CyberSec First Responder: Threat Detection & Response (CYBERSEC)

OBJECTIVES

Un CyberSec First Responder est la première ligne de défense contre les cyberattaques qui peuvent coûter à une organisation du temps et de l’argent précieux. Le cours CyberSec First Responder: Threat Detection and Response, ou CFR, préparera les professionnels de la sécurité à devenir les premiers intervenants qui défendent contre les cyberattaques en enseignant aux étudiants comment analyser les menaces, concevoir des environnements informatiques et réseau sécurisés, défendre activement les réseaux et répondre/enquêter sur les incidents de cybersécurité.

QUI DEVRAIT PARTICIPER

SUJETS

• Assessing Information Security Risk
• Identify the Importance of Risk Management
• Assess Risk
• Mitigate Risk
• Integrate Documentation into Risk Management
• Creating an Information Assurance Lifecycle Process
• Evaluate Information Assurance Lifecycle Models
• Align Information Security Operations to the Information Assurance Lifecycle
• Align Information Assurance and Compliance Regulations
• Analyzing Threats to Computing and Network Environments
• Identify Threat Analysis Models
• Assess the Impact of Reconnaissance Incidents
• Assess the Impact of Systems Hacking Attacks
• Assess the Impact of Malware
• Assess the Impact of Hijacking and Impersonation Attacks
• Assess the Impact of DoS Incidents
• Assess the Impact of Threats to Mobile Security
• Assess the Impact of Threats to Cloud Security
• Designing Secure Computing and Network Environments
• Information Security Architecture Design Principles
• Design Access Control Mechanisms
• Design Cryptographic Security Controls
• Design Application Security
• Design Computing Systems Security
• Design Network Security
• Operating Secure Computing and Network Environments
• Implement Change Management in Security Operations
• Implement Monitoring in Security Operations
• Assessing the Security Posture Within a Risk Management Framework
• Deploy a Vulnerability Management Platform
• Conduct Vulnerability Assessments
• Conduct Penetration Tests on Network Assets
• Follow Up on Penetration Testing
• Collecting Cybersecurity Intelligence Information
• Deploy a Security Intelligence Collection and Analysis Platform
• Collect Data from Security Intelligence Sources
• Analyzing Cybersecurity Intelligence Information
• Analyze Security Intelligence to Address Incidents
• Use SIEM Tools for Analysis
• Responding to Cybersecurity Incidents
• Deploy an Incident Handling and Response Architecture
• Perform Real-Time Incident Handling Tasks
• Prepare for Forensic Investigation
• Investigating Cybersecurity Incidents
• Create a Forensic Investigation Plan
• Securely Collect Electronic Evidence
• Identify the Who, Why, and How of an Incident
• Follow Up on the Results of an Investigation
• Auditing Secure Computing and Network Environments
• Deploy a Systems and Processes Auditing Architecture
• Prepare for Audits
• Perform Audits Geared Toward the Information Assurance Lifecycle
• List of Security Resources