• This course is designed for IT professionals, network administrators, security analysts, system administrators, and individuals preparing for the GIAC Security Essentials Certification (GSEC). It is also suitable for anyone seeking to build a strong foundation in information security.

• Basic understanding of cybersecurity concepts.
• Familiarity with computer networks, operating systems, and security basics.

Course Outline:

Module 1: Introduction to Information Security

• Overview of Information Security Principles
• CIA Triad (Confidentiality, Integrity, Availability)
• Security Policies and Standards
• Security Governance and Risk Management
• Regulatory Compliance (GDPR, HIPAA, PCI DSS)
• Security Awareness and Training Programs

Hands-On:

• Creating a security policy template
• Conducting a basic risk assessment

Module 2: Network Security

• Network Architecture and Design Principles
• Firewalls and Intrusion Detection/Prevention Systems (IDS/IPS)
• Secure Network Protocols (HTTPS, SSH, VPN)
• Common Network Threats (DDoS, MITM)
• Network Traffic Analysis

Hands-On:

• Configuring a basic firewall
• Analyzing network traffic with Wireshark

Module 3: Cryptography

• Symmetric vs. Asymmetric Cryptography
• Hashing Algorithms and Applications
• Digital Certificates and Public Key Infrastructure (PKI)
• Cryptographic Attacks and Countermeasures
• Secure File Transfers and Encryption Tools

Hands-On:

• Generating and verifying digital certificates
• Encrypting and decrypting files using GPG

Module 4: Threats and Vulnerabilities

• Malware Analysis (Viruses, Trojans, Ransomware)
• Social Engineering Attacks (Phishing, Baiting)
• Vulnerability Scanning and Penetration Testing
• Patch Management and Secure Configuration
• Security in Software Development

Hands-On:

• Conducting a vulnerability scan with Nessus
• Simulating a phishing attack scenario

Module 5: Identity and Access Management (IdAM)

• Authentication Mechanisms (MFA, Biometrics)
• Authorization and Access Control Models (RBAC, ABAC)
• Password Management Best Practices
• Identity Federation and Single Sign-On (SSO)
• Preventing Identity Theft

Hands-On:

• Configuring access controls on a Linux system
• Setting up Multi-Factor Authentication (MFA)

Module 6: Incident Response and Recovery

• Incident Response Lifecycle
• Forensic Techniques and Evidence Handling
• Disaster Recovery and Business Continuity Planning
• Root Cause Analysis and Lessons Learned
• Incident Reporting and Communication

Hands-On:

• Creating an incident response plan
• Simulating a security incident and recovery

Module 7: Structured Activities/Case Studies

• Lab: Network architecture design with secure protocols
• Lab: Performing a vulnerability scan and remediation
• Lab: Creating an enterprise-level incident response plan
• Lab: Encrypting sensitive files and emails

Training Material Provided:

• Comprehensive course manual with detailed explanations and practice exercises.
• Access to cybersecurity tools used during the hands-on labs.
• Practice quizzes and mock exams for GSEC certification preparation.