Professional in Cyber Security Certification

• Lesson 1 – Course Introduction
• Lesson 2 – Cybersecurity Fundamentals
• Lesson 3 – Enterprise Architecture and Components
• Lesson 4 – Information System Governance and Risk Assessment
• Lesson 5 – Incident Management

Module 01: Ethical Hacking: An Introduction

In this first module, you will learn the basics of ethical hacking that are essential for the CEH exam.

Overview of Information Security

• 1.1 Internet is an Integral Part of Business and Personal Life – What Happens Online in 60 Seconds
• 1.2 Essential Terminology
• 1.3 Elements of Information Security
• 1.4 The Security, Functionality, and Usability Triangle

Attack Vectors and Threats to Information Security

• 1.5 Motives, Goals, and Objectives of Information Security Attacks
• 1.6 Top Information Security Attack Vectors
• 1.7 Information Security Threat Categories
• 1.8 Types of Attacks on a System
• 1.9 Information Warfare

Basic Concepts of Hacking

• 1.10 What is Hacking?
• 1.11Who is a Hacker?
• 1.12 Hacker Classes
• 1.13 Hacking Phases

Basic Concepts of Ethical Hacking

• 1.14 What is Ethical Hacking?
• 1.15 Why is Ethical Hacking Necessary?
• 1.16 Scope and Limitations of Ethical Hacking
• 1.17 Skills of an Ethical Hacker

Information Security Controls

• 1.18 Information Assurance (IA)
• 1.19 Information Security Management Program
• 1.20 Enterprise Information Security Architecture (EISA)
• 1.21 Network Security Zoning
• 1.22 Defense-in-Depth
• 1.23 Information Security Policies
• 1.24 Physical Security
• 1.25 What is Risk?
• 1.26 Threat Modeling
• 1.27 Incident Management
• 1.28 Security Incident and Event Management (SIEM)
• 1.29 User Behavior Analytics (UBA)
• 1.30 Network Security Controls
• 1.31 Identity and Access Management (IAM)
• 1.32 Data Leakage
• 1.33 Data Backup
• 1.34 Data Recovery
• 1.35 Role of AI/ML in Cyber Security

Concepts of Penetration testing

• 1.36 Penetration Testing
• 1.37 Why Penetration Testing
• 1.38 Comparing Security Audit, Vulnerability Assessment, and Penetration Testing
• 1.39 Blue Teaming/Red Teaming
• 1.40 Types of Penetration Testing
• 1.41 Phases of Penetration Testing
• 1.42 Security Testing Methodology

Laws and Standards of information Security

• 1.43 Payment Card Industry Data Security Standard (PCI-DSS)
• 1.44 ISO/IEC 27001:2013
• 1.45 Health Insurance Portability and Accountability Act (HIPAA)
• 1.46 Sarbanes Oxley Act (SOX)
• 1.47 The Digital Millennium Copyright Act (DMCA)
• 1.48 Federal Information Security Management Act (FISMA)
• 1.49 Cyber Law in Different Countries

Module 02: Basics of Reconnaissance and Footprinting

Moving ahead in this Ethical Hacking course, you will master the first phase of ethical hacking, i.e. Footprinting and Reconnaissance

Concepts of Footprinting

• 2.3 Footprinting through Search Engines
• 2.4 Footprint Using Advanced Google Hacking Techniques
• 2.5 Information Gathering Using Google Advanced Search and Image Search
• 2.6 Google Hacking Database
• 2.7 VoIP and VPN Footprinting through Google Hacking Database

Footprinting Using Web Services

• 2.8 Finding Company’s Top-Level Domains (TLDs) and Sub-Domains
• 2.9 Finding the Geographical Location of the Target
• 2.10 People Search on Social Networking Sites and People Search Services
• 2.11 Gathering Information from LinkedIn
• 2.12 Gathering Information from Financial Services
• 2.13 Footprinting through Job Sites
• 2.14 Monitoring Target Using Alerts
• 2.15 Information Gathering Using Groups, Forums, and Blogs
• 2.16 Determining the Operating System
• 2.17 VoIP and VPN Footprinting through SHODAN

Footprinting Using Social Networking Sites

• 2.18 Collecting Information through Social Engineering on Social Networking Sites

Footprinting of Websites

• 2.19 Website Footprinting
• 2.20 Website Footprinting using Web Spiders
• 2.21 Mirroring Entire Website
• 2.22 Extracting Website Information from https://archive.org
• 2.23 Extracting Metadata of Public Documents
• 2.24 Monitoring Web Pages for Updates and Changes

Footprinting of Emails

• 2.25 Tracking Email Communications
• 2.26 Collecting Information from Email Header
• 2.27 Email Tracking Tools

Competitive Intelligence

• 2.28 Competitive Intelligence Gathering
• 2.29 Competitive Intelligence – When When did this company begin? How did it develop?
• 2.30 Competitive Intelligence – What are the company’s plans?
• 2.31 Competitive Intelligence – What do expert opinions say about the company?
• 2.32 Monitoring Website Traffic of Target Company
• 2.33 Tracking Online Reputation of the Target

Footprinting using Whois

• 2.34 Whois Lookup
• 2.35 Whois Lookup Result Analysis
• 2.36 Whois Lookup Tools
• 2.37 Finding IP Geolocation Information

DNS Footprinting

• 2.38 Extracting DNS Information
• 2.39 DNS Interrogation Tools

Network Footprinting

• 2.40 Locate the Network Range
• 2.41 Traceroute
• 2.42 Traceroute Analysis
• 2.43 Traceroute Tools

Footprinting by Social Engineering

• 2.44 Footprinting through Social Engineering
• 2.45 Collect Information Using Eavesdropping, Shoulder Surfing, and Dumpster Diving

Tools used for Footprinting

• 2.46 Maltego
• 2.47 Recon-ng
• 2.48 FOCA
• 2.49 Recon-Dog
• 2.50 OSRFramework
• 2.51 Additional Footprinting Tools

Countermeasures

• 2.52 Footprinting Countermeasures

Footprinting Pen Testing

• 2.53 Footprinting Pen Testing
• 2.54 Footprinting Pen Testing Report Templates

Threat Detection

You will have the opportunity to participate in a number of cases where you will get first-hand experience as a member of the ethical hacking team. You will assist in anticipating and preventing cybercrimes as well as identifying threats and data breaches.

Cracking Wifi

In this project, you will learn a lot about WiFi cracking. You will use a variety of pertinent tools, technologies, and techniques to crack WiFi. You will learn how to break into different WiFi routers. The WPA/WPA2 are usually used.

Improvement of Auditing in the Restaurant

The project gives you the knowledge you need to learn how to improve any restaurant’s security system as needed. You will primarily employ a variety of techniques, including system resilience and the implementation of KPIs.

Data Security of a BPO Firm

You will understand the BPO firm’s data security. Working with data that has been generated by machines, you will search for irregularities, threats, and other things like suspicious activity. Additionally, the Splunk SIEM tool will be used to manage a sizable database.

• Module 01: Attacks, Threats, and Vulnerabilities
• Different types of social engineering techniques
• Potential indicators to determine the type of attack
• Potential indicators to determine the type of attack
• Potential indicators associated with network attacks
• Different threat actors, vectors, and intelligence sources
• Security concerns associated with various types of vulnerabilities
• Techniques used in Security Assessments & Penetration testing

• 1.1 Overview

Module 2: Security and Risk Management

• 2.1 Security and risk management
• 2.2 Information security management
• 2.3 Security controls
• 2.4 Information security management and governance
• 2.5 Goals, missions, and objectives
• 2.6 Due care
• 2.7 Security policy
• 2.8 Compliance
• 2.9 Cybercrimes
• 2.10 Legal systems
• 2.11 Intellectual Property (IP) law
• 2.12 Privacy
• 2.13 General data protection regulation
• 2.14 Security
• 2.15 Risk analysis and types
• 2.16 Security control assessment
• 2.17 Threat modeling
• 2.18 Supply-chain risk management
• 2.19 Third-party management
• 2.20 Business continuity planning and phases
• 2.21 Personal security management
• 2.22 Security awareness training
• 2.23 Program effectiveness evaluation

Module 3: Asset Security

• 3.1 Information and data classification
• 3.2 Data life cycle and management
• 3.3 Different roles
• 3.4 Data remanence
• 3.5 Privacy
• 3.6 Data states
• 3.7 Data loss prevention

Module 4: Security Engineering

• 4.1 Security engineering and architecture
• 4.2 Security models
• 4.3 Evaluation criteria
• 4.4 System security
• 4.5 CPU
• 4.6 Memory
• 4.7 Security mode
• 4.8 Cloud Computing
• 4.9 IoT
• 4.10 Industrial control system (ICS)
• 4.11 Cryptography
• 4.12 Encryption methods
• 4.13 DES
• 4.14 Asymmetric cryptography
• 4.15 Public key infrastructure
• 4.16 Cryptanalysis
• 4.17 Key management
• 4.18 Critical path analysis
• 4.19 Site location
• 4.20 Fire
• 4.21 HVAC

Module 5: Identity and Access Management

• 5.1 Identity management
• 5.2 Biometrics
• 5.3 Passwords
• 5.4 Tokens
• 5.5 Memory cards and smart cards
• 5.6 Access and authorization
• 5.7 Identity management implementation
• 5.8 Kerberos
• 5.9 Access control types and models
• 5.10 Access control tools and techniques
• 5.11 Accountability
• 5.12 Access control monitoring
• 5.13 Identity proofing
• 5.14 Markup languages
• 5.15 Identity as a Service (IDaaS)

Module 6: Communications and Network Security

• 6.1 Network architecture and design
• 6.2 IP addressing
• 6.3 Network protocols
• 6.4 Transmission media
• 6.5 Firewall
• 6.6 Intrusion detection and prevention system
• 6.7 Network access control (NAC)
• 6.8 Content delivery network (CDN)
• 6.9 Networks
• 6.10 Software-defined networking (SDN)
• 6.11 Remote access
• 6.12 Internet Security Protocol (IPsec)
• 6.13 Voice Over Internet Protocol (VoIP)
• 6.14 Phreaking
• 6.15 Secure access protocols
• 6.16 Wireless technologies
• 6.17 Network attacks

Module 7: Security Operations

• 7.1 Investigation
• 7.2 Forensic investigation
• 7.3 Evidence
• 7.4 Electronic discovery
• 7.5 Incident management
• 7.6 Security operations management
• 7.7 Identity and access management
• 7.8 Assets
• 7.9 Malware
• 7.10 Management
• 7.11 Recovery and backup
• 7.12 Disaster recovery
• 7.13 Perimeter security

Module 8: Security Assessment and Testing

• 8.1 Security assessment
• 8.2 Vulnerability assessment
• 8.3 Penetration testing
• 8.4 Audits
• 8.5 Log management
• 8.6 Synthetic and real transaction
• 8.7 Testing
• 8.8 Software testing
• 8.9 Interface
• 8.10 Key performance indicators (KPIs)

Module 9: Software Development Security

• 9.1 Importance of software development security
• 9.2 Programming concepts
• 9.3 Systems development life cycle
• 9.4 Application program interface
• 9.5 Software security and assurance
• 9.6 Database and data warehouse environments
• 9.7 Knowledge management
• 9.8 Web application environment
• 9.9 Security threats and attacks

• 1.1 Security concepts
• 1.2 Defense in due care, depth, and due diligence
• 1.3 Security functionalities and controls
• 1.4 Concepts of Cloud Computing
• 1.5 Business drivers
• 1.6 Elasticity, scalability, vendor lock-in, and vendor lock-out
• 1.7 Advantages of Cloud Computing concepts
• 1.8 Architecture of cloud reference
• 1.9 Cloud Computing: Actors and roles
• 1.10 Categories of cloud service: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)
• 1.11 Management of cloud service categories
• 1.12 Deployment models of cloud: Public cloud, private cloud, hybrid cloud, and community cloud
• 1.13 Characteristics and models
• 1.14 Cloud deployment models: Comparison
• 1.15 Cloud technology roadmap
• 1.16 Related technologies and the impact
• 1.17 Key management, cryptography, and other concepts of security
• 1.18 Access control and IAM
• 1.19 Data remanence
• 1.20 Cloud Computing: Threats
• 1.21 Virtualization
• 1.22 Secure Cloud Computing: Design principles
• 1.23 Analysis of costs and benefits
• 1.24 Cloud service providers: Evaluation
• 1.25 SOC
• 1.26 Evaluating IT security
• 1.27 FIPS

Module 02 – Cloud Data Security

• 2.1 Life cycle of cloud data: Create, use, store, and share
• 2.2 Life cycle of cloud data: Archive
• 2.3 Life cycle of cloud data: Destroy and other key data functions
• 2.4 Architectures of cloud data storage types: IaaS, PaaS, and SaaS
• 2.5 Architectures of cloud data storage: Storage types and threats
• 2.6 Strategies of data security: Encryption challenges, IaaS encryption, encryption of databases, key management, cloud key storage, masking, tokenization, data anonymization, bit splitting, homomorphic encryption, and data loss prevention
• 2.7 Data classification and discovery technology: Data classification and cloud data challenges
• 2.8 Jurisdictional data protections for Personally Identifiable Information (PII)
• 2.9 Privacy acts: GDPR, and policies of data protection
• 2.10 Privacy acts: HIPAA, FISMA, and SOX
• 2.11 Jurisdictional data protection for PII: Cloud services responsibilities
• 2.12 Management of data rights
• 2.13 Data retention and deletion
• 2.14 Archiving policies
• 2.15 Legal hold
• 2.16 Auditability, accountability, and traceability of data events
• 2.17 SIEM
• 2.18 Custody chain
• 2.19 Nonrepudiation

Module 1 – Information System Auditing Process.

In this module of the ISACA CISA certification program, you get to learn more about the concepts like IS Audit Standards, Guidelines, Codes of Ethics Business Processes, Types of Controls, Risk-Based Audit Planning, Types of Audits and Assessments, Audit Project Management, Sampling Methodology, Audit Evidence Collection Techniques, and a lot more.

Module 2 – Governance and Management of IT

• In this segment of the ISACA CISA training program, you get to learn more about the ways to identify critical flaws and loopholes in the process. You learn the best enterprise-specific practices that can help you safeguard the governance of information and associated technologies.

Module 3 – Information Systems Acquisition, Development, and Implementation

• This module of the CISA training program helps you get a better knowledge of the concepts like Project Governance and Management, Business Case and Feasibility Analysis, Testing Methodologies Configuration and Release Management, and a lot more

Module 4 – Information Systems Operations and Business Resilience

• In this module ISACA CISA certification, you get to learn about Common Technology Components, IT Asset Management, Job Scheduling, Production Process Automation, System Interfaces, End-User Computing, Data Governance, Systems Performance Management, and more.

Module 5 – Protection of Information Assets

• In this segment of ISACA CISA certification, you get to learn more about the different aspects of Information Asset Security Frameworks, Standards, and Guidelines Privacy Principles, Physical Access and Environmental Controls, Identity and Access Management, Network and End-Point Security, and more.

Module 1: Information Security Governance.

Part A: Enterprise Governance

• Importance of Information Security Governance
• Organizational Culture
• Legal, Regulatory and Contractual Requirements
• Organizational Structures, Roles and Responsibilities

Part B: Information Security Strategy

• Information Security Strategy Development
• Information Governance Frameworks and Standards
• Strategic Planning

Domain 2: Information Security Risk Management

Part A: Information Risk Assessment

• Emerging Risk and Threat Landscape
• Vulnerability and Control Deficiency Analysis
• Risk Analysis, Evaluation and Assessment

Part B: Information Risk Response

• Risk Treatment/Risk Response Options
• Risk and Control Ownership
• Risk Monitoring and Reporting
• Domain 3: Information Security Program

Part A: Information Security Program Development

• Information Security Program Overview
• Information Security Program Resources
• Information Asset Identification and Classification
• Industry Standards and Frameworks for Information Security
• Information Security Policies, Procedures and Guidelines
• Defining an Information Security Program Road Map
• Information Security Program Metrics

Part B: Information Security Program Management

• Information Security Control Design and Selection
• Information Security Control Implementation and Integration
• Information Security Control Testing and Evaluation
• Information Security Awareness and Training
• Integration of the Security Program with IT Operations
• Management of External Services and Relationships
• Information Security Program Communications and Reporting

Domain 4: Incident Management

Part A: Incident Management Readiness

• Incident Management and Incident Response Overview
• Incident Management and Incident Response Plans
• Business Impact Analysis
• Business Continuity Plan
• Disaster Recovery Plan
• Incident Classification/Categorization
• Incident Management Training, Testing and Evaluation

Part B: Incident Management Operations

• Incident Management Tools and Technologies
• Incident Investigation and Evaluation
• Incident Containment Methods
• Incident Response Communications
• Incident Eradication and Recovery
• Post-Incident Review Practices