Wazuh: Open-Source Security Monitoring Replacing Splunk and Sentinel Training Course

Course Description

A comprehensive course focused on AI security, governance, compliance, and risk management for enterprise implementations. Designed for security professionals, compliance officers, and technology leaders responsible for secure AI deployment and governance frameworks.

This instructor-led, live training conducted in US (online or onsite) is intended for advanced-level professionals aiming to gain a comprehensive understanding of fraud examination concepts and prepare for the Certified Fraud Examiner (CFE) exam, with relevance for government agencies.

Upon completion of this training, participants will be able to:

• Acquire comprehensive knowledge of fraud examination principles and the examination process.
• Develop the capability to identify, investigate, and prevent diverse financial fraud schemes.
• Understand the legal framework governing fraud, including legal elements, statutes, and regulations.
• Master practical skills in conducting fraud investigations, including evidence collection, interviewing techniques, and data analysis.
• Learn to design and implement effective fraud prevention and deterrence programs within public sector organizations.
• Build the confidence and knowledge necessary to successfully pass the Certified Fraud Examiner (CFE) exam.

This instructor-led, live training, conducted in US (either online or onsite), is tailored for intermediate-level cybersecurity professionals aiming to refine their understanding of GRC frameworks and apply these principles to secure, compliant operational workflows for government.

By the conclusion of this training, participants will be equipped to:

• Demonstrate a thorough understanding of cybersecurity governance, risk, and compliance components.
• Perform detailed risk assessments and design effective mitigation strategies.
• Enforce compliance measures and manage regulatory obligations.
• Develop and implement robust security policies and procedures.

This course provides a professional introduction to the newly enacted Accessibility Law, equipping developers with the practical skills necessary to design, develop, and maintain fully accessible applications. It begins with a contextual analysis of the law’s significance and implications, then transitions to hands-on coding practices, tooling, and testing techniques to ensure compliance and inclusivity for users with disabilities.

Gitea is a lightweight, open-source, self-hosted Git service offering repository management, code review, issue tracking, and CI/CD integration. It is an increasingly preferred alternative to GitHub and GitLab.com for teams requiring full sovereignty over source code, free from third-party service terms or data export restrictions.

GitLab Self-Managed is the on-premises deployment of the complete GitLab DevSecOps platform, encompassing source code management, CI/CD, container registry, security scanning, and monitoring. It represents a premier option for government and public sector organizations seeking comprehensive tooling capabilities without reliance on SaaS vendors or the risk of data exiting controlled networks.

Information security threats and adversarial tactics evolve continuously. The most effective defense mechanism is the rigorous implementation and management of security controls and industry best practices. Information security is also a critical expectation and regulatory requirement for clients, legislative bodies, and other stakeholders.

This training program is structured to prepare participants for the implementation of an Information Security Management System (ISMS) in accordance with ISO/IEC 27001. The objective is to provide a thorough understanding of ISMS best practices and to establish a framework for ongoing management and continuous improvement.

Upon completion of the training program, candidates are eligible to sit for the certification examination. Successful completion of the exam qualifies the candidate to apply for the “PECB Certified ISO/IEC 27001 Lead Implementer” credential, which validates the professional’s ability and practical knowledge to implement an ISMS in compliance with ISO/IEC 27001 requirements for government and public sector entities.

Eligible Participants

• Project managers and consultants involved in or responsible for ISMS implementation
• Expert advisors seeking to master ISMS implementation methodologies
• Individuals tasked with ensuring compliance with information security requirements within an organization
• Members of ISMS implementation teams

General Information

• Certification fees are included in the examination cost
• Training materials comprising over 450 pages of technical content and practical examples will be provided
• A certificate of participation awarding 31 CPD (Continuing Professional Development) credits will be issued
• In the event of an unsuccessful examination result, candidates may retake the exam within 12 months at no additional cost

Educational Approach

• The training program incorporates essay-based exercises, multiple-choice assessments, case studies, and best practices utilized in ISMS implementation.
• Participants are encouraged to collaborate and engage in peer discussions while completing quizzes and exercises.
• Exercises are derived from comprehensive case studies.
• The structure of the quizzes mirrors that of the official certification examination.

Learning Objectives

This training program is designed to enable participants to:

• Acquire a comprehensive understanding of the concepts, approaches, methods, and techniques used for the implementation and effective management of an ISMS
• Recognize the relationship between ISO/IEC 27001, ISO/IEC 27002, and other relevant standards and regulatory frameworks
• Understand the operational mechanics and processes of an ISMS based on ISO/IEC 27001
• Learn to interpret and apply the requirements of ISO/IEC 27001 within the specific operational context of an organization
• Gain the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an ISMS

This instructor-led, live training session in US (available online or onsite) is intended for intermediate to advanced DevOps engineers and system administrators responsible for deploying and managing self-hosted Kubernetes clusters for government use without reliance on commercial cloud dependencies.

Upon completion, participants will be capable of: deploying production-ready Kubernetes clusters using kubeadm on bare-metal or virtual machines; configuring high-availability control planes and etcd clusters; implementing container networking and storage for self-managed environments; and establishing monitoring and observability using self-hosted solutions.

Intended Audience

This program is designed for all personnel requiring a practical working knowledge of regulatory compliance and effective risk management for government operations.

Delivery Methodology

The training utilizes a blended instructional approach comprising the following components:

• Facilitated Professional Discussions
• Structured Presentations
• Analytical Case Studies
• Practical Real-World Scenarios

Program Objectives

Upon completion of the course, participants will be capable of the following:

Establishing a comprehensive understanding of core compliance elements, including domestic and international initiatives for managing associated regulatory risks for government entities.

Articulating strategies for organizations and teams to implement an effective compliance risk management framework aligned with public sector standards.

Detailing the duties of Compliance Officers and Money Laundering Reporting Officers, and explaining how these roles function within an organizational structure to ensure accountability.

Recognizing significant risk areas in financial crime, with specific focus on international operations, offshore jurisdictions, and high-net-worth client interactions relevant to government oversight.

This live, instructor-led training, available online or onsite, is designed for cloud professionals responsible for designing and implementing multi-cloud architectures that mitigate vendor lock-in and ensure data sovereignty.

Upon completion, participants will be equipped to identify vendor lock-in risks, design portable architectures, implement data sovereignty controls, and leverage cloud-agnostic tools.

In this instructor-led, live training in US (available online or on-site), participants will gain the competencies necessary to utilize ONAP for the automation of networking services, supporting efficient public sector operations.

By the end of this training, participants will be prepared to:

• Understand, install, and configure the various components of the ONAP ecosystem to ensure operational readiness.
• Execute real-time, policy-driven orchestration and automation of physical and virtual network functions in accordance with established governance frameworks.
• Design, create, orchestrate, and monitor VNFs, SDNs, and other network services to meet service delivery requirements.
• Manage the entire networking lifecycle efficiently through a software-driven approach that promotes transparency and accountability.
• Develop, deploy, and scale network infrastructure using the latest open-source technologies and practices appropriate for government use.

This instructor-led, live training in US (available online or onsite) is tailored for network engineers and infrastructure specialists seeking to utilize SONiC and ONL for the deployment and management of open network infrastructure on white-box switches.

Upon completion, participants will demonstrate proficiency in understanding SONiC and ONL architectures, deploying open-source network operating systems on white-box hardware, configuring advanced networking features, and implementing monitoring and automation solutions for government environments.

This instructor-led, live Payment Card Industry Professional training in US (delivered online or on-site) offers a professional credential for practitioners seeking to demonstrate mastery of the PCI Data Security Standard (PCI DSS).

Upon completion of this program, participants will be equipped to:

• Comprehend the payment processing lifecycle and the PCI standards established for its protection.
• Identify the specific roles and responsibilities of entities participating in the payment industry.
• Gain comprehensive insight into the 12 PCI DSS requirements.
• Demonstrate proficiency in PCI DSS and its application to organizations involved in transaction processing.