Course Overview

This comprehensive training program is designed to enhance the cybersecurity competencies of all IT staff and team members. The course covers fundamental concepts, common threats, best practices, and hands-on lab exercises to ensure practical understanding and application. The program is built on the foundations of EC-Council's Certified Cybersecurity Technician (CCT), Certified Network Defender (CND), Certified Incident Handler (ECIH), and Certified Chief Information Security Officer (CCISO) courses.

Who Should Attend?

This course is intended for all IT professionals, including system administrators, network engineers, security analysts, and other team members responsible for maintaining and enhancing the security of information systems.

We recommend this course to entire teams as a key competency for all IT employees. The training can also be "tailor-made" for a specific company, with content adjustments based on the industry sector of the company.

Learning Outcomes

Upon completion of the course, participants will:

• Have a comprehensive understanding of cyber threats and how to respond to them.
• Be able to implement key security measures to protect information systems.
• Gain practical experience using tools and techniques to identify and address cyber threats.
• Be capable of contributing to the creation of a security-aware culture in their organization.

Course Objectives

• Understand the basics of cybersecurity: Gain fundamental knowledge about cyber threats, attack vectors, and cybersecurity standards.
• Implement effective security measures: Learn how to implement key security measures such as network security, data protection, and incident response.
• Develop practical skills: Acquire hands-on experience through lab exercises in identifying and addressing cyber threats.
• Foster a security-focused culture: Understand the importance of creating a security-aware culture within the organization.

Course overview

Day 1: Understanding the Cybersecurity Landscape

Introduction to Cybersecurity Fundamentals

• Importance of cybersecurity in modern business
• Overview of common cyber threats and vulnerabilities

Cyber Threats and Attack Vectors

• Phishing, malware, ransomware, and social engineering
• Case studies of recent cyber attacks

Cybersecurity Frameworks and Standards

• Overview of ISO 27001, NIST, and GDPR compliance

Cybersecurity Best Practices

• Password policies, secure browsing, and email security

Day 2: Implementing Effective Cybersecurity Measures

Network Security Essentials

• Firewalls, VPNs, and wireless security protocols

Data Protection and Encryption

• Data encryption methods and secure data storage

Incident Response and Recovery Planning

• Developing and executing an incident response plan

Creating a Security-Focused Culture

• Security awareness training and regular updates

Q&A and Wrap-Up

• Open session for questions and discussion on implementing cybersecurity practices

Day 3: Fundamentals, management and resilience with lab excercises

Cybersecurity Fundamentals & Threat Identification

• Lab 1: Recognizing Phishing Emails
• Lab 2: Identifying Malware in Downloads

Protecting the Organization's Digital Assets

• Lab 3: File Analysis with Wireshark
• Lab 4: IDS/IPS with Snort

Incident Management and Building Resilience

• Lab 5: Incident Response
• Lab 6: Detection and Remediation

Closing Remarks and Next Steps

• Encourage feedback and discuss the importance of continuous learning and improvement in cybersecurity

Lab Exercises

Participants will engage in practical lab exercises to reinforce their learning:

• Recognizing phishing emails
• Identifying malware in downloads
• File analysis with Wireshark
• IDS/IPS with Snort
• Incident response
• Detection and remediation

The instructor conducts the labs together with the participants, while the participants do not perform the lab exercises independently on their own equipment.

 

Participants should have a basic understanding of information technology and cybersecurity concepts. Prior knowledge of networking fundamentals, operating systems, and security principles is recommended but not required.

This course does not offer certification. The advanced level includes EC-Council programs such as CCT, CND, ECIH, and CCISO, which include certification and industry-recognized titles.

Atdhe Buja, Ph.D.

Atdhe Buja, Ph.D. (c) is a world-renowned Cybersecurity expert with over 20 years of experience in ICT and 11 years of experience in Cybersecurity. He is a Certified EC-Council Instructor (CEI) and a leading authority on information technology, Industrial IoT, and ICS/SCADA cybersecurity. He holds a position Associate Professor in the Department of Math, Computer Science, and Digital Forensics at Bloomsburg University of Pennsylvania, USA.

His research work focused on cybersecurity countermeasures for Industrial IoT and included ICS/SCADA infrastructures, Wireless sensor network WSN. He has held a variety of roles in the cybersecurity industry, including database administrator, CERT Team manager, cybersecurity trainer, and penetration tester.

Atdhe is passionate about helping organizations protect their critical infrastructure from cyberattacks. He is a sought-after speaker and consultant, and his work has been featured in numerous publications and media outlets.