Hi, 
Preparing for Information Security Audits
Course
Preparing for Information Security Audits
Master best practices to carry out effective information security audits. Establish how to describe signature-based and heuristic detection methods. Investigate the importance of enterprise threat detection monitoring.
Build valuable job-aligned skills for the role of a security analyst.
Flexible Schedule
Beginner Level
Mentor Support
Estimated Time
5 weeks, online
3 hours/week
3 hours/week
This course is designed to help organizations manage an enterprise security incident, while avoiding common errors.
During this course, you will learn how to effectively prioritize the response to a security incident. You will gain a deep understanding of how to build a Computer Security Incident Response Team (CSIRT). You will explore how to develop an incident response action plan and you will also develop an in-depth understanding of post-incident activity. You will explore exercises that involve creating a Security Incident Report, creating a disaster recovery plan, and carrying out penetration testing. You will learn how to configure Microsoft Cloud App Security and Office 365 Cloud App Security. Plus, you will explore how to implement Office 365 Advanced Threat Protection.
Once you have completed this course, you will have an in-depth understanding of critical security skills, including how to build a Computer Security Incident Response Team (CSIRT), how to develop an incident response action plan, and how to carry out post-incident activity.
/br>This FutureSkills Prime course comprises two purposely designed modules that take you on a carefully defined learning journey.
It is a self-paced course, which means it is not run to a fixed schedule with regard to completing modules or submitting assignments. To give you an idea of how long the course takes to complete, it is anticipated that if you work 3 hours per week, you will complete the course in 5 weeks. However, as long as the course is completed by the end of your enrollment, you can work at your own pace. And don’t worry, you’re not alone! You will be encouraged to stay connected with your learning community and mentors through the course discussion space.
The materials for each module are accessible from the start of the course and will remain available for the duration of your enrollment. Methods of learning and assessment will include videos, reading material, and online exam questions.As part of our mentoring service you will have access to valuable guidance and support throughout the course. We provide a dedicated discussion space where you can ask questions, chat with your peers, and resolve issues. Depending on the payment plan you have chosen, you may also have access to live classes and webinars, which are an excellent opportunity to discuss problems with your mentor and ask questions. Mentoring services will vary across packages.
Once you have successfully completed the course, you will earn your Certificate of Completion.
After completing this first course, you will be able to:Effectively prioritize the response to a security incident. Build a Computer Security Incident Response Team (CSIRT). Develop an incident response action plan. Carry out post-incident activity. Detect threats in on-premises environments. Detect threats in hybrid and cloud environments.
Learners should already have technical knowledge of the following:
This course is aligned with industry-approved occupational standards set by SSC NASSCOM. Once youve successfully completed this course, you will receive a Certificate of Completion that confirms you have:
Course Outline
Welcome!
Course Syllabus
Introduction
Cyber Threat Modeling
Stride
The National Institute for Standards and Technology (NIST) Cybersecurity Framework (CSF)
Identify
Protect
Detect
Respond
Incident Response - Videos
Prepare - Videos
Things to Remember while in an Incident
Recovery Preparations
Lesson Review - Hallmarks of a Strong Response Program
Critical Success Factors
Exam
Introduction
Preparation Actions
Team Duties
Team Preparations
Establishing Team Roles
CSIRT Communications
Recovering - Video
Reviewing Response and Updating Policies
Module Summary
Module 2
The Security Incident Report - Exercise
Introduction
Practice-SIR
Incident-Overview
Disaster Recovery Plan - Exercise
About this course
Course Syllabus
Overview
Phases of a cyber - Video
Targeted attacks
Cryptocurrency mining
Ransomware
Rapid attacks
Living
Stealth
Assume breach - Video
Evolving security perimeter - Videos
Lesson Review
Basic Access Control Models
Overview - Video
Lesson Review
Overview - Videos
Lesson Review
Overview - Videos
Penetration Testing - Exercise
Posture Testing
Ethical Hacking
Module Exam
Overview - Videos
Lesson Review
Overview
Architecture of ATA
Planning for deployment of ATA
Deploying ATA
Lesson Review
Overview
Architecture of Windows Defender ATP
Planning for deployment of Windows Defender ATP
Deploying Windows Defender ATP - Videos
Lesson Review
Overview
Architecture of Microsoft Enterprise Threat Detection
Deploying Microsoft Enterprise Threat Detection
Lesson Review
Overview
Overview
Monitoring Windows environments for signs of compromise
Audit Policy Recommendations in Windows environment
What are Security Audits
Security Audits Policies
Lesson Review
Overview
System Monitor
Process Explorer
AutoRuns
Sigcheck - Exercise
ListDLLs
Investigating suspicious processes by using SysInternal Suite utilities
Lesson Review
Module Exam
Overview - Videos
Microsoft Cloud App Security vs Office 365 Cloud App Security
Exercise - Configuring Microsoft Cloud App Security and Office 365 Cloud App Security - Videos
Lesson Review
Overview
Exercise - Implementing Office 365 Advanced Threat Protection
Exercise - Using Office 365 Advanced Threat Protection
Lesson Review
Overview
Lesson Review
Azure Active Directory Identity Protection
Azure Active Directory Privileged Identity Management
Microsoft Operations Management Suite
Azure Security Center
Advanced Threat Detection Features
Third party ATD capabilities through Azure Marketplace
Lesson Review
Overview
Types of logs and alerts in Azure
Log integration with on premises SIEM systems
Lesson Review
Overview
Azure Advanced Threat Protection
Overview
Microsoft 365 Enterprise
Lesson Review
Module Exam
Layered machine learning models
Detonation
Multilayer machine learning
Detonation
Customizing multi
Lesson Review
Detecting and investigating threats with Windows Defender ATP and ATA: Forged PAC
Detecting cross
Detecting cross process injection
Detecting cross process injection atom bombing by Dridex
Delivering contextual information based on Machine Learning models
Lesson Review
Detecting reflective DLL loading by using Windows Error Reporting
Detecting reflective DLL loading by using behavioral analytics
Planning for compromise
Microsoft cybersecurity strategy - Videos
Module Exam
Exam
Why Learn with SkillUp Online?
We believe every learner is an individual and every course is an opportunity to build job-ready skills. Through our human-centered approach to learning, we will empower you to fulfil your professional and personal goals and enjoy career success.
Reskilling into tech? We’ll support you.
Upskilling for promotion? We’ll help you.
Cross-skilling for your career? We’ll guide you.
Personalized Mentoring & Support
1-on-1 mentoring, live classes, webinars, weekly feedback, peer discussion, and much more.
Practical Experience
Hands-on labs and projects tackling real-world challenges. Great for your resumé and LinkedIn profile.
Best-in-Class Course Content
Designed by the industry for the industry so you can build job-ready skills.
Job-Ready Skills Focus
Competency building and global certifications employers are actively looking for.
FAQs
Security audits are essential for lowering the number of security breaches. They aid in determining whether the current security system can respond successfully, plus they also monitor the training standards of the Computer Security Incident Response Team (CSIRT) members. Organizations that conduct security audits regularly are more likely to follow the latest regulations, plus they are able to identify weak areas that may have previously led to a breach. Once identified, an effective Security Incident Response plan (SIR) can then be created.
Security audits, both planned and unexpected, are critical therefore in determining the level of preparation required for a response. Surprise audits help evaluate and minimize reaction times, while regular audits can reveal new areas for improvement.
This course gives you a solid grounding in security audit best practices. You will learn how to develop a plan for a Security Incident Response and carry out threat identification in advance. You will explore various strategies and learn how to prioritize responses in a security breach. You will also learn how to establish the roles and duties of the Computer Security Incident Response Team (CSIRT) members throughout the audit.
Using a structured approach to Security Incident Response, attendees will learn how to modify rules and procedures and successfully control top risks. You will also become familiar with the National Institute of Standards and Technology's (NIST) Cyber Security Framework (CSF).
Yes, it is a self-paced course that you can do at your own pace. It does not follow a predetermined timetable, unlike scheduled live sessions. You are free to work at your own pace if you complete the modules and the course before the deadline.
Yes. This course is a 100% online course. You will therefore need a good connection to the internet in order to be able to access the course materials.
Once you have completed this course, you will be able to:
Type of certificate
Certificate of Completion
Certificate of Participation
About this course
02 Modules
08 Skills
Includes
Discussion space
07 Exercises
53 Videos
06 Review questions
01 Final exam
Exercises to explore
The Security Incident Report
Disaster recovery plan
Penetration testing
Sigcheck
Configuring Microsoft Cloud App Security and Office 365 Cloud App Security
Implementing Office 365 Advanced Threat Protection
Newsletters & Updates
Subscribe to get the latest tech career trends, guidance, and tips in your inbox.