Cybersecurity Essentials Training Course

Module 1: Introduction to Cybersecurity

• The importance of cybersecurity in the digital age
• Key cybersecurity concepts and terminology
• The CIA triad (Confidentiality, Integrity, Availability)
• The role of a cybersecurity professional
• Practical session: Identifying cybersecurity risks in a simulated business scenario

Module 2: Threat Landscape and Attack Vectors

• Understanding common cyber threats (malware, viruses, ransomware)
• Social engineering and phishing attacks
• Types of attackers and their motivations
• An overview of the most common attack vectors
• Practical session: Analyzing a simulated phishing email to identify its malicious intent

Module 3: Network Security Fundamentals

• The OSI model and network protocols
• The role of firewalls and intrusion detection/prevention systems (IDS/IPS)
• Implementing network segmentation
• Virtual Private Networks (VPNs)
• Practical session: Configuring firewall rules in a virtual lab environment

Module 4: Endpoint Security

• The importance of securing endpoints (laptops, servers, mobile devices)
• Using antivirus and anti-malware software
• Patch management and system hardening
• Host-based firewalls
• Practical session: Applying security configurations to a Windows or Linux server

Module 5: Identity and Access Management (IAM)

• Authentication, authorization, and accounting (AAA)
• The principle of least privilege
• Multi-factor authentication (MFA)
• Password policies and management
• Practical session: Configuring and testing MFA for a user account

Module 6: Cryptography and Public Key Infrastructure (PKI)

• An introduction to symmetric and asymmetric encryption
• Hashing and digital signatures
• The role of Public Key Infrastructure (PKI)
• SSL/TLS certificates
• Practical session: Encrypting and decrypting a file using encryption tools

Module 7: Web Application Security

• Common web vulnerabilities (OWASP Top 10)
• SQL injection and Cross-Site Scripting (XSS)
• Secure coding practices
• Web Application Firewalls (WAFs)
• Practical session: Identifying and demonstrating a web vulnerability in a simulated web application

Module 8: Cloud Security

• The shared responsibility model in cloud computing
• Securing IaaS, PaaS, and SaaS environments
• Cloud access security brokers (CASBs)
• Best practices for securing data in the cloud
• Practical session: Configuring security groups in a cloud platform like AWS or Azure

Module 9: Wireless and Mobile Security

• Securing Wi-Fi networks (WPA3)
• The risks of public Wi-Fi
• Mobile device management (MDM)
• Best practices for mobile app security
• Practical session: Configuring a secure wireless network and testing its security

Module 10: Physical Security

• The importance of physical security in cybersecurity
• Access control and surveillance systems
• Protecting data centers and server rooms
• Disposal of sensitive information
• Practical session: A discussion and risk assessment of a simulated office environment's physical security

Module 11: Incident Response and Management

• The incident response lifecycle (preparation, detection, analysis, containment, eradication, recovery)
• Creating an incident response plan
• The role of a Computer Security Incident Response Team (CSIRT)
• Post-incident review
• Practical session: Simulating a cybersecurity incident and following a response plan

Module 12: Security Information and Event Management (SIEM)

• What is a SIEM and its purpose
• Collecting and analyzing security logs
• Creating correlation rules
• Responding to alerts
• Practical session: Using a simple SIEM tool to analyze log data and identify a security event

Module 13: Vulnerability Management and Penetration Testing

• The difference between vulnerability scanning and penetration testing
• Using vulnerability scanning tools
• The phases of a penetration test
• The importance of regular testing
• Practical session: Performing a basic vulnerability scan on a virtual machine

Module 14: Cybersecurity Laws, Regulations, and Compliance

• An introduction to key laws and regulations (GDPR, HIPAA)
• The role of compliance in cybersecurity
• Best practices for maintaining compliance
• Practical session: A discussion on how a company would comply with GDPR

Module 15: Risk Management

• Identifying and assessing cybersecurity risks
• Developing a risk management framework
• Risk mitigation strategies
• The importance of risk communication
• Practical session: Performing a risk assessment for a company's web server

Module 16: Social Engineering and Phishing Awareness

• The psychology of social engineering
• Common social engineering tactics
• How to identify and avoid phishing attacks
• Conducting security awareness training
• Practical session: A role-playing exercise to demonstrate social engineering tactics

Module 17: Cybersecurity Policies and Procedures

• The importance of security policies
• Key components of a cybersecurity policy
• Developing and implementing security procedures
• The role of an Acceptable Use Policy (AUP)
• Practical session: Drafting a simple security policy for a company

Module 18: Capstone Project: Developing a Cybersecurity Plan

• A comprehensive review of all course modules
• Participants work on a full-scale cybersecurity project
• Designing a cybersecurity plan for a fictional organization
• Implementing the plan and presenting it to the group
• Practical session: Finalizing and presenting a complete cybersecurity plan

Requirements:

• Participants should be reasonably proficient in English.
• Applicants must live up to Phoenix Training Center admission criteria.

Terms and Conditions

1. Discounts: Organizations sponsoring Four Participants will have the 5th attend Free

2. What is catered for by the Course Fees: Fees cater for all requirements for the training – Learning materials, Lunches, Teas, Snacks and Certification. All participants will additionally cater for their travel and accommodation expenses, visa application, insurance, and other personal expenses.

3. Certificate Awarded: Participants are awarded Certificates of Participation at the end of the training.

4. The program content shown here is for guidance purposes only. Our continuous course improvement process may lead to changes in topics and course structure.

5. Approval of Course: Our Programs are NITA Approved. Participating organizations can therefore claim reimbursement on fees paid in accordance with NITA Rules.

Booking for Training

Simply send an email to the Training Officer on training@phoenixtrainingcenter.com and we will send you a registration form. We advise you to book early to avoid missing a seat to this training.

Or call us on +254720272325 / +254725012095 / +254724452588

Payment Options

We provide 3 payment options, choose one for your convenience, and kindly make payments at least 5 days before the Training start date to reserve your seat:

1. Groups of 5 People and Above – Cheque Payments to: Armstrong Global Training & Development Center Limited should be paid in advance, 5 days to the training.

2. Invoice: We can send a bill directly to you or your company.

3. Deposit directly into Bank Account (Account details provided upon request)

Cancellation Policy

1. Payment for all courses includes a registration fee, which is non-refundable, and equals 15% of the total sum of the course fee.

2. Participants may cancel attendance 14 days or more prior to the training commencement date.

3. No refunds will be made 14 days or less before the training commencement date. However, participants who are unable to attend may opt to attend a similar training course at a later date or send a substitute participant provided the participation criteria have been met.

Tailor Made Courses

This training course can also be customized for your institution upon request for a minimum of 5 participants. You can have it conducted at our Training Centre or at a convenient location. For further inquiries, please contact us on Tel: +254720272325 / +254725012095 / +254724452588 or Email training@phoenixtrainingcenter.com

Accommodation and Airport Transfer

Accommodation and Airport Transfer is arranged upon request and at extra cost. For reservations contact the Training Officer on Email: training@phoenixtrainingcenter.com or on Tel: +254720272325 / +254725012095 / +254724452588