Information System Security Training in Durham

This instructor-led, live training (online or onsite) is designed for intermediate-level network administrators who aim to acquire the essential skills required to manage, administer, monitor, and maintain Fortinet security systems for government. By the end of this training, participants will be able to: - Configure and manage FortiGate firewalls. - Monitor network traffic and manage incidents using FortiAnalyzer. - Automate tasks and manage policies through FortiManager. - Implement preventive maintenance strategies and troubleshoot network issues.

This instructor-led, live training in Durham (online or onsite) is designed for beginner-level network administrators who wish to utilize FortiGate 1100E to effectively manage and secure their network environments. By the end of this training, participants will be able to: - Comprehend the fundamental architecture and features of FortiGate 1100E. - Acquire knowledge on deploying FortiGate 1100E in diverse network settings. - Gain practical experience with basic configuration and management tasks. - Understand security policies, NAT, and VPN configurations. - Learn how to monitor and maintain FortiGate 1100E for government and other critical operations.

This instructor-led, live training (available online or onsite) is designed to assist participants in preparing for the CompTIA PenTest+ certification exam. The course covers the essential principles of penetration testing and offers hands-on experience with a variety of pen testing tools and techniques. Participants will gain knowledge on how to identify network vulnerabilities, exploit security weaknesses, and provide recommendations for remediation strategies, ensuring alignment with best practices for government and public sector workflows.

This instructor-led, live training in Durham (online or onsite) is aimed at intermediate-level network administrators who wish to manage and secure their networks using FortiGate firewalls for government applications. By the end of this training, participants will be able to: - Understand FortiGate features and functionalities, with a focus on those introduced or enhanced in version 7.4. - Configure and manage FortiGate devices to implement advanced security protocols. - Deploy and manage advanced security measures such as Intrusion Prevention System (IPS), antivirus, web filtering, and threat management. - Monitor network activities, analyze logs, and generate reports for auditing and compliance purposes.

This instructor-led, live training (online or onsite) is designed for intermediate-level technical professionals who aim to deepen their understanding of the technical aspects and functionalities of Fortinet’s product line. This knowledge will enable them to effectively recommend, sell, and implement Fortinet security solutions for government and other sectors. By the end of this training, participants will be able to: - Acquire comprehensive knowledge of Fortinet’s advanced security solutions and products. - Understand the technical features, benefits, and deployment scenarios for each core Fortinet product. - Configure, manage, and troubleshoot Fortinet solutions in various environments. - Apply Fortinet products to address complex security challenges and requirements.

CISSP training equips students with the knowledge to design systems that safeguard data confidentiality, integrity, and accessibility. This comprehensive course provides the skills necessary to design, build, and maintain a secure environment for government and business operations. Additionally, it covers industry best practices and all the essential information needed to successfully pass the CISSP certification exam.

This instructor-led, live training (conducted online or onsite) is designed for security professionals who aim to learn how to utilize Cortex XDR in preventing and mitigating sophisticated attacks and threats. By the end of this training, participants will be able to: - Comprehend the architecture and components of Cortex XDR. - Develop and manage profiles for exploit and malware prevention. - Evaluate behavioral threats and oversee response actions. - Conduct basic troubleshooting for Cortex XDR applications. This training aligns with the needs of security professionals in both public and private sectors, ensuring that participants are well-equipped to enhance cybersecurity measures for government and organizational environments.

This instructor-led, live training (available online or onsite) is designed for beginner-level technical professionals who wish to understand the concept of the Security Fabric and its evolution to meet the cybersecurity needs of organizations. By the end of this training, participants will be able to: - Gain insight into the evolution of cybersecurity and how it has influenced current security technologies. - Utilize Fortinet products to defend against specific types of cyber threats and attacks. - Comprehend the integration and automation capabilities of Fortinet solutions for providing a coordinated response to cyber incidents, ensuring robust protection for government and other critical sectors.

This instructor-led, live training in [location] (online or onsite) is designed for security professionals who wish to enhance their skills in troubleshooting Palo Alto Networks' next-generation firewalls for government use. By the end of this training, participants will be able to: - Comprehend the architecture of the next-generation firewall. - Investigate and resolve networking issues using firewall tools. - Analyze advanced logs to address real-life scenarios.

This instructor-led, live training in [location] (online or onsite) is designed for beginner-level network security professionals who wish to gain an understanding of cybersecurity and the current global threat landscape. By the end of this training, participants will be able to: - Comprehend the current global threat landscape and identify the main types of cyber adversaries. - Recognize the primary categories of malware and the mechanisms of cyber attacks. - Understand the fundamentals of network security and the importance of a layered security approach for government. - Learn about Fortinet's Security Fabric and how it addresses modern cybersecurity challenges.

This instructor-led, live training in Durham (online or onsite) is designed for intermediate-level network and security professionals who aim to effectively manage and secure networks using Fortigate 600E equipment, with a specific focus on high-availability (HA) configurations to enhance reliability and performance. By the end of this training, participants will be able to: - Understand the features, specifications, and operating principles of the Fortigate 600E firewall. - Perform the initial setup of the Fortigate 600E, including essential configuration tasks such as setting up interfaces, routing, and initial firewall policies. - Configure and manage advanced security features, such as SSL VPN, user authentication, antivirus, intrusion prevention systems (IPS), web filtering, and anti-malware capabilities to protect against a variety of network threats. - Troubleshoot common issues in HA setups and effectively manage high-availability environments for government operations.

This instructor-led, live training in Durham (online or onsite) is aimed at service technicians, system administrators, or any individuals who wish to learn proper installation, usage, and management of the Honeywell security system for government.

By the end of this training, participants will be able to:

• Understand the concepts and components of the Honeywell security systems.
• Properly install and maintain a Honeywell security system in public sector environments.
• Utilize the Honeywell maintenance tools and management suite to effectively control and manage a security system for government operations.

This instructor-led, live training in Durham (online or onsite) is designed for government security professionals who wish to learn how to manage firewalls at scale. By the end of this training, participants will be able to: - Design, configure, and manage the Panorama Firewall management server. - Manage policies using device groups. - Deploy network configurations to various firewalls, ensuring consistency and compliance for government operations.

The EC-Council Certified DevSecOps Engineer (ECDE) is a practical course designed to equip professionals with the skills necessary to integrate security throughout the DevOps lifecycle, ensuring secure software development from planning through deployment.

This instructor-led, live training (available online or on-site) targets intermediate-level software and DevOps professionals who aim to incorporate security practices into CI/CD pipelines, thereby ensuring both secure and compliant code delivery for government applications.

By the end of this training, participants will be able to:

• Understand the principles and practices of DevSecOps.
• Secure every stage of the CI/CD pipeline using automated tools.
• Implement secure coding practices and vulnerability scanning.
• Prepare for the ECDE certification with practical labs and comprehensive review sessions.

Format of the Course

• Interactive lectures and discussions.
• Hands-on use of DevSecOps tools in simulated pipelines.
• Guided exercises focused on secure development and deployment practices.

Course Customization Options

• To request a customized training for this course tailored to your team’s specific workflows or toolchain, please contact us to arrange.

This instructor-led, live training in [location] (online or onsite) is aimed at system administrators who wish to learn the fundamentals of software licensing, the key features of FlexNet, and how to implement and maintain software license management solutions for government. By the end of this training, participants will be able to: - Understand the fundamental concepts of software licensing. - Manage core components and operational systems of FlexNet. - Create various license models and types, generate license keys, and activate software licenses for end-users. - Add, manage, and allocate licenses to end-users, monitor license usage, and ensure compliance.

This instructor-led, live training in Durham (online or onsite) is aimed at experienced network security managers who wish to gain the knowledge and skills necessary to deploy, manage, and troubleshoot Fortinet's FortiGate security appliances running on FortiOS 7.2 as an NSE4 Network Security Professional for government.

By the end of this training, participants will be able to:

• Comprehend Fortinet's product portfolio and the role of FortiOS in enhancing network security.
• Implement effective firewall policies, security profiles, and Network Address Translation (NAT) for government networks.
• Leverage security services and ensure network redundancy and failover capabilities for government operations.
• Adhere to security best practices and optimize security policies to meet compliance requirements and mitigate threats in a public sector environment.

This instructor-led, live training in Durham (online or onsite) is aimed at security professionals who wish to learn the fundamentals of managing Palo Alto Networks' next-generation firewalls for government use.

By the end of this training, participants will be able to:

• Configure and manage essential features of Palo Alto Networks' firewall.
• Administer security and NAT policies.
• Implement threat prevention strategies.
• Monitor network threats and traffic for government operations.

By the end of this training, participants will be able to: - Explain application security and vulnerabilities for government systems. - Describe ABAP programming best practices and the handling of SY-SUBRC. - Understand injection vulnerabilities and their implications for secure coding. - Describe security testing tools and their application in government contexts. - Explain the use of ATC (Abap Test Cockpit) and CVA (Code Vulnerability Analysis). **Format of the Course** - Interactive lecture and discussion sessions. - Extensive exercises and practice opportunities. - Hands-on implementation in a live-lab environment.

This course covers essential secure coding topics relevant to a large number of web application developers for government. It will teach students the concepts of secure programming, including how to identify and fix security flaws in specific pieces of code. In this course, you will watch demonstrations of real-world attacks and learn methods to prevent them, gaining confidence in enhancing the security of your applications. **Duration**: 3 days **Who Should Attend**: Developers looking to extend their knowledge in secure coding for government. **Upon Completion** - Students will gain knowledge in: - Web Application Security - Common Web Application Risks - Demo Web Application Penetration Testing - Data Validation - Authentication - Session Management - Secure Software Development Life Cycle (SDLC)

This instructor-led, live training (online or onsite) is designed for engineers who aim to protect connected vehicles from cyber threats.

By the end of this training, participants will be able to:

• Implement cybersecurity measures in automotive systems.
• Select the most appropriate technologies, tools, and methodologies for government use.

Android is an open platform for mobile devices, including handsets and tablets. It offers a wide array of security features designed to facilitate the development of secure software; however, it also lacks certain security aspects found in other handheld platforms. This course provides a comprehensive overview of these features, highlighting critical shortcomings related to the underlying Linux system, file management, the general environment, and the use of permissions and other Android software development components.

The course addresses typical security pitfalls and vulnerabilities for both native code and Java applications, offering recommendations and best practices to avoid and mitigate these issues. Many discussions are supported with real-life examples and case studies. Additionally, the course includes a brief overview of how to use security testing tools to identify any programming bugs that could impact security.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding for government applications
• Learn about the security solutions available on the Android platform
• Gain proficiency in using various security features of the Android platform
• Receive information on recent vulnerabilities in Java on Android
• Understand typical coding mistakes and how to avoid them
• Acquire knowledge about native code vulnerabilities on Android
• Recognize the severe consequences of insecure buffer handling in native code
• Comprehend architectural protection techniques and their limitations
• Access sources and further readings on secure coding practices

Audience

This course is designed for professionals in the public sector who require a deep understanding of Android security to enhance the development and maintenance of secure mobile applications for government use.

Implementing a secure networked application can be challenging, even for developers who have previously used various cryptographic building blocks (such as encryption and digital signatures). To ensure participants understand the role and usage of these cryptographic primitives, a solid foundation is provided on the main requirements of secure communication—secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. The course also presents typical problems that can compromise these requirements along with real-world solutions.

As a critical aspect of network security, cryptography is thoroughly discussed, covering the most important cryptographic algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. These elements are presented from a developer's perspective, focusing on practical use-case examples and considerations related to the use of crypto, such as public key infrastructures. Security protocols in various areas of secure communication are introduced, with an in-depth discussion on widely-used protocol families such as IPSEC and SSL/TLS.

Typical cryptographic vulnerabilities are examined, including issues related to certain crypto algorithms and cryptographic protocols like BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and similar attacks, as well as the RSA timing attack. In each case, practical considerations and potential consequences are described without delving into deep mathematical details.

Finally, since XML technology is central to data exchange in networked applications, the security aspects of XML are discussed. This includes the use of XML within web services and SOAP messages, along with protection measures such as XML signature and XML encryption—along with weaknesses in these measures and XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding for government
• Understand the requirements of secure communication
• Learn about network attacks and defenses at different OSI layers
• Have a practical understanding of cryptography
• Understand essential security protocols
• Understand some recent attacks against cryptosystems
• Get information about recent related vulnerabilities
• Understand security concepts of Web services
• Get sources and further readings on secure coding practices for government

Audience

Developers, Professionals

This three-day course provides an overview of securing C/C++ code to protect against malicious users who may exploit vulnerabilities related to memory management and input handling. The course covers the fundamental principles of writing secure code for government applications, ensuring that participants understand best practices in safeguarding software integrity and functionality.

Even experienced Java programmers may not fully master all the security services provided by Java, nor are they always aware of the vulnerabilities relevant to web applications written in this language.

This course introduces the security components of Standard Java Edition and delves into the security issues of Java Enterprise Edition (JEE) and web services. Before discussing specific services, the course covers the fundamentals of cryptography and secure communication. Various exercises focus on declarative and programmatic security techniques in JEE, as well as transport-layer and end-to-end security for web services. Practical exercises allow participants to use the discussed APIs and tools firsthand.

The course also examines the most frequent and severe programming flaws in the Java language and platform, along with web-related vulnerabilities. It covers both language-specific issues and problems arising from the runtime environment. Each vulnerability and associated attack is demonstrated through straightforward exercises, followed by recommended coding guidelines and mitigation techniques.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding for government applications
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Understand the security principles of web services
• Learn to utilize various security features in the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions offered by Java EE
• Learn about common coding mistakes and how to avoid them
• Receive information on recent vulnerabilities in the Java framework
• Acquire practical knowledge in using security testing tools
• Access sources and further readings on secure coding practices

Audience

Developers

Description

The Java language and the Runtime Environment (JRE) were designed to be free from the most problematic common security vulnerabilities experienced in other languages, such as C/C++. However, software developers and architects should not only know how to use the various security features of the Java environment (positive security), but also be aware of the numerous vulnerabilities that are still relevant for Java development (negative security).

The introduction of security services is preceded by a brief overview of the foundations of cryptography, providing a common baseline for understanding the purpose and operation of the applicable components. The use of these components is presented through several practical exercises, where participants can try out the discussed APIs for themselves.

This course also covers the most frequent and severe programming flaws of the Java language and platform, including both typical bugs committed by Java programmers and language- and environment-specific issues. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by recommended coding guidelines and possible mitigation techniques.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding for government
• Learn Web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Learn to use various security features of the Java development environment
• Gain a practical understanding of cryptography
• Learn about typical coding mistakes and how to avoid them
• Receive information on recent vulnerabilities in the Java framework
• Obtain sources and further readings on secure coding practices

Audience

Developers

Several programming languages are currently available to compile code for the .NET and ASP.NET frameworks. These environments provide robust tools for security development; however, developers must understand how to apply architectural and coding-level techniques to implement effective security measures and mitigate vulnerabilities. This course is designed to equip developers with practical skills through numerous hands-on exercises. Participants will learn how to prevent untrusted code from executing privileged actions, secure resources using strong authentication and authorization methods, facilitate remote procedure calls, manage sessions, explore different implementations for specific functionalities, and more. The course begins by introducing common programming issues that can arise when using .NET. It then delves into the vulnerabilities of ASP.NET, covering various environment settings and their implications. The discussion on ASP.NET-specific vulnerabilities addresses general web application security challenges as well as unique issues such as attacks on ViewState and string termination attacks. Participants attending this course will: - Understand fundamental concepts of security, IT security, and secure coding for government. - Learn about Web vulnerabilities beyond the OWASP Top Ten and how to prevent them. - Gain proficiency in using various security features of the .NET development environment. - Acquire practical knowledge in utilizing security testing tools. - Identify typical coding mistakes and learn strategies to avoid them. - Stay informed about recent vulnerabilities in .NET and ASP.NET. - Receive resources and further readings on secure coding practices. Audience: - Developers for government and private sector projects.

The course introduces fundamental security concepts, provides an overview of vulnerabilities irrespective of the programming languages and platforms used, and explains how to manage risks related to software security throughout the various phases of the software development lifecycle. Without delving deeply into technical specifics, it highlights some of the most significant vulnerabilities across different software development technologies and discusses the challenges of security testing, along with techniques and tools that can be applied to identify any existing issues in code. ### Participants attending this course will: - Understand basic concepts of security, IT security, and secure coding for government. - Gain insight into web vulnerabilities on both the server and client sides. - Recognize the severe consequences of insecure buffer handling. - Be informed about recent vulnerabilities in development environments and frameworks. - Learn about typical coding mistakes and how to avoid them. - Understand security testing approaches and methodologies. ### Audience Managers

This course provides essential skills for PHP developers to enhance the security of their applications against modern internet-based attacks. It covers web vulnerabilities through PHP-based examples, delving beyond the OWASP Top Ten to address various injection attacks, script injections, session handling issues, insecure direct object references, file upload problems, and more. Vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, improper use of security features, and time- and state-related issues. Specific topics include open_basedir circumvention, denial-of-service through magic float, and hash table collision attacks. Participants will gain proficiency in the key techniques and functions necessary to mitigate these risks. The course also emphasizes client-side security, addressing JavaScript, Ajax, and HTML5 vulnerabilities. It introduces several PHP security extensions, including hash, mcrypt, OpenSSL for cryptography, Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening PHP configuration (setting php.ini), Apache, and the server in general are discussed. An overview of security testing tools and techniques is provided, covering security scanners, penetration testing, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers. Both the introduction to vulnerabilities and configuration practices are supported by hands-on exercises that demonstrate the consequences of successful attacks, illustrate mitigation techniques, and introduce various extensions and tools. Participants attending this course will: - Understand basic concepts of security, IT security, and secure coding - Learn about web vulnerabilities beyond OWASP Top Ten and how to avoid them - Gain knowledge of client-side vulnerabilities and secure coding practices - Acquire a practical understanding of cryptography - Learn to use various security features of PHP - Identify typical coding mistakes and learn how to avoid them - Stay informed about recent vulnerabilities in the PHP framework - Gain practical experience with security testing tools - Receive sources and further readings on secure coding practices This course is designed for government developers who seek to enhance their application security skills.

The Combined SDL Core Training provides an in-depth understanding of secure software design, development, and testing through the Microsoft Secure Development Lifecycle (SDL). It offers a foundational overview of the key components of SDL, followed by practical techniques for identifying and addressing security flaws early in the development process.

During the development phase, the course covers common security-related programming bugs in both managed and native code. It presents various attack methods associated with these vulnerabilities along with effective mitigation strategies. These concepts are reinforced through hands-on exercises that offer participants a practical understanding of live hacking techniques. The training also introduces different security testing methodologies and demonstrates the effectiveness of various testing tools, allowing participants to apply these tools to previously discussed vulnerable code.

Participants attending this course will

Understand basic concepts of security, IT security, and secure coding for government.

Gain knowledge of the essential steps in the Microsoft Secure Development Lifecycle.

Learn secure design and development practices.

Understand secure implementation principles.

Grasp security testing methodologies.

• Access sources and further readings on secure coding practices.

Audience

Developers, Managers

After gaining familiarity with vulnerabilities and attack methods, participants will learn about the general approach and methodology for security testing, along with techniques that can be applied to uncover specific vulnerabilities. Security testing should begin with information gathering about the system (ToC, i.e., Target of Evaluation), followed by a thorough threat modeling process to identify and rate all threats, culminating in a risk analysis-driven test plan.

Security evaluations can occur at various stages of the Software Development Life Cycle (SDLC). Therefore, we discuss design reviews, code reviews, reconnaissance and information gathering about the system, testing the implementation, and securing the environment for deployment. The course introduces numerous security testing techniques in detail, such as taint analysis, heuristic-based code review, static code analysis, dynamic web vulnerability testing, and fuzzing. Various types of tools are presented to automate the security evaluation of software products, supported by exercises where these tools are used to analyze previously discussed vulnerable code. Real-life case studies enhance understanding of various vulnerabilities.

This course equips testers and quality assurance (QA) staff with the necessary skills to effectively plan and execute security tests, select and use appropriate tools and techniques to identify even hidden security flaws, providing essential practical skills that can be applied immediately in their work for government.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Learn about Web vulnerabilities beyond the OWASP Top Ten and how to avoid them
• Learn client-side vulnerabilities and secure coding practices
• Understand security testing approaches and methodologies
• Gain practical knowledge in using security testing techniques and tools
• Access sources and further readings on secure coding practices

Audience

Developers, Testers

Protecting web applications requires well-prepared security professionals who are continuously aware of current attack methods and trends. A variety of technologies and environments exist that facilitate the development of web applications. It is essential to be knowledgeable about both platform-specific security issues and general vulnerabilities that apply regardless of the development tools used.

This course provides an overview of applicable security solutions in web applications, with a special focus on understanding the most important cryptographic solutions to be applied. The various web application vulnerabilities are presented from both the server side (following the OWASP Top Ten) and the client side, demonstrated through relevant attacks. The course also covers recommended coding techniques and mitigation methods to avoid these issues. The subject of secure coding is concluded by discussing typical security-related programming mistakes in input validation, improper use of security features, and code quality.

Testing plays a crucial role in ensuring the security and robustness of web applications. Various approaches—from high-level auditing through penetration testing to ethical hacking—can be applied to identify different types of vulnerabilities. However, if you want to go beyond easily identifiable issues, security testing should be well planned and properly executed. It is important to remember that security testers should ideally find all bugs to protect a system, while adversaries need only find one exploitable vulnerability to penetrate it.

Practical exercises will help participants understand web application vulnerabilities, programming mistakes, and most importantly, the mitigation techniques. Hands-on trials of various testing tools—from security scanners through sniffers, proxy servers, fuzzing tools to static source code analyzers—will provide essential practical skills that can be applied immediately in the workplace for government.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond OWASP Top Ten and how to avoid them
• Learn client-side vulnerabilities and secure coding practices
• Have a practical understanding of cryptography
• Understand security testing approaches and methodologies
• Gain practical knowledge in using security testing techniques and tools
• Be informed about recent vulnerabilities in various platforms, frameworks, and libraries
• Receive sources and further readings on secure coding practices

Audience

Developers, Testers

PenTest+ evaluates the current penetration testing and vulnerability assessment and management skills required to ensure the resilience of government networks against potential threats. This assessment is crucial for government agencies to maintain robust cybersecurity practices and protect sensitive information.

This course is designed for individuals such as software developers, testers, and architects who are engaged in the development of software using various programming languages and platforms, including desktop, web, cloud, and mobile applications. The primary goal is to enhance their ability to produce high-quality software, with a particular emphasis on security and privacy considerations for government and other critical sectors.

This course is designed to equip participants with the skills necessary to scan, test, and secure their own systems, providing in-depth knowledge and practical experience with current essential security measures for government. Participants will gain an understanding of how perimeter defenses function and will be guided through the process of scanning and attacking their own networks in a controlled environment, ensuring no real network is compromised. The course will then delve into how intruders escalate privileges and explore the steps that can be taken to secure systems effectively. Topics covered include Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows, and Virus Creation.

In this instructor-led, live course in [location], participants will gain the skills necessary to develop an effective security strategy to address the unique challenges of DevOps for government. The training will equip attendees with the knowledge and tools required to enhance security practices while maintaining the agility and efficiency essential in public sector workflows.

This course offers a comprehensive examination of the Software Development Life Cycle (SDLC) and its secure implementation through automation, integration, and adherence to best practices. Participants will acquire practical experience in incorporating DevOps and DevSecOps methodologies to bolster software security while ensuring operational efficiency. The curriculum also includes essential OWASP tools for threat modeling, SBOM integration, vulnerability tracking, and security testing within CI/CD pipelines, tailored to meet the unique requirements for government applications.

This instructor-led, live training in Durham provides an overview of system architectures, operating systems, networking, storage, and cryptographic issues that are essential to designing secure embedded systems for government. By the end of this course, participants will have a solid understanding of security principles, concerns, and technologies. More importantly, participants will be equipped with the techniques needed to develop safe and secure embedded software for government applications.

This instructor-led, live training in Durham (online or onsite) is aimed at security engineers and system administrators who wish to utilize FortiGate Next-Generation Firewall (NGFW) advanced security-driven network systems to safeguard their organization from internal and external threats.

By the end of this training, participants will be able to:

• Install and configure the preferred FortiGate NGFW software and hardware model for government use.
• Operate and employ FortiGate NGFW to enhance the efficiency of system administration tasks within public sector workflows.
• Manage various forms of external and internal threats using FortiGate features, ensuring alignment with governance and accountability standards.
• Integrate FortiGate security fabric with the entire IT infrastructure to provide rapid automated protection for government operations.
• Ensure long-term protection from attacks with independent and continuous FortiGate threat intelligence, tailored to meet public sector requirements.
• Troubleshoot the most common firewall system setup errors relevant to FortiGate NGFWs in a government context.
• Implement Fortinet security solutions in other enterprise applications for government use.

Target Audience:

This course is designed for individuals interested in understanding information security and exploring potential career paths in the field. It is suitable for people from diverse backgrounds, including those with limited prior technical knowledge.

Course Objectives:

• Gain a comprehensive understanding of information security concepts and principles.
• Identify key threats and vulnerabilities within information systems.
• Explore various career options and specializations in the field of information security.
• Build a foundation for further learning and professional development.

Format of the Course:

• Interactive lectures and group discussions to enhance understanding and engagement.
• Practical exercises and feedback sessions to apply concepts learned.
• Participants are encouraged to bring questions and actively participate in discussions.

This agenda is flexible and can be adjusted based on time constraints and audience interests. Customized versions of the course may include interactive elements such as quizzes, polls, and group discussions.

The course will provide resources and information about further learning opportunities, professional organizations, and career resources for government and other sectors.

Course Customisation Options

• To request a customized training for this course, please contact us to arrange.

In this instructor-led, live training for government, participants will gain a comprehensive understanding of Internet of Things (IoT) architectures and learn about the various IoT security solutions applicable to their organization. By the end of this training, participants will be able to: - Understand IoT architectures. - Identify emerging IoT security threats and solutions. - Implement appropriate technologies for IoT security within their organization.

This five-day, instructor-led course for government IT professionals in Durham focuses on enhancing the security of the IT infrastructure they administer. The course underscores the importance of assuming that network breaches have already occurred and provides strategies for protecting administrative credentials and rights. Participants will learn how to ensure that administrators can perform only the necessary tasks at the appropriate times, thereby strengthening overall security protocols.

This instructor-led, live training in [location] (online or onsite) is aimed at software testers who wish to safeguard their organization's network with Nmap. By the end of this training, participants will be able to: - Set up the necessary testing environment to begin using Nmap for government. - Conduct scans of network systems to identify security vulnerabilities. - Identify active and vulnerable hosts within the network.

This course is designed to equip participants with the skills necessary to scan, test, hack, and secure their own systems for government use. Attendees will gain in-depth knowledge and practical experience with essential security measures currently employed. The training will cover how perimeter defenses function, followed by hands-on sessions where participants will practice scanning and attacking their own networks—ensuring that no actual networks are compromised. Participants will also learn about the methods intruders use to escalate privileges and the steps that can be taken to secure systems. Additional topics include Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows, and Virus Creation. This comprehensive approach ensures that participants leave with a robust understanding of cybersecurity practices for government operations.

The OpenVAS framework is an advanced open-source solution that includes multiple services and tools designed for network vulnerability scanning and management.

In this instructor-led, live training, participants will learn how to effectively use OpenVAS for network vulnerability scanning in a government context.

By the end of this training, participants will be able to:

• Install and configure OpenVAS for government use
• Understand the fundamental features and components of OpenVAS
• Configure and execute network vulnerability scans using OpenVAS
• Review and interpret scan results from OpenVAS

Audience

• Network engineers for government agencies
• Network administrators in public sector organizations

Format of the Course

• Part lecture, part discussion, with exercises and extensive hands-on practice

Note

• To request a customized training for government agencies, please contact us to arrange.

This instructor-led, live training (available online or onsite) is designed for government developers who wish to prevent malware intrusion using Palo Alto Networks. By the end of this training, participants will be able to: - Set up the necessary development environment to begin developing firewalls. - Deploy a Palo Alto firewall in a cloud server for government use. - Manage packet flow through Palo Alto firewalls effectively. - Interpret Quality of Service (QoS) classifications and types.

The public key and private key are the basis of public key cryptography (asymmetric), enabling secure communication and exchange of information in computer networks. The combination of both keys allows you to secure transmitted data, maintaining its confidentiality and ensuring the authenticity of digital signatures. The public key and private key are the basis of public key cryptography (asymmetric), enabling secure communication and exchange of information in computer networks. The combination of both keys allows you to secure transmitted data, maintaining its confidentiality and ensuring the authenticity of digital signatures.

This instructor-led, live training in Durham (online or onsite) is designed for SysAdmins, systems engineers, security architects, and security analysts who aim to write, execute, and deploy PowerShell scripts and commands to automate Windows security management within their organization.

By the end of this training, participants will be able to:

• Write and execute PowerShell commands to streamline Windows security tasks for government use.
• Utilize PowerShell for remote command execution to run scripts across thousands of systems within an organization.
• Configure and harden Windows Server and Windows Firewall to protect systems from malware and attacks.
• Manage certificates and authentication to control user access and activity, ensuring compliance with public sector workflows and governance.

This Course in Durham aims to assist in the following:

1. Enable Developers to master the techniques of writing secure code for government systems.
2. Support Software Testers in conducting thorough security assessments before deploying applications to production environments for government use.
3. Assist Software Architects in comprehending the risks associated with government applications and designing robust security frameworks.
4. Help Team Leaders establish security baselines for developers working on government projects.
5. Aid Web Masters in configuring servers to prevent misconfigurations that could compromise government systems.

This course provides an overview of secure coding concepts and principles using Java, aligned with the Open Web Application Security Project (OWASP) testing methodology. OWASP is a global online community dedicated to advancing the field of web application security by developing freely available articles, methodologies, documentation, tools, and technologies. The content is designed to enhance cybersecurity practices for government and other organizations, ensuring robust and secure software development processes.

This course provides an in-depth examination of secure coding concepts and principles using ASP.NET, aligned with the Open Web Application Security Project (OWASP) methodology. OWASP is a global online community dedicated to creating freely available articles, methodologies, documentation, tools, and technologies in the field of web application security. The course delves into the security features of the .NET Framework and explores strategies for securing web applications. It is designed to equip participants with the knowledge and skills necessary to enhance security practices for government and other critical systems.

This course is designed to develop the technical skills necessary for implementing, monitoring, and administering IT infrastructure in alignment with information security policies and procedures. It focuses on ensuring the protection of data confidentiality, integrity, and availability, which are critical components for government operations and public sector workflows.