Security Planning and Design Training Course

This instructor-led live training session, available online or in-person, targets intermediate-level IT auditors dedicated to the effective integration of AI tools in their audit practices for government.

Upon completion of this program, participants will be equipped to:

• Comprehend fundamental AI principles and their specific applications within IT audit frameworks.
• Deploy AI technologies, including machine learning, NLP, and RPA, to optimize audit performance, accuracy, and coverage.
• Conduct risk assessments leveraging AI tools to facilitate continuous monitoring and proactive risk mitigation.
• Embed AI capabilities into audit planning, execution, and reporting phases to strengthen the overall integrity of IT audits.

Course Description

A comprehensive course focused on AI security, governance, compliance, and risk management for enterprise implementations. Designed for security professionals, compliance officers, and technology leaders responsible for secure AI deployment and governance frameworks.

This specialized course in US reviews the TCU’s legal frameworks, procedural duties, and jurisprudence applicable to professional councils. It prepares advanced practitioners to prevent common irregularities, design robust internal controls, and manage compliant accountability submissions and responses for government oversight purposes.

This instructor-led, live training in US (delivered online or onsite) is designed for advanced-level security analysts aiming to enhance their expertise in utilizing advanced Micro Focus ArcSight ESM content. The focus is on improving an organization's capability to detect, respond to, and mitigate cyber threats with greater precision and velocity, supporting critical missions for government stakeholders.

Upon completion of this training, participants will be proficient in:

• Optimizing the deployment of Micro Focus ArcSight ESM to strengthen monitoring and threat detection capabilities for government use.
• Constructing and managing advanced ArcSight variables to refine event streams for heightened analytical precision.
• Developing and implementing ArcSight lists and rules to ensure effective event correlation and alerting.
• Applying advanced correlation techniques to identify complex threat patterns and reduce the incidence of false positives.

Target Audience:

Individuals involved in the domains of information security and information assurance, particularly those for government contexts.

Learning Outcomes:

Candidates should be able to demonstrate:

• How the management of information risk generates significant operational benefits.
• How to accurately interpret and utilize information risk management terminology.
• How to conduct threat and vulnerability assessments, business impact analyses, and risk assessments.
• The principles governing controls and risk treatment.
• How to present results in a format that serves as the basis for a risk treatment plan.
• The application of information classification schemes.

This instructor-led training, conducted in US (either online or onsite), targets security managers aiming to acquire basic to intermediate skills in CCTV surveillance and management for government applications.

By the end of this session, participants will be able to:

• Recognize the different types of CCTV systems and understand their operational benefits and features.
• Comprehend the technical requirements for cabling and system configuration.
• Install, configure, and administer CCTV systems effectively.

This instructor-led, live training in US (online or onsite) is intended for advanced-level professionals seeking to develop a comprehensive understanding of fraud examination concepts and prepare for the Certified Fraud Examiner (CFE) exam.

By the conclusion of this training, participants will be able to:

• Acquire comprehensive knowledge of fraud examination principles and procedural frameworks.
• Identify, investigate, and mitigate various types of financial fraud schemes.
• Understand the legal landscape governing fraud, including statutory elements, applicable laws, and regulatory compliance.
• Develop practical competencies in executing fraud investigations, including evidence preservation, interviewing techniques, and data analysis.
• Design and implement effective fraud prevention and deterrence programs for government entities and organizations.
• Build the confidence and subject matter expertise required to successfully pass the Certified Fraud Examiner (CFE) exam.

This instructor-led, live training, conducted in US (either online or onsite), is tailored for intermediate-level cybersecurity professionals aiming to refine their understanding of GRC frameworks and apply these principles to secure, compliant operational workflows for government.

By the conclusion of this training, participants will be equipped to:

• Demonstrate a thorough understanding of cybersecurity governance, risk, and compliance components.
• Perform detailed risk assessments and design effective mitigation strategies.
• Enforce compliance measures and manage regulatory obligations.
• Develop and implement robust security policies and procedures.

This instructor-led, live training, delivered online or onsite, targets senior executives seeking to comprehend data sovereignty principles and develop compliant data management strategies for government and public sector operations.

Participants will be able to define data sovereignty, identify pertinent legislation, assess compliance risks, and implement governance frameworks for cross-border data management.

This course provides a professional introduction to the newly enacted Accessibility Law, equipping developers with the practical skills necessary to design, develop, and maintain fully accessible applications. It begins with a contextual analysis of the law’s significance and implications, then transitions to hands-on coding practices, tooling, and testing techniques to ensure compliance and inclusivity for users with disabilities.

Information security threats and adversarial tactics evolve continuously. The most effective defense mechanism is the rigorous implementation and management of security controls and industry best practices. Information security is also a critical expectation and regulatory requirement for clients, legislative bodies, and other stakeholders.

This training program is structured to prepare participants for the implementation of an Information Security Management System (ISMS) in accordance with ISO/IEC 27001. The objective is to provide a thorough understanding of ISMS best practices and to establish a framework for ongoing management and continuous improvement.

Upon completion of the training program, candidates are eligible to sit for the certification examination. Successful completion of the exam qualifies the candidate to apply for the “PECB Certified ISO/IEC 27001 Lead Implementer” credential, which validates the professional’s ability and practical knowledge to implement an ISMS in compliance with ISO/IEC 27001 requirements for government and public sector entities.

Eligible Participants

• Project managers and consultants involved in or responsible for ISMS implementation
• Expert advisors seeking to master ISMS implementation methodologies
• Individuals tasked with ensuring compliance with information security requirements within an organization
• Members of ISMS implementation teams

General Information

• Certification fees are included in the examination cost
• Training materials comprising over 450 pages of technical content and practical examples will be provided
• A certificate of participation awarding 31 CPD (Continuing Professional Development) credits will be issued
• In the event of an unsuccessful examination result, candidates may retake the exam within 12 months at no additional cost

Educational Approach

• The training program incorporates essay-based exercises, multiple-choice assessments, case studies, and best practices utilized in ISMS implementation.
• Participants are encouraged to collaborate and engage in peer discussions while completing quizzes and exercises.
• Exercises are derived from comprehensive case studies.
• The structure of the quizzes mirrors that of the official certification examination.

Learning Objectives

This training program is designed to enable participants to:

• Acquire a comprehensive understanding of the concepts, approaches, methods, and techniques used for the implementation and effective management of an ISMS
• Recognize the relationship between ISO/IEC 27001, ISO/IEC 27002, and other relevant standards and regulatory frameworks
• Understand the operational mechanics and processes of an ISMS based on ISO/IEC 27001
• Learn to interpret and apply the requirements of ISO/IEC 27001 within the specific operational context of an organization
• Gain the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an ISMS

Intended Audience

This program is designed for all personnel requiring a practical working knowledge of regulatory compliance and effective risk management for government operations.

Delivery Methodology

The training utilizes a blended instructional approach comprising the following components:

• Facilitated Professional Discussions
• Structured Presentations
• Analytical Case Studies
• Practical Real-World Scenarios

Program Objectives

Upon completion of the course, participants will be capable of the following:

Establishing a comprehensive understanding of core compliance elements, including domestic and international initiatives for managing associated regulatory risks for government entities.

Articulating strategies for organizations and teams to implement an effective compliance risk management framework aligned with public sector standards.

Detailing the duties of Compliance Officers and Money Laundering Reporting Officers, and explaining how these roles function within an organizational structure to ensure accountability.

Recognizing significant risk areas in financial crime, with specific focus on international operations, offshore jurisdictions, and high-net-worth client interactions relevant to government oversight.

This instructor-led, live Payment Card Industry Professional training in US (delivered online or on-site) offers a professional credential for practitioners seeking to demonstrate mastery of the PCI Data Security Standard (PCI DSS).

Upon completion of this program, participants will be equipped to:

• Comprehend the payment processing lifecycle and the PCI standards established for its protection.
• Identify the specific roles and responsibilities of entities participating in the payment industry.
• Gain comprehensive insight into the 12 PCI DSS requirements.
• Demonstrate proficiency in PCI DSS and its application to organizations involved in transaction processing.