Seminar on Information Security Get comprehensive Security-know-how in just one week! Introduced by your trusted security partner.

Transcription

1 Seminar on Information Security Get comprehensive Security-know-how in just one week! Introduced by your trusted security partner.

2 Education in information security made in Switzerland.

3 Education Services Seminar for Information Security Professionals No country today can do without modern information and telecommunications technology (ICT). But as this technology is primarily geared towards performance instead of security, the valuable information used in ICT systems is prone to different risks. The particularly sensitive area of government and defence requires not only totally secure information and communications systems, but also highly qualified security specialists. As people are the most valuable asset for every organization, it is an important and sound investment to foster skills and knowledge among personnel to build the foundation for successful information protection. Seminar for Information Security Professionals Page 1

4 Seminar on Information Security Crypto AG and its sister company InfoGuard AG have jointly developed a 5 day education programme for the needs of governmental information security professionals. Who should attend Delegates from government and defence entities who are responsible for initiating, implementing and maintaining information security in their organisation. The seminar is open to everyone. On request it can be conducted as a private seminar on a date mutually agreeable. Please ask for further information. Seminar dates The seminar dates can be found on the enclosed booking form or on our website: Seminar language English Seminar location InfoGuard AG education centre, Zug/Switzerland. Seminar Certificate Each participant becomes an InfoGuard Certified Information Security Expert, and is awarded a formal certificate. Page 2 Seminar for Information Security Professionals

5 Participants will receive introduction on all relevant topics with regard to a holistic approach to information security. Political espionage, cyber crime and information warfare The seminar starts with an introduction of the most common threats and risks accompanied by several live demonstrations on how to steal or forge different information assets. Security awareness Information security, in most cases, is only looked at from technical and organisational perspectives. Practice, however, shows that the main threat is still posed by personnel s unwitting actions. This lesson will uncover the reasons people are prone to risks and how to educate them in the prevention of information attacks. A systematic approach to information security management The foundation for the security that you require is effective and efficient security management. This module provides an overview of how to successfully plan, implement and operate security processes on the basis of an internationally recognized security standard ISO & ISO Cryptography Cryptographic measures support the security of information, whether being processed, transmitted or stored. This module will teach participants basics of cryptography with its different schemes and their pros and cons: symmetric and asymmetric cryptography including the appropriate key management. Evaluation of crypto systems The evaluation of crypto systems, i.e. verifying correct implementation and assessing the strength and effectiveness of security functions, has become a vital part of the selection process. It allows the user to achieve confidence and trust in the security system. This module will inform participants of the applied standards and their procedures. Introduction to best defence security practice The closing module of the seminar will lead the discussion to the security controls you can implement today to strengthen your protection. Practical and proven best defence measures are the heart of this lesson. Seminar for Information Security Professionals Page 3

6 Seminar Agenda Arrival Political espionage, cyber crime and information warfare Security awareness DAY 1 A systematic approach to information security management DAY 2 Cryptography Cryptography Evaluation of crypto systems Introduction to best defence security practice DAY 3 DAY 4 DAY 5 Departure Page 4 Seminar for Information Security Professionals

7 Days 1 Political espionage, cyber crime and information warfare Attack targets, aggressors and methods Global surveillance Deliberate espionage Interception systems Where and how can you be attacked with live demonstration Internet, and personal computers Telephone, GSM and facsimile communication Data communication systems Day 2 Security awareness The art of deception Elements of security awareness First step towards a security awareness program Day 2 cont. A systematic approach to information security management Introduction to information security management systems (ISMS) A process approach for establishing, implementing, operating, monitoring, maintaining and improving the effectiveness of an organization s information security. How to establish policy and objectives for information security Overview of well known approaches (ISO & ISO 27002) Day 3 and 4 Cryptography Security services and their related cryptographic mechanisms Cryptographic algorithms in different operating modes Key management for symmetric systems Asymmetric crypto systems Key management for asymmetric systems, PKI Day 4 cont. Evaluation of crypto systems From TCSEC and ITSEC to ISO common criteria: evaluation criteria for IT Security Protection profiles and security targets Evaluation assurance levels EAL1 to EAL7 The evaluation and certification process Day 5 Introduction to best defence security practice Network Security Secure VPN Secure mobile computing Wireless LAN security Secure Secure personal devices (notebook, workstation) Secure telephony and facsimile communications Secure radio communication Key management Practical exercises Seminar for Information Security Professionals Page 5

8 Seminar environment Tutors The skill transfer is of high quality, both in terms of subject matter and tuition. In addition to their technical or scientific background, the tutors have many years of practical experience in their specialist fields with regard to information security and other ICT related areas. Their extensive social and cultural skills guarantee a congenial learning environment. Seminar methodology The seminar is a combination of presentations and workshop sessions including exercises and live demonstrations. Daily schedule 5 days Morning h Monday to Friday Lunch h Afternoon h Accommodation Hotel booking can be arranged on request. Page 6 Seminar for Information Security Professionals

9 Terms and conditions Registration Please complete the registration form enclosed or online on our website and fax to or mail to Your registration will be confirmed in writing. Cancellation All cancellations must be submitted in writing. Up to two weeks before the start of the seminar, 25% of the registration fee will be charged for administration. Up to one week before the start of the seminar, 50% of the registration fee will be charged. In the week before the start of the seminar, the full registration fee will be charged. No charge will be made if another person participates in the seminar on behalf of the absent participant. Substitutions/Name Changes If you are unable to attend you may nominate, in writing, another participant to take your place at any time prior to the start of the seminar. Two ore more participants may not «share» a place at a seminar. Please make separate bookings for each participant. Alterations InfoGuard AG reserves the right to cancel the seminar due to an insufficient number of registrations. In such cases, any registration fees already paid will be fully refunded. It may become necessary for us to make alterations to the content, speakers, timing, venue or date of the event compared to the advertised programme. Terms of Payment Payments are due within 10 days of the invoice date and not later than the start of the seminar. In the event of a registration at short notice, i.e. within one week, the person participating in the seminar may be required to submit proof of payment or to pay cash prior to the seminar start. Place of Jurisdiction The place of jurisdiction is Zug, Switzerland Seminar for Information Security Professionals Page 7

10 Enjoy your stay in Switzerland Your stay in Switzerland will be carefully prepared. Learning will be made much easier thanks to a pleasant atmosphere and interesting, exciting leisure time. During this five day seminar we will organize a cultural outing. The small but lively town of Zug ( inhabitants) benefits from being close to the Swiss business metropolis of Zurich and its international airport, which is 35 kilometers away. It is situated right by Lake Zug, and surrounded by typical Swiss hills and mountains. The region is an excellent starting point for excursions to the country s most interesting tourist attractions. Geneva Basel Zurich Zug Lucerne Berne Lugano InfoGuard AG Education in information security «Made in Switzerland». InfoGuard AG is the preferred education provider for information security. Its courses are geared to the needs of governmental and military organizations as well as public administrations. Crypto AG To Remain Sovereign. We have developed, manufactured and implemented custom security solutions for over 55 years. You too can rely on the expertise and capabilities of Crypto AG just like our customers in over 130 countries. Page 8 Seminar for Information Security Professionals

11 Designed and given InfoGuard AG Introduced by your Crypto AG by the sister company Feldstrasse 1 trusted security partner: P.O. Box 460 of Crypto AG: CH-6300 Zug CH-6301 Zug/Switzerland Switzerland Phone Phone Fax Fax crypto@crypto.ch info@infoguard.com

12 A MEMBER OF «THE CRYPTO GROUP» 2009 InfoGuard _IG_ISC_UG_A5_e