CERTIFIED CYBERSECURITY SPECIALIST (CCSS)

TRAINING OVERVIEW

TRAINING TOPICS

• Fundamentals of Cybersecurity
• Risk Management
• Asset Management
• Security Controls
• Security Education, Training, and Awareness (SETA)
• Threat Management
• Business Continuity and Disaster Recovery
• Incident Management

By the end of this training course, delegates will be able to

• Apply skills for identifying, assessing, analysing, responding to, and monitoring risks and threats within the organization, facilitating informed decision-making and proactive risk mitigation
• Master principles of asset security, including endpoint security, resilient architectures, secure design, SDLC practices, configuration management, and cryptography
• Implement a holistic security approach by deploying and managing technical, physical, and managerial controls to ensure a robust and comprehensive security posture
• Utilize knowledge and skills in leveraging cyber threat intelligence and Open-Source Intelligence (OSINT) for proactive identification, response, and mitigation of potential cyber threats
• Conduct business impact analyses, create business continuity plans, and craft disaster recovery plans to ensure effective organizational sustainability and recovery from disruptive incidents

Target Competencies

• Information security management
• Development of IT policies and procedures
• Applications of cybersecurity solutions
• Threat Intelligence
• Incident management and response

TRAINING IS TAILORED TO

TRAINING METHODOLOGY

DAY ONE

FUNDAMENTALS OF CYBERSECURITY

• Definitions
• Security concepts and definitions
• Cybersecurity standards

Risk Management

• Risk and threat landscape
• Risk assessment, evaluation, and analysis
• Risk response
• Risk monitoring and reporting

DAY TWO

ASSET MANAGEMENT

• Endpoint security
• Creating a secure architecture
• Secure by design
• System development lifecycle
• Device configuration
• Overview of cryptography

SECURITY CONTROLS

• Technical controls
• Physical controls
• Administrative controls

DAY THREE

SECURITY EDUCATION, TRAINING, AND AWARENESS (SETA)

• Developing a security education, training, and awareness program
• Developing and measuring against SETA metrics

Threat Management

• Cyber Threat Intelligence
• Open-Source Intelligence overview

DAY FOUR

BUSINESS CONTINUITY AND DISASTER RECOVERY

• Business impact analysis
• Business continuity planning
• Disaster recovery planning

DAY FIVE

INCIDENT MANAGEMENT

• Incident management and incident response overview
• Incident handling life cycle
• Digital forensics principles