Information System Security Training in Ohio

This instructor-led, live training (online or onsite) is designed for intermediate-level network administrators who aim to acquire the essential skills required to manage, administer, monitor, and maintain Fortinet security systems for government. By the end of this training, participants will be able to: - Configure and manage FortiGate firewalls. - Monitor network traffic and manage incidents using FortiAnalyzer. - Automate tasks and manage policies through FortiManager. - Implement preventive maintenance strategies and troubleshoot network issues.

This instructor-led, live training in Ohio (online or onsite) is designed for beginner-level network administrators who wish to utilize FortiGate 1100E to effectively manage and secure their network environments. By the end of this training, participants will be able to: - Comprehend the fundamental architecture and features of FortiGate 1100E. - Acquire knowledge on deploying FortiGate 1100E in diverse network settings. - Gain practical experience with basic configuration and management tasks. - Understand security policies, NAT, and VPN configurations. - Learn how to monitor and maintain FortiGate 1100E for government and other critical operations.

This instructor-led, live training (available online or onsite) is designed to assist participants in preparing for the CompTIA PenTest+ certification exam. The course covers the essential principles of penetration testing and offers hands-on experience with a variety of pen testing tools and techniques. Participants will gain knowledge on how to identify network vulnerabilities, exploit security weaknesses, and provide recommendations for remediation strategies, ensuring alignment with best practices for government and public sector workflows.

This instructor-led, live training in Ohio (online or onsite) is aimed at intermediate-level network administrators who wish to manage and secure their networks using FortiGate firewalls for government applications. By the end of this training, participants will be able to: - Understand FortiGate features and functionalities, with a focus on those introduced or enhanced in version 7.4. - Configure and manage FortiGate devices to implement advanced security protocols. - Deploy and manage advanced security measures such as Intrusion Prevention System (IPS), antivirus, web filtering, and threat management. - Monitor network activities, analyze logs, and generate reports for auditing and compliance purposes.

This instructor-led, live training (online or onsite) is designed for intermediate-level technical professionals who aim to deepen their understanding of the technical aspects and functionalities of Fortinet’s product line. This knowledge will enable them to effectively recommend, sell, and implement Fortinet security solutions for government and other sectors. By the end of this training, participants will be able to: - Acquire comprehensive knowledge of Fortinet’s advanced security solutions and products. - Understand the technical features, benefits, and deployment scenarios for each core Fortinet product. - Configure, manage, and troubleshoot Fortinet solutions in various environments. - Apply Fortinet products to address complex security challenges and requirements.

CISSP training equips students with the knowledge to design systems that safeguard data confidentiality, integrity, and accessibility. This comprehensive course provides the skills necessary to design, build, and maintain a secure environment for government and business operations. Additionally, it covers industry best practices and all the essential information needed to successfully pass the CISSP certification exam.

This instructor-led, live training (available online or onsite) is designed for beginner-level technical professionals who wish to understand the concept of the Security Fabric and its evolution to meet the cybersecurity needs of organizations. By the end of this training, participants will be able to: - Gain insight into the evolution of cybersecurity and how it has influenced current security technologies. - Utilize Fortinet products to defend against specific types of cyber threats and attacks. - Comprehend the integration and automation capabilities of Fortinet solutions for providing a coordinated response to cyber incidents, ensuring robust protection for government and other critical sectors.

This instructor-led, live training in [location] (online or onsite) is designed for security professionals who wish to enhance their skills in troubleshooting Palo Alto Networks' next-generation firewalls for government use. By the end of this training, participants will be able to: - Comprehend the architecture of the next-generation firewall. - Investigate and resolve networking issues using firewall tools. - Analyze advanced logs to address real-life scenarios.

This instructor-led, live training in [location] (online or onsite) is designed for beginner-level network security professionals who wish to gain an understanding of cybersecurity and the current global threat landscape. By the end of this training, participants will be able to: - Comprehend the current global threat landscape and identify the main types of cyber adversaries. - Recognize the primary categories of malware and the mechanisms of cyber attacks. - Understand the fundamentals of network security and the importance of a layered security approach for government. - Learn about Fortinet's Security Fabric and how it addresses modern cybersecurity challenges.

This instructor-led, live training in [location] (online or onsite) is aimed at intermediate-level network and security professionals who wish to effectively implement, manage, and secure SD-WAN solutions for government. By the end of this training, participants will be able to: - Understand the fundamental concepts, benefits, and challenges associated with SD-WAN technologies. - Design an SD-WAN architecture tailored to organizational needs and deploy SD-WAN solutions effectively. - Implement and manage security features within an SD-WAN for government. - Monitor, manage, and troubleshoot SD-WAN environments.

This instructor-led, live training in Ohio (online or onsite) is designed for intermediate-level network and security professionals who aim to effectively manage and secure networks using Fortigate 600E equipment, with a specific focus on high-availability (HA) configurations to enhance reliability and performance. By the end of this training, participants will be able to: - Understand the features, specifications, and operating principles of the Fortigate 600E firewall. - Perform the initial setup of the Fortigate 600E, including essential configuration tasks such as setting up interfaces, routing, and initial firewall policies. - Configure and manage advanced security features, such as SSL VPN, user authentication, antivirus, intrusion prevention systems (IPS), web filtering, and anti-malware capabilities to protect against a variety of network threats. - Troubleshoot common issues in HA setups and effectively manage high-availability environments for government operations.

This instructor-led, live training in Ohio (online or onsite) is aimed at service technicians, system administrators, or any individuals who wish to learn proper installation, usage, and management of the Honeywell security system for government.

By the end of this training, participants will be able to:

• Understand the concepts and components of the Honeywell security systems.
• Properly install and maintain a Honeywell security system in public sector environments.
• Utilize the Honeywell maintenance tools and management suite to effectively control and manage a security system for government operations.

This instructor-led, live training in Ohio (online or onsite) is designed for intermediate-level IT professionals who aim to effectively use and manage Sophos XG Firewall to enhance the security posture of their organizations or clients. By the end of this training, participants will be able to: - Understand the features and capabilities of Sophos XG Firewall. - Perform initial setup, configure network interfaces, and create and manage firewall policies and rules. - Integrate with various authentication services. - Utilize Sophos XG Firewall’s monitoring and reporting tools to maintain oversight of network security for government operations.

This instructor-led, live training, available both online and onsite, is designed for intermediate to advanced developers who aim to understand and apply secure coding practices, identify security risks in software, and implement defenses against cyber threats. By the end of this training, participants will be able to: - Understand common security vulnerabilities in web and software applications. - Analyze security threats and exploit techniques used by attackers. - Implement secure coding practices to mitigate security risks. - Utilize security testing tools to identify and fix vulnerabilities, ensuring robust protection for government systems.

The EC-Council Certified DevSecOps Engineer (ECDE) is a practical course designed to equip professionals with the skills necessary to integrate security throughout the DevOps lifecycle, ensuring secure software development from planning through deployment.

This instructor-led, live training (available online or on-site) targets intermediate-level software and DevOps professionals who aim to incorporate security practices into CI/CD pipelines, thereby ensuring both secure and compliant code delivery for government applications.

By the end of this training, participants will be able to:

• Understand the principles and practices of DevSecOps.
• Secure every stage of the CI/CD pipeline using automated tools.
• Implement secure coding practices and vulnerability scanning.
• Prepare for the ECDE certification with practical labs and comprehensive review sessions.

Format of the Course

• Interactive lectures and discussions.
• Hands-on use of DevSecOps tools in simulated pipelines.
• Guided exercises focused on secure development and deployment practices.

Course Customization Options

• To request a customized training for this course tailored to your team’s specific workflows or toolchain, please contact us to arrange.

This instructor-led, live training in Ohio (online or onsite) is aimed at security professionals who wish to learn the fundamentals of managing Palo Alto Networks' next-generation firewalls for government use.

By the end of this training, participants will be able to:

• Configure and manage essential features of Palo Alto Networks' firewall.
• Administer security and NAT policies.
• Implement threat prevention strategies.
• Monitor network threats and traffic for government operations.

Open Source Intelligence (OSINT) pertains to information that can legally be collected from publicly available sources regarding individuals or organizations. OSINT also encompasses the process of gathering this data, analyzing it, and utilizing it for intelligence purposes.

Audience

• Researchers
• Security Analysts
• Investigators
• Law Enforcement Personnel
• Government and Military Personnel

Format of the Course

• Interactive lectures and discussions.
• Extensive exercises and practice sessions.
• Hands-on implementation in a live-lab environment.

Course Customization Options for Government

• To request a customized training session for this course, please contact us to arrange the details.

This instructor-led, live training in Ohio (online or onsite) is designed for engineers who aim to protect connected vehicles from cyber threats.

By the end of this training, participants will be able to:

• Implement cybersecurity measures in automotive systems.
• Select the most appropriate technologies, tools, and methodologies for government use.

Implementing a secure networked application can be challenging, even for developers who have previously used various cryptographic building blocks (such as encryption and digital signatures). To ensure participants understand the role and usage of these cryptographic primitives, a solid foundation is provided on the main requirements of secure communication—secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. The course also presents typical problems that can compromise these requirements along with real-world solutions.

As a critical aspect of network security, cryptography is thoroughly discussed, covering the most important cryptographic algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. These elements are presented from a developer's perspective, focusing on practical use-case examples and considerations related to the use of crypto, such as public key infrastructures. Security protocols in various areas of secure communication are introduced, with an in-depth discussion on widely-used protocol families such as IPSEC and SSL/TLS.

Typical cryptographic vulnerabilities are examined, including issues related to certain crypto algorithms and cryptographic protocols like BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and similar attacks, as well as the RSA timing attack. In each case, practical considerations and potential consequences are described without delving into deep mathematical details.

Finally, since XML technology is central to data exchange in networked applications, the security aspects of XML are discussed. This includes the use of XML within web services and SOAP messages, along with protection measures such as XML signature and XML encryption—along with weaknesses in these measures and XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding for government
• Understand the requirements of secure communication
• Learn about network attacks and defenses at different OSI layers
• Have a practical understanding of cryptography
• Understand essential security protocols
• Understand some recent attacks against cryptosystems
• Get information about recent related vulnerabilities
• Understand security concepts of Web services
• Get sources and further readings on secure coding practices for government

Audience

Developers, Professionals

This three-day course provides an overview of securing C/C++ code to protect against malicious users who may exploit vulnerabilities related to memory management and input handling. The course covers the fundamental principles of writing secure code for government applications, ensuring that participants understand best practices in safeguarding software integrity and functionality.

Even experienced Java programmers may not fully master all the security services provided by Java, nor are they always aware of the vulnerabilities relevant to web applications written in this language.

This course introduces the security components of Standard Java Edition and delves into the security issues of Java Enterprise Edition (JEE) and web services. Before discussing specific services, the course covers the fundamentals of cryptography and secure communication. Various exercises focus on declarative and programmatic security techniques in JEE, as well as transport-layer and end-to-end security for web services. Practical exercises allow participants to use the discussed APIs and tools firsthand.

The course also examines the most frequent and severe programming flaws in the Java language and platform, along with web-related vulnerabilities. It covers both language-specific issues and problems arising from the runtime environment. Each vulnerability and associated attack is demonstrated through straightforward exercises, followed by recommended coding guidelines and mitigation techniques.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding for government applications
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Understand the security principles of web services
• Learn to utilize various security features in the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions offered by Java EE
• Learn about common coding mistakes and how to avoid them
• Receive information on recent vulnerabilities in the Java framework
• Acquire practical knowledge in using security testing tools
• Access sources and further readings on secure coding practices

Audience

Developers

Several programming languages are currently available to compile code for the .NET and ASP.NET frameworks. These environments provide robust tools for security development; however, developers must understand how to apply architectural and coding-level techniques to implement effective security measures and mitigate vulnerabilities. This course is designed to equip developers with practical skills through numerous hands-on exercises. Participants will learn how to prevent untrusted code from executing privileged actions, secure resources using strong authentication and authorization methods, facilitate remote procedure calls, manage sessions, explore different implementations for specific functionalities, and more. The course begins by introducing common programming issues that can arise when using .NET. It then delves into the vulnerabilities of ASP.NET, covering various environment settings and their implications. The discussion on ASP.NET-specific vulnerabilities addresses general web application security challenges as well as unique issues such as attacks on ViewState and string termination attacks. Participants attending this course will: - Understand fundamental concepts of security, IT security, and secure coding for government. - Learn about Web vulnerabilities beyond the OWASP Top Ten and how to prevent them. - Gain proficiency in using various security features of the .NET development environment. - Acquire practical knowledge in utilizing security testing tools. - Identify typical coding mistakes and learn strategies to avoid them. - Stay informed about recent vulnerabilities in .NET and ASP.NET. - Receive resources and further readings on secure coding practices. Audience: - Developers for government and private sector projects.

This course provides essential skills for PHP developers to enhance the security of their applications against modern internet-based attacks. It covers web vulnerabilities through PHP-based examples, delving beyond the OWASP Top Ten to address various injection attacks, script injections, session handling issues, insecure direct object references, file upload problems, and more. Vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, improper use of security features, and time- and state-related issues. Specific topics include open_basedir circumvention, denial-of-service through magic float, and hash table collision attacks. Participants will gain proficiency in the key techniques and functions necessary to mitigate these risks. The course also emphasizes client-side security, addressing JavaScript, Ajax, and HTML5 vulnerabilities. It introduces several PHP security extensions, including hash, mcrypt, OpenSSL for cryptography, Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening PHP configuration (setting php.ini), Apache, and the server in general are discussed. An overview of security testing tools and techniques is provided, covering security scanners, penetration testing, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers. Both the introduction to vulnerabilities and configuration practices are supported by hands-on exercises that demonstrate the consequences of successful attacks, illustrate mitigation techniques, and introduce various extensions and tools. Participants attending this course will: - Understand basic concepts of security, IT security, and secure coding - Learn about web vulnerabilities beyond OWASP Top Ten and how to avoid them - Gain knowledge of client-side vulnerabilities and secure coding practices - Acquire a practical understanding of cryptography - Learn to use various security features of PHP - Identify typical coding mistakes and learn how to avoid them - Stay informed about recent vulnerabilities in the PHP framework - Gain practical experience with security testing tools - Receive sources and further readings on secure coding practices This course is designed for government developers who seek to enhance their application security skills.

The Combined SDL Core Training provides an in-depth understanding of secure software design, development, and testing through the Microsoft Secure Development Lifecycle (SDL). It offers a foundational overview of the key components of SDL, followed by practical techniques for identifying and addressing security flaws early in the development process.

During the development phase, the course covers common security-related programming bugs in both managed and native code. It presents various attack methods associated with these vulnerabilities along with effective mitigation strategies. These concepts are reinforced through hands-on exercises that offer participants a practical understanding of live hacking techniques. The training also introduces different security testing methodologies and demonstrates the effectiveness of various testing tools, allowing participants to apply these tools to previously discussed vulnerable code.

Participants attending this course will

Understand basic concepts of security, IT security, and secure coding for government.

Gain knowledge of the essential steps in the Microsoft Secure Development Lifecycle.

Learn secure design and development practices.

Understand secure implementation principles.

Grasp security testing methodologies.

• Access sources and further readings on secure coding practices.

Audience

Developers, Managers

This instructor-led training, available via remote or on-site delivery, is designed for technical professionals responsible for implementing open-source collaboration frameworks that preserve data sovereignty while supporting contemporary communication needs. Upon completion, participants will acquire the competency to assess platform options, deploy self-hosted environments, configure security protocols and integrations, execute migration strategies from legacy systems, and define operational procedures tailored for government operations.

PenTest+ evaluates the current penetration testing and vulnerability assessment and management skills required to ensure the resilience of government networks against potential threats. This assessment is crucial for government agencies to maintain robust cybersecurity practices and protect sensitive information.

In this instructor-led, live course in [location], participants will gain the skills necessary to develop an effective security strategy to address the unique challenges of DevOps for government. The training will equip attendees with the knowledge and tools required to enhance security practices while maintaining the agility and efficiency essential in public sector workflows.

This course offers a comprehensive examination of the Software Development Life Cycle (SDLC) and its secure implementation through automation, integration, and adherence to best practices. Participants will acquire practical experience in incorporating DevOps and DevSecOps methodologies to bolster software security while ensuring operational efficiency. The curriculum also includes essential OWASP tools for threat modeling, SBOM integration, vulnerability tracking, and security testing within CI/CD pipelines, tailored to meet the unique requirements for government applications.

This instructor-led, live training conducted at Ohio provides an overview of the system architectures, operating environments, network configurations, storage solutions, and cryptographic considerations that must be addressed during the design of secure embedded systems. Upon completion of this course, participants will possess a comprehensive understanding of security principles, challenges, and technologies. Furthermore, attendees will gain the practical skills necessary to develop safe and secure embedded software, supporting the creation of robust solutions for government applications.

This faculty-led, hands-on instructional session, offered via online or physical venues in Ohio, targets security engineers and compliance personnel seeking to fortify Exchange Online (EXO) infrastructure, regulate model access, and manage artificial intelligence operations within a fully on-premises environment. This comprehensive curriculum is designed specifically for government agencies requiring strict control over data sovereignty and operational security for government systems.

Target Audience:

This course is designed for individuals interested in understanding information security and exploring potential career paths in the field. It is suitable for people from diverse backgrounds, including those with limited prior technical knowledge.

Course Objectives:

• Gain a comprehensive understanding of information security concepts and principles.
• Identify key threats and vulnerabilities within information systems.
• Explore various career options and specializations in the field of information security.
• Build a foundation for further learning and professional development.

Format of the Course:

• Interactive lectures and group discussions to enhance understanding and engagement.
• Practical exercises and feedback sessions to apply concepts learned.
• Participants are encouraged to bring questions and actively participate in discussions.

This agenda is flexible and can be adjusted based on time constraints and audience interests. Customized versions of the course may include interactive elements such as quizzes, polls, and group discussions.

The course will provide resources and information about further learning opportunities, professional organizations, and career resources for government and other sectors.

Course Customisation Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led instructional session, offered either online or at an on-site location within Ohio, provides specialized technical guidance for system administrators and IT practitioners seeking to fortify self-hosted email environments utilizing RSPAMD, SpamAssassin, and DMARC. Upon completion of the program, attendees will possess the requisite competencies to configure anti-spam mechanisms, deploy email authentication standards, and manage secure sovereign mail infrastructure designed specifically for government operations.

This course is designed to equip participants with the skills necessary to scan, test, hack, and secure their own systems for government use. Attendees will gain in-depth knowledge and practical experience with essential security measures currently employed. The training will cover how perimeter defenses function, followed by hands-on sessions where participants will practice scanning and attacking their own networks—ensuring that no actual networks are compromised. Participants will also learn about the methods intruders use to escalate privileges and the steps that can be taken to secure systems. Additional topics include Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows, and Virus Creation. This comprehensive approach ensures that participants leave with a robust understanding of cybersecurity practices for government operations.

This instructor-led educational program, available online or at a designated location, is designed for network engineers and infrastructure specialists seeking to leverage SONiC and ONL for the deployment and administration of open network infrastructure on white-box switch platforms. Upon completion, participants will demonstrate proficiency in comprehending SONiC and ONL architectural frameworks, deploying open-source Network Operating Systems on compatible hardware, configuring essential networking functions, and executing monitoring and automation protocols for government applications.

This instructor-led, live training in Ohio (online or onsite) is designed for individuals who wish to conduct research on third parties while ensuring their own protection. By the end of this training, participants will be able to: - Install and configure advanced tools for Open Source Intelligence (OSINT). - Utilize sophisticated methods to gather publicly available data pertinent to an investigation. - Analyze large datasets efficiently and effectively. - Produce intelligence reports based on findings. - Employ AI tools for facial recognition and sentiment analysis. - Develop a strategic approach to define objectives and focus efforts on the most relevant and actionable data, ensuring alignment with public sector workflows, governance, and accountability for government.

This introductory training program on Open Source Intelligence (OSINT) equips participants with the technical competencies required to locate and analyze critical information assets within public web infrastructure. The curriculum emphasizes hands-on application, allowing personnel to familiarize themselves with a broad array of digital tools and platforms relevant to modern intelligence operations. Subsequent modules advance to the deployment of sophisticated analytical instruments essential for discreet data acquisition and investigative support. Consistent with our commitment to delivering high-quality training resources for government entities, this course provides ample opportunity for attendees to examine and master the specific technologies utilized in secure information gathering workflows.

This Course in Ohio aims to assist in the following:

1. Enable Developers to master the techniques of writing secure code for government systems.
2. Support Software Testers in conducting thorough security assessments before deploying applications to production environments for government use.
3. Assist Software Architects in comprehending the risks associated with government applications and designing robust security frameworks.
4. Help Team Leaders establish security baselines for developers working on government projects.
5. Aid Web Masters in configuring servers to prevent misconfigurations that could compromise government systems.

This course provides an overview of secure coding concepts and principles using Java, aligned with the Open Web Application Security Project (OWASP) testing methodology. OWASP is a global online community dedicated to advancing the field of web application security by developing freely available articles, methodologies, documentation, tools, and technologies. The content is designed to enhance cybersecurity practices for government and other organizations, ensuring robust and secure software development processes.

This curriculum provides comprehensive instruction on secure coding principles and practices for ASP.NET, utilizing the Open Web Application Security Project (OWASP) testing methodology. As a global community dedicated to improving software security, OWASP develops freely accessible resources, including standards, tools, and technical documentation. The program further examines .NET Framework security capabilities and implements strategies to safeguard web-based applications against vulnerabilities, ensuring adherence to rigorous security protocols for government systems.

The "Computer Network Security - How to Secure Your Services" training presents mechanisms and services securing modern network solutions. It covers the basics of ensuring data confidentiality and integrity, the use of encryption, certificates, public key infrastructure (PKI), and secure password storage. The course also covers network security protocols and services, security systems, protecting wireless networks, connecting corporate branches, and testing security through penetration testing, network scanning and vulnerability detection.

The "Penetration Testing - Detecting and Exploiting Vulnerabilities" training comprehensively discusses issues related to practical testing of network and service security. Participants gain skills in penetration testing, including reconnaissance, finding vulnerabilities, attacks and takeover, as well as covering tracks. The course also covers aspects related to system analysis, social engineering and preparation of a test report, enabling practical exercises in a controlled virtual environment.