Cyber Security Training in Braga

This instructor-led, live training in Braga (online or onsite) is designed for advanced-level cybersecurity professionals, AI engineers, and IoT developers who aim to implement robust security measures and resilience strategies for Edge AI systems.

Upon completion of this training, participants will be able to:

• Identify security risks and vulnerabilities in Edge AI deployments.
• Deploy encryption and authentication techniques to protect data.
• Design resilient Edge AI architectures capable of withstanding cyber threats.
• Apply secure AI model deployment strategies within edge environments.

This instructor-led, live training in Braga (online or onsite) is designed for cybersecurity professionals and data scientists at an intermediate level who wish to leverage LLMs to strengthen cybersecurity measures and threat intelligence.

Upon completing this training, participants will be able to:

• Grasp the role of LLMs in cybersecurity.
• Implement LLMs for threat detection and analysis.
• Utilize LLMs for security automation and response.
• Integrate LLMs with existing security infrastructure.

This instructor-led live training in Braga (online or onsite) is designed for intermediate to advanced cybersecurity professionals and technical leads who wish to learn how to deploy AI models to strengthen security workflows, automate threat detection and response, and conduct predictive analysis.

Upon completion of this training, participants will be able to:

• Grasp the role of AI in modern cyber security.
• Construct machine learning models for anomaly and threat detection.
• Deploy AI to automate incident response and security operations.
• Assess the ethical and operational implications of AI in cybersecurity.

This instructor-led live training in Braga (available online or onsite) targets intermediate-level analysts aiming to effectively analyze, secure, and protect their organization's data and networks from cyber threats.

By the conclusion of this training, participants will be able to:

• Gain a comprehensive understanding of the current cybersecurity landscape.
• Learn and apply industry-standard cybersecurity frameworks (e.g., NIST, ISO/IEC 27001) and best practices to enhance their organization's security posture.
• Implement effective network security measures, including configuring firewalls, VPNs, IDS/IPS systems, and applying encryption techniques to protect data at rest and in transit.
• Identify, analyze, and respond to cybersecurity incidents using threat intelligence, SIEM tools, and incident response plans.

The Certified Incident Handler course delivers a structured methodology for effectively and efficiently managing and responding to cybersecurity incidents.

Designed as an instructor-led live training session (available online or onsite), this programme targets intermediate-level IT security professionals seeking to acquire the tactical skills and knowledge required to plan, classify, contain, and manage security incidents.

Upon completion of this training, participants will be able to:

• Comprehend the incident response lifecycle and its distinct phases.
• Carry out incident detection, classification, and notification procedures.
• Effectively apply containment, eradication, and recovery strategies.
• Develop post-incident reports and continuous improvement plans.

Course Format

• Interactive lectures and discussions.
• Practical application of incident handling procedures within simulated scenarios.
• Guided exercises focused on detection, containment, and response workflows.

Customization Options

• To arrange customized training tailored to your organization's specific incident response procedures or tools, please contact us.

This instructor-led, live training in Braga (online or onsite) is aimed at beginner-level network administrators who wish to use FortiGate 1100E to manage and secure their network environments effectively.

By the end of this training, participants will be able to:

• Understand the basic architecture and features of FortiGate 1100E.
• Learn how to deploy FortiGate 1100E in various network environments.
• Gain hands-on experience with basic configuration and management tasks.
• Understand security policies, NAT, and VPNs.
• Learn to monitor and maintain FortiGate 1100E.

This instructor-led, live training in Braga (online or onsite) is aimed at advanced-level security architects, IT managers, and system designers who wish to design and implement Zero Trust Architecture within their organizations, leveraging industry best practices and advanced security principles.

By the end of this training, participants will be able to:

• Understand and apply the core principles of Zero Trust Architecture.
• Design and architect a Zero Trust model for an organization.
• Leverage segmentation, identity and access management (IAM), and least-privilege policies in Zero Trust design.
• Implement security measures that focus on verification, monitoring, and least privilege.
• Evaluate and mitigate risks associated with traditional perimeter security models.

Honeywell ProWatch is an enterprise-grade security management platform that brings together access control, video surveillance, and intrusion detection into a unified solution.

This instructor-led, live training session (available online or onsite) is designed for beginner to intermediate-level security professionals looking to configure, manage, and optimize ProWatch systems for secure operations.

Upon completion of this training, participants will be able to:

• Install and configure Honeywell ProWatch software and hardware.
• Manage user access and permissions across multiple facilities.
• Integrate ProWatch with video and intrusion systems.
• Utilize advanced monitoring, reporting, and audit features.

Format of the Course

• Interactive lecture and discussion.
• Hands-on configuration and lab exercises.
• Practical integration scenarios with ProWatch features.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Braga (online or onsite) is aimed at experienced developers who wish to gain a comprehensive understanding of Python programming and its applications in cybersecurity.

By the end of this training, participants will be able to:

• Use Python programming for defensive cybersecurity.
• Understand and use Python for ethical offensive techniques and digital forensics tasks.
• Recognize legal and ethical considerations surrounding offensive cybersecurity and vulnerability disclosure.

This instructor-led, live training in Braga (online or onsite) is aimed at intermediate-level network and security professionals who wish to effectively implement, manage, and secure SD-WAN solutions.

By the end of this training, participants will be able to:

• Understand the fundamental concepts, benefits, and challenges associated with SD-WAN technologies.
• Design an SD-WAN architecture tailored to organizational needs and deploy SD-WAN solutions effectively.
• Implement and manage security features within an SD-WAN.
• Monitor, manage, and troubleshoot SD-WAN environments.

This instructor-led, live training in Braga (online or onsite) is designed for service technicians, system administrators, or anyone wishing to learn the correct installation, usage, and management of the Honeywell security system.

By the end of this training, participants will be able to:

• Grasp the concepts underlying Honeywell security systems and their components.
• Correctly install and maintain a Honeywell security system.
• Use Honeywell maintenance tools and the management suite to control a security system.

This instructor-led, live training in Braga (online or onsite) is aimed at beginner-level IT administrators, cybersecurity professionals, and network engineers who wish to understand the core principles and practices of Zero Trust Security and start implementing them in their organizations.

By the end of this training, participants will be able to:

• Understand the key principles of Zero Trust Security.
• Identify the components required for implementing Zero Trust in an organization.
• Implement network segmentation and least-privilege access control.
• Evaluate current security models and how Zero Trust can improve them.
• Apply Zero Trust concepts to protect data and resources effectively.

This instructor-led, live training in Braga (online or onsite) is aimed at intermediate-level to advanced-level IT professionals and security specialists who wish to gain a deep understanding of Zero Trust concepts and apply them effectively within their organisations.

By the end of this training, participants will be able to:

• Understand the core principles and components of Zero Trust Architecture.
• Develop and implement a Zero Trust strategy tailored to their organisation's needs.
• Plan and execute the deployment of Zero Trust solutions.
• Leverage Software Defined Perimeter (SDP) technologies to enhance security.
• Apply best practices for maintaining and evolving a Zero Trust environment.

This instructor-led, live training in Braga (online or onsite) targets experienced network security managers seeking the knowledge and skills required to deploy, manage, and troubleshoot Fortinet’s FortiGate security appliances running on FortiOS 7.2 to achieve NSE4 Network Security Professional status.

Upon completion of this training, participants will be able to:

• Comprehend Fortinet’s product portfolio and the role of FortiOS in network security.
• Deploy effective firewall policies, security profiles, and Network Address Translation (NAT).
• Leverage security services to ensure network redundancy and failover.
• Apply security best practices and optimise security policies for compliance and threat mitigation.

User session recording technology captures, monitors, and audits user activity on IT systems, providing insights for security, compliance, and forensic investigations.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level IT and security professionals who wish to implement user session recording solutions to enhance monitoring, compliance, and accountability.

By the end of this training, participants will be able to:

• Understand the principles of user session recording.
• Deploy and configure session recording solutions.
• Analyze and audit recorded sessions for compliance.
• Integrate session recording with security monitoring systems.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

The ISO/IEC 27002 Lead Manager training equips you with the essential expertise and knowledge required to assist organisations in implementing and managing Information Security controls, as outlined in ISO/IEC 27002.

Upon completing this course, you will be eligible to take the exam and apply for the “PECB Certified ISO/IEC 27002 Lead Manager” credential. This PECB Lead Manager Certification demonstrates that you have mastered the principles and techniques for implementing and managing Information Security Controls in accordance with ISO/IEC 27002.

Who should attend?

• Managers or consultants aiming to implement an Information Security Management System (ISMS) based on ISO/IEC 27001 and ISO/IEC 27002
• Project managers or consultants looking to master the Information Security Management System implementation process
• Professionals responsible for information security, compliance, risk, and governance within an organisation
• Members of information security teams
• Expert advisors in information technology
• Information Security officers
• Privacy officers
• IT professionals
• CTOs, CIOs and CISOs

Learning objectives

• Gain mastery in implementing Information Security controls by adhering to the framework and principles of ISO/IEC 27002
• Develop a comprehensive understanding of the concepts, approaches, standards, methods, and techniques necessary for the effective implementation and management of Information Security controls
• Comprehend the interrelationships between components of Information Security controls, including responsibility, strategy, acquisition, performance, conformance, and human behaviour
• Appreciate the significance of information security within the broader strategy of an organisation
• Mastery of implementing information security management processes
• Expertise in formulating and implementing security requirements and objectives

Educational approach

• This training integrates both theoretical and practical components
• Lecture sessions supplemented with examples derived from real-life cases
• Practical exercises based on case studies
• Review exercises designed to aid exam preparation
• Practice tests that mirror the format of the certification exam

General Information

• Certification fees are included in the exam price
• Training material comprising over 500 pages of information and practical examples will be provided to participants
• Participants will receive a certificate of participation awarding 31 CPD (Continuing Professional Development) credits
• In the event of an unsuccessful exam result, you may retake the exam free of charge within 12 months

In this instructor-led, live training in Braga, participants will learn hands-on how to set up a Zero Security system as they set up and deploy BeyondCorop in a live-lab environment.

By the end of this training, participants will be able to:

• Assess their organization's existing security model.
• Shift access controls from the perimeter to individual devices and users.
• Deploy applications using a user and device-centric authentication and authorization workflow.
• Understand, plan and implement a Zero Trust network within their organization.

Even seasoned programmers do not always master the security services provided by their development platforms, nor are they fully aware of the vulnerabilities relevant to their projects. This course is designed for developers working with both Java and PHP, equipping them with the essential skills needed to make their applications resilient against modern internet-based attacks.

The course walks through the levels of Java security architecture by addressing access control, authentication, authorization, secure communication, and various cryptographic functions. It also introduces various APIs that can be used to secure code in PHP, such as OpenSSL for cryptography or HTML Purifier for input validation. On the server side, best practices are provided for hardening and configuring the operating system, web container, file system, SQL server, and PHP itself, with a special focus on client-side security through issues related to JavaScript, Ajax, and HTML5.

General web vulnerabilities are discussed using examples aligned with the OWASP Top Ten, illustrating various injection attacks, script injections, attacks against session handling, insecure direct object references, file upload issues, and many others. The course introduces Java- and PHP-specific language problems and issues arising from the runtime environment, grouped into standard vulnerability types such as missing or improper input validation, improper use of security features, incorrect error and exception handling, time- and state-related problems, code quality issues, and mobile code-related vulnerabilities.

Participants can experiment with the discussed APIs, tools, and the effects of configurations themselves. The introduction of vulnerabilities is supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to correct bugs and apply mitigation techniques, and introducing the use of various extensions and tools.

Participants attending this course will

• Understand the basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Learn about client-side vulnerabilities and secure coding practices
• Learn to use various security features of the Java development environment
• Have a practical understanding of cryptography
• Learn to use various security features of PHP
• Understand the security concepts of web services
• Gain practical knowledge in using security testing tools
• Learn about typical coding mistakes and how to avoid them
• Be informed about recent vulnerabilities in Java and PHP frameworks and libraries
• Receive sources and further readings on secure coding practices

Audience

Developers

Description

The Java language and the Java Runtime Environment (JRE) were designed to be free from the most problematic common security vulnerabilities experienced in other languages, like C/C++. Yet, software developers and architects should not only know how to use the various security features of the Java environment (positive security), but should also be aware of the numerous vulnerabilities that are still relevant for Java development (negative security).

The introduction of security services is preceded with a brief overview of the foundations of cryptography, providing a common baseline for understanding the purpose and the operation of the applicable components. The use of these components is presented through several practical exercises, where participants can try out the discussed APIs for themselves.

The course also goes through and explains the most frequent and severe programming flaws of the Java language and platform, covering both the typical bugs committed by Java programmers and the language- and environment-specific issues. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by the recommended coding guidelines and the possible mitigation techniques.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
• Learn to use various security features of the Java development environment
• Have a practical understanding of cryptography
• Learn about typical coding mistakes and how to avoid them
• Get information about some recent vulnerabilities in the Java framework
• Get sources and further readings on secure coding practices

Audience

Developers

Cyber Security involves the application of technologies, controls, and processes to safeguard computer systems, servers, networks, devices, applications, and data against malicious cyber attacks.

This instructor-led, live training (available online or onsite) is designed for individuals who wish to learn how to protect internet-connected systems from various cyber threats.

By the end of this training, participants will be able to:

• Understand the core concepts of Cyber Security.
• Identify and comprehend different types of Cyber Security threats.
• Learn the processes and best practices for protecting internet-connected systems from cyber attacks.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and practice sessions.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request customized training for this course, please contact us to arrange.

This instructor-led, live training in Braga (online or onsite) is designed for IT professionals seeking to learn and apply the fundamentals of cybersecurity practices, processes, and tools within their organizations.

By the end of this training, participants will be able to:

• Grasp cybersecurity concepts, definitions, architecture, and principles.
• Acquire skills to secure and protect digital assets (networks, systems, applications, and data).
• Deploy security models, frameworks, operational techniques, and incident handling procedures.
• Assess and mitigate the impact of cyber attacks, risks, threats, and vulnerabilities.
• Gain insights into cybersecurity challenges associated with emerging technologies.

This instructor-led, live training in Braga (online or on-site) is designed for software engineers and IT professionals who wish to deepen their knowledge of CyBOK and strengthen their theoretical and practical cyber security skills.

Upon completion of this training, participants will be able to:

• Grasp the core concepts, definitions, and principles of cyber security.
• Develop in-depth cyber security expertise by applying the CyBOK knowledge areas.
• Acquire comprehensive foundational knowledge to effectively implement the CyBOK framework.
• Support community and organizational initiatives to prioritize data security and privacy.
• Explore opportunities to obtain specializations and credentials relevant to cyber security roles.

This course is designed for individuals who need to gather intelligence or evidence from the Dark Web. This typically includes those employed in government or law enforcement, but it may also be relevant to the private sector.

Designed for leaders and managers, this course offers a comprehensive overview of the critical issues and activities within cybersecurity.

Participants will gain insights into various topics that expand their understanding and refine their executive decision-making capabilities concerning cybersecurity threats.
 

Upon completion of this training, participants will be able to:

• Understand the implications of internet and social network privacy
• Recognise Personally Identifiable Information (PII) and its significance
• Learn methods to secure online assets
• Understand how to safeguard the privacy of business users
• Gain knowledge of cyber laws that protect privacy

Format of the Course

• Interactive lectures and discussions
• Extensive exercises and practice sessions
• Hands-on implementation in a live-lab environment

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Braga (online or onsite) is designed for security engineers and compliance officers who wish to strengthen EXO deployments, control model access, and govern AI workloads that operate entirely on-premise.

In this instructor-led live training in Braga, participants will understand Internet of Things (IoT) architectures and learn the different IoT security solutions applicable to their organization.

By the end of this training, participants will be able to:

• Understand IoT architectures.
• Understand emerging IoT security threats and solutions.
• Implement technologies for IoT security in their organization.

This course equips you with the competencies required to implement information security frameworks in accordance with ISO 27005, a standard focused on information security risk management based on ISO 27001.

This instructor-led, live training in Braga (online or onsite) is designed for system administrators and IT professionals seeking to utilise RSPAMD, SpamAssassin, and DMARC to fortify their self-hosted email servers.

Upon completion of this training, participants will be capable of configuring anti-spam solutions, implementing email authentication protocols, and maintaining a secure, sovereign mail infrastructure.

This instructor-led, live training in Braga (online or onsite) is designed for computer users who wish to understand malware and implement appropriate measures to minimize its threat.

By the end of this training, participants will be able to:

• Grasp the concept of malware.
• Identify various types of malware.
• Implement necessary steps to mitigate malware risks (including procedural, technological, and awareness-based strategies).

This course delivers practical expertise in OpenStack and private cloud security. It begins with an introduction to the system, guiding participants through hands-on learning regarding security within private clouds and the securing of OpenStack installations. Throughout the training, every core OpenStack module is explored; participants construct virtual identity, image, network, compute, and storage resources while discussing pertinent security subjects. Each attendee receives a dedicated training environment featuring a complete OpenStack installation tailored to a selected cloud architecture (e.g., storage or networking). The training can be highly customized to meet specific client requirements.

Customization options
The training duration can be condensed to two days, concentrating on the core aspects most relevant to the customer. Alternatively, the scope can be expanded to include administrative, design, networking, and/or troubleshooting topics related to OpenStack deployments.