IT Security Fundamentals

QA Ltd.
Aberdeen, Birmingham, Bristol, Edinburgh, Exeter, Glasgow, Leeds, London, Manchester, Slough, United Kingdom

Course Format: Classroom | E-learning | Virtual Class | Online | On-site | Blended | Self-paced

Course Description:

'' IT security is one of the Key concerns of organisations today. Protection of company data, either on networked systems within the company or whilst in transit over the Internet has become a priority. Due to the public nature of the Internet, companies require the ability to protect their systems from unauthorised access, but at the same time allow full use by authorised personnel. When sending confidential information across the network, companies want to be sure that the data cannot be read by third parties, but also that the recipient can recover the information correctly.

This comprehensive course addresses IT security concerns by giving delegates a clear insight into many issues involved and how best to address them.

This course is designed for IT professionals and technical managers who want to understand the key IT security issues and how best to address them. Systems analysts and designers will also benefit. This course discusses IT security concepts and technologies rather than going into the technical detail of individual products.

This course makes use of practical hands-on exercises to reinforce the concepts covered in the lecture material in addition to demonstrations during the presentation sessions.



Prerequisites
Delegates should be familiar with the concepts of networking, possibly obtained by attending our Introduction to Networking course. A working knowledge of TCP/IP and standard Internet services (such as web, email and FTP) is essential.
Previous knowledge and use of the Internet, possibly gained through attending QA’s Internet Technology Fundamentals course is recommended. Familiarity with Windows, Linux and/or UNIX would be an advantage.

Delegates will learn how to
Understanding the key IT security threats
Discuss Cryptography and Authentication
Understand IT Security Policies
Appreciate the importance of physical security
Understand how to secure the Host, perimeter, network, applications and data
Plan for maintaining business continuity
Respond to security incidents.

Course outline


Introduction to IT Security

Why IT security is important; Understanding threats, vulnerabilities and attacks; Defence in depth; People and IT security; Sources of good information.

Understanding the threats

Who are the attackers and why do they do it? Stages of an External attack; Attacking the user; Risk Management Processes.

Cryptography and IT Security

Cryptography primer; Principles of Encryption; Methods of breaking encryption; Uses of encryption; Hashing; Digital signatures; Digital certificates; PKI.

Authentication

Principles of authentication; Authentication methods; Kerberos; Identity Management.

IT Security Policies

Defining security objectives; Writing a corporate security policy; International standards -ISO 17799, Common criteria; Legal requirements; User awareness programs.

Physical security

Importance of physical security; Physical Security mechanisms; Server and Laptop security.

Securing the Host

Principles of securing host systems; Checking systems using vulnerability scanners; Case Study �Hardening Windows; Case Study �Hardening Linux.

Securing the perimeter

Where is the perimeter? Issues with connecting to the Internet; Network configurations: perimeter networks, bastion hosts; Introduction to firewalls; packet filtering, proxies, stateful inspection, application firewalls, firewall logging.

Securing the network

Introduction to TCP/IP; Security weaknesses of TCP/IP; Network device security; Using IPsec and SSL to secure network traffic; Extending the network with remote access and wireless; Network Intrusion detection.

Securing applications

General guidance on securing applications; Securing web applications and FTP; Securing E-mail systems; Securing databases; Writing secure code.

Securing data

Introduction to access control mechanisms; Using groups to grant access; Securing data using encryption and signing; Digital rights management; Host based intrusion detection.

The Final Frontier

IT Security issues that users have to face; Good practise for users.

Maintaining business continuity

Introduction to business continuity planning; Being prepared for disaster; Secure backup and recovery.

Responding to security incidents

Introduction to incident response; Identifying security incidents; Incident response methodology; Computer forensics. ...''

Elements of this syllabus are subject to change.

Phone:0844 871 2080

School Address:

TEL: 0844 871 2080
E-mail us: info@qa.com

Jobs & Resumes: Aberdeen, Birmingham, Bristol, Edinburgh, Exeter, Glasgow, Leeds, London, Manchester, Slough
Houses & Roommates: Aberdeen, Birmingham, Bristol, Edinburgh, Exeter, Glasgow, Leeds, London, Manchester, Slough
Travel Agencies: Birmingham, Bristol, Edinburgh, Leeds, London, Manchester,

Search other schools for IT Security Fundamentals training resources.

ISEB02 Certificate in Data Protection
CFIA Forensic Artefacts �Hands On
CISSP
CSTA Ethical Hacking �Hands On 1
CSTP Ethical Hacking �Hands On 2
Hacking Insight for Managers
Information Security Risk Assessment
ISEB Certificate in Information Security Management Principles
WiFi Security �Hands On
Architecting and Designing J2EE Applications
Java Programming Language
Developing Applications with the Java SE Platform
Accelerated Migration to Java Enterprise Edition 5
Advanced Java
Agile UML Modelling for Developers

Notice: The course description on this page was captured from the Internet as historical reference or submitted by visitors. It was archived statically and not updated from day to day.
 

Facts: We serve the schools and students around the world. Major visitors come from India, United States, United Kingdom, Canada, Australia, Philippines, Malaysia, Singapore and South Africa.