Certified Cyber Security Professional Course

In this module the candidate will learn about Security Essentials, the need of Cyber Security, CIA Triad, Vulnerability, Thread, and Risk, Risk Governance and Management, Security Architecture, Governance and Auditing, Computer Security and Design.

• The need for Cyber Security
• CIA Triad
• Vulnerability, Threat, and Risk
• Risk Governance & Risk Management
• Security Architecture
• Security Governance
• Security Auditing
• Compliance
• Computer Security Architecture & Design

In this module the candidate will learn about Background of Cryptography, Symmetric Cryptography, Data Encryption, Triple DES, The Advanced Encryption Standard and International Data Encryption Algorithm. Other topics such as what is Blowfish, RC4, RC5, RC6, Asymmetric Cryptography, The Diffie- Hellman Algorithm, RSA, ECC, Cryptographic Hash Functions, Digital certificates and its life cycle will also be explained.

• Background of Cryptography
• Symmetric Cryptography
• Data Encryption Standard (DES)
• Triple-DES
• The Advanced Encryption Standard (AES)
• International Data Encryption Algorithm (IDEA)
• Blowfish
• RC4
• RC5
• RC6
• Asymmetric Cryptography
• The Diffie-Hellman Algorithm
• RSA
• Elliptic Curve Cryptosystems (ECC)
• Cryptographic Hash Functions
• Attacks against Encrypted Data
• Digital Certificates and its Format (X.509, X.500)
• Certificate Authority, Certificate Repository, Certificate Revocation lists
• Digital Certificate life cycle (Initialize, Issue, Cancel)

In this module the candidate will learn about Network and Layered Architecture, Transmission Control Protocol, Hybrid TCP/IPModel, Application, Layer Protocols, Transport Layer Protocols, Network and Internet Protocols, Link layer and Resolution Protocols.

• Network Architecture, Protocols and Technologies:
• Layered Architecture, Open Systems Interconnect (OSI) Model
• Transmission Control Protocol / Internet Protocol (TCP/IP)
• Hybrid TCP/IP Model
• Application Layer Protocols: HTTP, SNMP, DNS, POP, SMTP
• Transport layer protocols: Transmission Control Protocol (TCP), User Datagram Protocol (UDP)
• Network/Internet layer protocols:
• Internet Protocol (IP) v4, IPv6, IPsec protocols
• Link-layer protocols: Address
• Resolution Protocol (ARP) / Reverse ARP / Proxy ARP, Ethernet, VLAN

Importance of Application Security

OWASP Top 10 web application vulnerabilities

SSDLC (Secure Software Development Life Cycle)

Data Security

Data Security Controls

Endpoint Security

Host/ Endpoint Security Controls

Authorization

Authentication

Access Control

Privilege levels

Identity & Access Management Process and activities (Role-Based, Single Sign-on)

Cloud Computing Architectural Framework

Concerns & Best Practices

Governance and Enterprise Risk Management

Legal Issues: Contracts and Electronic Discovery

Compliance and Audit Management

Information Management and Data Security

Interoperability and Portability

Traditional Security, Business Continuity, and Disaster Recovery

Data Centre Operations

Incident Response

Application Security

Encryption and Key Management

Identity, Entitlement, and Access Management

Virtualization

Security as a Service

Phase 1 —Reconnaissance: Adversary identifies and selects a Target

Phase 2 —Weaponize: Adversary packages an exploit into a payload designed to execute on the targeted computer/network

Phase 3 —Deliver: Adversary delivers the payload to the target system

Phase 4 —Exploit: Adversary code is executed on the target system

Phase 5 —Install: Adversary installs remote access software

that provides a persistent presence within the targeted environment or system

Phase 6 —Command and Control: Adversary employs remote access

mechanisms to establish a command and control channel with the compromised device

Phase 7 —Act on Objectives: Adversary pursues intended

objectives e.g., data exfiltration, lateral movement to other targets

Key Security Business Processes

Corp. & Security Governance

IT Strategy management

Portfolio/Program/Project management

Change management

Supplier (third party) management

Problem management

Knowledge management

Info-sec management

BCP

IT Operations management

Overview of top 20 security controls

Business Communication

Preparation for the Interview

Presentation Skills

Resume Building Technique