Zielona Góra

NobleProg Classroom, ul. Reja 6, Zielona Góra, poland, 65-076

The NobleProg Classroom is located at ul. Reja 6 in Zielona Góra. 

 

Subcategories (9)

Image for Open Source Intelligence (OSINT) category
Open Source Intelligence (OSINT)
Image for Information System Security category
Information System Security
Image for Security Management category
Security Management
Image for Corporate Compliance category
Corporate Compliance
Image for CCSK category
CCSK
Image for Information Security Risk category
Information Security Risk
Image for Cyber Warfare category
Cyber Warfare
Image for Hands on Security category
Hands on Security
Image for Secure Code category
Secure Code

Explore Our Courses

Mastering Continuous Threat Exposure Management (CTEM)

 28 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to implement CTEM in their organizations.By the end of this training, participants will be able to:
  • Understand the principles and stages of CTEM.
  • Identify and prioritize risks using CTEM methodologies.
  • Integrate CTEM practices into existing security protocols.
  • Utilize tools and technologies for continuous threat management.
  • Develop strategies to validate and improve security measures continuously.
Read more...

Micro Focus ArcSight ESM Advanced

 35 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at advanced-level security analysts who wish to elevate their skills in utilizing advanced Micro Focus ArcSight ESM content to improve an organization's ability to detect, respond, and mitigate cyber threats with greater precision and speed.By the end of this training, participants will be able to:
  • Optimize the use of Micro Focus ArcSight ESM to enhance monitoring and threat detection capabilities.
  • Construct and manage advanced ArcSight variables to refine event streams for more precise analysis.
  • Develop and implement ArcSight lists and rules for effective event correlation and alerting.
  • Apply advanced correlation techniques to identify complex threat patterns and reduce false positives.
Read more...

Applying Psychological Science to Law Enforcement

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at beginner-level law enforcement officers who wish to gain a deeper understanding of human behavior, enhancing their skills in communication, empathy, conflict resolution, and overall effectiveness in their roles. By the end of this training, participants will be able to:
  • Have a deeper understanding of human psychology.
  • Develop advanced communication and conflict resolution skills for more effective interaction with the public, colleagues, and in negotiation scenarios.
  • Promote awareness and understanding of diverse cultural backgrounds, improving community policing and relations with various demographic groups.
Read more...

Security Industry Digitalization

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at beginner-level security professionals who wish to gain the knowledge and skills necessary to adapt to the rapidly evolving digital landscape in the security industry. By the end of this training, participants will be able to:
  • Understanding Digital Transformation in security.
  • Learn how digital solutions can improve security operations, efficiency, and effectiveness.
  • Manage security-related data for informed decision-making.
Read more...

Embracing Technology in the Security Industry

 7 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at beginner-level security managers who wish to effectively embrace and utilize technology in their field. By the end of this training, participants will be able to:
  • Understand the evolution of technology in security.
  • Learn how to effectively blend traditional security methods with modern technological solutions.
  • Understand the basics of cybersecurity, risks associated with digital systems, and how to protect against cyber threats in the security industry.
Read more...

Security Planning and Design

 21 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at beginner-level security managers and designers who wish to effectively plan, design, and implement security strategies that are integrated, technologically advanced, and compliant with legal and ethical standards. By the end of this training, participants will be able to:
  • Learn how to integrate security considerations into architectural and facility design.
  • Assess threats and vulnerabilities to inform security planning.
  • Develop comprehensive security plans that address a range of threats.
  • Create effective emergency response and crisis management plans.
Read more...

CompTIA Cybersecurity Analyst+ (CySA+) | CS0-002 exam preparation (accredited training course with exam)

 35 Hours
This course is for students who are preparing for the CompTIA CySA+ certification exam CS0-002. The CompTIA Cybersecurity Analyst (CySA+) certification verifies that successful candidates have the knowledge and skills required to leverage intelligence and threat detection techniques, analyze and interpret data, identify and address vulnerabilities, suggest preventative measures, and effectively respond to and recover from incidents. 
Read more...

Security Operations and Administration

 21 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at beginner-level security administrators who wish to deepen their understanding of security practices within an organization. By the end of this training, participants will be able to:
  • Understand the fundamentals of security operations and administration.
  • Identify and mitigate various security threats and vulnerabilities.
  • Implement and manage security solutions.
  • Understand legal and ethical considerations in security operations.
  • Prepare for incident response and disaster recovery.
Read more...

Physical Security Fundamentals

 21 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at beginner-level security professionals who wish to thoroughly understand how to protect physical assets, people, and facilities. By the end of this training, participants will be able to:
  • Understand the fundamentals of physical security.
  • Learn about risk assessment and management in physical security.
  • Explore various physical security measures and technologies.
  • Understand the integration of physical security with other security domains.
  • Develop skills in designing and implementing effective physical security plans.
Read more...

CISA - Certified Information Systems Auditor

 28 Hours
Description: CISA® is the world-renowned and most popular certification for professionals working in the field of IS audit and IT risk consulting. Our CISA course is an intense, very competitive and exam focused training course. With experience of delivering more than 150+ CISA trainings in Europe and around the world and training more than 1200+ CISA delegates, the Net Security CISA training material has been developed in house with the top priority of ensuring CISA delegates pass the ISACA CISA® Exam. The training methodology focuses on understanding the CISA IS auditing concepts and practicing large number of ISACA released question banks from the last three years. Over a period, CISA holders have been in huge demand with renowned accountings firms, global banks, advisory, assurance, and internal audit departments. Delegates may have years of experience in IT auditing but perspective towards solving CISA questionnaires will solely depend on their understanding to globally accepted IT assurance practices. CISA exam is very challenging because the chance of a very tight clash between two possible answers exists and that is where ISACA tests you on your understanding in global IT auditing practices. To address these exam challenges, we always provide the best trainers who have extensive experience in delivering CISA training around the world. The Net Security CISA manual covers all exam-relevant concepts, case studies, Q&A's across CISA five domains. Further, the Trainer shares the key CISA supporting material like relevant CISA notes, question banks, CISA glossary, videos, revision documents, exam tips, and CISA mind maps during the course. Goal: The ultimate goal is to pass your CISA examination first time. Objectives:
  • Use the knowledge gained in a practical manner beneficial to your organisation
  • Provide audit services in accordance with IT audit standards
  • Provide assurance on leadership and organizational structure and processes
  • Provide assurance on acquisition/ development, testing and implementation of IT assets
  • Provide assurance on IT operations including service operations and third party
  • Provide assurance on organization’s security policies, standards, procedures, and controls to ensure confidentiality, integrity, and availability of information assets.
Target Audience: Finance/CPA professionals, I.T. professionals, Internal & External auditors, Information security, and risk consulting professionals.
Read more...

CipherTrust Manager

 21 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at IT professionals who wish to understand how to use the CipherTrust Solution suite. By the end of this training, participants will be able to:
  • Understand the CipherTrust Solution and its basic functions.
  • Evaluate device architecture and usage schemes.
  • Manage CipherTrust product suite.
Read more...

CCTV Security

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at security managers who wish to learn basic to intermediate-level CCTV security surveillance and management skills. By the end of this training, participants will be able to:
  • Familiarize the types of CCTV systems and know their benefits and features.
  • Understand cabling and CCTV systems setup requirements.
  • Install, configure, and manage CCTV systems.
Read more...

Cybersecurity with Python

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at experienced developers who wish to gain a comprehensive understanding of Python programming and its applications in cybersecurity. By the end of this training, participants will be able to:
  • Use Python programming for defensive cybersecurity.
  • Understand and use Python for ethical offensive techniques and digital forensics tasks.
  • Recognize legal and ethical considerations surrounding offensive cybersecurity and vulnerability disclosure.
Read more...

Security Management

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at security professionals who wish to learn and improve how to handle security threats and perform security risk assessments. By the end of this training, participants will be able to:
  • Manage security systems and handle any hostile environment.
  • Manage any security risks or threats.
  • Learn how to conduct security risk assessments.
Read more...

CISM - Certified Information Security Manager

 28 Hours
Description: Disclaimer: Please be advised that this updated CISM exam content outline is applicable to exams starting 1 June 2022. CISM® is the most prestigious and demanding qualification for Information Security Managers around the globe today. This qualification provides you with a platform to become part of an elite peer network who have the ability to constantly learn and relearn the growing opportunities/ challenges in Information Security Management. Our CISM training methodology provides an in-depth coverage of contents across the Four CISM domains with a clear focus on building concepts and solving ISACA released CISM exam questions. The course is an intense training and hard-core exam preparation for ISACA’s Certified Information Security Manager (CISM®) Examination. Our instructors encourage all attending delegates to go through the ISACA released CISM QA&E (Questions, Answers and Explanations) as exam preparation - you get this FREE as part of our course. The QA&E is exceptional in helping delegates understand the ISACA style of questions, approach to solving these questions and it helps rapid memory assimilation of the CISM concepts during live classroom sessions.
All our trainers have extensive experience in delivering CISM training. We will thoroughly prepare you for the CISM examination. Goal: The ultimate goal is to pass your CISM examination first time. Objectives:
  • Use the knowledge gained in a practical manner beneficial to your organisation
  • Establish and maintain an Information security governance framework to achieve your organization goals and objectives
  • Manage Information risk to an acceptable level to meet the business and compliance requirements
  • Establish and maintain information security architectures (people, process, technology)
  • Integrate information security requirements into contracts and activities of third parties/ suppliers
  • Plan, establish and manage the capability to detect, investigate, respond to and recover from information security incidents to minimize business impact
Target Audience:
  • Security professionals with 3-5 years of front-line experience
  • Information security managers or those with management responsibilities
  • Information security staff, information security assurance providers who require an in-depth understanding of information security management including: CISO’s, CIO’s, CSO’s, privacy officers, risk managers, security auditors and compliance personnel, BCP / DR personnel, executive and operational managers responsible for assurance functions
Read more...

Honeywell Security System

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at service technicians, system admins, or anyone who wishes to learn proper installation, usage, and management of the Honeywell security system. By the end of this training, participants will be able to:
  • Learn the concepts of the Honeywell security systems and components.
  • Properly install and maintain a Honeywell security system.
  • Utilize the Honeywell maintenance tools and management suite to control a security system.
Read more...

CompTIA Security+ | SY0-601 exam preparation

 35 Hours
This course is for students who are preparing to take the CompTIA Security+ certification exam SY0-601. This course is aimed towards IT professionals who install and configure systems to secure applications, networks, and devices; perform threat analysis and respond with appropriate mitigation techniques; participate in risk mitigation activities; and operate with an awareness of applicable policies, laws, and regulations. Required exam: SY0-601 (included in the price of the course)
Number of questions: Maximum of 90
Types of questions: Multiple-choice and performance-based
Length of test: 90 minutes
Passing score: 750 (on a scale of 100–900)
Recommended experience:
• At least 2 years of work experience in IT systems administration with a focus on security
• Hands-on technical information security experience
• Broad knowledge of security concepts
Read more...

CRISC - Certified in Risk and Information Systems Control - 4 Days

 28 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at intermediate-level IT professionals who wish to enhance their skills in identifying and managing IT risk and implementing information systems controls, and prepare for the CRISC certification exam.By the end of this training, participants will be able to:
  • Understand the governance and risk management aspects of IT.
  • Conduct IT risk assessments and implement risk responses.
  • Design and implement information systems controls.
  • Prepare effectively for the CRISC certification exam.
Read more...

Snyk

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at developers who wish to integrate Snyk into their development tools to find and fix security issues in their code. By the end of this training, participants will be able to:
  • Understand the features and structure of Snyk.
  • Use Snyk to find and fix code security issues.
  • Integrate Snyk in a software development lifecycle.
Read more...

Open Authentication (OAuth)

 7 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at developers and anyone who wishes to learn and use OAuth to provide applications with secure delegated access. By the end of this training, participants will be able to:
  • Learn the fundamentals of OAuth.
  • Understand the native applications and their unique security issues when using OAuth.
  • Learn and understand the common extensions to the OAuth protocols.
  • Integrate with any OAuth authorization server.
Read more...

Authentication with Siteminder

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at intermediate-level system administrators who wish to learn how to use Siteminder to implement various authentication methods. By the end of this training, participants will be able to:
  • Understand the core concepts of Siteminder and its role in authentication and access management.
  • Configure and manage user authentication with Siteminder.
  • Implement various authentication methods supported by Siteminder.
  • Troubleshoot common issues related to Siteminder authentication.
  • Integrate Siteminder with other identity providers for federated authentication.
Read more...

FlexNet Administration

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at system administrators who wish to learn the fundamentals of software licensing, the key features of FlexNet, and how to implement and maintain software license management solutions. By the end of this training, participants will be able to:
  • Understand the fundamental concepts of software licensing.
  • Manage core components and operation systems of FlexNet.
  • Create various license models and types, generate license keys, and activate software licenses for end-users.
  • Add, manage, and allocate licenses to end-users, monitor license usage, and ensure compliance.
Read more...

SC-200T00: Microsoft Security Operations Analyst

 28 Hours
Learn how to investigate, respond to, and hunt for threats using Microsoft Azure Sentinel, Azure Defender, and Microsoft 365 Defender. In this course you will learn how to mitigate cyberthreats using these technologies. Specifically, you will configure and use Azure Sentinel as well as utilize Kusto Query Language (KQL) to perform detection, analysis, and reporting. The course was designed for people who work in a Security Operations job role and helps learners prepare for the exam SC-200: Microsoft Security Operations Analyst. Audience Profile The Microsoft Security Operations Analyst collaborates with organizational stakeholders to secure information technology systems for the organization. Their goal is to reduce organizational risk by rapidly remediating active attacks in the environment, advising on improvements to threat protection practices, and referring violations of organizational policies to appropriate stakeholders. Responsibilities include threat management, monitoring, and response by using a variety of security solutions across their environment. The role primarily investigates, responds to, and hunts for threats using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products. Since the Security Operations Analyst consumes the operational output of these tools, they are also a critical stakeholder in the configuration and deployment of these technologies. Job role: Security Engineer Preparation for exam: SC-200 Features: none Skills gained
  • Explain how Microsoft Defender for Endpoint can remediate risks in your environment
  • Create a Microsoft Defender for Endpoint environment
  • Configure Attack Surface Reduction rules on Windows 10 devices
  • Perform actions on a device using Microsoft Defender for Endpoint
  • Investigate domains and IP addresses in Microsoft Defender for Endpoint
  • Investigate user accounts in Microsoft Defender for Endpoint
  • Configure alert settings in Microsoft Defender for Endpoint
  • Explain how the threat landscape is evolving
  • Conduct advanced hunting in Microsoft 365 Defender
  • Manage incidents in Microsoft 365 Defender
  • Explain how Microsoft Defender for Identity can remediate risks in your environment
  • Investigate DLP alerts in Microsoft Cloud App Security
  • Explain the types of actions you can take on an insider risk management case
  • Configure auto-provisioning in Azure Defender
  • Remediate alerts in Azure Defender
  • Construct KQL statements
  • Filter searches based on event time, severity, domain, and other relevant data using KQL
  • Extract data from unstructured string fields using KQL
  • Manage an Azure Sentinel workspace
  • Use KQL to access the watchlist in Azure Sentinel
  • Manage threat indicators in Azure Sentinel
  • Explain the Common Event Format and Syslog connector differences in Azure Sentinel
  • Connect Azure Windows Virtual Machines to Azure Sentinel
  • Configure Log Analytics agent to collect Sysmon events
  • Create new analytics rules and queries using the analytics rule wizard
  • Create a playbook to automate an incident response
  • Use queries to hunt for threats
  • Observe threats over time with livestream
Read more...

Certificate of Cloud Security Knowledge (CCSK) Foundation (CSA authorized)

 14 Hours
The CCSK Foundation course starts with the fundamentals, then increases in complexity as it works through all 16 domains of the CSA Security Guidance, recommendations from the European Union Agency for Network & Information Security (ENISA), and an overview of the Cloud Controls Matrix. This is a Cloud Security Alliance (CSA) authorized course and NobleProg is an official CSA Training Partner. This course is delivered by CSA Authorized CCSK Instructors.
All attendees receive:
  • official CSA CCSK Foundation course certificates
  • official CCSK Foundation Student Handbooks
  • 1 CCSK exam voucher and 1 re-attempt exam voucher
This course covers the most current version of the CCSK exam - currently version 4.1.
Read more...

Cyberbezpieczeństwo w praktyce dla początkujących

 7 Hours
The "Cyberbezpieczeństwo w praktyce dla początkujących" course focuses on aspects of computer security in everyday use. Provides interactive lectures, discussions and hands-on exercises in a live environment. Topics covered include data security, risk of leakage of personal information, online payment security, protection against online fraud, safe use of the Internet, good practices related to passwords, antivirus software, backups, data encryption, system updates and remote work security.
Read more...

Certificate of Cloud Security Knowledge (CCSK) Plus (CSA authorized)

 21 Hours
The CCSK Plus builds on the foundation class with expanded material and offers extensive hands-on activities that reinforce classroom instruction. Students engage in a scenario of bringing a fictional organization securely into the cloud, which gives them the opportunity to apply their knowledge by performing a series of activities that would be required in a real-world environment. The CCSK Plus Course includes all the modules in the CCSK Foundation course with additional material. This is a Cloud Security Alliance (CSA) authorized course and NobleProg is an official CSA Training Partner. This course is delivered by CSA Authorized CCSK Instructors.  All attendees receive:
  • official CSA CCSK Plus course certificates
  • official CCSK Foundation Student Handbooks
  • 1 CCSK exam voucher and 1 re-attempt exam voucher
This course covers the most current version of the CCSK exam - currently version 4.1.
Read more...

Cloudflare Essentials: CDN, Security, and DDoS Mitigation

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at beginner to intermediate-level system administrators and security professionals who wish to learn how to implement Cloudflare for content delivery and cloud security, as well as mitigate DDoS attacks. By the end of this training, participants will be able to:
  • Configure Cloudflare for their websites.
  • Set up DNS records and SSL certificates.
  • Implement Cloudflare for content delivery and caching.
  • Protect their websites from DDoS attacks.
  • Implement firewall rules to restrict traffic to their websites.
Read more...

CRISC - Certified in Risk and Information Systems Control

 21 Hours
Description:This class is intended as intense and hard core exam preparation for ISACA’s Certified Information Systems Auditor (CRISC) Examination. The latest four (4) domains of ISACA’s CRISC syllabus will be covered with a big focus on the Examination. The Official ISACA CRISC Review Manual and Question, Answer and Explanation, (Q,A&E), supplements will ALSO be provided when attending. The Q,A&E is exceptional in helping delegates understand the ISACA style of questions, the type of answers ISACA are looking for and it helps rapid memory assimilation of the material.The technical skills and practices that ISACA promotes and evaluates within the CRISC certification are the building blocks of success in the field. Possessing the CRISC certification demonstrates your skill within the profession. With a growing demand for professionals holding risk and control expertise, ISACA’s CRISC has positioned itself to be the preferred certification program by individuals and enterprises around the world. The CRISC certification signifies commitment to serving an enterprise and the chosen profession with distinction.Objectives:
  • To help you pass the CRISC examination first time.
  • Possessing this certification will signify your commitment to serving an enterprise with distinction.
  • The growing demand for professionals with risk and control skills will allow holders of this certification to command better positions and salary.
You will learn:
  • To help enterprises accomplish business objectives by designing, implementing, monitoring and maintaining risk-based, efficient and effective IS controls.
  • The technical skills and practices that CRISC promotes, which are the building blocks of success in the field.
Read more...

IBM Qradar SIEM: Beginner to Advanced

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at security engineers who wish to use IBM Qradar SIEM to address pressing security use cases. By the end of this training, participants will be able to:
  • Gain visibility into enterprise data across on-premise and cloud environments.
  • Automate security intelligence to hunt threats and to contain risks.
  • Detect, identify, and prioritize threats.
Read more...

Open Source Intelligence (OSINT) Advanced

 21 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at persons who wish to carry out research on third parties while protecting themselves from the like.By the end of this training, participants will be able to:
  • Install and configure advanced tools for carrying out OSINT.
  • Use advanced techniques to collect publicly available data relevant to an investigation.
  • Analyze large amounts of data efficiently.
  • Generate intelligence reports on findings.
  • Leverage AI tools for facial recognition and sentiment analysis.
  • Map out a strategy for defining the objective and directing efforts to the most relevant and actionable data.
Read more...

Open Source Cyber Intelligence - Introduction

 7 Hours
This Introduction to Open Source Intelligence (OSINT) course will provide delegates with skills to become more efficient and effective at finding those key pieces of intelligence on the Internet and World Wide Web. The course is highly practical allowing delegates the time to explore and understand some of the hundreds of tools and websites available.
The next level with in-depth use of advanced tools that are vital for covert internet investigations and intelligence gathering. The course is highly practical allowing delegates the time to explore and understand the tools and resources covered."    
 
Read more...

Fundamentals of Corporate Cyber Warfare

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) covers the different aspects of enterprise security, from AI to database security. It also includes coverage of the latest tools, processes and mindset needed to protect from attacks. 
Read more...

Certificate of Cloud Security Knowledge

 14 Hours
Description:This 2-day CCSK Plus course includes all content from the CCSK Foundation course, and expands on it with extensive hands-on labs in a second day of training. Students will learn to apply their knowledge by performing a series of exercises involving a scenario that brings a fictional organization securely into the cloud. After completing this training, students will be well prepared for the CCSK certification exam, sponsored by Cloud Security Alliance. This second day of training includes additional lecture, although students will spend most of their time assessing, building, and securing a cloud infrastructure during the exercises.Objectives:This is a two day class that begins with the CCSK- Basic training, followed by a second day of additional content and hands-on activitiesTarget Audience:This class is geared towards security professionals, but is also useful for anyone looking to expand their knowledge of cloud security.
Read more...

Application Security for Developers

 21 Hours
This course will help professionals understand the value and limits of Application Security. While the Application Security Principals provides valuable awareness around some of the major risks in applications today, this course will highlight both the good and not so good. This course is crucial because of the increasing need for developers to code in a secure manner. It is critical to introduce security as a quality component into the development cycle. This course aims at educating developers about various security vulnerabilities through hands-on practice using our purposely developed insecure web application.
Read more...

Android Security

 14 Hours
Android is an open platform for mobile devices such as handsets and tablets. It has a large variety of security features to make developing secure software easier; however, it is also missing certain security aspects that are present in other hand-held platforms. The course gives a comprehensive overview of these features, and points out the most critical shortcomings to be aware of related to the underlying Linux, the file system and the environment in general, as well as regarding using permissions and other Android software development components. Typical security pitfalls and vulnerabilities are described both for native code and Java applications, along with recommendations and best practices to avoid and mitigate them. In many cases discussed issues are supported with real-life examples and case studies. Finally, we give a brief overview on how to use security testing tools to reveal any security relevant programming bugs. Participants attending this course will 
  • Understand basic concepts of security, IT security and secure coding
  • Learn the security solutions on Android
  • Learn to use various security features of the Android platform
  • Get information about some recent vulnerabilities in Java on Android
  • Learn about typical coding mistakes and how to avoid them
  • Get understanding on native code vulnerabilities on Android
  • Realize the severe consequences of unsecure buffer handling in native code
  • Understand the architectural protection techniques and their weaknesses
  • Get sources and further readings on secure coding practices
Audience Professionals
Read more...

Comprehensive C# and .NET Application Security

 21 Hours
A number of programming languages are available today to compile code to .NET and ASP.NET frameworks. The environment provides powerful means for security development, but developers should know how to apply the architecture- and coding-level programming techniques in order to implement the desired security functionality and avoid vulnerabilities or limit their exploitation. The aim of this course is to teach developers through numerous hands-on exercises how to prevent untrusted code from performing privileged actions, protect resources through strong authentication and authorization, provide remote procedure calls, handle sessions, introduce different implementations for certain functionality, and many more. A special section is devoted to configuration and hardening of the .NET and ASP.NET environment for security. A brief introduction to the foundations of cryptography provides a common practical baseline for understanding the purpose and the operation of various algorithms, based on which the course presents the cryptographic features that can be used in .NET. This is followed by the introduction of some recent crypto vulnerabilities both related to certain crypto algorithms and cryptographic protocols, as well as side-channel attacks. Introduction of different vulnerabilities starts with presenting some typical programming problems committed when using .NET, including bug categories of input validation, error handling or race conditions. A special focus is given to XML security, while the topic of ASP.NET-specific vulnerabilities tackles some special issues and attack methods: like attacking the ViewState, or the string termination attacks. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn to use various security features of the .NET development environment
  • Have a practical understanding of cryptography
  • Understand some recent attacks against cryptosystems
  • Get information about some recent vulnerabilities in .NET and ASP.NET
  • Learn about typical coding mistakes and how to avoid them
  • Get practical knowledge in using security testing tools
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Network Security and Secure Communication

 21 Hours
Implementing a secure networked application can be difficult, even for developers who may have used various cryptographic building blocks (such as encryption and digital signatures) beforehand. In order to make the participants understand the role and usage of these cryptographic primitives, first a solid foundation on the main requirements of secure communication – secure acknowledgement, integrity, confidentiality, remote identification and anonymity – is given, while also presenting the typical problems that may damage these requirements along with real-world solutions. As a critical aspect of network security is cryptography, the most important cryptographic algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement are also discussed. Instead of presenting an in-depth mathematical background, these elements are discussed from a developer's perspective, showing typical use-case examples and practical considerations related to the use of crypto, such as public key infrastructures. Security protocols in many areas of secure communication are introduced, with an in-depth discussion on the most widely-used protocol families such as IPSEC and SSL/TLS. Typical crypto vulnerabilities are discussed both related to certain crypto algorithms and cryptographic protocols, such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE and similar, as well as the RSA timing attack. In each case, the practical considerations and potential consequences are described for each problem, again, without going into deep mathematical details. Finally, as XML technology is central for data exchange by networked applications, the security aspects of XML are described. This includes the usage of XML within web services and SOAP messages alongside protection measures such as XML signature and XML encryption – as well as weaknesses in those protection measures and XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Understand the requirements of secure communication
  • Learn about network attacks and defenses at different OSI layers
  • Have a practical understanding of cryptography
  • Understand essential security protocols
  • Understand some recent attacks against cryptosystems
  • Get information about some recent related vulnerabilities
  • Understand security concepts of Web services
  • Get sources and further readings on secure coding practices
Audience Developers, Professionals
Read more...

Combined C/C++, JAVA and Web Application Security

 28 Hours
To serve in the best way heterogeneous development groups that are using various platforms simultaneously during their everyday work, we have merged various topics into a combined course that presents diverse secure coding subjects in didactic manner on a single training event. This course combines C/C++ and Java platform security to provide an extensive, cross-platform secure coding expertise. Concerning C/C++, common security vulnerabilities are discussed, backed by practical exercises about the attacking methods that exploit these vulnerabilities, with the focus on the mitigation techniques that can be applied to prevent the occurrences of these dangerous bugs, detect them before market launch or prevent their exploitation. Security components and service of Java are discussed by presenting the different APIs and tools through a number of practical exercises where participants can gain hands-on experience in using them. The course also covers security issues of web services and the related Java services that can be applied to prevent the most aching threats of the Internet based services. Finally, web- and Java-related security vulnerabilities are demonstrated by easy-to-understand exercises, which not only show the root cause of the problems, but also demonstrate the attack methods along with the recommended mitigation and coding techniques in order to avoid the associated security problems. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Learn to use various security features of the Java development environment
  • Have a practical understanding of cryptography
  • Realize the severe consequences of unsecure buffer handling
  • Understand the architectural protection techniques and their weaknesses
  • Learn about typical coding mistakes and how to avoid them
  • Be informed about recent vulnerabilities in various platforms, frameworks and libraries
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Application Security in the Cloud

 21 Hours
Migrating to the cloud introduces immense benefits for companies and individuals in terms of efficiency and costs. With respect to security, the effects are quite diverse, but it is a common perception that using cloud services impacts security in a positive manner. Opinions, however, diverge many times even on defining who is responsible for ensuring the security of cloud resources. Covering IaaS, PaaS and SaaS, first the security of the infrastructure is discussed: hardening and configuration issues as well as various solutions for authentication and authorization alongside identity management that should be at the core of all security architecture. This is followed by some basics regarding legal and contractual issues, namely how trust is established and governed in the cloud. The journey through cloud security continues with understanding cloud-specific threats and the attackers’ goals and motivations as well as typical attack steps taken against cloud solutions. Special focus is also given to auditing the cloud and providing security evaluation of cloud solutions on all levels, including penetration testing and vulnerability analysis. The focus of the course is on application security issues, dealing both with data security and the security of the applications themselves. From the standpoint of application security, cloud computing security is not substantially different from general software security, and therefore basically all OWASP-enlisted vulnerabilities are relevant in this domain as well. It is the set of threats and risks that makes the difference, and thus the training is concluded with the enumeration of various cloud-specific attack vectors connected to the weaknesses discussed beforehand. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Understand major threats and risks in the cloud domain
  • Learn about elementary cloud security solutions
  • Get information about the trust and the governance regarding the cloud
  • Have a practical understanding of cryptography
  • Get extensive knowledge in application security in the cloud
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Understand the challenges of auditing and evaluating cloud systems for security
  • Learn how to secure the cloud environment and infrastructure
  • Get sources and further readings on secure coding practices
Audience Developers, Managers, Professionals
Read more...

C/C++ Secure Coding

 21 Hours
This three day course covers the basics of securing the C/C++ code against the malicious users who may exploit many vulnerabilities in the code with memory management and input handling, the course cover the principals of writing secure code.
Read more...

Advanced Java Security

 21 Hours
Even experienced Java programmers are not mastering by all means the various security services offered by Java, and are likewise not aware of the different vulnerabilities that are relevant for web applications written in Java. The course – besides introducing security components of Standard Java Edition – deals with security issues of Java Enterprise Edition (JEE) and web services. Discussion of specific services is preceded with the foundations of cryptography and secure communication. Various exercises deal with declarative and programmatic security techniques in JEE, while both transport-layer and end-to-end security of web services is discussed. The use of all components is presented through several practical exercises, where participants can try out the discussed APIs and tools for themselves. The course also goes through and explains the most frequent and severe programming flaws of the Java language and platform and web-related vulnerabilities. Besides the typical bugs committed by Java programmers, the introduced security vulnerabilities cover both language-specific issues and problems stemming from the runtime environment. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by the recommended coding guidelines and the possible mitigation techniques. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Understand security concepts of Web services
  • Learn to use various security features of the Java development environment
  • Have a practical understanding of cryptography
  • Understand security solutions of Java EE
  • Learn about typical coding mistakes and how to avoid them
  • Get information about some recent vulnerabilities in the Java framework
  • Get practical knowledge in using security testing tools
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Combined JAVA, PHP and Web Application Security

 28 Hours
Even experienced programmers do not master by all means the various security services offered by their development platforms, and are likewise not aware of the different vulnerabilities that are relevant for their developments. This course targets developers using both Java and PHP, providing them essential skills necessary to make their applications resistant to contemporary attacks through the Internet. Levels of Java security architecture are walked through by tackling access control, authentication and authorization, secure communication and various cryptographic functions. Various APIs are also introduced that can be used to secure your code in PHP, like OpenSSL for cryptography or HTML Purifier for input validation. On server side, the best practices are given for hardening and configuring the operating system, the web container, the file system, the SQL server and the PHP itself, while a special focus is given to client-side security through security issues of JavaScript, Ajax and HTML5. General web vulnerabilities are discussed by examples aligned to the OWASP Top Ten, showing various injection attacks, script injections, attacks against session handling, insecure direct object references, issues with file uploads, and many others. The various Java- and PHP-specific language problems and issues stemming from the runtime environment are introduced grouped into the standard vulnerability types of missing or improper input validation, improper use of security features, incorrect error and exception handling, time- and state-related problems, code quality issues and mobile code-related vulnerabilities. Participants can try out the discussed APIs, tools and the effects of configurations for themselves, while the introduction of vulnerabilities are all supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to correct the bugs and apply mitigation techniques, and introducing the use of various extensions and tools. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Learn to use various security features of the Java development environment
  • Have a practical understanding of cryptography
  • Learn to use various security features of PHP
  • Understand security concepts of Web services
  • Get practical knowledge in using security testing tools
  • Learn about typical coding mistakes and how to avoid them
  • Be informed about recent vulnerabilities in Java and PHP frameworks and libraries
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Standard Java Security

 14 Hours
Description The Java language and the Runtime Environment (JRE) was designed to be free from the most problematic common security vulnerabilities experienced in other languages, like C/C++. Yet, software developers and architects should not only know how to use the various security features of the Java environment (positive security), but should also be aware of the numerous vulnerabilities that are still relevant for Java development (negative security). The introduction of security services is preceded with a brief overview of the foundations of cryptography, providing a common baseline for understanding the purpose and the operation of the applicable components. The use of these components is presented through several practical exercises, where participants can try out the discussed APIs for themselves. The course also goes through and explains the most frequent and severe programming flaws of the Java language and platform, covering both the typical bugs committed by Java programmers and the language- and environment-specific issues. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by the recommended coding guidelines and the possible mitigation techniques. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn to use various security features of the Java development environment
  • Have a practical understanding of cryptography
  • Learn about typical coding mistakes and how to avoid them
  • Get information about some recent vulnerabilities in the Java framework
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Java and Web Application Security

 21 Hours
Description Beyond solid knowledge in using Java components, even for experienced Java programmers it is essential to have a deep knowledge in web-related vulnerabilities both on server and client side, the different vulnerabilities that are relevant for web applications written in Java, and the consequences of the various risks. General web-based vulnerabilities are demonstrated through presenting the relevant attacks, while the recommended coding techniques and mitigation methods are explained in the context of Java with the most important aim to avoid the associated problems. In addition, a special focus is given to client-side security tackling security issues of JavaScript, Ajax and HTML5. The course introduces security components of Standard Java Edition, which is preceded with the foundations of cryptography, providing a common baseline for understanding the purpose and the operation of the applicable components. The use of all components is presented through practical exercises, where participants can try out the discussed APIs and tools for themselves. Finally, the course explains the most frequent and severe programming flaws of the Java language and platform. Besides the typical bugs committed by Java programmers, the introduced security vulnerabilities cover both language-specific issues and problems stemming from the runtime environment. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by the recommended coding guidelines and the possible mitigation techniques. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Learn to use various security features of the Java development environment
  • Have a practical understanding of cryptography
  • Learn about typical coding mistakes and how to avoid them
  • Get information about some recent vulnerabilities in the Java framework
  • Get practical knowledge in using security testing tools
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Advanced Java, JEE and Web Application Security

 28 Hours
Beyond solid knowledge in using Java components, even for experienced Java programmers it is essential to have a deep knowledge in web-related vulnerabilities both on server and client side, the different vulnerabilities that are relevant for web applications written in Java, and the consequences of the various risks. General web-based vulnerabilities are demonstrated through presenting the relevant attacks, while the recommended coding techniques and mitigation methods are explained in the context of Java with the most important aim to avoid the associated problems. In addition, a special focus is given to client-side security tackling security issues of JavaScript, Ajax and HTML5. The course introduces security components of Standard Java Edition, which is preceded with the foundations of cryptography, providing a common baseline for understanding the purpose and the operation of the applicable components. Security issues of Java Enterprise Edition are presented through various exercises explaining both declarative and programmatic security techniques in JEE. Finally, the course explains the most frequent and severe programming flaws of the Java language and platform. Besides the typical bugs committed by Java programmers, the introduced security vulnerabilities cover both language-specific issues and problems stemming from the runtime environment. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by the recommended coding guidelines and the possible mitigation techniques. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Learn to use various security features of the Java development environment
  • Have a practical understanding of cryptography
  • Understand security concepts of Web services
  • Understand security solutions of Java EE
  • Learn about typical coding mistakes and how to avoid them
  • Get information about some recent vulnerabilities in the Java framework
  • Get practical knowledge in using security testing tools
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Node.JS and Web Application Security

 21 Hours
As a developer, your duty is to write bulletproof code. What if we told you that despite all of your efforts, the code you have been writing your entire career is full of weaknesses you never knew existed? What if, as you are reading this, hackers were trying to break into your code? How likely would they be to succeed? What if they could steal away your database and sell it on the black market? This Web application security course will change the way you look at code. A hands-on training during which we will teach you all the attackers’ tricks and how to mitigate them, leaving you with no other feeling than the desire to know more. It is your choice to be ahead of the pack, and be seen as a game changer in the fight against cybercrime. Delegates attending will:
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Learn about Node.js security
  • Learn about MongoDB security
  • Have a practical understanding of cryptography
  • Understand essential security protocols
  • Understand security concepts of Web services
  • Learn about JSON security
  • Get practical knowledge in using security testing techniques and tools
  • Learn how to handle vulnerabilities in the used platforms, frameworks and libraries
  • Get sources and further readings on secure coding practices
Read more...

.NET, C# and ASP.NET Security Development

 14 Hours
A number of programming languages are available today to compile code to .NET and ASP.NET frameworks. The environment provides powerful means for security development, but developers should know how to apply the architecture- and coding-level programming techniques in order to implement the desired security functionality and avoid vulnerabilities or limit their exploitation. The aim of this course is to teach developers through numerous hands-on exercises how to prevent untrusted code from performing privileged actions, protect resources through strong authentication and authorization, provide remote procedure calls, handle sessions, introduce different implementations for certain functionality, and many more. Introduction of different vulnerabilities starts with presenting some typical programming problems committed when using .NET, while the discussion of vulnerabilities of the ASP.NET also deals with various environment settings and their effects. Finally, the topic of ASP.NET-specific vulnerabilities not only deals with some general web application security challenges, but also with special issues and attack methods like attacking the ViewState, or the string termination attacks. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn to use various security features of the .NET development environment
  • Get practical knowledge in using security testing tools
  • Learn about typical coding mistakes and how to avoid them
  • Get information about some recent vulnerabilities in .NET and ASP.NET
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Advanced C#, ASP.NET and Web Application Security

 21 Hours
Beyond solid knowledge in using various security features of .NET and ASP.NET, even for experienced programmers it is essential to have a deep knowledge in web-related vulnerabilities both on server and client side along with the consequences of the various risks. In this course the general web-based vulnerabilities are demonstrated through presenting the relevant attacks, while the recommended coding techniques and mitigation methods are explained in the context of ASP.NET. A special focus is given to client-side security tackling security issues of JavaScript, Ajax and HTML5. The course also deals with the security architecture and components of the .NET framework, including code- and role based access control, permission declaration and checking mechanisms and the transparency model. A brief introduction to the foundations of cryptography provides a common practical baseline for understanding the purpose and the operation of various algorithms, based on which the course presents the cryptographic features that can be used in .NET. Introduction of different security bugs follows the well-established vulnerability categories, tackling input validation, security features, error handling, time- and state-related problems, the group of general code quality issues, and a special section on ASP.NET-specific vulnerabilities. These topics are concluded with an overview on testing tools that can be used to automatically reveal some of the learnt bugs. Topics are presented through practical exercises where participants can try out the consequences of certain vulnerabilities, the mitigations, as well as the discussed APIs and tools for themselves. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Learn to use various security features of the .NET development environment
  • Have a practical understanding of cryptography
  • Get information about some recent vulnerabilities in .NET and ASP.NET
  • Get practical knowledge in using security testing tools
  • Learn about typical coding mistakes and how to avoid them
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

The Secure Coding Landscape

 14 Hours
The course introduces some common security concepts, gives an overview about the nature of the vulnerabilities regardless of the used programming languages and platforms, and explains how to handle the risks that apply regarding software security in the various phases of the software development lifecycle. Without going deeply into technical details, it highlights some of the most interesting and most aching vulnerabilities in various software development technologies, and presents the challenges of security testing, along with some techniques and tools that one can apply to find any existing problems in their code. Participants attending this course will 
  • Understand basic concepts of security, IT security and secure coding
  • Understand Web vulnerabilities both on server and client side
  • Realize the severe consequences of unsecure buffer handling
  • Be informated about some recent vulnerabilities in development environments and frameworks
  • Learn about typical coding mistakes and how to avoid them
  • Understand security testing approaches and methodologies
Audience Managers
Read more...

Secure coding in PHP

 21 Hours
The course provides essential skills for PHP developers necessary to make their applications resistant to contemporary attacks through the Internet. Web vulnerabilities are discussed through PHP-based examples going beyond the OWASP top ten, tackling various injection attacks, script injections, attacks against session handling of PHP, insecure direct object references, issues with file upload, and many others. PHP-related vulnerabilities are introduced grouped into the standard vulnerability types of missing or improper input validation, incorrect error and exception handling, improper use of security features and time- and state-related problems. For this latter we discuss attacks like the open_basedir circumvention, denial-of-service through magic float or the hash table collision attack. In all cases participants will get familiar with the most important techniques and functions to be used to mitigate the enlisted risks. A special focus is given to client-side security tackling security issues of JavaScript, Ajax and HTML5. A number of security-related extensions to PHP are introduced like hash, mcrypt and OpenSSL for cryptography, or Ctype, ext/filter and HTML Purifier for input validation. The best hardening practices are given in connection with PHP configuration (setting php.ini), Apache and the server in general. Finally, an overview is given to various security testing tools and techniques which developers and testers can use, including security scanners, penetration testing and exploit packs, sniffers, proxy servers, fuzzing tools and static source code analyzers. Both the introduction of vulnerabilities and the configuration practices are supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to apply mitigation techniques and introducing the use of various extensions and tools. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Have a practical understanding of cryptography
  • Learn to use various security features of PHP
  • Learn about typical coding mistakes and how to avoid them
  • Be informed about recent vulnerabilities of the PHP framework
  • Get practical knowledge in using security testing tools
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Microsoft SDL Core

 14 Hours
The Combined SDL core training gives an insight into secure software design, development and testing through Microsoft Secure Development Lifecycle (SDL). It provides a level 100 overview of the fundamental building blocks of SDL, followed by design techniques to apply to detect and fix flaws in early stages of the development process. Dealing with the development phase, the course gives an overview of the typical security relevant programming bugs of both managed and native code. Attack methods are presented for the discussed vulnerabilities along with the associated mitigation techniques, all explained through a number of hands-on exercises providing live hacking fun for the participants. Introduction of different security testing methods is followed by demonstrating the effectiveness of various testing tools. Participants can understand the operation of these tools through a number of practical exercises by applying the tools to the already discussed vulnerable code. Participants attending this course will 
  • Understand basic concepts of security, IT security and secure coding
  • Get known to the essential steps of Microsoft Secure Development Lifecycle
  • Learn secure design and development practices
  • Learn about secure implementation principles
  • Understand security testing methodology
  • Get sources and further readings on secure coding practices
Audience Developers, Managers
Read more...

Security Testing

 14 Hours
After getting familiar with the vulnerabilities and the attack methods, participants learn about the general approach and the methodology for security testing, and the techniques that can be applied to reveal specific vulnerabilities. Security testing should start with information gathering about the system (ToC, i.e. Target of Evaluation), then a thorough threat modeling should reveal and rate all threats, arriving to the most appropriate risk analysis-driven test plan. Security evaluations can happen at various steps of the SDLC, and so we discuss design review, code review, reconnaissance and information gathering about the system, testing the implementation and the testing and hardening the environment for secure deployment. Many security testing techniques are introduced in details, like taint analysis and heuristics-based code review, static code analysis, dynamic web vulnerability testing or fuzzing. Various types of tools are introduced that can be applied in order to automate security evaluation of software products, which is also supported by a number of exercises, where we execute these tools to analyze the already discussed vulnerable code. Many real life case studies support better understanding of various vulnerabilities. This course prepares testers and QA staff to adequately plan and precisely execute security tests, select and use the most appropriate tools and techniques to find even hidden security flaws, and thus gives essential practical skills that can be applied on the next day working day. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Understand security testing approaches and methodologies
  • Get practical knowledge in using security testing techniques and tools
  • Get sources and further readings on secure coding practices
Audience Developers, Testers
Read more...

Secure Web Application Development and Testing

 21 Hours
Protecting applications that are accessible via the web requires well-prepared security professional who are at all time aware of current attack methods and trends. Plethora of technologies and environments exist that allow comfortable development of web applications. One should not only be aware of the security issues relevant to these platforms, but also of all general vulnerabilities that apply regardless of the used development tools. The course gives an overview of the applicable security solutions in web applications, with a special focus on understanding the most important cryptographic solutions to be applied. The various web application vulnerabilities are presented both on the server side (following the OWASP Top Ten) and the client side, demonstrated through the relevant attacks, and followed by the recommended coding techniques and mitigation methods to avoid the associated problems. The subject of secure coding is wrapped up by discussing some typical security-relevant programming mistakes in the domain of input validation, improper use of security features and code quality. Testing plays a very important role in ensuring security and robustness of web applications. Various approaches – from high level auditing through penetration testing to ethical hacking – can be applied to find vulnerabilities of different types. However, if you want to go beyond the easy-to-find low-hanging fruits, security testing should be well planned and properly executed. Remember: security testers should ideally find all bugs to protect a system, while for adversaries it is enough to find one exploitable vulnerability to penetrate into it. Practical exercises will help understanding web application vulnerabilities, programming mistakes and most importantly the mitigation techniques, together with hands-on trials of various testing tools from security scanners, through sniffers, proxy servers, fuzzing tools to static source code analyzers, this course gives the essential practical skills that can be applied on the next day at the workplace. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Have a practical understanding of cryptography
  • Understand security testing approaches and methodologies
  • Get practical knowledge in using security testing techniques and tools
  • Be informed about recent vulnerabilities in various platforms, frameworks and libraries
  • Get sources and further readings on secure coding practices
Audience Developers, Testers
Read more...

Web Application Security

 14 Hours
Protecting applications that are accessible via the web requires well-prepared security professional who are at all time aware of current attack methods and trends. Plethora of technologies and environments exist that allow comfortable development of web applications (like Java, ASP.NET or PHP, as well as Javascript or Ajax on the client side). One should not only be aware of the security issues relevant to these platforms, but also of all general vulnerabilities that apply regardless of the used development tools. The course gives an overview of the applicable security solutions in web applications, focusing on the most important technologies like secure communication and web services, tackling both transport-layer security and end-to-end security solutions and standards like Web Services Security and XML. It also gives a brief overview of the typical programming mistakes, above all connected to missing or improper input validation. The web-based vulnerabilities are demonstrated through presenting the relevant attacks, while the recommended coding techniques and mitigation methods are explained to avoid the associated problems. Exercises can be easily followed by programmers using different programming languages, thus the web application-related topics can be easily combined with other secure coding subjects, and can thus effectively satisfy the needs of corporate development groups, who typically deal with various languages and development platforms to develop web applications. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Have a practical understanding of cryptography
  • Understand security concepts of Web services
  • Get practical knowledge in using security testing tools
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

DevOps Security: Creating a DevOps Security Strategy

 7 Hours
In this instructor-led, live course in lubuskie, participants will learn how to formulate the proper security strategy to face the DevOps security challenge.
Read more...

Embedded Systems Security

 21 Hours
This instructor-led, live training in lubuskie introduces the system architectures, operating systems, networking, storage, and cryptographic issues that should be considered when designing secure embedded systems. By the end of this course, participants will have a solid understanding of security principles, concerns, and technologies. More importantly, participants will be equipped with the techniques needed for developing safe and secure embedded software.
Read more...

Interactive Application Security Testing (IAST)

 14 Hours
Interactive Application Security Testing (IAST) is a form of application security testing that combines Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) or Runtime Application Self-protection (RASP) techniques. IAST is able to report the specific lines of code responsible for a security exploit and replay the behaviors leading to and following such an exploit. In this instructor-led, live training, participants will learn how to secure an application by instrumenting runtime agents and attack inducers to simulate application behavior during an attack.   By the end of this training, participants will be able to:
  • Simulate attacks against applications and validate their detection and protection capabilities
  • Use RASP and DAST to gain code-level visibility into the data path taken by an application under different runtime scenarios
  • Quickly and accurately fix the application code responsible for detected vulnerabilities
  • Prioritize the vulnerability findings from dynamic scans
  • Use RASP real-time alerts to protect applications in production against attacks.
  • Reduce application vulnerability risks while maintaining production schedule targets
  • Devise an integrated strategy for overall vulnerability detection and protection
Audience
  • DevOps engineers
  • Security engineers
  • Developers
Format of the course
  • Part lecture, part discussion, exercises and heavy hands-on practice
Read more...

How to Write Secure Code

 35 Hours
After the major attacks against national infrastructures, Security Professionals found that the majority of the vulnerabilities that caused the attacks came from poor and vulnerable code that the developers write.  Developers now need to master the techniques of how to write Secure Code, because we are in a situation where anyone can use availble tools to write a script that can effectivly disable a large organization's systems because the developers have written poor code. This Course aims to help in the following:
  1. Help Developers to master the techniques of writing Secure Code
  2. Help Software Testers to test the security of the application before publishing to the production environment
  3. Help Software Architects to understand the risks surrounding the applications
  4. Help Team Leaders to set the security base lines for the developers
  5. Help Web Masters to configure the Servers to avoid miss-configurations
In this course you will also see details of the latest cyber attacks that have been used and the countermeasures used to stop and prevent these attacks. You will see for yourself how developers mistakes led to catastrophic attacks, and by participatig in the labs during the course you will be able to put into practise the security controls and gain the experience and knowledge to produce secure coding. Who should Attend this Course?  This Secure Code Training is ideal for those working in positions such as, but not limited to:
  • Web Developers
  • Mobile Developers
  • Java Developers
  • Dot Net Developers
  • Software Architects
  • Software Tester
  • Security Professionals
  • Web Masters
Read more...

Secure Developer Java (Inc OWASP)

 21 Hours
This course covers the secure coding concepts and principals with Java through Open Web Application Security Project (OWASP) methodology of testing. The Open Web Application Security Project is an online community which creates freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security.
Read more...

Secure Developer .NET (Inc OWASP)

 21 Hours
This course covers the secure coding concepts and principals with ASP.net through the Open Web Application Security Project (OWASP) methodology of testing , OWASP is an online community which creates freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security.  This Course explores the Dot Net Framework Security features and how to secure web applications.   
    
    
    
    
    
Read more...

Basel III – Certified Basel Professional

 21 Hours
Description: Basel III is a global regulatory standard on bank capital adequacy, stress testing and market liquidity risk. Having initially been agreed upon by the Basel Committee on Banking Supervision in 2010–11, changes to The Accord have extended implementation to 31st March 2019. Basel III strengthens bank capital requirements by increasing bank liquidity and decreasing bank leverage.
Basel III differs from Basel I & II in that it requires different levels of reserves for different forms of deposits and other types of borrowings, so it does not supersede them so much as it does work alongside Basel I and Basel II.
This complex and constantly changing landscape can be hard to keep up with, our course and training will help you manage likely changes and their impact on your institution. We are accredited with and a training partner to the Basel Certification Institute and as such the quality and suitability of our training and material is guaranteed to be up to date and effective Objectives:
  • Preparation for the Certified Basel Professional Examination.
  • Define hands-on strategies and techniques for the definition, measurement, analysis, improvement, and control of operational risk within a banking organization.
Target Audience:
  • Board members with risk responsibilities
  • CROs and Heads of Risk Management
  • Members of the Risk Management team
  • Compliance, legal and IT support staff
  • Equity and Credit Analysts
  • Portfolio Managers
  • Rating Agency Analysts
Overview:
  • Introduction to Basel norms and amendments to the Basel Accord (III)
  • Regulations for market, credit, counterparty and liquidity risk
  • Stress testing for various risk measures including how to formulate and deliver stress tests
  • The likely effects of Basel III on the international banking industry, including demonstrations of its practical application
  • Need For The New Basel Norms
  • The Basel III Norms
  • Objectives of The Basel III Norms
  • Basel III – Timeline
Read more...

CGEIT – Certified in the Governance of Enterprise IT

 28 Hours
Description: This four day event (CGEIT training) is the ultimate preparation for exam time and is designed to ensure that you pass the challenging CGEIT exam on your first attempt.
The CGEIT qualification is an internationally recognised symbol of excellence in IT governance awarded by ISACA. It is designed for professionals responsible for managing IT governance or with significant advisory or assurance responsibility for IT governance.
Achieving CGEIT status will provide you with wider recognition in the marketplace, as well as increased influence at executive level. Objectives: This seminar has been designed to prepare Delegates for the CGEIT examination by enabling them to supplement their existing knowledge and understanding to be better prepared to pass the exam, as defined by ISACA. Target Audience: Our training course is for IT and business professionals, with significant IT governance experience who are undertaking the CGEIT exam.
Read more...

Compliance for Payment Services in Japan

 7 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at payment services compliance professionals who wish to create, implement, and enforce a compliance program within an organization. By the end of this training, participants will be able to:
  • Understand the rules set forth by government regulators for payment service providers.
  • Create the internal policies and procedures needed to satisfy government regulations.
  • Implement a compliance program that adheres to relevant laws.
  • Ensures that all corporate processes and procedures comply with the compliance program.
  • Uphold the business's reputation while protecting it from lawsuits.
Read more...

Governance, Risk Management & Compliance (GRC) Fundamentals

 21 Hours
Course goal: To ensure that an individual has the core understanding of GRC processes and capabilities, and the skills to integrate governance, performance management, risk management, internal control, and compliance activities. Overview:
  • GRC Basic terms and definitions
  • Principles of GRC
  • Core components, practices and activities
  • Relationship of GRC to other disciplines

 
Read more...

HIPAA Compliance for Developers

 7 Hours
HIPAA (Health Insurance Portability and Accountability Act of 1996) is a legislation in the United States that provides provisions for data privacy and security for handling and storing medical information. These guidelines are a good standard to follow in developing health applications, regardless of territory. HIPAA compliant applications are recognized and more trusted globally. In this instructor-led, live training (remote), participants will learn the fundamentals of HIPAA as they step through a series of hands-on live-lab exercises. By the end of this training, participants will be able to:
  • Understand the basics of HIPAA
  • Develop health applications that are compliant with HIPAA
  • Use developer tools for HIPAA compliance
Audience
  • Developers
  • Product Managers
  • Data Privacy Officers
Format of the Course
  • Part lecture, part discussion, exercises and heavy hands-on practice.
Note
  • To request a customized training for this course, please contact us to arrange.
Read more...

HiTrust Common Security Framework Compliance

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at developers and administrators who wish to produce software and products that are HiTRUST compliant. By the end of this training, participants will be able to:
  • Understand the key concepts of the HiTrust CSF (Common Security Framework).
  • Identify the HITRUST CSF administrative and security control domains.
  • Learn about the different types of HiTrust assessments and scoring.
  • Understand the certification process and requirements for HiTrust compliance.
  • Know the best practices and tips for adopting the HiTrust approach.
Read more...

Compliance and the Management of Compliance Risk

 21 Hours
Audiance All staff who need a working knowledge of Compliance and the Management of Risk Format of the course A combination of:
  • Facilitated Discussions
  • Slide Presentations
  • Case Studies
  • Examples
Course Objectives By the end of this course, delegates will be able to:
  • Understand the major facets of Compliance and the national and international efforts being made to manage the risk related to it
  • Define the ways in which a company and its staff might set up a Compliance Risk Management Framework
  • Detail the roles of Compliance Officer and Money Laundering Reporting Officer and how they should be integrated into a business
  • Understand some other “hot spots” in Financial Crime – especially as they relate to International Business, Offshore Centres and High-Net-Worth Clients
Read more...

Building up information security according to ISO 27005

21 Hours
This course will give you the skills to build up information security according to ISO 27005, which is dedicated to information security risk management based on ISO 27001.
Read more...

Open Data Risk Analysis and Management

 21 Hours
This instructor-led, live training in lubuskie (online or onsite) focuses on analyzing the risks of Open Data while reducing vulnerability to disaster or data loss. By the end of this training, participants will be able to:
  • Understand the concepts and benefits of Open Data.
  • Identify the different types of data.
  • Understand the risks of Open Data and how to mitigate them.
  • Learn how to manage Open Data risks and create a contingency plan.
  • Implement Open Data risk mitigation strategies to reduce disaster risk.
Read more...

Business Continuity Management

 35 Hours
Description: This is a 'Practitioner' course and leans heavily on practical exercises designed to reinforce the concepts being taught and to build the delegates' confidence in implementing business continuity management. The course is also designed to encourage debate, and the sharing of knowledge and experience between students.
Delegates will benefit from the practical and extensive experiences of ours trainers who are practicing business continuity management and ISO 22301:2019 specialists. Delegates will learn how to:
  • Explain the need for business continuity management (BCM) in all organisations
  • Define the business continuity lifecycle
  • Conducting business continuity programme management
  • Understand their organisation sufficiently to identify mission-critical impact areas
  • Determine their organisation's business continuity strategy
  • Establish a business continuity response
  • Exercise, maintain and review plans
  • Embed business continuity in an organisation
  • Define terms and definitions appropriate to business continuity
By the end of the course, delegates will have a detailed understanding of all the key components of business continuity management and be able to return to their work, making a significant contribution to the business continuity management process.
Read more...

CHFI - Certified Digital Forensics Examiner

 35 Hours
The Certified Digital Forensics Examiner vendor neutral certification is designed to train Cyber Crime and Fraud Investigators whereby students are taught electronic discovery and advanced investigation techniques. This course is essential to anyone encountering digital evidence while conducting an investigation. The Certified Digital Forensics Examiner training teaches the methodology for conducting a computer forensic examination.  Students will learn to use forensically sound investigative techniques in order to evaluate the scene, collect and document all relevant information, interview appropriate personnel, maintain chain-of-custody, and write a findings report. The Certified Digital Forensics Examiner course will benefit organizations, individuals, government offices, and law enforcement agencies interested in pursuing litigation, proof of guilt, or corrective action based on digital evidence.
Read more...

Ethical Hacking and Countermeasures

 35 Hours
Description: This class will immerse the students into an interactive environment where they will be shown how to scan, test, hack and secure their own systems. The lab intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. Students will begin by understanding how perimeter defences work and then be lead into scanning and attacking their own networks, no real network is harmed. Students then learn how Intruders escalate privileges and what steps can be taken to secure a system. Students will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation. Target Audience: This course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.
Read more...

Bezpieczeństwo aplikacji mobilnych (Android, cross platform, API)

 35 Hours
As the popularity of mobile devices increases, it is becoming increasingly important to ensure an appropriate level of security for applications intended for them. What challenges does system Android pose to application developers? How to effectively analyze Android applications for vulnerabilities?
Read more...

PKI: Implement and Manage

 21 Hours
Overview This Public Key Infrastructure – Implement and Manage course helps any individual to gain knowledge in managing robust PKI and having better understanding of topics surrounding public key infrastructure. Moreover, the PKI course is a preparation for the increasingly critical component – which ensures confidentiality, integrity, and authentication in an enterprise. Our PKI course provides the knowledge and skills necessary to select, design and deploy PKI, to secure existing and future applications within your organization. It also gives a deeper look into the foundations of cryptography and the working principles of the algorithms being used. Throughout the whole course, participants will gain in-depth knowledge on the following topics:
  • Legal aspects of a PKI
  • Elements of a PKI
  • PKI management
  • Trust in a digital world
  • Digital signature implementation
  • Trust models
After completing the PKI course, each individual will be able to successfully design, setup, deploy, and manage a public key infrastructure (PKI). This is a 3-day course is considered essential for anyone who needs to understand Public Key Infrastructure (PKI) and the issues surrounding its implementation. It covers the issues and technologies involved in PKI in-depth and gives hands-on practical experience of setting up and maintaining a variety of PKI solutions. Detailed knowledge of issues surrounding PKI helps to put recent attacks which have appeared in the news headlines into context and enable valid decisions to be made about their relevance to your organisation. Objectives To introduce the student to the theoretical aspects of the foundations and benefits of Public Key Infrastructure (PKI), including different types of encryption, digital signatures, digital certificates and Certificate Authorities. To give students hands on experience of implementing and using PKI solutions with a variety of applications. To give students an understanding of the concepts of evaluating and selecting PKI technologies Audience Anyone involved in Public Key Infrastructure | PKI decision-making, implementing and securing e-commerce and other Internet applications, including CIOs, Chief Security Officers, MIS Directors, Security Managers and Internal Auditors.
Read more...

Securing Windows Using PowerShell Automation

 42 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at SysAdmins, systems engineers, security architects, and security analysts who wish to write, execute, and deploy PowerShell scripts and commands to automate Windows security management in their organization. By the end of this training, participants will be able to:
  • Write and execute PowerShell commands to streamline Windows security tasks.
  • Use PowerShell for remote command execution to run scripts on thousands of systems across an organization.
  • Configure and harden Windows Server and Windows Firewall to protect systems from malware and attacks.
  • Manage certificates and authentication to control user access and activity.
Read more...

Security Analyst

 35 Hours
  Target Audience would be - Network server administrators, firewall administrators, information security analysts, system administrators, and risk assessment professionals 
Read more...

WEBAP - Web Application Security

 28 Hours
Description: This course will give the participants thorough understanding about security concepts, web application concepts and frameworks used by developers in order to be able to exploit and protect targeted application. In today’s world, that is changing rapidly and thus all the technologies used are also changed at a fast pace, web applications are exposed to hackers attacks 24/7. In order to protect the applications from external attackers one has to know all the bits and pieces that makes the web application, like frameworks, languages and technologies used in web application development, and much more than that. The problem is that attacker has to know only one way to break into the application and developer (or systems administrator) has to know all the possible exploits in order to prevent this from happening. Because of that it is really difficult to have a bullet proof secured web application, and in most of the cases web application is vulnerable to something. This is regularly exploited by cyber criminals and casual hackers, and it can be minimized by correct planning, development, web application testing and configuration. Objectives: To give you the skill and knowledge needed to understand and identify possible exploits in live web applications, and to exploit identified vulnerabilities. Because of the knowledge gained through the identification and exploitation phase, you should be able to protect the web application against similar attacks. After this course the participant will be able to understand and identify OWASP top 10 vulnerabilities and to incorporate that knowledge in web application protection scheme. Audience: Developers, Police and other law enforcement personnel, Defense and Military personnel, e-Business Security professionals, Systems administrators, Banking, Insurance and other professionals, Government agencies, IT managers, CISO’s, CTO’s.
Read more...

CISMP - Certificate in Information Security Management Principles

 21 Hours
A thorough, practical, 3 day course designed to provide the knowledge and skills required to manage information security, information assurance or information risk based processes. The CISMP course is aligned with the latest national information assurance frameworks (IAMM), as well as ISO/IEC 27002 & 27001; the code of practice and standard for information security. This course is a CESG Certified Training (CCT) course. The course follows the latest BCS syllabus and prepares delegates for the 2 hour multiple choice BCS examination. This qualification provides delegates with detailed knowledge of the concepts relating to information security; (confidentiality, integrity, availability, vulnerability, threats, risks and countermeasures), along with an understanding of current legislation and regulations which impact information security management. Award holders will be able to apply the practical principles covered throughout the course ensuring normal business processes become robust and more secure.
Read more...

Computer Room Security and Maintenance

14 Hours
Network security begins at the physical level. In this instructor-led, live training in lubuskie, participants will learn the security risks related to computer server rooms and how to tighten security through smart practices, planning and technology implementation. By the end of this training, participants will be able to:
  • Assess their organization's security risk, as it relates to computer server rooms.
  • Set up control and monitoring systems to restrict physical access to infrastructure.
  • Design access policies for different members.
  • Effectively communicate security policies with team members.
Read more...

Cybersecurity Fundamentals

 28 Hours
Description: Cybersecurity skills are in high demand, as threats continue to plague enterprises around the world. An overwhelming majority of professionals surveyed by ISACA recognise this and plan to work in a position that requires cybersecurity knowledge.
To fill this gap, ISACA has developed the Cybersecurity Fundamentals Certificate, which provides education and verification of skills in this area. Objectives: With cybersecurity threats continuing to rise and the shortage of appropriately-equipped security professionals growing worldwide, ISACA's Cybersecurity Fundamentals Certificate programme is the perfect way to quickly train entry-level employees and ensure they have the skills and knowledge they need to successfully operate in the Cyber arena. Target Audience: The certificate program is also one of the best ways to gain foundational knowledge in cybersecurity and begin to build your skills and knowledge in this crucial area.
Read more...

NB-IoT for Developers

 7 Hours
In this instructor-led, live training in lubuskie, participants will learn about the various aspects of NB-IoT (also known as LTE Cat NB1) as they develop and deploy a sample NB-IoT based application. By the end of this training, participants will be able to:
  • Identify the different components of NB-IoT and how to fit together to form an ecosystem.
  • Understand and explain the security features built into NB-IoT devices.
  • Develop a simple application to track NB-IoT devices.
Read more...

Network Penetration Testing

 35 Hours
This class will help the attendees to scan, test, hack and secure their own systems. To gain an in-depth knowledge and practical experience with the current essential security systems. The attendees will get to know how perimeter defences work and then be led into scanning and attacking their own networks, no real network is harmed. The attendees then will learn how intruders escalate privileges and what steps can be taken to secure a system, Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation.
Read more...

Public Key Infrastructure

 21 Hours
The public key and private key are the basis of public key cryptography (asymmetric), enabling secure communication and exchange of information in computer networks. The combination of both keys allows you to secure transmitted data, maintaining its confidentiality and ensuring the authenticity of digital signatures. The public key and private key are the basis of public key cryptography (asymmetric), enabling secure communication and exchange of information in computer networks. The combination of both keys allows you to secure transmitted data, maintaining its confidentiality and ensuring the authenticity of digital signatures.
Read more...

Security Policy Management

 35 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at IT administrators, security coordinators, and compliance managers who wish to identify, evaluate, and implement security policy management methods for their organization. By the end of this training, participants will be able to develop, manage, and monitor security policies to protect their organization's information, network, and physical and software assets.
Read more...

Introduction to ISO27001

 7 Hours
This is a one day Introduction to ISO27001
Read more...

Security of internet applications

 14 Hours
Web application security is a key area that requires special attention in the context of cybercrime threats. Data encryption, secure data storage, unique session identifiers, strong authentication, data validation. Web application security is a process of continuous improvement that requires attention on many levels. Implementing and continuously improving security practices helps minimize the risk of attacks and protect user data and systems from threats.
Read more...

CISSP - Certified Information Systems Security Professional

 35 Hours
Overview: Certified Information Systems Security Professional certification is recognised as a key qualification for developing a senior career in information security, audit and IT governance management. Held by over 30,000 qualified professionals worldwide, the Certified Information Systems Security Professional qualification shows proven knowledge and is the key to a higher earning potential in roles that include CISO, CSO and senior security manager. You will learn to:
  • Use the knowledge gained in a practical manner beneficial to your organisation
  • Protect your organisational assets using access control techniques and strengthen confidentiality and integrity controls from the world of cryptography
  • Secure your network architecture and design (implement Cyber security)
  • Achieve your organisational objectives such as legal & compliance, Information assurance, security and data governance
  • Enhance IT services secure delivery via Security operations, architecture and design principles
  • Implement business resiliency via Business Continuity Plan
  • You will gain a thorough understanding of the 8 domains as prescribed by (ISC)2®.
The Main Goal:
  • To pass your CISSP examination first time.
Target Audience: This training is intended for individuals preparing for the CISSP certification exam.
Read more...

Certified Information System Security Professional (CISSP) CBK Review

 35 Hours
A CISSP is an information assurance professional who defines the architecture, design, management and/or controls that assure the security of business environments. The vast breadth of knowledge and the experience it takes to pass the exam is what sets a CISSP apart. The credential demonstrates a globally recognized level of competence provided by the (ISC)2® CBK®, which covers critical topics in security today, including cloud computing, mobile security, application development security, risk management and more. This course helps you review the 10 domains of the information security practices. It also serves as a strong learning tool for mastering concepts and topics related to all aspects of information systems security. Objectives:
  • To review of the main topics of CISSP CBK (Common Body of Knowledge).
  • To prepare for a CISSP examination
Read more...

Data Security Officer ISO 27001:2017

21 Hours
The 'Data Security Officer ISO 27001:2017' training is an intensive course that discusses the requirements of the ISO 27001:2017 standard and the ISO 27002:2017 guidelines. Participants will gain knowledge about data security, system auditing and the role of a Data Security Officer. Thanks to the training, they will be ready to effectively implement and maintain ISO 27001:2017 standards in the organization.
Read more...

Introducing Information Security & Charting a Career Path

7 Hours
Target Audience:This course is designed for individuals interested in understanding information security and exploring potential career paths in the field. It is suitable for people from diverse backgrounds, including those with limited prior technical knowledge.Course Objectives:Attendees should:
  • Gain a broad understanding of information security concepts and principles.
  • Be able to identify key threats and vulnerabilities.
  • Have the capability to explore various career options and specialisations within information security.
  • Develop a foundation for further learning and exploration in the field.
Format of the Course:
  • Interactive lecture and group discussions.
  • Practical exercises and feedback sessions.
  • Participants are encouraged to bring questions and participate actively in discussions.
This agenda is flexible and can be adjusted based on time constraints and audience interests. Customised versions might include interactive elements such as quizzes, polls, and group discussions.

The course will provide resources and information about further learning, professional organisations, and career resources will be provided.Course Customisation Options
  • To request a customised training for this course, please contact us to arrange.
Read more...

Fundamentals of Information Systems Security

 21 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at engineers who wish to learn the methods and tools needed to protect their organization's information systems against attack. By the end of this training, participants will be able to:
  • Understand information security at both the computer level, as well as the communications level.
  • Prevent physical and digital access to private information systems.
  • Prevent the modification of information that is stored, being processed, or being transmitted.
  • Protect against denial of service to authorized users.
  • Take the necessary measures to detect, document, and counter security threats.
  • Ensure that organizational information is kept confidential.
Read more...

Automotive Cyber Security Fundamentals

 21 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at engineers who wish to safeguard connected vehicles from cyber attacks.By the end of this training, participants will be able to:
  • Implement cybersecurity in automotive systems.
  • Choose the most suitable technologies, tools, and approaches.
Read more...

Business Continuity Practitioner

 14 Hours
This course is designed to help the attendee to build organizational resilience against a range of threats so that organizations can respond effectively to incidents, maintain the availability of business operations and safeguard its interests. 
Read more...

BeyondCorp: Implementing Zero Trust Security

 14 Hours
BeyondCorp is an open source Zero Trust security framework that allows employees to work securely from any location without the need for a traditional VPN. In this instructor-led, live training, participants will learn hands-on how to set up a Zero Security system as they set up and deploy BeyondCorop in a live-lab environment. By the end of this training, participants will be able to:
  • Assess their organization's existing security model.
  • Shift access controls from the perimeter to individual devices and users.
  • Deploy applications using a user and device-centric authentication and authorization workflow.
  • Understand, plan and implement a Zero Trust network within their organization.
Audience
  • Network engineers
  • Cyber security professionals
  • System architects
  • IT managers
Format of the Course
  • Part lecture, part discussion, exercises and heavy hands-on practice
Note
  • To request a customized training for this course, please contact us to arrange.
Read more...

Bezpieczeństwo IT - wprowadzenie

 21 Hours
The "Bezpieczeństwo IT - wprowadzenie" training is a comprehensive course covering key cybersecurity issues. Participants will gain knowledge in the field of digital identification, information security and the basics of computer networks, protocols and firewalls. The course also covers penetration testing tools, hands-on demonstrations, and topics related to risk management and incident response.
Read more...

CAS for Administrators

 7 Hours
In this instructor-led, live training lubuskie (online or onsite), we discuss CAS's architecture and features and practice installing and configuring a CAS server. By the end of this training, participants will be able to:
  • Have an understanding of CAS's implementation of SSO (Single-Sign-On Authentication).
  • Have the necessary practice to deploy and manage their own authentication server.
Read more...

Crypto Currencies and the Blockchain

 7 Hours
This course help you to understand what is special about Bitcoin, we need to understand how it works at a technical level. We’ll address the important questions about Bitcoin, such as:
How does Bitcoin work? What makes Bitcoin different? How secure are your Bitcoins? How anonymous are Bitcoin users? What determines the price of Bitcoins? Can cryptocurrencies be regulated? What might the future hold?   
 
Read more...

Cyber Crisis & Communications Planning

 7 Hours
This course discusses how to manage an incident response team, how the first responder act, given the frequency and complexity of today's cyber attacks, incident response is a critical function for organizations. Incident response is the last line of defense, detecting and efficiently responding to incidents requires strong management processes, and managing an incident response team requires special skills and knowledge
 
Read more...

Cyber Crime in Business

 7 Hours
This one day course show the cyber crime impact on the business and how the hackers can effect the business through the cyber crimes, the course discuss the history of cyber crime and security terminologies of the hacking and cyber security, finally it will discuss how to stop this risk on the business    
    
 
Read more...

Cyber Defence (SOC) Analyst Foundation

 7 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at beginner to intermediate-level security analysts and system administrators who wish to establish a foundational understanding of Cyber Defence (SOC) analysis. By the end of this training, participants will be able to:
  • Understand the principles of Security Management in a Cyber Defence context.
  • Execute effective Incident Response strategies to mitigate security incidents.
  • Implement Security Education practices to enhance organizational awareness and preparedness.
  • Manage and analyze Security Information for proactive threat identification.
  • Utilize Event Management techniques to monitor and respond to security events.
  • Implement Vulnerability Management processes to identify and address system vulnerabilities.
  • Develop skills in Threat Detection to identify and respond to potential cyber threats.
  • Participate in Simulated Attacks to test and improve incident response capabilities.
Read more...

CompTIA Pentest+ | PT0-002 egzam preparation (accredited training course with exam)

 35 Hours
PenTest+ assesses the most up-to-date penetration testing, and vulnerability assessment and management skills necessary to determine the resiliency of the network against attacks.
Read more...

Cloud Security Seminar

 7 Hours
  • After this one day seminar the attendee will be able to demonstrate knowledge and understanding of Cloud Computing.
Read more...

Capture the Flag (CTF)

 14 Hours
This class will help the attendees to scan, test, hack on secure their own systems, get in-depth knowledge and practical experience with the current essential security systems. the attendees know how perimeter defenses work and then be lead into scanning and attacking their own networks, no real network is harmed, the attendees then will learn how intruders escalate privileges and what steps can be taken to secure a system, Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation.    
 
Read more...

Cyber Emergency Response Team (CERT)

 7 Hours
This course discusses how to manage an incident response team. how the first responder act, given the frequency and complexity of today's cyber attacks, incident response is a critical function for organizations. Incident response is the last line of defense, detecting and efficiently responding to incidents requires strong management processes, and managing an incident response team requires special skills and knowledge
Read more...

Managing Cyber Risks in the Supply Chain

 7 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at supply chain professionals who wish to establish effective control and oversight of their supply chain, especially as it relates to cybersecurity. By the end of this training, participants will be able to:
  • Understand the security oversights that can bring about significant damage and disruption to a supply chain.
  • Break down a complex security problem into manageable and actionable parts.
  • Address common supply chain vulnerabilities by analyzing high risk areas and engaging with stakeholders.
  • Adopt best practices in securing a supply chain.
  • Noticeably reduce or eliminate the biggest risks to an organization's supply chain.
Read more...

Cyber Security Awareness Training

 7 Hours
Cyber Security is the practice of applying technologies, controls, and processes to protect computer systems, servers, networks, devices, programs, and data from malicious cyber attacks. This instructor-led, live training (online or onsite) is aimed at anyone who wish to learn how to protect internet-connected systems from different kinds of cyber threats. By the end of this training, participants will be able to:
  • Understand the concept of Cyber Security.
  • Learn and understand the different Cyber Security threats.
  • Learn processes and best practices to protect internet-connected systems from cyber attacks.
Format of the Course
  • Interactive lecture and discussion.
  • Lots of exercises and practice.
  • Hands-on implementation in a live-lab environment.
Course Customization Options
  • To request a customized training for this course, please contact us to arrange.
Read more...

Cybersecurity Fundamentals - A Practical Course

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at IT professionals who wish to learn and apply the fundamentals of Cybersecurity practices, processes, and tools in their organization. By the end of this training, participants will be able to:
  • Understand the Cybersecurity concepts, definitions, architecture, and principles.
  • Learn how to secure and protect digital assets (networks, systems, applications, and data).
  • Implement security models, frameworks, operational techniques, and incident handling.
  • Evaluate and mitigate the impact of cyber attacks, risks, threats, and vulnerabilities.
  • Gain insights on cybersecurity challenges with emerging technologies.
Read more...

Cyber Security Body of Knowledge (CyBOK)

 35 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at software engineers and IT professionals who wish to gain a deeper knowledge on CyBOK and strengthen theoretical and applied skills in cyber security. By the end of this training, participants will be able to:
  • Understand the fundamental concepts, definitions, and principles of cyber security.
  • Acquire in-depth expertise in cyber security by implementing the CyBOK knowledge areas.
  • Gain extensive and foundational knowledge to operationalize the CyBOK framework.
  • Facilitate community and organization enablement to increase focus on data security and privacy.
  • Expand opportunities to earn specialization and credentials for cyber security professions.
Read more...

Cyber Resilience RESILIA Foundation

 14 Hours
The RESILIA  course starts with the purpose, key terms, the distinction between resilience and security, and the benefits of implementing cyber resilience. It introduces risk management and the key activities needed to address risks and opportunities. Further, it explains the relevance of common management standards and best practice frameworks to achieve cyber resilience. Subsequently, it identifies the cyber resilience processes, the associated control objectives, interactions and activities that should be aligned with corresponding ITSM activities. In the final part of the course, it describes the segregation of duties and dual controls related to cyber resilience roles and responsibilities.    
 
Read more...

The Dark Web

 7 Hours
The course is intended for those requiring intelligence or evidence from the Dark Web. This will usually be those working in government or law enforcement though may also be in the private sector.
Read more...

Digital Investigations - Advanced

 21 Hours
In this course, you will learn the principles and techniques for digital forensics investigation and the spectrum of available computer forensics tools. You will learn about core forensics procedures to ensure court admissibility of evidence, as well as the legal and ethical implications. You will learn how to perform a forensic investigation on both Unix/Linux and Windows systems with different file systems. with many advanced topics like wireless, network, web, DB and Mobile crimes investigation    
 
Read more...

Digital Investigations - Introduction

 14 Hours
Digital Forensics and Investigations is a comprehensive entry level course to teach the basic theoretical concepts of digital forensics as well as the practical side of digital forensics, i.e. how to conduct digital forensic investigations. This course is designed for a wide range of people such as law enforcers, crime investigators, managers in larger organizations, technical personnel in larger organizations, and anyone else interested in a general background of digital forensics.    
 
Read more...

Data Protection Practitioner

 14 Hours
This two days course s designed for those with some data protection responsibilities in an
organization or who, for other reasons, wish to achieve and demonstrate a broad
understanding of the law, including the EU General Data Protection Regulation (GDPR) and
the UK Data Protection Bill and their practical application. It is recognized that those with
overall responsibility for data protection within an organization will need to develop a detailed
understanding of the law"    
Read more...

Dobre praktyki wykonywania testów bezpieczeństwa

 14 Hours
The "Dobre praktyki wykonywania testów bezpieczeństwa" course prepares testers to effectively plan and conduct security tests. The program covers various types of testing such as infrastructure testing, application testing, penetration testing, and Advanced Persistent Threat testing (APT). Participants will acquire skills in designing security processes, assessing risk and using supporting tools. The course focuses on practical skills that can be immediately applied on the job, covering topics from infrastructure inventory to APT and configuration testing.
Read more...

Ethical Hacker

 35 Hours
This class will immerse the students into an interactive environment where they will be shown how to scan, test, hack and secure their own systems. The lab intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. Students will begin by understanding how perimeter defenses work and then be lead into scanning and attacking their own networks, no real network is harmed. Students then learn how intruders escalate privileges and what steps can be taken to secure a system. Students will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation. When a student leaves this intensive 5 day class they will have hands on understanding and experience in Ethical Hacking. The purpose of the Ethical Hacking Training is to:
  • Establish and govern minimum standards for credentialing professional information security specialists in ethical hacking measures.
  • Inform the public that credentialed individuals meet or exceed the minimum standards.
  • Reinforce ethical hacking as a unique and self-regulating profession.
Audience: The Course is ideal for those working in positions such as, but not limited to:
  • Security Engineers
  • Security Consultants
  • Security Managers
  • IT Director/Managers
  • Security Auditors
  • IT Systems Administrators
  • IT Network Administrators
  • Network Architects
  • Developers
Read more...

Executive Cyber Security Awareness

 7 Hours
This course provides leaders and managers with an overview of issues and activities associated with cybersecurity. Leaders will receive information in various topics that will build their knowledge and hone executive decision-making in regard to the cybersecurity threat.    
  By the end of this training, participants will be able to:
  • Understand the Internet, social network Privacy
  • Know PII and why it is important
  • Know how to secure the Online Activates
  • Know how to maintain the Privacy of business users
  • Know more of the Cyber laws that protect the Privacy
Format of the Course
  • Interactive lecture and discussion.
  • Lots of exercises and practice.
  • Hands-on implementation in a live-lab environment.
Course Customization Options
  • To request a customized training for this course, please contact us to arrange.
Read more...

Bezpieczeństwo informacji w urzędzie

 14 Hours
The "Bezpieczeństwo informacji w urzędzie" training provides a comprehensive analysis of data protection methods in public administration, with an emphasis on encryption, risk management and GDPR compliance. Participants will learn to implement best security practices in accordance with ISO 27001 and 27002 standards, which will increase the security of personal data management. The course is addressed to all public sector employees interested in improving their competences in the field of information security.
Read more...

IoT Security Architecture

 14 Hours
In this instructor-led, live training in lubuskie, participants will understand Internet of Things (IoT) architectures and learn the different IoT security solutions applicable to their organization. By the end of this training, participants will be able to:
  • Understand IoT architectures.
  • Understand emerging IoT security threats and solutions.
  • Implement technologies for IoT security in their organization.
Read more...

Understanding and Managing the Threat of Malware

 7 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at computer users who wish to understand malware and take appropriate measures to minimize its threat. By the end of this training, participants will be able to:
  • Understand the concept of malware.
  • Identify the different types of malware.
  • Take necessary steps to mitigate malware (procedural, technological, awareness, etc).
Read more...

Modern Application Security - CyberSecurity

 21 Hours
The "Modern Application Security - CyberSecurity" training is addressed to developers, administrators, testers and DevOpss working in the Scrum/Agile methodology. Participants will gain knowledge about current issues related to application security, recommendations of experts and organizations OWASP. The course focuses on eliminating common software development risks, covers modern security approaches such as threat modeling, and discusses current trends in application vulnerabilities. Additionally, participants will learn how hackers approach applications and how to effectively defend against them, in order to enrich teams Scrum with knowledge and tools to improve the security of applications they produce.
Read more...

MITRE ATT&CK

 7 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at information system analysts who wish to use MITRE ATT&CK to decrease the risk of a security compromise. By the end of this training, participants will be able to:
  • Set up the necessary development environment to start implementing MITRE ATT&CK.
  • Classify how attackers interact with systems.
  • Document adversary behaviors within systems.
  • Track attacks, decipher patterns, and rate defense tools already in place.
Read more...

Mobile Forensic Security

 7 Hours
This course was put together focusing on what today’s Mobile Forensics practitioner requires, Basics of Android and iOS areas this course will be cover & the analysis using reverse engineering understanding how the popular Mobile OSs are hardened to defend against common attacks and exploits.
Read more...

Securing Windows Server 2016 (authorized training course MS 20744)

 35 Hours
This five-day, instructor-led course teaches IT professionals how they can enhance the security of the IT infrastructure that they administer. This course begins by emphasizing the importance of assuming that network breaches have occurred already, and then teaches you how to protect administrative credentials and rights to help ensure that administrators can perform only the tasks that they need to, when they need to.
Read more...

Web Security Testing - Security and Testing of Web Applications using OWASP

 21 Hours
This instructor-led, live training in  (online or onsite) is aimed at developers, engineers, and architects seeking to secure their web apps and services.By the end of this training, participants will be able to integrate, test, protect, and analyze their web apps and services using the OWASP testing framework and tools
Read more...

PCI-DSS Practitioner

 14 Hours
The Payment Card Industry Professional training course provides an individual qualification
for industry practitioners who wish to demonstrate their professional expertise and
understanding of the PCI Data Security Standard (PCI DSS).
 
Read more...

PKI & TLS Security Implementation

 7 Hours
This course cover the basics of PKI, the basics of encryption, the Encrypting File System currently used by Windows 7 and Windows 8, the creation of a PKI using a variety of software and looking at tools which can exploit flaws in the implementation of a PKI.     
 
Read more...

Secure by Design

 7 Hours
This course cover the considertion of security and Privacy in the architecture, and how to design the security in the preperation of the design phase, the course also cover many technical controls to be designed in the architecture.
Read more...

Bezpieczeństwo IT dla praktyków

 126 Hours
The "Bezpieczeństwo IT dla praktyków" course provides participants with comprehensive practical knowledge in the field of IT security. Participants will acquire skills in analyzing and auditing systems for security and compliance with regulations. The course includes, among others: issues of operating system security, cryptography, identity protection, security systems, network services, threats, penetration tests, web application security and legal and organizational aspects. Graduates will be ready to work in various positions related to IT security, such as security administrator, SOC analyst, or cybersecurity consultant. The course is based on interactive lectures, discussions, practical exercises and implementation in a live-lab environment.
Read more...

Bezpieczeństwo sieci komputerowych – jak zabezpieczyć swoje usługi

 28 Hours
The "Computer Network Security - How to Secure Your Services" training presents mechanisms and services securing modern network solutions. It covers the basics of ensuring data confidentiality and integrity, the use of encryption, certificates, public key infrastructure (PKI), and secure password storage. The course also covers network security protocols and services, security systems, protecting wireless networks, connecting corporate branches, and testing security through penetration testing, network scanning and vulnerability detection.
Read more...

Security-Enhanced Linux (SELinux)

 7 Hours
The "Security-Enhanced Linux (SELinux)" course for system administrators Linux focuses on improving the security of services by implementing effective security policies. Participants will acquire skills in configuring and customizing SELinux policies, managing SELinux users and solving problems with access to resources. The course also covers creating your own SELinux policies, providing a comprehensive understanding of the SELinux architecture and its benefits.
Read more...

Shadowsocks: Set Up a Proxy Server

 7 Hours
Shadowsocks is an open-source, secure socks5 proxy. In this instructor-led, live training, participants will learn how to secure an internet connection through a Shadowsocks proxy. By the end of this training, participants will be able to:
  • Install and configure Shadowsocks on any of a number of supported platforms, including Windows, Linux, Mac, Android, iOS, and OpenWrt.
  • Deploy Shadosocks with package manager systems, such as pip, aur, freshports and others.
  • Run Shadowsocks on mobile devices and wireless networks.
  • Understand how Shadowsocks encrypts messages and ensures integrity and authenticity.
  • Optimize a Shadowsocks server
Audience
  • Network engineers
  • System Administrators
  • Computer technicians
Format of the course
  • Part lecture, part discussion, exercises and heavy hands-on practice
Read more...

Social Engineering

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at information analysts who wish to learn the techniques and processes behind social engineering so as to protect sensitive company information. By the end of this training, participants will be able to:
  • Set up the necessary development environment to start creating custom malware.
  • Backdoor legitimate web applications undetected.
  • Deliver evil files as normal file types.
  • Use social engineering techniques to lead targets into a fake website.
Read more...

Systems Security Certified Practitioner

 35 Hours
This course explore the technical skills to implement, monitor and administer IT infrastructure using information security policies and procedures. And how to protecting the confidentiality, integrity and availability of data.    
 
Read more...

Ubuntu Security

 14 Hours
This instructor-led, live training in lubuskie (online or onsite) is aimed at security engineers and system administrators who wish to integrate more security into their Ubuntu Linux distribution and protect their system from threats. By the end of this training, participants will be able to:
  • Install and configure Ubuntu operating system.
  • Reinforce the physical security of Ubuntu Linux distribution.
  • Embed encrypted server features to protect the administration system.
  • Secure device interactions within the Ubuntu System.
  • Recognize general security threats to Ubuntu environment and execute the proper solutions.
Read more...

Understanding Modern Information Communication Technology

 7 Hours
This course covers the basic concepts of security and IT Security, with an emphasis on defending against network attacks. Participants will gain an understanding of essential security protocols and security concepts of web services. Recent attacks against cryptosystems and some recent related vulnerabilities will be referrenced
Read more...

Bezpieczeństwo sieci WiFi

 21 Hours
The aim of the "Bezpieczeństwo sieci WiFi" training is to comprehensively discuss issues related to the security of wireless networks. Topics include the basics of operation and design of WiFi networks, issues of vulnerabilities, scanning, attacks, and network security. The course is interactive and includes lectures, discussions, numerous practical exercises and implementation in a live-lab environment. The training covers, among others: IEEE 802.11 standards, security mechanisms, problems and attacks related to WiFi networks, as well as network security and privacy issues.
Read more...

OpenStack Security

 14 Hours
The course is providing practical knowledge on OpenStack and private cloud security. It starts from the introduction to the system, then the participants are getting practical knowledge on security in private clouds and securing OpenStack installation. During the course, each of the core OpenStack modules is presented, participants are building up virtual identity, image, network, compute and storage resources while discussing relevant security topics. Each participant is getting their own training environment with a complete OpenStack installation based on selected cloud architecture (eg. storage, networking). The training could be highly customized based on the needs of the client. Customization options
The training can be contracted to 2 days, focusing on core aspects relevant for the customer. The training can be also extended regarding administrative, design, networking and/or troubleshooting topics concerning OpenStack deployments
 
Read more...

Network Security Administrator

 35 Hours
Audience: System Administrators and Network Administrators as well as anyone who is interested in defensive network security technologies.  
Read more...

CISA - Certified Information Systems Auditor - Exam Preparation

 28 Hours
The training takes the form of a workshop supplemented with substantive knowledge. Classes are based on the official CISA certificate framework. During the workshop, case studies will be discussed in discussing specific issues. Classes will be conducted in English (on request in Polish) based on the ISACA handbook in English.
  CISA Exam Material Scope:
  • Information System Auditing Process (21%)
  • Governance and Management of IT (17%) 
  • Information Systems Acquisition, Development and implementation (12%)
  • Information Systems Operation and Business Resilience (23%)
  • Protection of Information Assets (27%)
Duration of the exam: 4 hours
Type: multiple choice test
Volume: 200 questions   List of the requirements that you must meet in order to be able to claim the CISA qualification: 
  1. Pass the CISA exam. The CISA passing score is a mark of 450 or higher on the exam.
  2. Abide by the ISACA Code of Professional Ethics 
  3. Promise to obey the CISA Continuing Professional Education Policy
  4. Gain at least 5 years of professional information systems auditing, control or security work experience.
  5. Comply with Information Systems Auditing Standards
If you’ve passed the exam and believe that you meet those requirements, then you can begin the application for certification: page certification here
There is a fee of $50 for this application. There’s also a yearly fee that you must pay to maintain this certification after you’ve been granted it. The fee is $40 per annum for ISACA members, and $75 for non-members.
Read more...

Testy penetracyjne – wykrywanie i wykorzystywanie podatności

 28 Hours
The "Penetration Testing - Detecting and Exploiting Vulnerabilities" training comprehensively discusses issues related to practical testing of network and service security. Participants gain skills in penetration testing, including reconnaissance, finding vulnerabilities, attacks and takeover, as well as covering tracks. The course also covers aspects related to system analysis, social engineering and preparation of a test report, enabling practical exercises in a controlled virtual environment.
Read more...

Advanced PHP and Secure Coding Course

 35 Hours
Advanced PHP and Secure Coding Course
Read more...

Last Updated:

Testimonials (25)

Pushing changes on an ongoing basis, when on the 3rd day I started to get more lost than before and it was harder to spot the error quickly, I was quickly able to check out the latest changes and stay up to date with the material

Paulina
Course - Advanced Java Security

Machine Translated

The labs practice

Angel - Vodacom
Course - How to Write Secure Code

Accessing tools and being able to ask questions to someone friendly who I felt wouldn't judge me

Kiara
Course - Open Source Cyber Intelligence - Introduction

Examples from "life" are provided and I was very interested in the topic of personality types

Tomek - Amer Sports Poland
Course - Governance, Risk Management & Compliance (GRC) Fundamentals

Machine Translated

Very good to understand how a hacker would potentially analyse sites for weakness and tools they might employ .

Roger - OTT Mobile
Course - .NET, C# and ASP.NET Security Development

Overview of Risk topics and preparing for exam

Leszek - EY GLOBAL SERVICES (POLAND) SP Z O O
Course - CRISC - Certified in Risk and Information Systems Control

having a one to one session with Raymond was amazing he was really great and attentive to all my training needs.

Joshua
Course - Secure Developer .NET (Inc OWASP)

Learning how to use new tooling. Mostly seeing how security testing could be performed

Jason - Kropman
Course - Secure Web Application Development and Testing

Azure web security, it was more what i was expecting, the penetration testing i would never do in my job

Toby
Course - Application Security in the Cloud

The simple explanation of the trainer

Mohammed salem - Palestinian Police
Course - Open Source Intelligence (OSINT) Advanced

the balance between lectures and practice, the rhythm, the trainer knowledge and pedagogic skill

Armando Pinto - EID
Course - C/C++ Secure Coding

learning about Basel

Daksha Vallabh - Standard Bank of SA Ltd
Course - Basel III – Certified Basel Professional

Risk optimization is more clear than the other subjects

Munirah Alsahli - GOSI
Course - CGEIT – Certified in the Governance of Enterprise IT

The Burpe suite i need more training in this

Gontse Ntshegi - Vodacom
Course - Android Security

A wide range of knowledge of the lecturer.

Marcin Szklarski - Santander Consumer Bank
Course - CCSK Plus (Certificate of Cloud Security Knowledge - Plus)

The learning material

morena xaba - Vodacom
Course - The Secure Coding Landscape

Trainer willing to answer questions and give bunch of examples for us to learn.

Eldrick Ricamara - Human Edge Software Philippines, Inc. (part of Tribal Group)
Course - Security Testing

Duża liczba dodatkowych materiałów (książki, strony internetowe, podcasty), gdzie można szukać dodatkowych informacji

Mateusz Półrola - Mobica Limited Sp. z o.o. Oddział w Polsce
Course - Embedded Systems Security

Overview of most among important topics related to software architecture. This training inspired me to learn some of them in depth ;)

Konrad Fuchsig - EY GDS
Course - Web Application Security

Lot's of information explained very well. Good examples, interesting exercises. Trainer showed us his real world experience.

Gergely Bathó - GE Medical Systems Polska Sp. Z O.O.
Course - Application Security for Developers

Beginning by how to hack to better understand how to secure was very interesting and appreciated.

Raphaël Capocasale - Mikron SA Boudry
Course - Advanced C#, ASP.NET and Web Application Security

The trainer was very motivated and knowledgeable. The trainer was not only capable of information transfer, she also brought it with humor to lighten the dry theoretical training subject.

Marco van den Berg - ZiuZ Medical B.V.
Course - HIPAA Compliance for Developers

Very good knowledge and character.

Constantinos Michael
Course - Java and Web Application Security

I genuinely enjoyed the real life examples.

Marios Prokopiou
Course - Secure coding in PHP

I genuinely enjoyed the real examples of the trainer.

Joana Gomes
Course - Compliance and the Management of Compliance Risk

Other regions in Poland

Other Countries

These courses are also available in other countries

Consulting

Cyber Security Consulting
Online Cyber Security training in lubuskie, Cybersecurity training courses in lubuskie, Weekend Cybersecurity courses in lubuskie, Evening Cyber Security training in lubuskie, Cyber Security instructor-led in lubuskie, Cybersecurity trainer in lubuskie, Cybersecurity on-site in lubuskie, Weekend Cybersecurity training in lubuskie, Cybersecurity instructor in lubuskie, Evening Cyber Security courses in lubuskie, Cyber Security private courses in lubuskie, Cybersecurity one on one training in lubuskie, Cyber Security coaching in lubuskie, Cybersecurity classes in lubuskie, Cyber Security boot camp in lubuskie, Online Cyber Security training in lubuskie, Cyber Security instructor-led in lubuskie