Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Foundations: Threat Modelling for Agentic AI
- Categorising agentic threats: misuse, escalation, data leakage, and supply-chain risks
- Adversary profiles and attacker capabilities specific to autonomous agents
- Mapping assets, trust boundaries, and critical control points for agents
Governance, Policy, and Risk Management
- Governance frameworks for agentic systems (roles, responsibilities, approval gates)
- Policy design: acceptable use, escalation rules, data handling, and auditability
- Compliance requirements and evidence collection for audits
Non-Human Identity & Authentication for Agents
- Designing agent identities: service accounts, JWTs, and short-lived credentials
- Least-privilege access patterns and just-in-time credentialing
- Identity lifecycle management, rotation, delegation, and revocation strategies
Access Controls, Secrets, and Data Protection
- Fine-grained access control models and capability-based patterns for agents
- Secrets management, encryption in transit and at rest, and data minimisation
- Safeguarding sensitive knowledge sources and PII from unauthorised agent access
Observability, Auditing, and Incident Response
- Designing telemetry for agent behaviour: intent tracing, command logs, and provenance
- SIEM integration, alerting thresholds, and forensic readiness
- Runbooks and playbooks for handling agent-related incidents and containment
Red-Teaming Agentic Systems
- Planning red-team exercises: scope, rules of engagement, and safe failover
- Adversarial techniques: prompt injection, tool misuse, chain-of-thought manipulation, and API abuse
- Executing controlled attacks and measuring exposure and impact
Hardening and Mitigations
- Engineering controls: response throttling, capability gating, and sandboxing
- Policy and orchestration controls: approval flows, human-in-the-loop, and governance hooks
- Model and prompt-level defences: input validation, canonicalisation, and output filters
Operationalising Safe Agent Deployments
- Deployment patterns: staging, canary, and progressive rollout for agents
- Change control, testing pipelines, and pre-deployment safety checks
- Cross-functional governance: playbooks for security, legal, product, and operations
Capstone: Red-Team / Blue-Team Exercise
- Executes a simulated red-team attack against a sandboxed agent environment
- Defends, detects, and remediates as the blue team using controls and telemetry
- Presents findings, remediation plans, and policy updates
Summary and Next Steps
Requirements
- A strong foundation in security engineering, system administration, or cloud operations
- Proficiency with AI/ML concepts and the behaviour of large language models (LLMs)
- Hands-on experience with Identity and Access Management (IAM) and secure system design
Intended Audience
- Security engineers and red-team specialists
- AI operations and platform engineers
- Compliance officers and risk managers
- Engineering leads overseeing agent deployments
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 3900 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (1)
inventory and identifying the different risk exposures within AI
