Proactive Cybersecurity for IT Infrastructure Professionals

To provide participants with in-depth knowledge and practical skills to effectively manage cybersecurity within an organization’s IT infrastructure, identify and mitigate security risks, implement appropriate protection measures, and ensure compliance with regulatory requirements.

• IT Security Specialists

• Security Managers

• System and Network Administrators

• IT Infrastructure Managers

• DevOps and IT Support Team Members

• Individuals planning to specialize in cybersecurity

• Perform cybersecurity risk analysis and plan risk management measures

• Manage access and identity security using best practice principles

• Configure and monitor security solutions (firewall, IDS/IPS, SIEM, etc.)

• Respond to incidents, conduct analysis, and ensure proper documentation

• Ensure system security updates and manage vulnerabilities

• Develop and maintain security policies and procedures

• Ensure compliance with GDPR, ISO 27001, and other applicable standards

1. Cybersecurity Fundamentals and Threat Landscape
   • Key cybersecurity terminology
   • Types of attacks (malware, ransomware, phishing, DDoS, insider threats)
   • Current trends and real-world examples
   • Social engineering and the human factor

2. Risk Management and Security Strategy
   • IT security risk assessment methods
   • Selection and implementation of security controls (NIST, CIS, ISO 27001)
   • Cybersecurity policy and strategy development
   • Business Continuity and Disaster Recovery (BCP/DRP) planning

3. Network Security
   • Segmentation, VLANs, VPNs
   • Management of trusted and untrusted zones
   • Attack surface reduction
   • Firewall and IDS/IPS configuration and monitoring
   • Network monitoring tools (Wireshark, Zeek, NetFlow)

4. Identity and Access Management (IAM)
   • Authentication and authorization mechanisms
   • Implementation of multi-factor authentication (MFA)
   • AD/LDAP and access rights management
   • Privileged Access Management (PAM)

5. Security Monitoring and Log Analysis
   • SIEM implementation and configuration
   • Log analysis (Windows, Linux, network devices)
   • Setting alerts and response actions
   • Identifying and classifying incidents

6. Incident Management and Response
   • Incident response process (preparation, detection, containment, eradication, recovery, lessons learned)
   • Incident documentation and reporting
   • Digital forensics tools and techniques
   • Minimizing business and reputational impact

7. Security Testing and Vulnerability Management
   • Vulnerability scanning tools (Nessus, OpenVAS, Qualys)
   • Patch management process
   • Basics of penetration testing
   • Automation scripts and best practices

8. Compliance, Standards, and Regulations
   • GDPR, ISO/IEC 27001, NIS2
   • Documentation and audit requirements
   • Internal controls and compliance reporting
   • Employee training and awareness programs

9. Cloud Security and Modern Architectures
   • Security in cloud environments (AWS, Azure, GCP)
   • Zero Trust model
   • DevSecOps approach
   • Security in containerized environments (Docker, Kubernetes)

10. Practical Sessions, Simulations, and Final Assessment
    • Incident response simulation
    • SIEM and vulnerability scanning tasks
    • Development of real-world security policies and procedures
    • Final assessment (theory test + practical assignment)