Enterprise Security Training in Annapolis

Description:

CISA® is the world-renowned and most popular certification for professionals working in the field of IS audit and IT risk consulting.

Our CISA course is an intense, highly competitive, and exam-focused training program designed to prepare delegates for success. With extensive experience delivering over 150+ CISA trainings globally, including in Europe, and training more than 1200+ CISA delegates, Govtra’s CISA training material has been developed in-house with the primary goal of ensuring CISA delegates pass the ISACA CISA® Exam. The training methodology emphasizes understanding CISA IS auditing concepts and practicing a large number of ISACA-released question banks from the past three years. Over time, CISA holders have been in high demand within renowned accounting firms, global banks, advisory, assurance, and internal audit departments.

Delegates may have significant experience in IT auditing, but their ability to solve CISA questionnaires will depend on their understanding of globally accepted IT assurance practices. The CISA exam is challenging due to the potential for closely competing answer choices, which tests candidates' knowledge of global IT auditing standards. To address these challenges, we provide the best trainers with extensive experience in delivering CISA training worldwide.

The Govtra CISA manual covers all exam-relevant concepts, case studies, and Q&A sessions across the five domains of CISA. Additionally, the trainer shares key supporting materials such as relevant CISA notes, question banks, a CISA glossary, videos, revision documents, exam tips, and CISA mind maps during the course.

Goal:

The ultimate goal is to pass your CISA examination on the first attempt.

Objectives:

• Apply the knowledge gained in a practical manner beneficial to your organization for government operations.
• Provide audit services in accordance with IT audit standards.
• Offer assurance on leadership and organizational structure and processes.
• Ensure assurance on the acquisition, development, testing, and implementation of IT assets.
• Guarantee assurance on IT operations, including service operations and third-party relationships.
• Provide assurance on the organization’s security policies, standards, procedures, and controls to ensure the confidentiality, integrity, and availability of information assets.

Target Audience:

This course is designed for finance/CPA professionals, IT professionals, internal and external auditors, information security, and risk consulting professionals working in both the public and private sectors.

This instructor-led, live training in Annapolis (online or onsite) is aimed at intermediate-level IT professionals who wish to enhance their skills in identifying and managing IT risk and implementing information systems controls, as well as prepare for the CRISC certification exam for government.

By the end of this training, participants will be able to:

• Understand the governance and risk management aspects of IT for government operations.
• Conduct IT risk assessments and implement appropriate risk responses within public sector environments.
• Design and implement information systems controls that align with governmental standards and best practices.
• Prepare effectively for the CRISC certification exam, ensuring readiness to apply these skills in a government context.

This instructor-led, live training in Annapolis (online or onsite) is aimed at intermediate to advanced IT professionals and business leaders who wish to develop a structured approach to handling data breaches for government.

By the end of this training, participants will be able to:

• Understand the causes and consequences of data breaches.
• Develop and implement data breach prevention strategies.
• Establish an incident response plan to contain and mitigate breaches.
• Conduct forensic investigations and assess the impact of breaches.
• Comply with legal and regulatory requirements for breach notification.
• Recover from data breaches and strengthen security postures.

This instructor-led, live training in Annapolis (online or onsite) is aimed at developers who wish to integrate Snyk into their development tools to identify and resolve security vulnerabilities in their code for government projects.

By the end of this training, participants will be able to:

• Comprehend the features and architecture of Snyk.
• Utilize Snyk to detect and remediate code security issues.
• Incorporate Snyk into a software development lifecycle for government applications.

This instructor-led, live training in Annapolis (online or onsite) is aimed at beginner to intermediate-level system administrators and security professionals who wish to learn how to implement Cloudflare for content delivery and cloud security, as well as mitigate DDoS attacks.

By the end of this training, participants will be able to:

• Configure Cloudflare for their websites for government use.
• Set up DNS records and SSL certificates in alignment with public sector standards.
• Implement Cloudflare for content delivery and caching to enhance performance for government services.
• Protect their websites from DDoS attacks, ensuring continuity of operations for government.
• Implement firewall rules to restrict traffic to their websites, maintaining security and compliance for government systems.

Course Description

This comprehensive course is designed to address AI security, governance, compliance, and risk management for government implementations. It is tailored for security professionals, compliance officers, and technology leaders responsible for the secure deployment and governance frameworks of AI systems within public sector organizations.

This course is designed to enhance organizational resilience against various threats, ensuring that entities can respond effectively to incidents, maintain the continuity of critical operations, and protect their interests for government and other public sector organizations.

Who is it For:

This certification is designed for individuals involved in information security and information assurance. It is also relevant to those who require an understanding of Business Continuity Management, particularly those engaged in the areas of information security and information assurance.

What Will I Learn:

Candidates will be able to demonstrate:

• The role and necessity of business continuity management within an organization
• The stages of the business continuity management life cycle
• The key elements of a business continuity management program
• The importance of risk assessment in business continuity management
• The various options for developing a business continuity management strategy
• How to prepare and develop plans for responding to business continuity challenges
• The need for regular testing, maintenance, and review of these plans
• The necessity of fostering business continuity management awareness throughout the organization

Who is it for:

This program is designed for security professionals seeking to understand the technical and business dimensions of their field, as well as individuals aspiring to work in security architecture. It is particularly relevant for government employees and contractors looking to enhance their expertise.

• System Administrators who wish to transition into roles as security architects
• Technical architects interested in moving into the field of security architecture

This certificate also provides a complementary certification for those who have been awarded or are pursuing Certified Cloud Professional (CCP) status in Information Assurance.

What will I learn:

Candidates should be able to:

• Describe the business environment and the information risks that apply to government systems.
• Explain and implement security design principles for government applications.
• Identify information risks associated with potential solution architectures in a government context.
• Design alternative architectures or countermeasures to mitigate identified information risks within government systems.
• Ensure that proposed architectures and countermeasures effectively address identified information risks for government operations.
• Apply standard security techniques and architectures to manage security risks in government environments.
• Develop new architectures that address the risks posed by emerging technologies and evolving business practices for government.
• Provide consultancy and advice to explain Information Assurance and architectural challenges specific to government systems.
• Configure ICT systems in compliance with their approved security architectures for government use.

Who is it for:

This training is designed for individuals involved in information security and information assurance roles within government agencies and organizations.

What will I learn:

Candidates should be able to demonstrate the following skills and knowledge:

• The ways in which effective management of information risk can bring significant benefits to government operations.
• The ability to explain and utilize information risk management terminology for government applications.
• How to conduct threat and vulnerability assessments, business impact analyses, and risk assessments for government environments.
• The principles of controls and risk treatment in the context of public sector workflows.
• The skills to present assessment results in a format that can serve as the foundation for a comprehensive risk treatment plan for government use.
• The application of information classification schemes appropriate for government agencies.

The EC-Council’s Certified Chief Information Security Officer (CCISO) Program has certified leading information security professionals across the globe. A distinguished group of high-level information security executives, known as the CCISO Advisory Board, played a crucial role in shaping the foundation of the program. They outlined the content to be covered by the exam, body of knowledge, and training. Members of the Board contributed in various capacities—some as authors, others as exam writers, quality assurance reviewers, and trainers. Each component of the program was designed with the aspiring CISO in mind, aiming to transfer the expertise of seasoned professionals to the next generation, particularly in areas critical for the development and maintenance of a robust information security program.

The Certified Chief Information Security Officer (CCISO) program is the first of its kind, offering training and certification aimed at producing top-tier information security executives. The CCISO program does not focus solely on technical knowledge but emphasizes the application of information security management principles from an executive perspective. Developed by current CISOs for government and aspiring CISOs, this program ensures that participants are well-equipped to lead effective information security strategies.

The Certified Information Systems Security Professional (CISSP) certification, issued by (ISC)², is a globally recognized credential for senior information security professionals. It validates mastery across eight security domains and establishes credibility in roles such as chief information security officer (CISO), security engineer, and senior security manager.

This instructor-led, live training (online or onsite) is aimed at intermediate to advanced-level security practitioners who wish to gain both conceptual mastery and practical readiness for successfully passing the CISSP certification exam on the first attempt, while applying principles in real-world organizational contexts. The training is tailored to support professionals working within government agencies and other public sector organizations.

By the end of this training, participants will be able to:

• Understand and apply the eight CISSP domains in security governance and practice for government.
• Develop, assess, and strengthen organizational security policies, architectures, and controls.
• Design and implement security solutions aligned with legal, compliance, and business objectives.
• Interpret and answer exam-style CISSP questions with confidence and strategy.

Format of the Course

• Lectures and guided domain walkthroughs.
• Practice questions, scenario-based discussions, and quizzes.
• Hands-on labs, case studies, and group exercises.

Course Customization Options

• To request customized domain focus or extended exam review sessions, please contact us to arrange.

A Certified Information Systems Security Professional (CISSP) is an information assurance professional who defines the architecture, design, management, and/or controls that assure the security of business environments. The extensive breadth of knowledge and the experience required to pass the exam distinguish a CISSP. This credential demonstrates a globally recognized level of competence provided by the (ISC)2® Common Body of Knowledge (CBK), which covers critical topics in security today, including cloud computing, mobile security, application development security, risk management, and more.

This course is designed to help participants review the 10 domains of the information security practices. It also serves as a robust learning tool for mastering concepts and topics related to all aspects of information systems security, specifically tailored for government professionals.

Objectives:

• To review the main topics of the CISSP CBK (Common Body of Knowledge).
• To prepare participants for the CISSP examination.

Description:

This class is designed as an intensive and rigorous exam preparation for ISACA’s Certified Information Systems Auditor (CRISC) Examination. The course will cover the latest four (4) domains of ISACA’s CRISC syllabus, with a strong emphasis on exam readiness. Official ISACA CRISC Review Manual and Question, Answer, and Explanation (Q&A&E) supplements will also be provided to participants. The Q&A&E is particularly effective in helping delegates understand the ISACA style of questions, the type of answers ISACA expects, and it aids in rapid memory assimilation of the material.

The technical skills and practices that ISACA promotes and evaluates within the CRISC certification are essential for success in the field. Obtaining the CRISC certification demonstrates your expertise and commitment to the profession. With a growing demand for professionals with risk and control expertise, ISACA’s CRISC has become the preferred certification program by individuals and organizations around the world. The CRISC certification signifies a dedication to serving an enterprise and the chosen profession with distinction, particularly valuable in the public sector.

Objectives:

• To help you pass the CRISC examination on your first attempt.
• Possessing this certification will signify your commitment to serving an enterprise with distinction, especially for government roles.
• The growing demand for professionals with risk and control skills will allow holders of this certification to command better positions and salaries, including those in public sector organizations.

You will learn:

• To assist enterprises in achieving business objectives by designing, implementing, monitoring, and maintaining risk-based, efficient, and effective IS controls, particularly for government operations.
• The technical skills and practices that CRISC promotes, which are the building blocks of success in the field, including those relevant to public sector workflows.

This instructor-led, live training in Annapolis (online or onsite) is aimed at supply chain professionals who wish to establish effective control and oversight of their supply chain, particularly as it pertains to cybersecurity for government.

By the end of this training, participants will be able to:

• Understand the security oversights that can cause significant damage and disruption to a supply chain.
• Decompose complex security issues into manageable and actionable components.
• Address common supply chain vulnerabilities by identifying high-risk areas and collaborating with stakeholders.
• Implement best practices in securing a supply chain for government operations.
• Significantly reduce or eliminate the most significant risks to an organization's supply chain.

The RESILIA course for government begins by outlining the purpose, key terms, and the distinction between resilience and security, as well as the benefits of implementing cyber resilience. It introduces risk management practices and the essential activities required to address risks and opportunities effectively. The course then explains the relevance of common management standards and best practice frameworks in achieving cyber resilience for government operations. Further, it identifies the cyber resilience processes, including their associated control objectives, interactions, and activities that should be aligned with corresponding IT service management (ITSM) activities. In the final segment of the course, it details the segregation of duties and dual controls related to cyber resilience roles and responsibilities within a public sector context.

This instructor-led, live training in Annapolis (online or onsite) is aimed at developers and administrators who wish to produce software and products that are HiTRUST compliant for government use.

By the end of this training, participants will be able to:

• Comprehend the core principles of the HiTrust CSF (Common Security Framework).
• Recognize the administrative and security control domains within the HITRUST CSF.
• Gain knowledge about the various types of HiTrust assessments and scoring methodologies.
• Understand the certification process and requirements for achieving HiTrust compliance.
• Acquire best practices and strategies for implementing the HiTrust framework effectively.

Description:

This course is the non-certification version of the "CISA - Certified Information Systems Auditor" course. CISA® is a world-renowned and highly sought-after certification for professionals working in the field of IS audit and IT risk consulting.

Objectives:

• Apply the knowledge gained to benefit your organization, particularly in alignment with public sector workflows and governance.
• Provide audit services in accordance with established IT audit standards, ensuring compliance and accountability for government operations.
• Offer assurance on leadership and organizational structure and processes, enhancing transparency and efficiency within governmental frameworks.
• Ensure the reliability of acquisition, development, testing, and implementation of IT assets, supporting robust public sector technology management.
• Provide comprehensive assurance on IT operations, including service operations and third-party relationships, to maintain high standards of performance for government services.
• Offer assurance on an organization’s security policies, standards, procedures, and controls to ensure the confidentiality, integrity, and availability of information assets, particularly in a governmental context.

Target Audience:

This course is designed for finance/CPA professionals, IT professionals, internal and external auditors, information security specialists, and risk consulting professionals who are involved in ensuring the integrity and efficiency of systems and processes for government operations.

This training course provides comprehensive instruction on conducting risk assessments for information security by integrating the guidelines from ISO/IEC 27005:2022 and ISO/IEC 27001. In addition to theoretical knowledge, the course includes practical exercises, quizzes, and case studies, making it an engaging and effective learning experience for government professionals.

Description:

This is a 'Practitioner' course that emphasizes practical exercises designed to reinforce the concepts being taught and to build delegates’ confidence in implementing business continuity management. The course also encourages debate and the sharing of knowledge and experience among participants. Delegates will benefit from the practical and extensive experiences of Govtra’s trainers, who are practicing business continuity management and ISO 22301:2019 specialists.

Delegates will learn how to:

• Explain the need for business continuity management (BCM) in all organizations
• Define the business continuity lifecycle
• Conduct business continuity program management
• Understand their organization sufficiently to identify mission-critical impact areas
• Determine their organization's business continuity strategy
• Establish a business continuity response
• Exercise, maintain, and review plans
• Embed business continuity in an organization
• Define terms and definitions appropriate to business continuity

By the end of the course, delegates will have a detailed understanding of all key components of business continuity management and be able to return to their work for government, making a significant contribution to the business continuity management process.

This instructor-led, live training in Annapolis (online or onsite) is aimed at security engineers who wish to utilize IBM Qradar SIEM to address critical security use cases for government.

By the end of this training, participants will be able to:

• Achieve comprehensive visibility into enterprise data across both on-premises and cloud environments.
• Automate security intelligence processes to effectively hunt threats and mitigate risks.
• Detect, identify, and prioritize potential threats to enhance the security posture of government operations.

This training course is essential for individuals seeking to become Business Continuity Specialists. By obtaining this certification, you validate your expertise in the Business Continuity Process and demonstrate to your organization that you are fully capable of implementing best practices.

To achieve this certification, you must complete the Business Continuity Practitioner training course offered by Govtra for government professionals. Following the training, you will schedule your exam through SECO.

The target audience for government in Annapolis includes network server administrators, firewall administrators, information security analysts, system administrators, and risk assessment professionals.

This course will assist you in:

• Deploying high-availability email protection against dynamic, rapidly evolving threats affecting your organization for government operations
• Acquiring advanced career skills focused on enterprise security for government environments

Objectives

Upon completion of this course, you should be able to:

• Describe and administer the Cisco Email Security Appliance (ESA) in a government context
• Manage sender and recipient domains effectively for government workflows
• Control spam using Talos SenderBase and anti-spam technologies for government communications
• Utilize anti-virus and outbreak filters to enhance security for government email systems
• Implement mail policies to align with government standards and practices
• Use content filters to ensure compliance with government regulations
• Apply message filters to enforce email policies within the public sector
• Prevent data loss in accordance with government guidelines
• Conduct LDAP queries for efficient user management in government networks
• Authenticate Simple Mail Transfer Protocol (SMTP) sessions to ensure secure communication for government agencies
• Authenticate email to maintain integrity and confidentiality for government users
• Encrypt email to protect sensitive information within government operations
• Use system quarantines and delivery methods to manage potential threats in a government setting
• Perform centralized management using clusters for streamlined governance and accountability in government environments
• Test and troubleshoot systems to ensure reliability and security for government operations

This course provides a comprehensive overview of security fundamentals, including key aspects of IT Security, with a focus on protecting against network threats. Participants will develop an understanding of critical security protocols and the essential security principles governing web services. The curriculum also examines recent attacks on cryptosystems and highlights associated vulnerabilities to enhance preparedness for government.

The training takes the form of a workshop supplemented with substantive knowledge. Classes are based on the official CISA certificate framework. During the workshop, case studies will be discussed to address specific issues. The sessions will be conducted in English (with the option of Polish upon request) and will use the ISACA handbook in English.

CISA Exam Material Scope:

• Information System Auditing Process (21%)
• Governance and Management of IT (17%)
• Information Systems Acquisition, Development, and Implementation (12%)
• Information Systems Operation and Business Resilience (23%)
• Protection of Information Assets (27%)

Duration of the exam: 4 hours
Type: multiple-choice test
Volume: 200 questions

List of requirements that you must meet to claim the CISA qualification:

1. Pass the CISA exam. The passing score is a mark of 450 or higher.
2. Adhere to the ISACA Code of Professional Ethics.
3. Pledge to comply with the CISA Continuing Professional Education Policy.
4. Acquire at least 5 years of professional experience in information systems auditing, control, or security work.
5. Comply with Information Systems Auditing Standards.

If you have passed the exam and believe that you meet these requirements, you can begin the application for certification. Visit the CISA certification page to apply. There is a $50 fee for this application.

In addition, there is an annual fee required to maintain your certification after it has been granted. The fee is $40 per year for ISACA members and $75 for non-members. This ensures ongoing compliance and professional development for government professionals in the field of information systems auditing.