OpenBMC Security: Secure Boot, Certificates, and Firmware Updates Training Course

Course Description

A comprehensive course focused on AI security, governance, compliance, and risk management for enterprise implementations. Designed for security professionals, compliance officers, and technology leaders responsible for secure AI deployment and governance frameworks.

This instructor-led, live training conducted in US (online or onsite) is intended for advanced-level professionals aiming to gain a comprehensive understanding of fraud examination concepts and prepare for the Certified Fraud Examiner (CFE) exam, with relevance for government agencies.

Upon completion of this training, participants will be able to:

• Acquire comprehensive knowledge of fraud examination principles and the examination process.
• Develop the capability to identify, investigate, and prevent diverse financial fraud schemes.
• Understand the legal framework governing fraud, including legal elements, statutes, and regulations.
• Master practical skills in conducting fraud investigations, including evidence collection, interviewing techniques, and data analysis.
• Learn to design and implement effective fraud prevention and deterrence programs within public sector organizations.
• Build the confidence and knowledge necessary to successfully pass the Certified Fraud Examiner (CFE) exam.

This instructor-led, live training, conducted in US (either online or onsite), is tailored for intermediate-level cybersecurity professionals aiming to refine their understanding of GRC frameworks and apply these principles to secure, compliant operational workflows for government.

By the conclusion of this training, participants will be equipped to:

• Demonstrate a thorough understanding of cybersecurity governance, risk, and compliance components.
• Perform detailed risk assessments and design effective mitigation strategies.
• Enforce compliance measures and manage regulatory obligations.
• Develop and implement robust security policies and procedures.

This course provides a professional introduction to the newly enacted Accessibility Law, equipping developers with the practical skills necessary to design, develop, and maintain fully accessible applications. It begins with a contextual analysis of the law’s significance and implications, then transitions to hands-on coding practices, tooling, and testing techniques to ensure compliance and inclusivity for users with disabilities.

Embedded Linux and Yocto serve as a foundational build framework and development ecosystem for creating customized Linux distributions for embedded devices, a critical capability for government embedded systems.

This instructor-led, live training program (online or on-site) is designed for entry-level to intermediate embedded developers responsible for using Embedded Linux and the Yocto Project to build, customize, and deploy Linux-based systems on i.MX6 hardware platforms.

Upon completion of this training, participants will be capable of:

• Analyzing the architecture of embedded Linux systems on i.MX6 platforms, including bootloader, kernel, device tree, and root filesystem components
• Establishing a build environment using the Yocto Project (Poky and BitBake) for i.MX6 board configurations
• Building custom Linux images, deploying them to hardware, and executing user-space applications

Information security threats and adversarial tactics evolve continuously. The most effective defense mechanism is the rigorous implementation and management of security controls and industry best practices. Information security is also a critical expectation and regulatory requirement for clients, legislative bodies, and other stakeholders.

This training program is structured to prepare participants for the implementation of an Information Security Management System (ISMS) in accordance with ISO/IEC 27001. The objective is to provide a thorough understanding of ISMS best practices and to establish a framework for ongoing management and continuous improvement.

Upon completion of the training program, candidates are eligible to sit for the certification examination. Successful completion of the exam qualifies the candidate to apply for the “PECB Certified ISO/IEC 27001 Lead Implementer” credential, which validates the professional’s ability and practical knowledge to implement an ISMS in compliance with ISO/IEC 27001 requirements for government and public sector entities.

Eligible Participants

• Project managers and consultants involved in or responsible for ISMS implementation
• Expert advisors seeking to master ISMS implementation methodologies
• Individuals tasked with ensuring compliance with information security requirements within an organization
• Members of ISMS implementation teams

General Information

• Certification fees are included in the examination cost
• Training materials comprising over 450 pages of technical content and practical examples will be provided
• A certificate of participation awarding 31 CPD (Continuing Professional Development) credits will be issued
• In the event of an unsuccessful examination result, candidates may retake the exam within 12 months at no additional cost

Educational Approach

• The training program incorporates essay-based exercises, multiple-choice assessments, case studies, and best practices utilized in ISMS implementation.
• Participants are encouraged to collaborate and engage in peer discussions while completing quizzes and exercises.
• Exercises are derived from comprehensive case studies.
• The structure of the quizzes mirrors that of the official certification examination.

Learning Objectives

This training program is designed to enable participants to:

• Acquire a comprehensive understanding of the concepts, approaches, methods, and techniques used for the implementation and effective management of an ISMS
• Recognize the relationship between ISO/IEC 27001, ISO/IEC 27002, and other relevant standards and regulatory frameworks
• Understand the operational mechanics and processes of an ISMS based on ISO/IEC 27001
• Learn to interpret and apply the requirements of ISO/IEC 27001 within the specific operational context of an organization
• Gain the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an ISMS

Intended Audience

This program is designed for all personnel requiring a practical working knowledge of regulatory compliance and effective risk management for government operations.

Delivery Methodology

The training utilizes a blended instructional approach comprising the following components:

• Facilitated Professional Discussions
• Structured Presentations
• Analytical Case Studies
• Practical Real-World Scenarios

Program Objectives

Upon completion of the course, participants will be capable of the following:

Establishing a comprehensive understanding of core compliance elements, including domestic and international initiatives for managing associated regulatory risks for government entities.

Articulating strategies for organizations and teams to implement an effective compliance risk management framework aligned with public sector standards.

Detailing the duties of Compliance Officers and Money Laundering Reporting Officers, and explaining how these roles function within an organizational structure to ensure accountability.

Recognizing significant risk areas in financial crime, with specific focus on international operations, offshore jurisdictions, and high-net-worth client interactions relevant to government oversight.

This instructor-led live training, delivered in US (via online or on-site modalities), is designed for engineers intending to implement NetApp ONTAP.

Upon completion of this training, participants will be able to:

• Configure and administer an ONTAP 9.3 cluster (three-day duration).
• Implement data protection strategies utilizing Data Protection technologies (two-day duration).

This instructor-led, live training, conducted online or on-site, is intended for embedded engineers and system administrators tasked with developing, customizing, and deploying OpenBMC firmware for server management within government contexts.

This instructor-led live training program, offered in online or onsite formats, is tailored for hardware validation and system test engineers responsible for implementing, testing, and troubleshooting IPMI and sensor management on OpenBMC platforms for government applications.

This instructor-led, live Payment Card Industry Professional training in US (delivered online or on-site) offers a professional credential for practitioners seeking to demonstrate mastery of the PCI Data Security Standard (PCI DSS).

Upon completion of this program, participants will be equipped to:

• Comprehend the payment processing lifecycle and the PCI standards established for its protection.
• Identify the specific roles and responsibilities of entities participating in the payment industry.
• Gain comprehensive insight into the 12 PCI DSS requirements.
• Demonstrate proficiency in PCI DSS and its application to organizations involved in transaction processing.

In this instructor-led, live training in US, participants will acquire the technical skills necessary to establish an embedded Linux build environment utilizing the Yocto Project for government systems.

Upon successful completion, participants will be equipped to:

• Comprehend the foundational architectures of the Yocto Project build system, including the management of recipes, metadata, and layers.
• Compile Linux images and execute them within emulated environments for testing and validation.
• Enhance operational efficiency in the development of embedded Linux systems for government infrastructure.