Cyber Security Masterclass: Testing and Security Assessment

欢迎来到本课程。当公司以综合方式联合起来工作时，必须特别注意确保各方承诺提供必要水平的保护、责任和责任，这应在各方签署的合同中明确规定。您可以聘请最优秀的人员，制定完善的政策和程序，并部署世界一流的技术来保护您的信息系统，但如果您不定期评估这些措施的有效性，您的组织将不会长期保持安全。不幸的是，数以千计的好心组织以艰难的方式了解了这一说法的真相，只有在发生安全漏洞之后才意识到，他们最初实施的最先进的控制措施随着时间的推移变得不那么有效。

本课程涵盖了安全评估和测试的一些最重要的元素。我们首先讨论审计策略，特别是使用我们自己的内部审计师或聘请外部承包商的利弊。然后我们转向测试我们的技术安全控制的方法。第三个主要部分涉及测试我们的行政控制，这些控制主要通过政策实施。最后，在我们有足够的经验数据来评估我们的立场之后，我们将讨论如何报告我们的发现以及这些发现如何影响组织内的执行决策。

在本课程中，您将学习

评估和测试策略

渗透测试和漏洞测试

测试安全控制

安全控制测试策略

分析和报告结果

This cyber security course will teach you how to verify the security of our information systems

Published 05/2022
MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English + srt | Duration: 22 lectures (2h 11m) | Size: 855.3 MB

What you’ll learn

Assessment and testing strategies
Penetration Testing & Vulnerability Testing
Testing security controls
Security Control Testing Strategies
Analyzing and reporting results

Requirements

Access to a computer with an internet connection.

Description

Welcome to this course. When companies come together to work in an integrated manner, special care must be taken to ensure that each party promises to provide the necessary level of protection, liability, and responsibility, which should be clearly defined in the contracts each party signs. You can hire the best people, develop sound policies and procedures, and deploy worldclass technology in an effort to secure your information systems, but if you do not regularly assess the effectiveness of these measures, your organization will not be secure for long. Unfortunately, thousands of well-intentioned organizations have learned the truth of this statement the hard way, realizing only after a security breach has occurred that the state-of-the-art controls they put into place initially have become less effective over time. So unless your organization is continuously assessing and improving its security posture, that posture will become ineffective over time.

This course covers some of the most important elements of security assessments and testing. We start by discussing audit strategies, particularly the pros and cons of using our own internal auditors or bringing in external contractors. We then move on to approaches to testing our technical security controls. The third major section deals with testing our administrative controls, which are mostly implemented through polices. Finally, after we have enough empirical data to assess our posture, we discuss how to report our findings and how those findings play into the executive decision making within the organization.

In this course, you’ll learn

Assessment and testing strategies

Penetration Testing & Vulnerability Testing

Testing security controls

Security Control Testing Strategies

Analyzing and reporting results

Who this course is for
Cybersecurity professionals
Anyone interested in cyber security