Course Outline
Foundations of Information Security in Public Institutions
- Core security principles and their significance in government organizations
- Confidentiality, integrity, and availability in daily operations for government
- Common threats affecting public sector information and digital services for government
Governance, Policies, and Responsibilities
- Security governance within an institutional environment for government
- Roles of managers, users, IT teams, service owners, and suppliers in government
- Policies, standards, procedures, and accountability for government operations
Risk Management for Information and Services
- Identifying assets, threats, vulnerabilities, and business impacts for government
- Basic risk assessment and prioritization in the public sector
- Selecting practical treatments and controls for government services
Information Classification and Data Protection
- Classifying institutional information based on sensitivity and use for government
- Protecting documents, records, databases, and shared files in government
- Best practices for storage, transfer, retention, and disposal of data for government
Identity and Access Management
- Fundamentals of user accounts, authentication, and authorization for government
- Principles of least privilege, separation of duties, and access review for government
- Managing access requests, changes, and revocation in government systems
Secure Use of Systems and Digital Services
- Secure use of email, web systems, remote access, and shared platforms for government
- Common user errors and strategies to avoid them in the public sector
- Practical measures for safer daily operations in government
IT Service Management Basics and Security Integration
- The relationship between IT services and information security for government
- Security considerations in service design, delivery, and support for government
- Handling service requests, incidents, changes, and basic service documentation for government
Incident Handling and Service Continuity
- Recognizing security incidents and service disruptions in the public sector
- Steps for reporting, escalation, containment, communication, and recovery in government
- Backups, recovery planning, and maintaining availability during disruptions for government
Security Awareness, Compliance, and Improvement
- Identifying phishing, social engineering, and unsafe behaviors in the public sector
- Adhering to institutional policies, audit requirements, and regulatory expectations for government
- Monitoring controls and identifying practical improvement actions for government
Practical Workshop and Action Planning
- Reviewing a public sector security and service management scenario for government
- Identifying risks and proposing service and security improvements in the public sector
- Creating an action plan for participants' own areas of responsibility in government
Requirements
- A foundational knowledge of IT concepts, office systems, and the management of institutional information
- Practical experience with information systems, email, shared files, and online services in daily operations
- No prior programming experience is necessary
Audience
- Public sector employees engaged in the use, management, or oversight of digital information and services
- IT professionals, system administrators, and service management staff within government institutions
- Managers, coordinators, auditors, and compliance officers responsible for ensuring digital security and maintaining service quality for government operations
Testimonials (4)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
learning about Basel
Daksha Vallabh - Standard Bank of SA Ltd
Course - Basel III – Certified Basel Professional
Speed of response and communication
Bader Bin rubayan - Lean Business Services
Course - ISO/IEC 27001 Lead Implementer
Risk optimization is more clear than the other subjects