Information System Security Training in District of Columbia

This instructor-led, live training in District of Columbia (online or onsite) is designed for intermediate-level network administrators for government agencies seeking to acquire the essential skills necessary to manage, administer, monitor, and maintain Fortinet security systems.

Upon completion of this training, participants will be able to:

• Configure and manage FortiGate firewalls.
• Monitor network traffic and manage incidents with FortiAnalyzer.
• Automate tasks and manage policies through FortiManager.
• Apply preventive maintenance strategies and troubleshoot network issues.

This instructor-led, live training session, conducted at District of Columbia (online or onsite), is intended for entry-level network administrators aiming to leverage the FortiGate 1100E to effectively manage and secure network environments in compliance with organizational standards.

Upon completion of this training, participants will be capable of:

• Comprehending the foundational architecture and functional attributes of the FortiGate 1100E.
• Implementing the FortiGate 1100E within diverse network configurations.
• Executing practical configuration and administrative tasks through hands-on instruction.
• Analyzing security policies, Network Address Translation (NAT), and Virtual Private Network (VPN) protocols.
• Monitoring system health and performing routine maintenance of the FortiGate 1100E.

This instructor-led live training delivered in District of Columbia (online or onsite) is designed to assist participants in preparing for the CompTIA PenTest+ certification exam.

The curriculum covers the fundamental principles of penetration testing and provides practical experience with various assessment tools and methodologies. Participants will learn to identify network vulnerabilities, simulate the exploitation of security weaknesses, and recommend appropriate remediation strategies.

This instructor-led, live training course in District of Columbia (available online or on-site) is designed for intermediate-level network administrators seeking to manage and secure government networks using FortiGate firewalls.

Upon completion of this training, participants will be able to:

• Assess FortiGate features and functionalities, particularly those introduced or enhanced in version 7.4.
• Configure and administer FortiGate devices and implement advanced security features.
• Deploy and manage advanced security measures such as IPS, antivirus, web filtering, and threat management.
• Monitor network activities, analyze logs, and generate reports for auditing and compliance purposes.

This instructor-led, live training conducted in District of Columbia (online or on-site) is designed for intermediate-level technical professionals who require a deeper understanding of the technical aspects and functionalities of Fortinet’s product line to effectively recommend, procure, and implement Fortinet security solutions for government and other organizational needs.

Upon completion of this training, participants will be equipped to:

• Acquire detailed knowledge of Fortinet’s advanced security solutions and product suite.
• Comprehend the technical specifications, benefits, and deployment contexts for each core Fortinet product.
• Configure, administer, and resolve issues with Fortinet solutions across various operational environments.
• Leverage Fortinet products to address complex security challenges and compliance requirements.

In CISSP training, students learn how to design systems that protect data confidentiality, integrity, and availability. The CISSP course provides the skills necessary to design, build, and maintain a secure business environment for government and other entities. The course also covers industry best practices and essential knowledge required to pass the CISSP certification exam.

This instructor-led, live training conducted in District of Columbia (online or onsite) is designed for entry-level technical professionals seeking to acquire knowledge of the Security Fabric and its adaptation to address the cybersecurity imperatives of organizations.

Upon completion of this training, participants will be equipped to:

• Analyze the historical development of cybersecurity and its influence on current protective technologies.
• Apply Fortinet products to mitigate specific categories of cyber threats and malicious attacks.
• Evaluate the integration and automation features of Fortinet solutions to facilitate a coordinated response to security incidents.

This instructor-led, live training is conducted in District of Columbia (either online or on-site) and is intended for security professionals seeking to develop proficiency in troubleshooting Palo Alto Networks’ next-generation firewalls.

By the conclusion of this training, participants will be equipped to:

• Comprehend the architectural design of the next-generation firewall.
• Investigate and resolve networking issues utilizing firewall-specific tools.
• Analyze advanced logs to resolve operational scenarios.

This instructor-led, live training, conducted either online or onsite, is designed for entry-level network security professionals who require instruction in cybersecurity concepts and the assessment of the current global threat landscape for government applications.

Upon completion, participants will be equipped to:

• Assess the current global threat landscape and identify key cyber adversary categories.
• Recognize primary malware types and understand the operational mechanics of cyber attacks.
• Comprehend the fundamentals of network security and the criticality of a layered defense approach.
• Review the Fortinet Security Fabric and its role in addressing modern cybersecurity challenges.

This instructor-led, live training in District of Columbia (online or onsite) is designed for intermediate-level network and security professionals seeking to proficiently implement, administer, and safeguard SD-WAN solutions for government operations.

Upon completion of this training, participants will be able to:

• Comprehend the foundational concepts, operational benefits, and associated challenges of SD-WAN technologies.
• Develop an SD-WAN architecture aligned with institutional requirements and execute the deployment of SD-WAN solutions effectively.
• Establish and oversee security protocols within an SD-WAN environment.
• Monitor, administer, and resolve issues in SD-WAN configurations.

This instructor-led, live training program, conducted in District of Columbia (either online or onsite), is designed for intermediate-level network and security professionals responsible for managing and securing networks utilizing Fortigate 600E equipment. The curriculum places specific emphasis on HA configurations to ensure enhanced reliability and performance.

Upon completion of this training, participants will be able to:

• Understand the technical features, specifications, and operating principles of the Fortigate 600E firewall.
• Perform the initial setup of the Fortigate 600E, including fundamental configuration tasks such as interface setup, routing configuration, and the creation of initial firewall policies.
• Configure and manage advanced security features, including SSL VPN, user authentication, antivirus, IPS, web filtering, and anti-malware capabilities, to protect against diverse network threats.
• Troubleshoot common issues within HA setups and effectively oversee HA environments.

This instructor-led, live training in District of Columbia (online or onsite) is directed at service technicians, system administrators, and individuals seeking proficiency in the installation, usage, and management of the Honeywell security system.

Upon completion of this training, participants will be prepared to:

• Comprehend the fundamental concepts of Honeywell security systems and their constituent components.
• Execute the correct installation and maintenance protocols for a Honeywell security system.
• Leverage Honeywell maintenance tools and the management suite to oversee and control security operations.

This instructor-led, live training, conducted in District of Columbia (online or onsite), is tailored for intermediate-level IT professionals seeking to proficiently manage Sophos XG Firewall to enhance the security posture of their organizations for government applications.

By the end of this training, participants will be able to:

• Understand the features and capabilities of Sophos XG Firewall.
• Perform initial setup, configure network interfaces, and manage firewall policies and rules.
• Integrate with various authentication services to support secure access.
• Utilize Sophos XG Firewall monitoring and reporting tools to maintain oversight of network security for government operations.

This instructor-led, live training session, conducted at District of Columbia (online or onsite), targets intermediate to advanced developers who aim to apply secure coding practices, identify software security risks, and implement robust defenses against cyber threats for government.

Upon completion of this training, participants will be capable of:

• Identifying common security vulnerabilities in web and software applications.
• Analyzing security threats and the exploitation techniques utilized by adversaries.
• Implementing secure coding practices to reduce security risks.
• Using security testing tools to locate and resolve vulnerabilities.

The EC-Council Certified DevSecOps Engineer (ECDE) program provides practical training designed to equip professionals with the capability to integrate security controls throughout the DevOps lifecycle, ensuring secure software delivery from initial planning through final deployment.

This instructor-led, live training (available online or on-site) targets intermediate-level software and DevOps professionals seeking to incorporate security protocols into CI/CD workflows for secure and compliant code release. This course is structured to meet the operational needs for government environments seeking rigorous security integration.

Upon completion of this training, participants will be able to:

• Apply the core principles and operational practices of DevSecOps.
• Secure all phases of the CI/CD pipeline through automated tooling.
• Execute secure coding standards and comprehensive vulnerability scanning.
• Prepare for the ECDE certification through applied laboratories and review sessions.

Training Delivery Model

• Interactive instruction and facilitated discussion.
• Practical application of DevSecOps tools within simulated pipeline environments.
• Supervised exercises emphasizing secure development and deployment protocols.

Customization Capabilities

• To arrange a tailored training curriculum aligned with your team's specific workflows or toolchain, please submit a request to our team for coordination.

This instructor-led, live training, conducted at District of Columbia (either online or on-site), targets security professionals requiring fundamental skills in managing Palo Alto Networks next-generation firewalls for government operations.

Upon completion of this training, participants will be equipped to:

• Configure and manage essential firewall functionalities within the Palo Alto Networks platform.
• Administer security and NAT policy configurations.
• Execute strategic threat prevention measures.
• Monitor network threats and analyze traffic data for regulatory compliance and security assurance.

Open Source Intelligence (OSINT) encompasses the collection, analysis, and application of lawfully obtained information from publicly available sources. This discipline supports strategic decision-making, risk assessment, and operational planning for government and public sector entities.

Target Audience

• Intelligence and research professionals
• Cyber and information security analysts
• Law enforcement investigators
• Government and military personnel

Instructional Methodology

• Facilitated interactive lectures and policy discussions.
• Structured exercises to reinforce theoretical concepts.
• Practical application within a secure, live-lab environment.

Customization & Procurement

• Contact program administration to arrange customized training aligned with specific agency requirements.

This instructor-led, live training in District of Columbia (delivered online or onsite) is designed for engineers tasked with securing connected vehicles against cyber threats.

Upon completion of this training, participants will be able to:

• Integrate cybersecurity controls into automotive system designs.
• Select appropriate technologies, tools, and methodologies for security implementation.

This instructor-led, live training in District of Columbia (online or onsite) is designed for senior and semi-senior IT auditors who aim to employ Burp Suite Professional to test, validate, and document web application vulnerabilities within the context of security audits, control assessments, and technology risk analysis for government entities.

Implementing a secure networked application can be challenging, even for developers who have previously used various cryptographic building blocks (such as encryption and digital signatures). To ensure participants understand the role and usage of these cryptographic primitives, a solid foundation is provided on the main requirements of secure communication—secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. The course also presents typical problems that can compromise these requirements along with real-world solutions.

As a critical aspect of network security, cryptography is thoroughly discussed, covering the most important cryptographic algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. These elements are presented from a developer's perspective, focusing on practical use-case examples and considerations related to the use of crypto, such as public key infrastructures. Security protocols in various areas of secure communication are introduced, with an in-depth discussion on widely-used protocol families such as IPSEC and SSL/TLS.

Typical cryptographic vulnerabilities are examined, including issues related to certain crypto algorithms and cryptographic protocols like BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and similar attacks, as well as the RSA timing attack. In each case, practical considerations and potential consequences are described without delving into deep mathematical details.

Finally, since XML technology is central to data exchange in networked applications, the security aspects of XML are discussed. This includes the use of XML within web services and SOAP messages, along with protection measures such as XML signature and XML encryption—along with weaknesses in these measures and XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding for government
• Understand the requirements of secure communication
• Learn about network attacks and defenses at different OSI layers
• Have a practical understanding of cryptography
• Understand essential security protocols
• Understand some recent attacks against cryptosystems
• Get information about recent related vulnerabilities
• Understand security concepts of Web services
• Get sources and further readings on secure coding practices for government

Audience

Developers, Professionals

This three-day course provides an overview of securing C/C++ code to protect against malicious users who may exploit vulnerabilities related to memory management and input handling. The course covers the fundamental principles of writing secure code for government applications, ensuring that participants understand best practices in safeguarding software integrity and functionality.

Even experienced Java programmers may not fully master all the security services provided by Java, nor are they always aware of the vulnerabilities relevant to web applications written in this language.

This course introduces the security components of Standard Java Edition and delves into the security issues of Java Enterprise Edition (JEE) and web services. Before discussing specific services, the course covers the fundamentals of cryptography and secure communication. Various exercises focus on declarative and programmatic security techniques in JEE, as well as transport-layer and end-to-end security for web services. Practical exercises allow participants to use the discussed APIs and tools firsthand.

The course also examines the most frequent and severe programming flaws in the Java language and platform, along with web-related vulnerabilities. It covers both language-specific issues and problems arising from the runtime environment. Each vulnerability and associated attack is demonstrated through straightforward exercises, followed by recommended coding guidelines and mitigation techniques.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding for government applications
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Understand the security principles of web services
• Learn to utilize various security features in the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions offered by Java EE
• Learn about common coding mistakes and how to avoid them
• Receive information on recent vulnerabilities in the Java framework
• Acquire practical knowledge in using security testing tools
• Access sources and further readings on secure coding practices

Audience

Developers

Several programming languages are currently available to compile code for the .NET and ASP.NET frameworks. These environments provide robust tools for security development; however, developers must understand how to apply architectural and coding-level techniques to implement effective security measures and mitigate vulnerabilities. This course is designed to equip developers with practical skills through numerous hands-on exercises. Participants will learn how to prevent untrusted code from executing privileged actions, secure resources using strong authentication and authorization methods, facilitate remote procedure calls, manage sessions, explore different implementations for specific functionalities, and more. The course begins by introducing common programming issues that can arise when using .NET. It then delves into the vulnerabilities of ASP.NET, covering various environment settings and their implications. The discussion on ASP.NET-specific vulnerabilities addresses general web application security challenges as well as unique issues such as attacks on ViewState and string termination attacks. Participants attending this course will: - Understand fundamental concepts of security, IT security, and secure coding for government. - Learn about Web vulnerabilities beyond the OWASP Top Ten and how to prevent them. - Gain proficiency in using various security features of the .NET development environment. - Acquire practical knowledge in utilizing security testing tools. - Identify typical coding mistakes and learn strategies to avoid them. - Stay informed about recent vulnerabilities in .NET and ASP.NET. - Receive resources and further readings on secure coding practices. Audience: - Developers for government and private sector projects.

This course provides essential skills for PHP developers to enhance the security of their applications against modern internet-based attacks. It covers web vulnerabilities through PHP-based examples, delving beyond the OWASP Top Ten to address various injection attacks, script injections, session handling issues, insecure direct object references, file upload problems, and more. Vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, improper use of security features, and time- and state-related issues. Specific topics include open_basedir circumvention, denial-of-service through magic float, and hash table collision attacks. Participants will gain proficiency in the key techniques and functions necessary to mitigate these risks. The course also emphasizes client-side security, addressing JavaScript, Ajax, and HTML5 vulnerabilities. It introduces several PHP security extensions, including hash, mcrypt, OpenSSL for cryptography, Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening PHP configuration (setting php.ini), Apache, and the server in general are discussed. An overview of security testing tools and techniques is provided, covering security scanners, penetration testing, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers. Both the introduction to vulnerabilities and configuration practices are supported by hands-on exercises that demonstrate the consequences of successful attacks, illustrate mitigation techniques, and introduce various extensions and tools. Participants attending this course will: - Understand basic concepts of security, IT security, and secure coding - Learn about web vulnerabilities beyond OWASP Top Ten and how to avoid them - Gain knowledge of client-side vulnerabilities and secure coding practices - Acquire a practical understanding of cryptography - Learn to use various security features of PHP - Identify typical coding mistakes and learn how to avoid them - Stay informed about recent vulnerabilities in the PHP framework - Gain practical experience with security testing tools - Receive sources and further readings on secure coding practices This course is designed for government developers who seek to enhance their application security skills.

The Combined SDL Core Training provides an in-depth understanding of secure software design, development, and testing through the Microsoft Secure Development Lifecycle (SDL). It offers a foundational overview of the key components of SDL, followed by practical techniques for identifying and addressing security flaws early in the development process.

During the development phase, the course covers common security-related programming bugs in both managed and native code. It presents various attack methods associated with these vulnerabilities along with effective mitigation strategies. These concepts are reinforced through hands-on exercises that offer participants a practical understanding of live hacking techniques. The training also introduces different security testing methodologies and demonstrates the effectiveness of various testing tools, allowing participants to apply these tools to previously discussed vulnerable code.

Participants attending this course will

Understand basic concepts of security, IT security, and secure coding for government.

Gain knowledge of the essential steps in the Microsoft Secure Development Lifecycle.

Learn secure design and development practices.

Understand secure implementation principles.

Grasp security testing methodologies.

• Access sources and further readings on secure coding practices.

Audience

Developers, Managers

This instructor-led, live training (online or onsite) is intended for technical professionals who need to deploy and manage open source collaboration platforms that maintain data sovereignty while providing modern team communication capabilities for government.

By the end of this training, participants will be equipped to evaluate platforms, deploy self-hosted solutions, configure security and integrations, migrate from existing systems, and establish operational procedures.

PenTest+ evaluates the latest penetration testing, and vulnerability assessment and management competencies essential for assessing network resiliency against security threats for government operations.

In this instructor-led, live course located in District of Columbia, participants will learn how to formulate the proper security strategy to face the DevOps security challenge for government entities.

This course delivers a thorough examination of the Software Development Life Cycle (SDLC) and its secure implementation through automation, integration, and security best practices. Participants will develop hands-on skills in applying DevOps and DevSecOps methodologies to strengthen software security while maintaining efficiency. The curriculum also covers critical OWASP tools for threat modeling, SBOM integration, vulnerability tracking, and security testing in CI/CD pipelines for government.

This instructor-led, live training in District of Columbia examines the architectural, operating system, networking, storage, and cryptographic considerations required for the design of secure embedded systems.

By the conclusion of this course, participants will demonstrate a thorough grasp of security principles, potential concerns, and supporting technologies. Furthermore, participants will acquire the practical skills necessary for the development of safe and secure embedded software.

This live, instructor-led training session in District of Columbia (available online or onsite) is tailored for security engineers and compliance officers aiming to strengthen deployment security, manage model access, and oversee on-premise AI workloads for government operations.

Intended Audience:

This curriculum is developed for individuals seeking to comprehend information security principles and explore potential career trajectories for government and the public sector. It is accessible to participants from diverse professional backgrounds, including those with limited prior technical experience.

Learning Objectives:

Participants will:

• Acquire a comprehensive understanding of foundational information security concepts and principles.
• Demonstrate the ability to identify critical threats and system vulnerabilities.
• Explore various career options and specialized roles within the information security domain.
• Establish a foundational knowledge base for advanced study and professional engagement.

Instructional Methodology:

• Interactive lectures and facilitated group discussions.
• Practical exercises and structured feedback sessions.
• Active participation is encouraged, with emphasis on inquiry and dialogue.

The agenda is designed for flexibility and may be adapted to accommodate time constraints and audience interests. Customized iterations may incorporate interactive elements such as quizzes, polling, and collaborative discussions.

Resources regarding advanced learning, professional associations, and career development for government officials will be provided.

Customization Options

• To request a tailored training module for this course, please contact the program administrators to coordinate arrangements.

This instructor-led, live training in District of Columbia (online or onsite) is tailored for system administrators and IT professionals tasked with securing self-hosted email servers for government infrastructure using RSPAMD, SpamAssassin, and DMARC.

By the end of this program, participants will be proficient in configuring anti-spam solutions, implementing email authentication protocols, and maintaining secure sovereign mail infrastructure.

This course prepares participants to identify, assess, and mitigate security risks within their own operational environments. The curriculum provides comprehensive knowledge and hands-on experience with critical security architectures required for government operations. Participants will analyze perimeter defense mechanisms before executing controlled scanning and simulation activities on isolated networks, ensuring no external systems are impacted. Further instruction covers privilege escalation techniques employed by adversaries, along with defensive measures for system hardening, intrusion detection, and policy formulation. Additional modules address social engineering vulnerabilities, denial-of-service attack vectors, buffer overflow mechanisms, and malware analysis.

This instructor-led, live training in District of Columbia (available online or onsite) is tailored for network engineers and infrastructure specialists seeking to utilize SONiC and ONL for the deployment and management of open network infrastructure on white-box switches.

Upon completion, participants will demonstrate proficiency in understanding SONiC and ONL architectures, deploying open-source network operating systems on white-box hardware, configuring advanced networking features, and implementing monitoring and automation solutions for government environments.

This instructor-led, live training in District of Columbia (available online or onsite) is designed for professionals seeking to conduct compliant research on third parties while maintaining operational security and protecting their own identity.

Upon completion of this training, participants will be able to:

• Install and configure advanced tools for executing OSINT operations for government purposes.
• Apply advanced techniques to collect publicly available data relevant to official investigations.
• Analyze large datasets efficiently to derive meaningful insights.
• Generate comprehensive intelligence reports detailing key findings.
• Leverage AI tools for facial recognition and sentiment analysis.
• Formulate strategic plans to define objectives and direct efforts toward the most relevant and actionable data.

This course on Introduction to Open Source Intelligence (OSINT) equips participants with the competencies required to efficiently locate critical intelligence within the Internet and World Wide Web. The program is designed to be highly practical, providing sufficient time for participants to explore and master the extensive array of tools and digital resources available for use in government operations. It addresses the next tier of capability, focusing on the proficient application of advanced tools that are essential for covert internet investigations and the systematic collection of intelligence. The curriculum ensures hands-on experience, allowing participants to thoroughly understand and utilize the specific tools and resources covered within the course for government effectiveness.

This course in District of Columbia is designed to assist professionals in the following areas:

1. Enabling developers to master the techniques of writing secure code.
2. Supporting software testers in evaluating application security before release to production environments.
3. Helping software architects understand and manage risks associated with applications.
4. Assisting team leaders in defining security baselines for development teams.
5. Guiding system administrators in server configuration to avoid misconfigurations.

This course examines secure coding methodologies and principles for Java, utilizing the Open Web Application Security Project (OWASP) testing framework. The OWASP is a global, non-profit community dedicated to developing and maintaining freely available articles, methodologies, documentation, tools, and technologies to enhance web application security standards.

This instructor-led course in District of Columbia focuses on secure coding concepts and ASP.NET security principles. Participants will learn to apply the OWASP methodology, implement robust authentication and authorization frameworks, and prevent injection attacks, XSS, and CSRF vulnerabilities to develop resilient, secure web applications for government use.

The “Computer Network Security – Securing Critical Services” curriculum presents the mechanisms and services essential for protecting modern network solutions. It covers the fundamentals of ensuring data confidentiality and integrity, utilizing encryption, certificates, Public Key Infrastructure (PKI), and secure password storage. The course further addresses network security protocols and services, comprehensive security systems, wireless network protections, inter-branch connectivity, and security validation through penetration testing, network scanning, and vulnerability detection for government operations.

The 'Penetration Testing – Identification and Exploitation of Vulnerabilities' program provides a thorough analysis of network and service security verification. It equips participants with proficiency in reconnaissance, vulnerability detection, simulation execution, and audit trail management. The curriculum further encompasses system analysis, social engineering countermeasures, and the generation of comprehensive test reports, supported by practical exercises in a secure virtual environment for government use.