - Configuring and Monitoring Ports and Protocols</h3> <ul> <li>Topic A: Explain the Uses of Ports and Protocols</li> <li> Topic B: Use Port Scanners and Protocol Analyzers</li> <li> Topic C: Explain the Use of Name Resolution Services</li> <li> Topic D: Configure DNS and IPAM Services</li> </ul> <h3>7 - Explaining Network Application and Storage Services</h3> <ul> <li>Topic A: Explain the Uses of Network Applications</li> <li> Topic B: Explain the Uses of Voice Services and Advanced Networking Devices</li> <li> Topic C: Explain the Uses of Virtualization and Network Storage Services</li> <li> Topic D: Summarize the Concepts of Cloud Services</li> </ul> <h3>8 - Monitoring and Troubleshooting Networks</h3> <ul> <li>Topic A: Monitor Network Interfaces and Logs</li> <li>Topic B: Explain Network Troubleshooting Methodology</li> <li>Topic C: Troubleshoot Common Network Services Issues</li> </ul> <h3>9 - Explaining Networking Attacks and Mitigations</h3> <ul> <li>Topic A: Summarize Common Networking Attacks</li> <li>Topic B: Explain the Characteristics of VLANs</li> <li>Topic C: Explain the Characteristics of NAT and Port Forwarding</li> </ul> <h3>10 - Installing and Configuring Security Devices</h3> <ul> <li>Topic A: Install and Configure Firewalls and Proxies</li> <li>Topic B: Explain the Uses of IDS/IPS and UTM</li> </ul> <h3>11 - Explaining Authentication and Access Controls</h3> <ul> <li>Topic A: Explain Authentication Controls and Attacks</li> <li>Topic B: Explain the Uses of Authentication Protocols and Directory Services</li> <li>Topic C: Explain the Uses of Port Security and NAC</li> <li>Topic D: Implement Network Device Hardening</li> <li>Topic E: Explain Patch Management and Vulnerability Scanning Processes</li> </ul> <h3>12 - Deploying and Troubleshooting Cabling Solutions</h3> <ul> <li>Topic A: Deploy Structured Cabling Systems</li> <li>Topic B: Deploy Twisted Pair Cabling Solutions</li> <li>Topic C: Test and Troubleshoot Twisted Pair Cabling Solutions</li> <li>Topic D: Deploy Fiber Optic Cabling Solutions</li> </ul> <h3>13 - Implementing and Troubleshooting Wireless Technologies</h3> <ul> <li>Topic A: Install and Configure Wireless Technologies</li> <li>Topic B: Troubleshoot Wireless Performance Issues</li> <li>Topic C: Secure and Troubleshoot Wireless Connectivity</li> </ul> <h3>14 - Comparing and Contrasting WAN Technologies</h3> <ul> <li>Topic A: Compare and Contrast WAN Core Service Types</li> <li>Topic B: Compare and Contrast WAN Subscriber Service Types</li> <li>Topic C: Compare and Contrast WAN Framing Service Types</li> <li>Topic D: Compae and Contrast Wireless and IoT WAN Technologies</li> </ul> <h3>15 - Using Remote Access Methods</h3> <ul> <li>Topic A: Use Remote Access VPNs</li> <li>Topic B: Use Remote Access Management Methods</li> </ul> <h3>16 - Identifying Site Policies and Best Practices</h3> <ul> <li>Topic A: Manage Networks with Documentation and Diagrams</li> <li>Topic B: Summarize the Purposes of Physical Security Devices</li> <li>Topic C: Compare and Contrast Business Continuity and Disaster Recovery Concepts</li> <li>Topic D: Identify Policies and Best Practices</li> </ul></div>

Cisco Certified Entry Networking Technician (CCENT)

IT Networking Fundamentals

Computer Networking

Manchester

Research Quality Association

Introduction to Computer Systems Validation

RQA Member

Non Member

<div id="course-pills-1">Duration<p>4 Days</p><p>24 CPD hours</p>This course is intended for<p></p><p>Successful students have experience and knowledge in IT operations, including networking, virtualization, identity, security, business continuity, disaster recovery, data platforms, and governance. Students also have experience designing and architecting solutions.</p> <p>Before attending this course, students must have previous experience deploying or administering Azure resources and strong conceptual knowledge of:</p> <ul> <li><p>Azure compute technologies such as VMs, containers and serverless solutions</p> </li> <li><p>Azure virtual networking to include load balancers</p> </li> <li><p>Azure Storage technologies (unstructured and databases)</p> </li> <li><p>General application design concepts such as messaging and high availability</p> </li> </ul><p></p><p></p><p>This course teaches Azure Solution Architects how to design infrastructure solutions. Course topics cover governance, compute, application architecture, storage, data integration, authentication, networks, business continuity, and migrations. The course combines lecture with case studies to demonstrate basic architect design principles.</p><p></p>Prerequisites<p>Before attending this course, students must have previous experience deploying or administering Azure resources and conceptual knowledge of:  </p><li>Azure Active Directory</li>  <li>Azure compute technologies such as VMs, containers and serverless solutions</li>  <li>Azure virtual networking to include load balancers</li>  <li>Azure Storage technologies (unstructured and databases)</li>  <li>General application design concepts such as messaging and high availability</li>  <li>AZ-104T00 - Microsoft Azure Administrator<p></p></li></div><div id="course-pills-2"><h3>1 - Design governance</h3> <ul> <li>Design for governance</li> <li>Design for management groups</li> <li>Design for subscriptions</li> <li>Design for resource groups</li> <li>Design for resource tags</li> <li>Design for Azure Policy</li> <li>Design for role-based access control (RBAC)</li> <li>Design for Azure landing zones</li> </ul> <h3>2 - Design an Azure compute solution</h3> <ul> <li>Choose an Azure compute service</li> <li>Design for Azure Virtual Machines solutions</li> <li>Design for Azure Batch solutions</li> <li>Design for Azure App Service solutions</li> <li>Design for Azure Container Instances solutions</li> <li>Design for Azure Kubernetes Service solutions</li> <li>Design for Azure Functions solutions</li> <li>Design for Azure Logic Apps solutions</li> </ul> <h3>3 - Design a data storage solution for non-relational data</h3> <ul> <li>Design for data storage</li> <li>Design for Azure storage accounts</li> <li>Design for data redundancy</li> <li>Design for Azure Blob Storage</li> <li>Design for Azure Files</li> <li>Design for Azure managed disks</li> <li>Design for storage security</li> </ul> <h3>4 - Design a data storage solution for relational data</h3> <ul> <li>Design for Azure SQL Database</li> <li>Design for Azure SQL Managed Instance</li> <li>Design for SQL Server on Azure Virtual Machines</li> <li>Recommend a solution for database scalability</li> <li>Recommend a solution for database availability</li> <li>Design security for data at rest, data in motion, and data in use</li> <li>Design for Azure SQL Edge</li> <li>Design for Azure Cosmos DB and Table Storage</li> </ul> <h3>5 - Design data integration</h3> <ul> <li>Design a data integration solution with Azure Data Factory</li> <li>Design a data integration solution with Azure Data Lake</li> <li>Design a data integration and analytic solution with Azure Databricks</li> <li>Design a data integration and analytic solution with Azure Synapse Analytics</li> <li>Design strategies for hot, warm, and cold data paths</li> <li>Design an Azure Stream Analytics solution for data analysis</li> </ul> <h3>6 - Design an application architecture</h3> <ul> <li>Describe message and event scenarios</li> <li>Design a messaging solution</li> <li>Design an Azure Event Hubs messaging solution</li> <li>Design an event-driven solution</li> <li>Design a caching solution</li> <li>Design API integration</li> <li>Design an automated app deployment solution</li> <li>Design an app configuration management solution</li> </ul> <h3>7 - Design authentication and authorization solutions</h3> <ul> <li>Design for identity and access management (IAM)</li> <li>Design for Microsoft Entra ID</li> <li>Design for Microsoft Entra business-to-business (B2B)</li> <li>Design for Azure Active Directory B2C (business-to-customer)</li> <li>Design for conditional access</li> <li>Design for identity protection</li> <li>Design for access reviews</li> <li>Design service principals for applications</li> <li>Design managed identities</li> <li>Design for Azure Key Vault</li> </ul> <h3>8 - Design a solution to log and monitor Azure resources</h3> <ul> <li>Design for Azure Monitor data sources</li> <li>Design for Azure Monitor Logs (Log Analytics) workspaces</li> <li>Design for Azure Workbooks and Azure insights</li> <li>Design for Azure Data Explorer</li> </ul> <h3>9 - Design network solutions</h3> <ul> <li>Recommend a network architecture solution based on workload requirements</li> <li>Design patterns for Azure network connectivity services</li> <li>Design outbound connectivity and routing</li> <li>Design for on-premises connectivity to Azure Virtual Network</li> <li>Choose an application delivery service</li> <li>Design for application delivery services</li> <li>Design for application protection services</li> </ul> <h3>10 - Design a solution for backup and disaster recovery</h3> <ul> <li>Design for backup and recovery</li> <li>Design for Azure Backup</li> <li>Design for Azure blob backup and recovery</li> <li>Design for Azure files backup and recovery</li> <li>Design for Azure virtual machine backup and recovery</li> <li>Design for Azure SQL backup and recovery</li> <li>Design for Azure Site Recovery</li> </ul> <h3>11 - Design migrations</h3> <ul> <li>Evaluate migration with the Cloud Adoption Framework</li> <li>Describe the Azure migration framework</li> <li>Assess your on-premises workloads</li> <li>Select a migration tool</li> <li>Migrate your structured data in databases</li> <li>Select an online storage migration tool for unstructured data</li> <li>Migrate offline data</li> </ul> <h3>12 - Introduction to the Microsoft Azure Well-Architected Framework</h3> <ul> <li>Azure Well-Architected Framework pillars</li> <li>Cost optimization</li> <li>Operational excellence</li> <li>Performance efficiency</li> <li>Reliability</li> <li>Security</li> </ul> <h3>13 - Microsoft Azure Well-Architected Framework - Cost Optimization</h3> <ul> <li>Develop cost-management discipline</li> <li>Design with a cost-efficiency mindset</li> <li>Design for usage optimization</li> <li>Design for rate optimization</li> <li>Monitor and optimize over time</li> </ul> <h3>14 - Microsoft Azure Well-Architected Framework - Operational excellence</h3> <ul> <li>Embrace DevOps culture</li> <li>Establish development standards</li> <li>Evolve operations with observability</li> <li>Deploy with confidence</li> <li>Automate for efficiency</li> <li>Adopt safe deployment practices</li> </ul> <h3>15 - Microsoft Azure Well-Architected Framework - Performance efficiency</h3> <ul> <li>Negotiate realistic performance targets</li> <li>Design to meet capacity requirements</li> <li>Achieve and sustain performance</li> <li>Improve efficiency through optimization</li> </ul> <h3>16 - Microsoft Azure Well-Architected Framework - Reliability</h3> <ul> <li>Design for business requirements</li> <li>Design for resilience</li> <li>Design for recovery</li> <li>Design for operations</li> <li>Keep it simple</li> </ul> <h3>17 - Microsoft Azure Well-Architected Framework - Security</h3> <ul> <li>Plan your security readiness</li> <li>Design to protect confidentiality</li> <li>Design to protect integrity</li> <li>Design to protect availability</li> <li>Sustain and evolve your security posture</li> </ul> <h3>18 - Getting started with the Microsoft Cloud Adoption Framework for Azure</h3> <ul> <li>Customer narrative</li> <li>Common blockers</li> </ul> <h3>19 - Prepare for successful cloud adoption with a well-defined strategy</h3> <ul> <li>Customer narrative</li> <li>Capture strategic motivation</li> <li>Define objectives and key results</li> <li>Evaluate financial considerations</li> <li>Understand technical considerations</li> <li>Create a business case</li> </ul> <h3>20 - Prepare for cloud adoption with a data-driven plan</h3> <ul> <li>Customer narrative</li> </ul> <h3>21 - Choose the best Azure landing zone to support your requirements for cloud operations</h3> <ul> <li>Customer narrative</li> <li>Common operating models</li> <li>Design areas for Azure landing zones</li> <li>Design principles for Azure landing zones</li> <li>Journey to the target architecture</li> <li>Choose an Azure landing zone option</li> <li>Deploy the Azure landing zone accelerator</li> <li>Enhance your landing zone</li> </ul> <h3>22 - Migrate to Azure through repeatable processes and common tools</h3> <ul> <li>Customer narrative</li> <li>Migration process</li> <li>Migration tools</li> <li>Common tech platforms</li> </ul> <h3>23 - Address tangible risks with the Govern methodology of the Cloud Adoption Framework for Azure</h3> <ul> <li>Customer narrative</li> <li>Govern methodology</li> <li>Corporate policies</li> <li>Governance disciplines</li> <li>Deploy a cloud governance foundation</li> <li>The Cost Management discipline</li> </ul> <h3>24 - Ensure stable operations and optimization across all supported workloads deployed to the cloud</h3> <ul> <li>Establish business commitments</li> <li>Deploy an operations baseline</li> <li>Protect and recover</li> <li>Enhance an operations baseline</li> <li>Manage platform and workload specialization</li> </ul> <h3>25 - Innovate applications by using Azure cloud technologies</h3> <ul> <li>Follow the innovation lifecycle</li> <li>Azure technologies for the build process</li> <li>Infuse your applications with AI</li> <li>Azure technologies for measuring business impact</li> <li>Azure technologies for the learn process</li> </ul> <h3>26 - Prepare for cloud security by using the Microsoft Cloud Adoption Framework for Azure</h3> <ul> <li>Customer narrative</li> <li>Methodology</li> <li>Security roles and responsibilities</li> <li>Simplify compliance and security</li> <li>Simplify security implementation</li> <li>Security tools and policies</li> </ul></div><div id="course-pills-3"><h4>Additional course details:</h4><br /><p>Nexus Humans AZ-305T00: Designing Microsoft Azure Infrastructure Solutions training program is a workshop that presents an invigorating mix of sessions, lessons, and masterclasses meticulously crafted to propel your learning expedition forward. </p><p></p> This immersive bootcamp-style experience boasts interactive lectures, hands-on labs, and collaborative hackathons, all strategically designed to fortify fundamental concepts. <p></p>Guided by seasoned coaches, each session offers priceless insights and practical skills crucial for honing your expertise. Whether you're stepping into the realm of professional skills or a seasoned professional, this comprehensive course ensures you're equipped with the knowledge and prowess necessary for success.  <p></p>While we feel this is the best course for the AZ-305T00: Designing Microsoft Azure Infrastructure Solutions course and one of our Top 10 we encourage you to read the course outline to make sure it is the right content for you.  <p></p>Additionally, private sessions, closed classes or dedicated events are available both live online and at our training centres in Dublin and London, as well as at your offices anywhere in the UK, Ireland or across EMEA.<p></p></div>

348 Courses in Liverpool

Definitive Kerberos for engineers

By Systems & Network Training

Definitive Firewalls for engineers

By Systems & Network Training

Information Security Management Principle

By GBA Corporate

Cyber Secure Coder

By Mpi Learning - Professional Learning And Development Provider

Definitive OpenSSL for engineers

By Systems & Network Training

Essential Lawful Intercept

By Systems & Network Training

Assessing and Managing Cyber Security Risks for Essential Services Operators

By EnergyEdge - Training for a Sustainable Energy Future

Cyber Safe

By Mpi Learning - Professional Learning And Development Provider

Securing Microsoft systems

By Systems & Network Training

Securing UNIX systems

By Systems & Network Training

Search By Location