Key Sessions

Threat and Vulnerability Management
– Identifying and analysing vulnerabilities to understand the potential impacts on information systems.
– Conducting environmental reconnaissance and intelligence gathering to identify potential threats.
– Utilising threat data and intelligence to support organizational security and to inform risk management decisions.
– Implementing vulnerability management processes to identify, assess, prioritise, and respond to vulnerabilities.
– Understanding the principles of threat classification and the methodologies used for threat modeling.

Software and Systems Security
– Applying security solutions for infrastructure management and the securing of software applications.
– Understanding the importance of secure coding practices and the implementation of software security improvements.
– Assessing and mitigating the security impact of acquired software and systems.
– Implementing secure configuration and patch management processes to protect systems and software.
– Understanding common software vulnerabilities and attacks and how to prevent them.

Security Operations and Monitoring
– Analyzing security and event logs to identify and track security incidents.
– Implementing configuration changes to improve security and compliance with organisational policies.
– Utilising security monitoring tools and techniques to detect and mitigate potential threats.
– Conducting continuous security monitoring activities to ensure the integrity and availability of IT systems.
– Understanding the principles of network intrusion detection and the use of SIEM (Security Information and Event Management) technologies.

Incident Response
– Understanding the incident response process, from detection to recovery and post-incident analysis.
– Developing and implementing incident response plans and policies to manage security incidents effectively.
– Conducting forensic analysis to identify the source of security breaches and to gather evidence.
– Coordinating response efforts to minimise impact and restore operations quickly.
– Communicating incident status and risk assessments to stakeholders in a clear and timely manner.

Compliance and Assessment
– Understanding legal and regulatory requirements related to information security and cybersecurity.
– Conducting security assessments to identify compliance gaps and to assess the effectiveness of security controls.
– Implementing policies and procedures to ensure compliance with data protection laws and industry standards.
– Understanding the role of ethics in cybersecurity operations and the handling of sensitive data.
– Preparing and maintaining documentation related to compliance audits and security assessments.