Description
Confidentiality. Integrity and Availability of operational and informational assets. Technological evolution. Governance and Compliance. Laws and Regulations. Enterprise Security Policy framework. Information protection. Network Security. Information Classification. Identity and Access Management. Incident Management. Operations Management. Cryptography. Physical Security. Security Assessments and Reporting.

Description
Security measures within a company. Basic concepts in Cyber Security. Introduction to attacks. Offensive strategy. Red team. Discovery phase. Simulation of an attack, Defensive strategy. Blue team. Use and integration of detection tools. Case analysis. Introduction to the cyber profession.

Description
Installation, configuration, and optimization of computing servers. File servers. Mail servers. Cloud servers. Organization and management of computing servers. Access control, permissions, and privileges. Group policy. Configuration and optimization of the security of computing servers. Frequent attacks and countermeasures for computing servers. Hardening of servers operating systems. Bastioning of computing servers. Security of server networks. Server maintenance.

Description
Computer network components and network architecture in a security context: workstations, servers, web applications, databases, routers, switches, wireless access point, voice over IP (VoIP), firewall, proxy server (Proxy), antivirus, emails, content filtering, authentication, network security monitoring. Malware detection. Basic network services. Virtualization. Standards, norms and laws. Network and security architecture principles : types of networks, network zoning or segmentation, traffic flows, interzone security. Network protocols and security. Relationships between the various networks and security components.

Description
Introduction to application security. Basic concepts. Client-Server validations. Types of vulnerabilities. Development errors leading to application vulnerabilities. Exploitation of vulnerabilities. Risk mitigation. Remediation plan. Secure development life cycle. Securing data in a database. ISO 22701. Storage strategies. Data validation.

Description
Phases of a cyber attack : recognition, scanning, exploiting vulnerabilities and obtaining access, maintaining access, covering traces. Hacking tools and techniques used in cyber attacks. Social engineering, phishing, cyber attack case analysis. Planning of intrusion tests and consideration of legal aspects. Cyber attack simulation.

Description
Embedded System, Internet of Things (IoT) and machine-to-machine (M2M) communication. Home network security risk caused by the IoT technology. Evaluation of the home or commercial network security with regards to the installation of IoT. Elaboration of a guide line in home or commercial network security. Evaluation of the network security impact in using the IoT technology in a home, commercial, industrial and governmental environment. Defining network security principle when developing and deploying IoT.

Description
Basic concepts of scripting languages. Review of key elements, operators, pipeline, conditions and loops. Command structures. Interaction with the operating system. Introduction to the common information model. Particularities of variables, objects, classes and their methods. String, date, array and structured data manipulation. PowerShell and Windows exception management. Creation and use of modules. Remote administration. Managing tasks and jobs. Profiles management. Regular expression. Data formatting. Logging.

Description
Programming languages: interpreted, structured imperative, functional, object-oriented, cross-paradigm and platform. Data analysis, including filtering, mapping, classification, clustering, evaluation metrics. Application of multi-tasking and multi-process programming paradigms. Networks and communication protocols. Data manipulation and machine learning. Commands and scripts execution. Case studies applied to cyber security.

Description
Incident response process : preparation, identification, containment, investigation, eradication, recovery, and lessons learned. Malicious code analysis. Signature-based intrusion detection. Anomaly-based intrusion detection. Using security information and event management to detect incidents. Detecting different attacks based on network traffic analysis. Network flow analysis for intrusion detection. Collection and analysis of security events from endpoints, servers, and network devices. Network architecture for intrusion detection.

Description
Steps in a hacking investigation. Logging of web servers. Log analysis tools and techniques. General indications of suspicious activity. Vulnerability scans. Circumvention attacks. Session attacks. Injection attacks. Denial of service attacks. Web server attack scans and an introduction to malware scanning. Application exercises.

Description
Information security risk management process: objectives, methodologies, choice of tools. Risk analysis. Information security and cybersecurity. Classification of information relative to risk. Risks, threats, vulnerabilities and impacts. Internal control environment, security controls and indicators. Emerging Technology Risks. Business continuity and business impact analysis. Cyberfraud, corporate fraud and anti-fraud plan.

Description