
Security governance, defined by NIST, builds a framework to align information security with business objectives and laws while assigning responsibility across leadership and staff.
Conduct a security audit to review an organization’s IT infrastructure, policies, procedures, and compliance with privacy laws and regulations. Identify vulnerabilities and report remediation steps through a third party audit.
Discover how phishing uses social engineering to steal credentials and deploy malware through fake emails and landing pages, including AD credentials and single sign-on in targeted and mass campaigns.
Identify viruses, worms, and malware by definitions and behaviors; learn how viruses attach to software, worms spread through networks, trojan horses steal information, and ransomware and spyware fit into malware.
This course is meant for anyone curious about InfoSec and just starting out in this field. Terminology and concepts are explained with the goal of being clear even to those who hear of them for the very first time.
The following topics are covered mainly with definitions and theoretical explanations, but also with some practical examples:
- The need for InfoSec
- CIA Triad (Confidentiality, Integrity, Availability)
- Non-repudiation
- Risk Assessment & Risk Management
- Cryptography and it's place in InfoSec
- Authentication and Authorization
- Governance and Information Security Policies
- Security Auditing
- Laws & Regulations related to Security and Privacy of Data
- Security Detection and Response
- Vulnerability Management
- Security Patching
- Penetration Testing
As an experienced Cybersecurity expert, I've changed a few roles and seen different approaches to security, mainly in large corporations. I'm happy to provide insight into how those systems operate, and more importantly, how they're secured. You will learn that it's not all about advanced technology you hear about these days, but also about people, processes, education, and analytical thinking. I truly hope you will find value in these lessons, and feel free to reach out shall you have any questions, suggestions, or ideas to share.
Later on, I will add tests in between lessons, including some additional information on differences between all the security disciplines: infosec, cybersec, physical, fraud...