Cybersecurity Training and Awareness (EDU)
Specialist services to protect your business
The educational path is aimed at training technicians to thoroughly examine the security condition of a system and protect it from external threats.
Training your own staff of systems analysts and developers is fundamental to reducing costs related to security issues.
The offered courses include both theoretical and practical parts. During the theoretical sessions, all the involved technological and functional aspects will be illustrated. In the practical sessions, attendees will be provided with tests (challenges and capture the flag competitions) to execute.
Such challenges consist of real-world applications and systems to be examined or hardened (depending on the course type). Every test will have a time limit according to its difficulty level. Finally, a participation certificate will be given to the students, attesting to their acquired abilities.
ISGroup courses cover secure coding, web code review and penetration testing, mobile security testing, network hardening, and Linux, Windows and Solaris hardening.
Offensive security courses concentrate on methods useful for subverting or violating systems and applications to take full control of the machine (the so-called "takeover"). In particular, what is already explained in the theoretical part will be discussed practically, showing meaningful examples of vulnerabilities in real applications.
The Offensive course offered by ISGroup guarantees training for highly qualified technicians who are actually able to examine system security and can possibly exploit existing vulnerabilities.
Defensive security courses concentrate on methods useful for making systems and applications safe. In the theoretical part, concepts like systems hardening or safe code writing will be discussed, according to the kind of course.
In the practical part, some systems or vulnerable applications will be presented, and the participant will have to be able to make them safe or, as for the applications, to understand where the programming error has been committed. Examples will be taken directly from real vulnerabilities affecting well-known applications.
Architects and technical leads learn to integrate security controls into design decisions and every phase of the software lifecycle.
A 16-hour lab where your developers learn to find and exploit vulnerabilities in the OWASP Top 10 categories.
Employees and contractors learn to recognize cyber threats and the behaviors that help protect the company and its data.
Developers and architects learn to define and implement security requirements with OWASP ASVS before writing the code.
A hands-on lab on the OWASP Top 10 risk categories, with exercises to recognize vulnerabilities in code.
Participants learn to identify and fix vulnerabilities in code during review, before the production release.
Your team learns to recognize threats and vulnerabilities specific to REST services in the APIs it builds.
Your team learns network penetration testing methods and tools from an attacker's perspective.
Provides knowledge and tools to recognize and reduce cyber risks affecting your company, data and privacy.
Your team learns attackers' tactics and techniques and runs authorized simulations to find vulnerabilities before they are exploited.
ISGroup offers courses on application security, OWASP Top 10, Security Awareness, Secure SDLC, Code Review, REST service security, Network Penetration Testing, Cyber Risk Prevention, and Ethical Hacking. The contents and programme of the selected course are specified in the proposal.
The courses combine theoretical and practical work. Theory explains methods and technical aspects of the subject; in practical sessions, participants tackle challenges based on applications or systems to be examined or secured, depending on the course. Each challenge has a time limit and the challenges increase in difficulty.
The intended audience varies by course and includes system administrators, developers, and technical staff. Security Awareness courses instead aim to improve awareness among employees and collaborators.
A certificate of participation is issued at the end of the course. It records participation in the learning path; it is not a professional certification or the result of an examination.
Technical training is intended for system administrators, developers and other IT roles and combines theory with challenges involving applications or systems. Security Awareness is intended for employees and collaborators and develops their ability to recognise and manage risks linked to everyday behaviour.
Shape your security priorities into a tailored proposal