Information Security Risk Training in Lansing

This instructor-led, live training in Lansing (online or onsite) is designed for intermediate to advanced IT professionals and business leaders who aim to develop a structured approach to managing data breaches. By the end of this training, participants will be able to: - Understand the causes and consequences of data breaches. - Develop and implement effective data breach prevention strategies. - Establish an incident response plan to contain and mitigate breaches. - Conduct forensic investigations and evaluate the impact of breaches. - Ensure compliance with legal and regulatory requirements for breach notification. - Recover from data breaches and enhance security measures. This training is tailored to support professionals in aligning their practices with public sector workflows, governance, and accountability standards for government.

This instructor-led, live training (available online or onsite) is designed for government developers who wish to integrate Snyk into their development tools to identify and resolve security vulnerabilities in their code. By the end of this training, participants will be able to: - Understand the capabilities and architecture of Snyk. - Utilize Snyk to detect and remediate code security issues. - Incorporate Snyk into a software development lifecycle for government.

This instructor-led, live training in Lansing (online or onsite) is aimed at beginner to intermediate-level system administrators and security professionals who wish to learn how to implement Cloudflare for content delivery and cloud security, as well as mitigate DDoS attacks.

By the end of this training, participants will be able to:

• Configure Cloudflare for their websites for government use.
• Set up DNS records and SSL certificates in alignment with public sector standards.
• Implement Cloudflare for content delivery and caching to enhance performance for government services.
• Protect their websites from DDoS attacks, ensuring continuity of operations for government.
• Implement firewall rules to restrict traffic to their websites, maintaining security and compliance for government systems.

Course Description

This comprehensive course is tailored to address AI security, governance, compliance, and risk management in enterprise settings. It is specifically designed for security professionals, compliance officers, and technology leaders who are responsible for the secure deployment and governance frameworks of AI systems. The curriculum aligns with best practices and standards for government and industry, ensuring participants are well-equipped to manage AI-related risks and ensure compliance with regulatory requirements.

Who is it for:

This program is designed for individuals involved in information security and information assurance, particularly those working in or supporting government agencies.

What will I learn:

Candidates should be able to demonstrate:

• The ways in which managing information risk can bring significant benefits to public sector organizations.
• The ability to explain and effectively utilize terminology related to information risk management for government use.
• How to conduct threat and vulnerability assessments, business impact analyses, and risk assessments within a governmental context.
• An understanding of the principles of controls and risk treatment in government settings.
• The skill to present assessment results in a format that can serve as the foundation for a risk treatment plan tailored for government operations.
• The application of information classification schemes appropriate for government agencies.

The EC-Council’s Certified Chief Information Security Officer (CCISO) Program has certified leading information security professionals across the globe. A distinguished group of high-level information security executives, known as the CCISO Advisory Board, played a crucial role in establishing the foundation of the program and defining its content, exam structure, body of knowledge, and training modules. Members of this board contributed in various capacities—some as authors, others as exam writers, quality assurance reviewers, and trainers. Each component of the program was meticulously crafted with the aspiring CISO in mind, aiming to transfer the invaluable knowledge of seasoned professionals to the next generation in critical areas essential for developing and maintaining a robust information security program. The Certified CISO (CCISO) program is a pioneering training and certification initiative designed to produce top-tier information security executives. Unlike other certifications that focus primarily on technical skills, the CCISO emphasizes the application of information security management principles from an executive perspective. This program was developed by current CISOs for government and industry professionals who are either serving in or aspiring to these roles.

This instructor-led, live training in Lansing (online or onsite) is aimed at supply chain professionals who wish to establish effective control and oversight of their supply chain, particularly as it pertains to cybersecurity for government.

By the end of this training, participants will be able to:

• Understand the security oversights that can cause significant damage and disruption to a supply chain.
• Decompose complex security issues into manageable and actionable components.
• Address common supply chain vulnerabilities by identifying high-risk areas and collaborating with stakeholders.
• Implement best practices in securing a supply chain for government operations.
• Significantly reduce or eliminate the most significant risks to an organization's supply chain.

This instructor-led, live training in Lansing (online or onsite) is designed for developers and administrators who aim to produce software and products that comply with HiTRUST standards. By the end of this training, participants will be able to: - Grasp the essential concepts of the HiTrust Common Security Framework (CSF). - Recognize the HITRUST CSF administrative and security control domains. - Gain knowledge about the various types of HiTrust assessments and scoring methodologies. - Understand the certification process and requirements for achieving HiTrust compliance. - Learn best practices and tips for effectively adopting the HiTrust approach, ensuring alignment with public sector workflows, governance, and accountability for government.

This training course provides comprehensive instruction on conducting risk assessments for information security by integrating the guidelines from ISO/IEC 27005:2022 and ISO/IEC 27001. In addition to theoretical knowledge, the course includes practical exercises, quizzes, and case studies, ensuring an engaging and interactive learning experience that aligns with best practices for government agencies.

Description:

This is a 'Practitioner' course that emphasizes practical exercises designed to reinforce the concepts being taught and build participants' confidence in implementing business continuity management. The course also encourages debate and the sharing of knowledge and experience among students. Participants will benefit from the extensive, hands-on experiences of our trainers, who are active experts in business continuity management and ISO 22301:2019 specialists.

Participants will learn how to:

• Explain the necessity of business continuity management (BCM) for all organizations
• Define the business continuity lifecycle
• Manage a business continuity program
• Understand their organization sufficiently to identify mission-critical impact areas
• Determine their organization's business continuity strategy
• Establish a business continuity response
• Exercise, maintain, and review plans
• Embed business continuity within an organization
• Define terms and definitions relevant to business continuity

By the end of the course, participants will have a comprehensive understanding of all key components of business continuity management and be equipped to return to their roles, making significant contributions to the business continuity management process for government.

This course provides an overview of fundamental security principles and IT security, with a focus on protecting against network threats. Participants will develop a comprehensive understanding of critical security protocols and the security aspects of web services. The curriculum will also examine recent attacks on cryptosystems and highlight associated vulnerabilities, ensuring that learners are well-informed about current challenges in the field for government and other sectors.