Security Management Training in Amersfoort

This instructor-led, live training in Amersfoort (online or onsite) is designed for intermediate-level IT auditors who want to effectively incorporate AI tools into their audit practices.

Upon completing this training, participants will be able to:

• Understand the fundamental concepts of artificial intelligence and its application in IT auditing.
• Leverage AI technologies such as machine learning, NLP, and RPA to enhance audit efficiency, accuracy, and scope.
• Conduct risk assessments using AI tools, facilitating continuous monitoring and proactive risk management.
• Integrate AI into the planning, execution, and reporting phases of audits, thereby improving the overall effectiveness of IT audits.

Encryption Key Management is the discipline of securely creating, storing, distributing, rotating, and retiring cryptographic keys to protect sensitive data and ensure regulatory compliance.

This instructor-led, live training (online or onsite) is aimed at intermediate-level IT and security professionals who wish to implement robust encryption key management practices and systems across enterprise environments.

By the end of this training, participants will be able to:

• Understand the lifecycle of encryption keys and best practices for their protection.
• Set up and manage key management systems (KMS) both on-prem and in the cloud.
• Implement access control and auditing for key usage.
• Comply with regulations and standards related to encryption key security.

Format of the Course

• Interactive lecture and discussion.
• Hands-on use of key management tools in lab environments.
• Guided exercises focused on secure key lifecycle implementation.

Course Customization Options

• To request a customized training for this course based on your infrastructure or compliance requirements, please contact us to arrange.

This instructor-led, live training in Amersfoort (online or onsite) is aimed at advanced-level security analysts who wish to elevate their skills in utilizing advanced Micro Focus ArcSight ESM content to improve an organization's ability to detect, respond, and mitigate cyber threats with greater precision and speed.

By the end of this training, participants will be able to:

• Optimize the use of Micro Focus ArcSight ESM to enhance monitoring and threat detection capabilities.
• Construct and manage advanced ArcSight variables to refine event streams for more precise analysis.
• Develop and implement ArcSight lists and rules for effective event correlation and alerting.
• Apply advanced correlation techniques to identify complex threat patterns and reduce false positives.

This instructor-led, live training in Amersfoort (online or onsite) is aimed at beginner-level security managers who wish to effectively embrace and utilize technology in their field.

By the end of this training, participants will be able to:

• Understand the evolution of technology in security.
• Learn how to effectively blend traditional security methods with modern technological solutions.
• Understand the basics of cybersecurity, risks associated with digital systems, and how to protect against cyber threats in the security industry.

This instructor-led, live training (online or onsite) is aimed at beginner-level security managers and designers who wish to effectively plan, design, and implement security strategies that are integrated, technologically advanced, and compliant with legal and ethical standards.

By the end of this training, participants will be able to:

• Learn how to integrate security considerations into architectural and facility design.
• Assess threats and vulnerabilities to inform security planning.
• Develop comprehensive security plans that address a range of threats.
• Create effective emergency response and crisis management plans.

This instructor-led, live training in Amersfoort (online or onsite) is designed for beginner-level security administrators who wish to deepen their understanding of security practices within an organization.

By the end of this training, participants will be able to:

• Grasp the fundamentals of security operations and administration.
• Identify and mitigate various security threats and vulnerabilities.
• Implement and manage security solutions effectively.
• Understand the legal and ethical considerations inherent in security operations.
• Prepare for incident response and disaster recovery scenarios.

This instructor-led, live training in Amersfoort (online or onsite) is designed for advanced-level professionals seeking a thorough understanding of fraud examination concepts and preparation for the Certified Fraud Examiner (CFE) exam.

Upon completion of this training, participants will be able to:

• Acquire comprehensive knowledge of fraud examination principles and the investigative process.
• Develop the ability to identify, investigate, and prevent various types of financial fraud schemes.
• Understand the legal framework surrounding fraud, including its legal elements, applicable laws, and regulations.
• Obtain practical skills for conducting fraud investigations, such as evidence collection, interviewing techniques, and data analysis.
• Learn to design and implement effective fraud prevention and deterrence programs within their organizations.
• Gain the confidence and knowledge necessary to successfully pass the Certified Fraud Examiner (CFE) exam.

This instructor-led, live training in Amersfoort (online or onsite) is designed for advanced-level security managers who wish to equip themselves with the knowledge and skills required to excel in both the exam and their professional roles as security management experts.

By the end of this training, participants will be able to:

• Comprehend the five domains of ISSMP.
• Cultivate skills for managing an information security program.
• Acquire knowledge on establishing and sustaining security governance.
• Gain insights into risk management, incident response, and continuity planning.
• Prepare effectively for the ISSMP certification examination.

Description:

Note: Please take note that the updated CISM exam content outline is applicable to exams commencing 1 June 2022.

CISM® stands as the most prestigious and rigorous qualification for Information Security Managers worldwide. This credential offers you a platform to join an elite network of peers, enabling you to continuously learn and adapt to the expanding opportunities and challenges within Information Security Management.

Our CISM training methodology ensures comprehensive coverage of the Four CISM domains, with a clear emphasis on building core concepts and practising with ISACA-released CISM exam questions. This course provides intense training and focused exam preparation for ISACA’s Certified Information Security Manager (CISM®) Examination.

Our instructors encourage all delegates to review the ISACA-released CISM QA&E (Questions, Answers and Explanations) as part of their exam preparation. This resource is exceptional in helping delegates understand the ISACA style of questions, their approach to solving them, and facilitates rapid assimilation of CISM concepts during live classroom sessions.
All our trainers bring extensive experience to CISM training. We will thoroughly prepare you for the CISM examination.

Goal:

The ultimate objective is to pass your CISM examination on your first attempt.

Objectives:

• Apply the knowledge gained in a practical manner that benefits your organisation.
• Establish and maintain an Information security governance framework to achieve your organisation’s goals and objectives.
• Manage Information risk to an acceptable level to meet business and compliance requirements.
• Establish and maintain information security architectures (people, process, technology).
• Integrate information security requirements into the contracts and activities of third parties/ suppliers.
• Plan, establish, and manage the capability to detect, investigate, respond to, and recover from information security incidents to minimise business impact.

Target Audience:

• Security professionals with 3-5 years of front-line experience.
• Information security managers or those with management responsibilities.
• Information security staff and assurance providers requiring an in-depth understanding of information security management, including: CISO’s, CIO’s, CSO’s, privacy officers, risk managers, security auditors, compliance personnel, BCP/DR personnel, and executive and operational managers responsible for assurance functions.

Open Source Software (OSS) Management involves overseeing the entire lifecycle of open-source components within an organization to ensure their use is secure, compliant, and efficient.

This instructor-led live training, available online or onsite, is designed for intermediate IT professionals looking to implement best practices for managing open-source software in enterprise and government settings.

Upon completion of this course, participants will be able to:

• Create effective OSS policies and governance frameworks.
• Leverage SBOM and SCA tools to identify, track, and manage open-source dependencies.
• Mitigate risks related to licensing and security vulnerabilities.
• Streamline OSS adoption to maximize innovation and cost savings.

Course Format

• Interactive lectures and discussions.
• Case studies and scenario-based exercises.
• Hands-on demonstrations using OSS management tools.

Customization Options

• This course can be tailored to fit specific organizational OSS policies and toolchains. Please contact us to arrange customization.

This instructor-led, live training in Amersfoort (online or onsite) is designed for intermediate-level cybersecurity professionals who wish to enhance their understanding of GRC frameworks and apply them to secure and compliant business operations.

By the end of this training, participants will be able to:

• Understand the key components of cybersecurity governance, risk, and compliance.
• Conduct risk assessments and develop risk mitigation strategies.
• Implement compliance measures and manage regulatory requirements.
• Develop and enforce security policies and procedures.

This instructor-led, live training in the Netherlands (online or onsite) is aimed at intermediate-level system administrators who wish to learn how to use SiteMinder to implement various authentication methods.

By the end of this training, participants will be able to:

• Grasp the core concepts of SiteMinder and its role in authentication and access management.
• Configure and manage user authentication with SiteMinder.
• Implement various authentication methods supported by SiteMinder.
• Troubleshoot common issues related to SiteMinder authentication.
• Integrate SiteMinder with other identity providers for federated authentication.

Course Description

This comprehensive course focuses on AI security, governance, compliance, and risk management within enterprise implementations. It is designed for security professionals, compliance officers, and technology leaders tasked with overseeing secure AI deployment and establishing robust governance frameworks.

Who is it for:

This programme is designed for any professional engaged in the fields of information security and information assurance.

What will I learn:

Upon completion, candidates will be able to demonstrate the following capabilities:

• The significant business benefits derived from effective information risk management.
• How to articulate and fully utilize terminology associated with information risk management.
• The methods for conducting threat and vulnerability assessments, business impact analyses, and risk assessments.
• The core principles governing controls and risk treatment strategies.
• How to present findings in a structured format that serves as the foundation for a risk treatment plan.
• The application of information classification schemes.

Description:

Cybersecurity expertise is in high demand, as threats continue to plague enterprises around the world. An overwhelming majority of professionals surveyed by ISACA recognise this and plan to work in a position that requires cybersecurity knowledge.
To fill this gap, ISACA has developed the Cybersecurity Fundamentals Certificate, which provides education and verification of skills in this area.

Objectives:

With cybersecurity threats continuing to rise and the shortage of appropriately-equipped security professionals growing worldwide, ISACA's Cybersecurity Fundamentals Certificate programme is the perfect way to quickly train entry-level employees and ensure they have the skills and knowledge they need to successfully operate in the Cyber arena.

Target Audience:

The certificate program is also one of the best ways to gain foundational knowledge in cybersecurity and begin to build your skills and knowledge in this crucial area.

This instructor-led, live training (online or onsite) is aimed at enterprise leaders who wish to understand data sovereignty principles and develop compliant data management strategies.

By the end of this training, participants will be able to define data sovereignty, identify relevant laws, assess compliance risks, and implement governance frameworks for cross-border data management.

In this instructor-led, live course in Amersfoort, participants will learn how to formulate the proper security strategy to face the DevOps security challenge.

This course offers an expert introduction to the recently enacted Accessibility Law, providing developers with practical skills to design, develop, and maintain fully accessible applications. Beginning with a contextual discussion on the law's significance and implications, the curriculum rapidly transitions into hands-on coding practices, tools, and testing techniques designed to ensure compliance and inclusivity for users with disabilities.

Why choose this course?

The ISO/IEC 27001 Foundation training provides you with the essential knowledge to implement and manage an Information Security Management System (ISMS) in accordance with ISO/IEC 27001 standards. Throughout the course, you will gain a comprehensive understanding of ISMS components, including policy development, procedures, performance metrics, management commitment, internal auditing, management reviews, and ongoing improvement strategies.

Upon finishing the course, you are eligible to take the exam and apply for the “PECB Certified ISO/IEC 27001 Foundation” credential. Holding this certificate demonstrates your grasp of core methodologies, requirements, frameworks, and management approaches.

Who is this course for?

• Professionals engaged in Information Security Management
• Those looking to acquire knowledge about the key processes of Information Security Management Systems (ISMS)
• Individuals aiming to build a career in Information Security Management

Learning methodology

• Lectures are supported by practical questions and real-world examples
• Hands-on exercises feature case studies and group discussions
• Practice exams mirror the format and difficulty of the official Certification Exam

Information security threats and attacks are constantly evolving, becoming more sophisticated. The most effective defense against these challenges lies in the proper implementation and management of information security controls and best practices. Furthermore, robust information security is a critical expectation and requirement from customers, legislators, and other stakeholders.

This training course is designed to equip participants with the skills needed to implement an Information Security Management System (ISMS) based on ISO/IEC 27001. It provides a comprehensive understanding of ISMS best practices and establishes a framework for its continuous management and improvement.

Upon completion of the training, you may take the exam. If you pass successfully, you can apply for the “PECB Certified ISO/IEC 27001 Lead Implementer” credential, which validates your ability and practical knowledge to implement an ISMS in accordance with ISO/IEC 27001 requirements.

Who Can Attend?

• Project managers and consultants involved in or concerned with the implementation of an ISMS
• Expert advisors seeking to master the implementation of an ISMS
• Individuals responsible for ensuring conformity to information security requirements within an organization
• Members of an ISMS implementation team

General Information

• Certification fees are included in the exam price
• Training material containing over 450 pages of information and practical examples will be distributed
• A participation certificate awarding 31 CPD (Continuing Professional Development) credits will be issued
• In case of exam failure, you can retake the exam within 12 months free of charge

Educational Approach

• This training course includes essay-type exercises, multiple-choice quizzes, examples, and best practices utilized in ISMS implementation.
• Participants are encouraged to communicate with each other and engage in discussions while completing quizzes and exercises.
• The exercises are based on a case study approach.
• The structure of the quizzes mirrors that of the certification exam.

Learning Objectives

This training course will help you:

• Gain a comprehensive understanding of the concepts, approaches, methods, and techniques used for implementing and effectively managing an ISMS
• Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
• Understand the operation of an information security management system and its processes based on ISO/IEC 27001
• Learn how to interpret and implement the requirements of ISO/IEC 27001 within the specific context of an organization
• Acquire the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an ISMS

This instructor-led, live training in Amersfoort (online or onsite) is designed for public sector professionals seeking to leverage information security management and IT service management practices to fortify digital security strategies and protect institutional digital assets.

By the end of this training, participants will be able to explain core information security concepts, identify risks within information systems and services, apply practical security controls, and facilitate secure IT service delivery.

Audience

This course is designed for all staff members seeking a practical grasp of Compliance principles and effective Risk Management strategies.

Course Format

The training employs a blended learning methodology that encompasses:

• Guided group discussions
• Presentation slides
• Analytical case studies
• Practical, real-world scenarios

Learning Objectives

Upon completion of this course, participants will be able to:

Gain a comprehensive understanding of the core elements of Compliance, alongside national and global initiatives focused on managing related risks.

Articulate how organizations and their teams can implement an effective Compliance Risk Management Framework.

Clarify the roles and responsibilities of the Compliance Officer and the Money Laundering Reporting Officer, including how these functions integrate within a corporate structure.

Identify key risk areas related to Financial Crime, with a specific focus on international operations, offshore centers, and high-net-worth clientele.

This instructor-led, live training (online or onsite) targets cloud professionals seeking to design and implement multi-cloud architectures that prevent vendor lock-in and guarantee data sovereignty.

By the end of this session, participants will be able to identify vendor lock-in risks, design portable architectures, apply data sovereignty controls, and leverage cloud-agnostic tools.

This instructor-led, live training (available online or onsite) is designed for security engineers and firmware developers who wish to harden OpenBMC deployments against unauthorized access and firmware tampering.

This instructor-led, live Payment Card Industry Professional training in Amersfoort (online or onsite) offers a distinct qualification for industry practitioners seeking to demonstrate their professional expertise and understanding of the PCI Data Security Standard (PCI DSS).

By the end of this training, participants will be able to:

• Comprehend the payment process and the PCI standards designed to protect it.
• Understand the roles and responsibilities of entities involved in the payment industry.
• Gain deep insight into and understanding of the 12 PCI DSS requirements.
• Demonstrate knowledge of PCI DSS and how it applies to organizations involved in the transaction process.

This capstone course teaches participants to design, deploy, and operate a complete sovereign digital infrastructure stack from the ground up. By the end of the course, students will have built a functioning mini-organization using only self-hosted, open-source tools: identity, communication, productivity, development, security, AI, and monitoring - all without reliance on Google, Microsoft, AWS, or proprietary SaaS.

Wazuh is an open-source security platform offering unified XDR and SIEM capabilities for threat detection, integrity monitoring, incident response, and compliance. It aggregates endpoint telemetry into a self-managed analysis engine, providing a credible alternative to Splunk Enterprise Security, Microsoft Sentinel, and other cloud-native SIEMs.