In today’s world, safety and responsibility in the handling of Information and Communication Technologies (ICT) are essential for protecting sensitive data and ensure the integrity of the systems. This Diploma in Security and Responsibility is designed to provide you with the knowledge and required skills to identify, analyse and mitigate risks in information systems. Through a practical and up-to-date approach, you will learn about ethical hacking, security policies, defence strategies and remote access techniques. By choosing us, you’ll benefit from structured content tailored to the needs of the job market, featuring case studies and real-life examples that will prepare you to tackle the challenges of IT security.
Sector-specific
Cybersecurity
130 h
ICT Safety and Responsibility
Cybersecurity
130 h
Introduction
Objectives
-
Understanding the basics of information security.
-
Identify and analyse risks in information systems.
-
Apply techniques for ethical hacking in a lawful and responsible manner.
-
Develop and implement security policies effective.
-
Implement strategies advanced security features.
-
Configure and manage firewalls and proxy servers.
-
Integrate solutions for high availability and virtualisation.
Table of Contents
TEACHING UNIT 1. INTRODUCTION AND BASIC CONCEPTS
1. The information society
2. Design, development and implementation
3. Success factors in information security
TEACHING UNIT 2. RISKS INHERENT IN INFORMATION SYSTEMS
1. Risk analysis in information systems
2. Identification of vulnerabilities and threats to information systems
3. Types of malicious code
4. Elements of risk analysis and their interrelationships
5. Control methods for risk analysis
6. The assets involved in the risk analysis and their valuation
7. Threats that may affect the identified assets
8. Details of existing vulnerabilities in information systems
TEACHING UNIT 3. ETHICAL HACKING
1. What is ethical hacking?
2. Legal aspects of ethical hacking
3. Ethical hacker profiles
4. Vulnerability testing
5. Sniffing
6. Types of security testing in web environments
TEACHING UNIT 4. SECURITY POLICIES
1. Introduction to security policies
2. Why are policies important?
3. What a security policy should contain
4. What a security policy should not contain
5. How to draw up an IT security policy
6. Ensuring that decisions on strategy and policy are implemented
TEACHING UNIT 5. SAFETY STRATEGIES
1. Lower privilege
2. Defence in depth
3. Point of impact
4. The weakest link
5. Fail-safe position
6. An established stance of denial: what is not prohibited
7. Established permission stance: what is not permitted
8. Universal participation
9. Diversification of defence
10. Simplicity
TEACHING UNIT 6. IMPLEMENTATION OF ACTIVE SAFETY MECHANISMS
1. Attacks and countermeasures in personal systems
2. Corporate network security
3. Potential risks associated with network services
TEACHING UNIT 7. IMPLEMENTATION OF REMOTE ACCESS TECHNIQUES
1. Basic elements of perimeter security
2. Demilitarised zones
3. Secure subnet architecture
4. Virtual private networks. VPN
5. Advantages and disadvantages compared with dedicated lines
6. Encryption techniques. Public key and private key
7. Remote access servers
TEACHING UNIT 8. INSTALLATION AND CONFIGURATION OF FIREWALLS
1. Use and filtering of the firewall
2. Types of firewalls
3. Installation of firewalls
4. Firewall filtering rules
5. Functional tests. Survey
TEACHING UNIT 9. INSTALLATION AND CONFIGURATION OF «PROXY» SERVERS»
1. Types of «proxy». Characteristics and functions
2. Installation of «proxy» servers»
3. Installation and configuration of «proxy» clients»
4. Configuring caching on a «proxy»
5. Filter settings
6. Authentication methods on a «proxy»
TEACHING UNIT 10. IMPLEMENTATION OF HIGH-AVAILABILITY SOLUTIONS
1. Analysis of high-availability configurations
2. System virtualisation
3. The potential of system virtualisation
4. Virtualisation tools
5. Configuring and using virtual machines
6. High availability and virtualisation
7. Service simulation using virtualisation
More related courses
Sector-specific
Sector-specific
Sector-specific