About the course
About this Course
The objective of the course is to provide a comprehensive but necessarily high level overview across industry standard technology and platforms, illuminating the technology and its specific cyber governance, risk and assurance challenges without technically challenging the learner to hands-on labs.
The course takes the learner back to computer basics to build the individuals understanding common technology platforms through to the network layer and on via virtualisation technologies, cloud systems, telecoms and modern communications and finishing with an insight into the world of protective monitoring, challenges and pitfalls of security events logs and analysis. Common methods of attack provides the learner with an insight into many of the most popular attack vectors today. Closing the third day with a module focused on the benefits and pitfalls of encryption.
Day four begins with the cyber law and the context in which security practitioners and organisations have to operate within. Each of us has a digital footprint and the technology we use within our enterprise as an attack surface, the next module joins these two principles and explains the challenges for assurance around leaky data. During the remainder of day four and five we introduce the layered cyber concepts and the deeper governance required throughout the entire lifecycle covering a number of specialist areas essential to the rounded security practitioner.
Each day provides insight into the technical subject matter with the crucial security subtext. Knowledge check exercises, where delegates work in groups to discuss and provide solutions to scenarios offering an explanation with a rationale in each instance of why this is important from a security assurance perspective.
During the delivery we will provide the delegates with access to recorded video demonstrations of the technical subject matter, which will enhance the learners experience whilst preserving any technical confidence as there are no requirements for the learner to undertake any 'hands-on' labs.
Prerequisites
There are no prerequisites for this course, however, participants are expected to have a basic understanding of computers and the internet.
Delegates will learn how to
Day 1
- Computing Foundation, Data Storage & Memory
- OSI Protocol Stack
- TCP/IP
Day 2
- Network Architecture
- Internet Primer
- Network Security
- Modern Communications
- Virtualisation & Cloud Technologies
Day 3
- Protective Monitoring
- Common Methods of Attack
- Encryption
Day 4
- Cyber and the Legal Framework
- Digital Footprints
- Information Assurance landscape
- Risk Management
- Risk Treatment
- Physical Security
- Personnel Security
Day 5
- Service Assurance & Standards
- Software Security Assurance
- Secure Development Process
- Threat Modelling
- STRIDE Mitigation
- Security Best Practices
- Introduction to Security Architecture
Exam Information
Independent APMG Examination
Candidates will receive individual emails to access their AMPG GCT candidate portal, typically available two weeks post exam. If you experience any issues, please contact the APMG GCT technical help desk on 01494 4520450.
Duration of 60 minutes
60 multiple choice questions (4 multiple choice answers only 1 of which is correct)
Pass Mark of 50%