Cyber Security Training in Évora

This instructor-led, live training in Évora (online or onsite) is designed for advanced-level cybersecurity professionals, AI engineers, and IoT developers who aim to implement robust security measures and resilience strategies for Edge AI systems.

Upon completion of this training, participants will be able to:

• Identify security risks and vulnerabilities in Edge AI deployments.
• Deploy encryption and authentication techniques to protect data.
• Design resilient Edge AI architectures capable of withstanding cyber threats.
• Apply secure AI model deployment strategies within edge environments.

This instructor-led, live training in Évora (online or onsite) is designed for cybersecurity professionals and data scientists at an intermediate level who wish to leverage LLMs to strengthen cybersecurity measures and threat intelligence.

Upon completing this training, participants will be able to:

• Grasp the role of LLMs in cybersecurity.
• Implement LLMs for threat detection and analysis.
• Utilize LLMs for security automation and response.
• Integrate LLMs with existing security infrastructure.

This instructor-led live training in Évora (online or onsite) is designed for intermediate-level IT auditors who wish to effectively incorporate AI tools into their audit practices.

By the end of this training, participants will be able to:

• Understand the fundamental concepts of artificial intelligence and its application within IT auditing.
• Leverage AI technologies, including machine learning, NLP, and RPA, to enhance the efficiency, accuracy, and scope of audits.
• Conduct risk assessments using AI tools to facilitate continuous monitoring and proactive risk management.
• Incorporate AI into the planning, execution, and reporting phases of audits, thereby improving overall IT audit effectiveness.

This instructor-led live training in Évora (online or onsite) is designed for intermediate to advanced cybersecurity professionals and technical leads who wish to learn how to deploy AI models to strengthen security workflows, automate threat detection and response, and conduct predictive analysis.

Upon completion of this training, participants will be able to:

• Grasp the role of AI in modern cyber security.
• Construct machine learning models for anomaly and threat detection.
• Deploy AI to automate incident response and security operations.
• Assess the ethical and operational implications of AI in cybersecurity.

This instructor-led live training in Évora (available online or onsite) targets intermediate-level analysts aiming to effectively analyze, secure, and protect their organization's data and networks from cyber threats.

By the conclusion of this training, participants will be able to:

• Gain a comprehensive understanding of the current cybersecurity landscape.
• Learn and apply industry-standard cybersecurity frameworks (e.g., NIST, ISO/IEC 27001) and best practices to enhance their organization's security posture.
• Implement effective network security measures, including configuring firewalls, VPNs, IDS/IPS systems, and applying encryption techniques to protect data at rest and in transit.
• Identify, analyze, and respond to cybersecurity incidents using threat intelligence, SIEM tools, and incident response plans.

This instructor-led, live training in Évora (online or onsite) is designed for advanced cyber security professionals aiming to understand Cyber Threat Intelligence and develop the skills to effectively manage and mitigate cyber threats.

Upon completion of this training, participants will be able to:

• Comprehend the fundamental concepts of Cyber Threat Intelligence (CTI).
• Evaluate the contemporary cyber threat landscape.
• Gather and process intelligence data.
• Conduct advanced threat analysis.
• Utilize Threat Intelligence Platforms (TIPs) to automate threat intelligence workflows.

Detection engineering involves the design, implementation, and continuous refinement of methods to identify malicious activity across systems and networks.

This instructor-led, live training (available online or onsite) is designed for beginner-level cybersecurity professionals seeking to acquire practical skills in creating and tuning security detections.

Upon completing this training, participants will possess the necessary skills to:

• Create effective detection rules and signatures using widely adopted security tools.
• Analyze logs and telemetry data to pinpoint suspicious activities.
• Leverage threat intelligence to enhance detection logic.
• Refine alerts and minimize false positives within a SOC workflow.

Course Format

• Guided instruction accompanied by practical demonstrations.
• Scenario-based exercises and hands-on analysis.
• Development of real-world detections within an interactive lab environment.

Customization Options

• If your organization requires a customized version of this programme, please contact us to discuss your needs.

This instructor-led, live training in Évora (online or onsite) is aimed at intermediate-level cloud architects, cloud security engineers, and DevOps professionals who wish to implement Zero Trust principles within cloud environments and leverage cloud-native security tools to enhance their organisation’s security posture.

By the end of this training, participants will be able to:

• Design and implement Zero Trust architecture in a cloud environment.
• Utilize cloud security tools to enforce Zero Trust policies.
• Apply access controls and continuous monitoring in cloud-native applications.
• Integrate identity and authentication systems with cloud services.
• Assess the security of cloud environments through a Zero Trust lens.

This instructor-led, live training in Évora (online or onsite) is aimed at intermediate-level network and security professionals who wish to effectively implement, manage, and secure SD-WAN solutions.

By the end of this training, participants will be able to:

• Understand the fundamental concepts, benefits, and challenges associated with SD-WAN technologies.
• Design an SD-WAN architecture tailored to organizational needs and deploy SD-WAN solutions effectively.
• Implement and manage security features within an SD-WAN.
• Monitor, manage, and troubleshoot SD-WAN environments.

Open Source Software (OSS) Management involves supervising the entire lifecycle of open-source components within an organization to guarantee secure, compliant, and efficient utilization.

This instructor-led training, available online or on-site, targets intermediate IT professionals looking to implement best practices for managing open-source software in corporate and government settings.

Upon completing this course, participants will be equipped to:

• Develop robust OSS policies and governance structures.
• Utilize SBOM and SCA tools to identify, monitor, and manage open-source dependencies.
• Reduce risks linked to licensing issues and security vulnerabilities.
• Optimize OSS adoption to boost innovation and achieve cost efficiencies.

Course Format

• Engaging lectures and group discussions.
• Case studies and scenario-based activities.
• Practical demonstrations using OSS management tools.

Customization Options

• The course can be customized to align with specific organizational OSS policies and toolchains. Please get in touch to arrange.

This instructor-led, live training in Évora (online or onsite) is aimed at intermediate-level IT professionals who wish to effectively use and manage Sophos XG Firewall to enhance the security posture of their organizations or clients.

By the end of this training, participants will be able to:

• Understand the features and capabilities of Sophos XG Firewall.
• Perform initial setup, configure network interfaces, and create and manage firewall policies and rules.
• Understand how to integrate with various authentication services.
• Utilize Sophos XG Firewall's monitoring and reporting tools to maintain oversight of network security.

This instructor-led, live training in Évora (online or onsite) is designed for intermediate to advanced IT professionals and business leaders seeking to develop a structured approach to managing data breaches.

Upon completion of this training, participants will be able to:

• Comprehend the causes and consequences of data breaches.
• Develop and implement strategies to prevent data breaches.
• Establish an incident response plan to contain and mitigate breaches.
• Conduct forensic investigations and assess the impact of breaches.
• Meet legal and regulatory requirements for breach notification.
• Recover from data breaches and enhance security postures.

This instructor-led, live training in Évora (online or onsite) is designed for intermediate-level system administrators seeking to learn how to utilize Siteminder for implementing various authentication methods.

Upon completion of this training, participants will be able to:

• Grasp the core concepts of Siteminder and its pivotal role in authentication and access management.
• Configure and manage user authentication processes within Siteminder.
• Deploy various authentication methods supported by Siteminder.
• Troubleshoot common issues associated with Siteminder authentication.
• Integrate Siteminder with external identity providers to facilitate federated authentication.

User session recording technology captures, monitors, and audits user activity on IT systems, providing insights for security, compliance, and forensic investigations.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level IT and security professionals who wish to implement user session recording solutions to enhance monitoring, compliance, and accountability.

By the end of this training, participants will be able to:

• Understand the principles of user session recording.
• Deploy and configure session recording solutions.
• Analyze and audit recorded sessions for compliance.
• Integrate session recording with security monitoring systems.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

The CCSK Plus course extends the foundation class by providing expanded content and extensive practical exercises that reinforce classroom learning. Participants engage in a scenario involving the secure migration of a fictional organization to the cloud, allowing them to apply their knowledge through a series of activities typical of a real-world environment.

The CCSK Plus Course encompasses all modules from the CCSK Foundation course, along with additional material.

This is a Cloud Security Alliance (CSA) authorized course, and NobleProg is an official CSA Training Partner.

This course is delivered by CSA Authorized CCSK Instructors.

All attendees receive:

• official CSA CCSK Plus course certificates
• official CCSK Foundation Student Handbooks
• 1 CCSK exam voucher and 1 re-attempt exam voucher

This course covers the most current version of the CCSK exam - currently version 4.1.

This instructor-led, live training in Évora (online or onsite) is aimed at system administrators who wish to use Microsoft Active Directory to manage and secure data access.

By the end of this training, participants will be able to:

• Set up and configure Active Directory.
• Set up a domain and define access rights of users and devices.
• Manage users and machines through Group Policies.
• Control access to file servers.
• Set up a Certificate Service and manage certificates.
• Implement and manage services such as encryption, certificates, and authentication.

Who is it for:

This qualification is designed for security professionals seeking to grasp the technical and business dimensions of their role, as well as anyone aspiring to work in security architecture.

• System Administrators aiming to transition into security architecture roles
• Technical architects looking to specialise in security architecture

Additionally, this certificate provides a complimentary certification for individuals who have attained or are pursuing CCP status in Information Assurance.

What will I learn:

Upon completion, candidates will be able to:

• Analyze the business environment and identify information risks relevant to the systems.
• Describe and implement security design principles.
• Identify information risks emerging from potential solution architectures.
• Design alternative architectures or countermeasures to mitigate identified information risks.
• Ensure that proposed architectures and countermeasures effectively address the identified information risks.
• Apply standard security techniques and architectures to mitigate security risks.
• Develop new architectures that mitigate risks associated with emerging technologies and business practices.
• Provide consultancy and advice to clarify Information Assurance and architectural challenges.
• Configure ICT systems in compliance with approved security architectures.

Implementing a secure networked application can be challenging, even for developers who have previously used various cryptographic building blocks (such as encryption and digital signatures). To help participants grasp the role and usage of these cryptographic primitives, the course first establishes a solid foundation on the main requirements of secure communication – secure acknowledgement, integrity, confidentiality, remote identification, and anonymity – while also presenting typical problems that can compromise these requirements along with real-world solutions.

As cryptography is a critical aspect of network security, the course discusses the most important cryptographic algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Instead of presenting an in-depth mathematical background, these elements are discussed from a developer's perspective, showing typical use-case examples and practical considerations related to the use of crypto, such as public key infrastructures. Security protocols in many areas of secure communication are introduced, with an in-depth discussion on the most widely-used protocol families such as IPSEC and SSL/TLS.

Typical crypto vulnerabilities are discussed both related to certain crypto algorithms and cryptographic protocols, such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE and similar, as well as the RSA timing attack. In each case, the practical considerations and potential consequences are described for each problem, again, without going into deep mathematical details.

Finally, as XML technology is central for data exchange by networked applications, the security aspects of XML are described. This includes the usage of XML within web services and SOAP messages alongside protection measures such as XML signature and XML encryption – as well as weaknesses in those protection measures and XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Understand the requirements of secure communication
• Learn about network attacks and defenses at different OSI layers
• Have a practical understanding of cryptography
• Understand essential security protocols
• Understand some recent attacks against cryptosystems
• Get information about some recent related vulnerabilities
• Understand security concepts of Web services
• Get sources and further readings on secure coding practices

Audience

Developers, Professionals

Description:

Cybersecurity expertise is in high demand as persistent threats continue to impact enterprises globally. A significant majority of professionals surveyed by ISACA acknowledge this trend and intend to pursue roles requiring cybersecurity knowledge.
To address this need, ISACA has launched the Cybersecurity Fundamentals Certificate, offering education and validation of skills in this critical field.

Objectives:

Amidst rising cybersecurity threats and a growing global shortage of qualified security professionals, ISACA's Cybersecurity Fundamentals Certificate programme provides an effective solution for rapidly training entry-level staff, ensuring they possess the necessary skills and knowledge to succeed in the cybersecurity landscape.

Target Audience:

This certificate programme is also one of the most effective ways to acquire foundational cybersecurity knowledge and begin building your skills and expertise in this essential area.

Cyber Security involves the application of technologies, controls, and processes to safeguard computer systems, servers, networks, devices, applications, and data against malicious cyber attacks.

This instructor-led, live training (available online or onsite) is designed for individuals who wish to learn how to protect internet-connected systems from various cyber threats.

By the end of this training, participants will be able to:

• Understand the core concepts of Cyber Security.
• Identify and comprehend different types of Cyber Security threats.
• Learn the processes and best practices for protecting internet-connected systems from cyber attacks.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and practice sessions.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request customized training for this course, please contact us to arrange.

This instructor-led, live training in Évora (available online or on-site) covers various aspects of enterprise security, spanning from AI to database security. It also includes the latest tools, processes, and mindsets required to protect against attacks.

Designed for leaders and managers, this course offers a comprehensive overview of the critical issues and activities within cybersecurity.

Participants will gain insights into various topics that expand their understanding and refine their executive decision-making capabilities concerning cybersecurity threats.
 

Upon completion of this training, participants will be able to:

• Understand the implications of internet and social network privacy
• Recognise Personally Identifiable Information (PII) and its significance
• Learn methods to secure online assets
• Understand how to safeguard the privacy of business users
• Gain knowledge of cyber laws that protect privacy

Format of the Course

• Interactive lectures and discussions
• Extensive exercises and practice sessions
• Hands-on implementation in a live-lab environment

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led live training in Évora (online or onsite) is aimed at system administrators who wish to use FreeIPA to centralize the authentication, authorization and account information for their organization's users, groups, and machines.

By the end of this training, participants will be able to:

• Install and configure FreeIPA.
• Manage Linux users and clients from a single central location.
• Use FreeIPA's CLI, Web UI and RPC interface to set up and manage permissions.
• Enable Single Sign On authentication across all systems, services and applications.
• Integrate FreeIPA with Windows Active Directory.
• Backup, replicate and migrate an FreeIPA server.

Target Audience:

This course is designed for individuals seeking to understand information security and explore potential career trajectories within the sector. It is suitable for people from diverse backgrounds, including those with limited prior technical knowledge.

Course Objectives:

Attendees should:

• Gain a broad understanding of information security concepts and principles.
• Be able to identify key threats and vulnerabilities.
• Have the capability to explore various career options and specialisations within information security.
• Develop a foundation for further learning and exploration in the field.

Format of the Course:

• Interactive lecture and group discussions.
• Practical exercises and feedback sessions.
• Participants are encouraged to bring questions and participate actively in discussions.

This agenda is flexible and can be adjusted based on time constraints and audience interests. Customised versions might include interactive elements such as quizzes, polls, and group discussions.

The course will provide resources and information about further learning, professional organisations, and career resources will be provided.

Course Customisation Options

• To request a customised training for this course, please contact us to arrange.

Why participate?

The ISO/IEC 27001 Foundation training equips you with the essential knowledge to implement and manage an Information Security Management System (ISMS) in accordance with ISO/IEC 27001. Throughout this course, you will gain a comprehensive understanding of ISMS components, such as policy development, procedural frameworks, performance metrics, managerial commitment, internal auditing, management reviews, and strategies for continual improvement.

Upon successful completion of this course, you will be eligible to take the examination and apply for the "PECB Certified ISO/IEC 27001 Foundation" credential. This PECB Foundation Certificate validates your grasp of fundamental methodologies, requirements, frameworks, and management approaches.

Who should attend?

• Professionals involved in Information Security Management.
• Individuals aiming to acquire knowledge regarding the core processes of Information Security Management Systems (ISMS).
• Those interested in pursuing a career path in Information Security Management.

Educational approach

• Lectures are reinforced with practical questions and real-world examples.
• Practical exercises incorporate examples and guided discussions.
• Practice tests mirror the format and difficulty of the Certification Exam.

Information security threats and attacks are constantly evolving and becoming more sophisticated. The most effective defence against these risks is the proper implementation and management of information security controls and best practices. Furthermore, robust information security is a key expectation and requirement for customers, legislators, and other interested parties.

This training course is designed to prepare participants to implement an Information Security Management System (ISMS) in accordance with ISO/IEC 27001. It aims to provide a comprehensive understanding of ISMS best practices and establish a framework for its ongoing management and improvement.

Upon completing the training course, you may sit for the exam. If you pass successfully, you can apply for the 'PECB Certified ISO/IEC 27001 Lead Implementer' credential, which validates your ability and practical knowledge to implement an ISMS based on the requirements of ISO/IEC 27001.

Who Should Attend?

• Project managers and consultants involved in or concerned with the implementation of an ISMS
• Expert advisors seeking to master the implementation of an ISMS
• Individuals responsible for ensuring conformity to information security requirements within an organisation
• Members of an ISMS implementation team

General Information

• Certification fees are included in the exam price
• Training material containing over 450 pages of information and practical examples will be distributed
• A participation certificate granting 31 CPD (Continuing Professional Development) credits will be issued
• If the exam is not passed, you may retake it within 12 months free of charge

Educational Approach

• This training course includes essay-type exercises, multiple-choice quizzes, examples, and best practices utilised in the implementation of an ISMS.
• Participants are encouraged to communicate with each other and engage in discussions when completing quizzes and exercises.
• The exercises are based on a case study.
• The structure of the quizzes mirrors that of the certification exam.

Learning Objectives

This training course will help you:

• Gain a comprehensive understanding of the concepts, approaches, methods, and techniques used for the implementation and effective management of an ISMS
• Recognise the correlation between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
• Understand the operation of an information security management system and its processes based on ISO/IEC 27001
• Learn how to interpret and implement the requirements of ISO/IEC 27001 within the specific context of an organisation
• Acquire the necessary knowledge to support an organisation in effectively planning, implementing, managing, monitoring, and maintaining an ISMS

Target Audience

This course is designed for all staff members who need a practical grasp of Compliance principles and effective Risk Management strategies.

Course Format

The training employs a blended learning methodology that incorporates:

• Guided discussions
• Slide-based presentations
• Case studies
• Real-world examples

Course Objectives

Upon completion of this course, participants will be able to:

Gain a comprehensive understanding of the fundamental aspects of Compliance, alongside national and international initiatives focused on managing associated risks.

Articulate how organizations and their teams can establish a robust Compliance Risk Management Framework.

Outline the responsibilities of the Compliance Officer and the Money Laundering Reporting Officer, and comprehend how these roles fit within the broader business structure.

Identify key risk areas within Financial Crime, particularly regarding international operations, offshore centres, and high-net-worth clients.

This course empowers participants to scan, test, exploit, and secure their own systems. It provides an in-depth understanding and practical experience with essential modern security frameworks. Participants will explore the functioning of perimeter defenses and progress to scanning and attacking their own networks, ensuring no real network is compromised. The curriculum covers how intruders escalate privileges and outlines the steps necessary to secure systems, including Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows, and Virus Creation.

This instructor-led, live training in Évora (online or onsite) is tailored for system administrators who wish to leverage Okta for identity and access management.

Upon completing this training, participants will be capable of:

• Configuring, integrating, and managing Okta.
• Integrating Okta into an existing application.
• Enhancing security through multi-factor authentication.

This instructor-led, live training in Évora (online or onsite) is designed for individuals who wish to conduct research on third parties while protecting themselves from similar risks.

Upon completion of this training, participants will be able to:

• Install and configure advanced tools for conducting OSINT.
• Employ advanced techniques to collect publicly available data relevant to an investigation.
• Efficiently analyze large volumes of data.
• Generate intelligence reports based on findings.
• Leverage AI tools for facial recognition and sentiment analysis.
• Develop a strategy to define objectives and direct efforts toward the most relevant and actionable data.