Course Objective & Scope
A large share of enterprise security breaches stems from baseline misconfigurations and blind spots across the attack surface. This programme covers confidentiality, integrity and availability (CIA) principles, the modern attack lifecycle (MITRE ATT&CK), authentication mechanisms, applied cryptography basics and network/OS hardening steps.
Working in an authorised, isolated lab environment, participants inspect representative vulnerability scenarios, read attack indicators from logs and assemble a baseline security checklist ready for internal use.
Who Should Attend?
- Systems, network and IT operations specialists
- Software developers looking to strengthen their security foundations
- Analysts and technical staff newly joining cybersecurity teams
- Prerequisite: basic operating system and computer networking knowledge
Key Takeaways
- Classify the attack surface and common threat vectors using the MITRE ATT&CK framework
- Apply multi-factor authentication, least privilege and RBAC principles
- Use symmetric/asymmetric encryption, hashing and TLS certificate mechanisms appropriately
- Implement baseline hardening controls across endpoints, servers and network layers
- Execute initial triage steps for phishing, ransomware and credential theft incidents
Curriculum
Threat Landscape and Attack Lifecycle
- The CIA triad, threat actors and enterprise attack surface
- Reading the Cyber Kill Chain and MITRE ATT&CK matrix
Identity, Access and Cryptography Basics
- MFA, SSO, RBAC and the principle of least privilege
- Hashing, TLS/PKI and data protection practices
Network and Infrastructure Security
- Segmentation, firewall rules, DNS and VPN security
- Common misconfigurations in cloud and hybrid environments
Endpoint and Server Hardening
- CIS Benchmark principles, patch management and service restriction
- EDR/antivirus visibility and baseline log collection
Recognizing Security Incidents and Checklist Design
- Indicators of social engineering, ransomware and privilege escalation
- Building an internal baseline security checklist
Other Courses in This Category
-
Identity, device posture, network micro-segmentation and continuous verification using NIST SP 800-207 and the CISA Zero Trust Maturity Model for infrastructure and security architects planning enterprise adoption.
- Live Course
- 5 modules
-
OWASP Top 10, threat modeling, secure coding, SAST/DAST/SCA integration and Secure SDLC controls for software and AppSec teams aiming to find and fix vulnerabilities before production.
- Live Course
- 5 modules
-
OWASP API Security Top 10, BOLA/BFLA, OAuth 2.1 and JWT security, GraphQL/gRPC attack surfaces and API gateway controls for engineering and security teams protecting enterprise APIs.
- Live Course
- 5 modules
-
Open-source dependency risks, SBOMs (CycloneDX/SPDX), the SLSA framework, artifact signing with Sigstore/Cosign and CI/CD hardening for DevSecOps and platform teams securing the software supply chain.
- Live Course
- 5 modules
-
MITRE ATT&CK-based adversary emulation, detection engineering and collaborative Purple Team exercises for offensive and defensive security teams closing visibility and detection gaps together.
- Live Course
- 5 modules
-
The NIST SP 800-61 lifecycle, incident triage, DFIR evidence collection, containment and root-cause analysis for security and IT teams managing cyber incidents under pressure.
- Live Course
- 5 modules
Get in touch
