Certified Cyber Security Foundation

Our Certified Cyber Security Foundation training course provides a comprehensive introduction to current cyber security threats and the measures required to mitigate the risks associated with cyber attacks.

It also prepares you to pass the included IBITGQ Certified Cyber Security Foundation (C CS F) examination on the first attempt.

Module 1: Understanding Cyber Security Fundamentals

• The impacts of cyber incidents and events on an organisation.
• Identify the current threat landscape.
• The CIA triad.
• The roles of people, processes and controls in cyber security.

Module 2: Information Security & Governance

• Explain information governance.
• The role of organisational governance and its link to security.
• Introducing the ISO 27014 standard.
• Define a security steering committee.
• Who is responsible for cyber security?

Module 3: Threat, Vulnerability, Risk Assessment & Management

• Definitions of risk, vulnerability, threat and assets.
• The purpose of a risk-based approach.
• Describe risk in terms of impact and likelihood.
• Consider risk and mitigation options.
• The current risk appetite of an organisation.
• Review the use of heat maps.

Module 4: Understanding Security Controls

• The four control categories: preventive, deterrent, detective and corrective.
• The four control types: physical, procedural, personal and technical.
• Understand the concept of Cloud computing.
• Summarise Cloud computing responsibilities.
• Recall symmetric, asymmetric and hybrid cryptography.

Module 5: Information Security Frameworks

• The purpose of policies, standards, procedures and guidelines.
• The need for security awareness.
• The relationship between legislation and cyber security, i.e. the GDPR, CMA.
• Contractual requirements including the PCI DSS (Payment Card Industry Data Security Standard).
• Standards bodies including ISO/IEC and NIST.

Module 6: The Security Lifecycle

• Recognise secure coding practices.
• Examples of testing strategies, such as fuzzing and regression testing.
• The importance of patch management.
• Explain change management.
• The use of independent assurance including ISO 27001.

Module 7: The Need For Operational Compliance

• The purpose of auditing.
• Discuss methods of monitoring such as IDS, IPS and SIEM.
• Explain the five phases of incident management.

Our Certified Cyber Security Foundation training course is particularly suitable for anyone starting, or wanting to start, a career in Cyber Security. It will also benefit operational staff, business directors and managers who wish to improve their understanding of cyber security and its impact on their organisation.

Our Certified Cyber Security Foundation training course includes full course materials (PDF files), the examination and certificate of attendance.

Please Note: You will need a laptop for the duration of your training course and exam. Our course materials include an interactive PDF and an online quiz tool for knowledge testing. Full details on how to access the exam will be provided by email 1–2 days before sitting the exam.

Our Certified Cyber Security Foundation training course has no entry-level requirements, but it is beneficial for you to have basic IT knowledge.

We recommend that you purchase and read the following textbook before the Certified Cyber Security Foundation training course: Information Security Management Principles – Third Edition

You will take the Certified Cyber Security Foundation (C CS F) exam set by IBITGQ (International Board for IT Governance Qualifications) at the end of the Certified Cyber Security Foundation training course:

• Delivery Method: Online
• Duration: 60 Minutes
• Questions: 40
• Format: Multiple-Choice
• Pass Mark: 65%

Our four-day Certified Cyber Security Practitioner training course will give you the skills required to deliver infrastructure, application, information and operational cyber security by implementing appropriate technical and organisational controls.

Our Certified Cyber Security Foundation training course focuses on building the introductory knowledge associated with the CyBOK categories:

• Human, Organisational & Regulatory Aspects
• Attacks & Defences
• Systems Security
• Software & Platform Security
• Infrastructure Security