NICF Cyber Security Operations Specialist DigiSAFE Cyber Security Centre ST Electronics (Info-Security) Pte Ltd

Transcription

1 NICF Cyber Security Operations Specialist DigiSAFE Cyber Security Centre ST Electronics (Info-Security) Pte Ltd NICF Cyber Security Operations Specialist Page 1

2 Cyber Security Operations Essentials 1. Cyber Defence Knowledge Build-up Understand the concept of cyber security 2. Security Tools Hands-On Exercise Familiarise the basic functions of security products NICF-ACCREDITED Cyber Security Operations Specialist 3. Scenario-based Training Experience real cyber-attacks in emulated realworld environment Training Benefits Cyber Security Training based on DigiSAFE Cyber Security Centre s Cyber Trainer System benefits trainees by enhancing their ability to: 1. Appreciate the entire kill-chain of various cyber- attacks 2. Develop improved response to cyber attacks 3. Enhance decision-making in the event of cyber-attacks 4. Enhance the collaboration between teammates working together Who Should Attend Cyber Security Professionals looking to upskill their level of security operations proficiency IT Professionals / Engineers looking to multi-skill themselves in cyber security operations or looking to take on a cyber-security related job role System / Network Administrators requiring a better understanding of cyber security operations Information Security Managers and Executives involved in cyber security operations Project Managers, Risk Managers and Compliance Managers who require an understanding of cyber security operations processes and outcomes NICF Cyber Security Operations Specialist Page 2

3 Course Focus Real-World, Operations-Centric Cyber Defence Training State-of-the-Art Cyber Training Platform Emulation of real-world conditions such as network structure, network characteristics, and traffic, with real malware and exploits. True and accurate reflection of what it would be like to experience the entire kill-chain of cyberattack(s) in a controlled environment First in Singapore and the region Course Structure Day One a. Cyber Security Imperatives Cyber threats, trends, terms and terminologies CIA, AAA, standards, audit, compliance and regulations Cryptography and applications b. Network Technologies and Security Introduction to network systems, types and devices Secure network protocol (SSL/TLS, SSH) Introduction to network security devices (Firewall, IPS/IDS, SIEM, etc.) c. Server Systems and Logs Types and functions of servers (web, database, mail, AD, etc.) OS, servers and their event logs (Windows, Linux,IIS, Apache, Mssql, sendmail and etc.) Day Two d. Attack Methodology and Types Attack phases Types of vulnerabilities and attacks Web-based attack (OWASP top 10) e. Security Operations Centre and Incident Response Different types of information security incident Information security incident management framework Overview to SOC concepts and operations Threat identification, threat correlation, threat aggregation, threat filtering (through applications and server logs) Incident handling, response management, notification and reporting f. Security Products and Hands-On Checkpoint Firewall, Security Information and Event Management(SIEM) Monitoring tools such as Wireshark, Process Monitor Day Three to Five g. Security Operations Centre Cyber-Attack Scenario-based Exercises Exposure to real-world cyber-attack scenarios Developing detection, and response skills through team-based exercises NICF Cyber Security Operations Specialist Page 3

4 About the Trainers Trainers conducting the Cyber Security Operations Specialist include: Zhang Youwei Principal Trainer / System Lead Zhang Youwei is a Cyber Security Engineer and Trainer at ST Electronics (Info-Security) Pte Ltd. He is experienced in the hardware aspects of Information Technology particularly quality assurance. More recently, Youwei redirected his focus to information security and cyber security. In his current capacity, Youwei is the Systems Lead for DigiSAFE Cyber Security Centre a Cyber Security Centre of Excellence housing a state-of-the-art Cyber Trainer Platform that delivers cyber scenarios-based experiential training, which is the first, and only-of-its-kind in Singapore and the region. He administers and operates the Cyber Trainer Platform for training, and also supports curriculum development and improvement. From a systems perspective, he is also the anchor in all customer and partner engagement. Prior to his current role, Youwei was with Advanced Micro Devices under the EDB LOT Programme. During his time in AMD, he was part of the Advanced Testing and Characterisation team with the responsibilities of formulating test scripts, analysing data and correlating subsequent results on new products. In that role, he received two awards, one individual and one as part of a group, for process improvement. Zhang Youwei holds a Bachelor of Engineering degree from National University of Singapore. He is also a Qualified Information Security Professional (AISP), and is pursuing a Certified Ethical Hacking (CEH) certification from EC Council. Sangita Hadap Curriculum Manager / Trainer Sangita Hadap is the Curriculum Manager and Trainer, Cyber Security Development at ST Electronics (Info-Security) Pte Ltd. Her key anchor is in curriculum development and also supports training. She has several years of experience in the Systems Server Administration, Networking and Security aspects of Information Technology. Sangita brings along more than a decade of experience in IT training and support. She held positions as an IT Specialist and Senior Training Consultant which involved diversified training methodologies and managing the systems. She has also done her project for Security in Private Clouds which covered the review of different Standards presently practiced in the industry like ISO27001, authentication and authorization protocol languages, data security, compliance and risk issues involved in it. Sangita Hadap holds a Masters in Information Security from University of London Royal College Holloway. She is a Comptia and Microsoft Certified Trainer, ITIL Foundation certified and also holds the ACTA certification from WDA. NICF Cyber Security Operations Specialist Page 4

5 Course Details COURSE INFORMATION Course Schedule for Year 2015: Time: Venue: August 7 11 September October November December Day 1 5: Starts at 9:30am 5-day programme DigiSAFE Cyber Security Centre 80 Jurong East Street 21, #04-02 Devan Nair Institute, Singapore Singaporeans and Permanent Residents International Students Full Course Fee $4, $5, Less: 70% WDA Funding $3, Net Course Fee $1, $ (GST 7% on net course fee) Fee Payable $1, i) Enhanced Training Support for Small & Medium Enterprises (SMEs) Less: additional 20% funding $ Fee after funding ii) *additional funding to be claimed through SkillsConnect directly by the SME $ (incl. of GST 7% on net course fee) Workfare Training Scheme (WTS) Funding Less: additional 25% funding $1, Fee Payable General Enquiries / Registration: $ (incl. of GST 7% on net course fee) Ms Jolene Ng [email protected] +(65) Note: (1) Terms and conditions apply for funding. (2) Assessment fee is inclusive as part of the course fee for the first time. Re-assessment fee and booking fee applies for participants who did not pass during the course. (3) Course fee is inclusive of lunch. (4) ST Electronics (Info-Security) Pte Ltd reserves the right to make amendments to the course agenda without prior notice. NICF Cyber Security Operations Specialist Page 5

6 DigiSAFE Cyber Security Centre 80 Jurong East Street 21 #04-02 Singapore Phone : (65) / (65) Fax : (65) [email protected] No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of ST Electronics (Info- Security) Pte Ltd. The information contained herein may be changed without prior notice. These materials are provided by ST Electronics (Info-Security) Pte Ltd for informational purposes only, without representation or warranty of any kind, and ST Electronics (Info-Security) Pte Ltd shall not be liable for errors or omissions with respect to the materials. The only warranties for ST Electronics (Info-Security) Pte Ltd products and services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional warranty. NICF Cyber Security Operations Specialist Page 6