Cyber Security Training in Gaia

This instructor-led, live training in Gaia (online or onsite) is designed for advanced-level cybersecurity professionals, AI engineers, and IoT developers who aim to implement robust security measures and resilience strategies for Edge AI systems.

Upon completion of this training, participants will be able to:

• Identify security risks and vulnerabilities in Edge AI deployments.
• Deploy encryption and authentication techniques to protect data.
• Design resilient Edge AI architectures capable of withstanding cyber threats.
• Apply secure AI model deployment strategies within edge environments.

This instructor-led, live training in Gaia (online or onsite) is designed for cybersecurity professionals and data scientists at an intermediate level who wish to leverage LLMs to strengthen cybersecurity measures and threat intelligence.

Upon completing this training, participants will be able to:

• Grasp the role of LLMs in cybersecurity.
• Implement LLMs for threat detection and analysis.
• Utilize LLMs for security automation and response.
• Integrate LLMs with existing security infrastructure.

This instructor-led live training in Gaia (online or onsite) is designed for intermediate to advanced cybersecurity professionals and technical leads who wish to learn how to deploy AI models to strengthen security workflows, automate threat detection and response, and conduct predictive analysis.

Upon completion of this training, participants will be able to:

• Grasp the role of AI in modern cyber security.
• Construct machine learning models for anomaly and threat detection.
• Deploy AI to automate incident response and security operations.
• Assess the ethical and operational implications of AI in cybersecurity.

This instructor-led, live training in Gaia (online or onsite) is tailored for advanced-level security analysts who wish to elevate their skills in utilizing advanced Micro Focus ArcSight ESM content to improve an organization's ability to detect, respond, and mitigate cyber threats with greater precision and speed.

By the end of this training, participants will be able to:

• Optimize the use of Micro Focus ArcSight ESM to enhance monitoring and threat detection capabilities.
• Construct and manage advanced ArcSight variables to refine event streams for more precise analysis.
• Develop and implement ArcSight lists and rules for effective event correlation and alerting.
• Apply advanced correlation techniques to identify complex threat patterns and reduce false positives.

This instructor-led live training in Gaia (available online or onsite) targets intermediate-level analysts aiming to effectively analyze, secure, and protect their organization's data and networks from cyber threats.

By the conclusion of this training, participants will be able to:

• Gain a comprehensive understanding of the current cybersecurity landscape.
• Learn and apply industry-standard cybersecurity frameworks (e.g., NIST, ISO/IEC 27001) and best practices to enhance their organization's security posture.
• Implement effective network security measures, including configuring firewalls, VPNs, IDS/IPS systems, and applying encryption techniques to protect data at rest and in transit.
• Identify, analyze, and respond to cybersecurity incidents using threat intelligence, SIEM tools, and incident response plans.

This instructor-led, live training in Gaia (online or onsite) is aimed at beginner-level security administrators who wish to deepen their understanding of security practices within an organization.

By the end of this training, participants will be able to:

• Understand the fundamentals of security operations and administration.
• Identify and mitigate various security threats and vulnerabilities.
• Implement and manage security solutions.
• Understand legal and ethical considerations in security operations.
• Prepare for incident response and disaster recovery.

This instructor-led, live training in Gaia (online or on-site) is designed for senior security managers who wish to be well-equipped with the knowledge and skills needed to excel in the exam and their roles as security management professionals.

By the end of this training, participants will be able to:

• Understand the five domains of ISSMP.
• Develop skills to manage an information security program.
• Learn to establish and maintain security governance.
• Gain insights into risk management, incident response, and continuity planning.
• Prepare effectively for the ISSMP certification exam.

Bug Bounty Hunting involves the identification of security vulnerabilities within software, websites, or systems, followed by their responsible disclosure in exchange for rewards or recognition.

This instructor-led, live training (available online or onsite) is designed for beginner-level security researchers, developers, and IT professionals who wish to learn the fundamentals of ethical bug hunting and how to participate in bug bounty programs.

By the end of this training, participants will be able to:

• Understand the core concepts of vulnerability discovery and bug bounty programs.
• Use key tools like Burp Suite and browser dev tools for testing applications.
• Identify common web security flaws such as XSS, SQLi, and CSRF.
• Submit clear, actionable vulnerability reports to bug bounty platforms.

Format of the Course

• Interactive lecture and discussion.
• Hands-on use of bug bounty tools in simulated testing environments.
• Guided exercises focused on discovering, exploiting, and reporting vulnerabilities.

Course Customization Options

• To request a customized training for this course based on your organization's applications or testing needs, please contact us to arrange.

Description:

CISA® stands as the world's most renowned and widely recognised certification for professionals operating within the fields of IT audit and IT risk consulting.

Our CISA course is an intensive, highly competitive, and exam-focused training programme. Drawing on our experience of delivering over 150 CISA training sessions in Europe and globally, and having trained more than 1,200 delegates, Net Security has developed its in-house CISA training materials with the primary objective of ensuring delegates pass the ISACA CISA® Exam. Our methodology emphasises a deep understanding of CISA IS auditing concepts, coupled with extensive practice using question banks released by ISACA over the past three years. Over time, CISA-qualified professionals have seen tremendous demand from leading accounting firms, global banks, advisory firms, assurance departments, and internal audit teams.

While delegates may possess years of experience in IT auditing, the approach to solving CISA questionnaires relies entirely on their grasp of globally accepted IT assurance practices. The CISA exam is notably challenging due to the tight margin between two plausible answers, a scenario where ISACA tests your understanding of global IT auditing practices. To address these challenges, we employ expert trainers with extensive experience in delivering CISA training worldwide.

The Net Security CISA manual covers all exam-relevant concepts, case studies, and Q&A sections across the five CISA domains. Furthermore, the trainer provides key supporting materials throughout the course, including relevant CISA notes, question banks, a CISA glossary, videos, revision documents, exam tips, and CISA mind maps.

Goal:

The ultimate aim is to help you pass your CISA examination on the first attempt.

Objectives:

• Apply gained knowledge in a practical manner that benefits your organisation.
• Deliver audit services in compliance with IT audit standards.
• Provide assurance regarding leadership, organisational structure, and processes.
• Provide assurance on the acquisition, development, testing, and implementation of IT assets.
• Provide assurance on IT operations, including service operations and third-party management.
• Provide assurance on the organisation’s security policies, standards, procedures, and controls to ensure the confidentiality, integrity, and availability of information assets.

Target Audience:

Finance/CPA professionals, IT professionals, Internal & External auditors, and information security and risk consulting professionals.

This instructor-led, live training in Gaia (online or onsite) is aimed at intermediate-level technical professionals who wish to delve deeper into the technical aspects and functionalities of Fortinet’s product line to effectively recommend, sell, and implement Fortinet security solutions.

By the end of this training, participants will be able to:

• Gain in-depth knowledge of Fortinet’s advanced security solutions and products.
• Understand the technical features, benefits, and deployment scenarios for each core Fortinet product.
• Configure, manage, and troubleshoot Fortinet solutions in diverse environments.
• Apply Fortinet products to address complex security challenges and requirements.

This instructor-led, live training in Gaia (online or onsite) is aimed at experienced developers who wish to gain a comprehensive understanding of Python programming and its applications in cybersecurity.

By the end of this training, participants will be able to:

• Use Python programming for defensive cybersecurity.
• Understand and use Python for ethical offensive techniques and digital forensics tasks.
• Recognize legal and ethical considerations surrounding offensive cybersecurity and vulnerability disclosure.

This instructor-led, live training in Gaia (online or onsite) is designed for service technicians, system administrators, or anyone wishing to learn the correct installation, usage, and management of the Honeywell security system.

By the end of this training, participants will be able to:

• Grasp the concepts underlying Honeywell security systems and their components.
• Correctly install and maintain a Honeywell security system.
• Use Honeywell maintenance tools and the management suite to control a security system.

User session recording technology captures, monitors, and audits user activity on IT systems, providing insights for security, compliance, and forensic investigations.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level IT and security professionals who wish to implement user session recording solutions to enhance monitoring, compliance, and accountability.

By the end of this training, participants will be able to:

• Understand the principles of user session recording.
• Deploy and configure session recording solutions.
• Analyze and audit recorded sessions for compliance.
• Integrate session recording with security monitoring systems.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Gaia (online or onsite) is aimed at system administrators who wish to use Microsoft Active Directory to manage and secure data access.

By the end of this training, participants will be able to:

• Set up and configure Active Directory.
• Set up a domain and define access rights of users and devices.
• Manage users and machines through Group Policies.
• Control access to file servers.
• Set up a Certificate Service and manage certificates.
• Implement and manage services such as encryption, certificates, and authentication.

A CISSP is an information assurance professional who defines the architecture, design, management and/or controls that assure the security of business environments. The vast breadth of knowledge and the experience it takes to pass the exam is what sets a CISSP apart. The credential demonstrates a globally recognized level of competence provided by the (ISC)2® CBK®, which covers critical topics in security today, including cloud computing, mobile security, application development security, risk management and more.

This course helps you review the 10 domains of the information security practices. It also serves as a strong learning tool for mastering concepts and topics related to all aspects of information systems security.

Objectives:

• To review of the main topics of CISSP CBK (Common Body of Knowledge).
• To prepare for a CISSP examination

Today, numerous programming languages can compile code for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, developers must understand how to apply programming techniques at both the architecture and coding levels. This knowledge is essential for implementing desired security features, avoiding vulnerabilities, and limiting potential exploitation.

This course aims to equip developers with the skills to prevent untrusted code from executing privileged actions, protect resources via strong authentication and authorization, manage remote procedure calls and sessions, and implement various functional alternatives. Through extensive hands-on exercises, participants will gain practical insights into these critical areas.

The discussion on vulnerabilities begins by examining common programming errors encountered when using .NET. The analysis of ASP.NET vulnerabilities further explores various environment settings and their impacts. Additionally, the course addresses ASP.NET-specific security challenges, including general web application security issues and specialized attack vectors such as ViewState manipulation and string termination attacks.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding practices
• Identify web vulnerabilities beyond the OWASP Top Ten and learn strategies to avoid them
• Utilize the various security features available in the .NET development environment
• Acquire practical experience with security testing tools
• Recognize typical coding mistakes and understand how to prevent them
• Stay informed about recent vulnerabilities affecting .NET and ASP.NET
• Access resources and further reading materials on secure coding practices

Audience

Developers

This course equips PHP developers with essential skills to protect their applications against modern Internet-based threats. It explores web vulnerabilities through practical PHP examples, extending beyond the OWASP Top Ten to address various injection attacks, script injections, session handling flaws, insecure direct object references, file upload issues, and more. PHP-related vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, misuse of security features, and time- or state-related problems. Specific examples include open_basedir circumvention, denial-of-service attacks via magic floats, and hash table collision attacks. In each case, participants will learn key techniques and functions to mitigate these risks.

A significant emphasis is placed on client-side security, addressing vulnerabilities in JavaScript, Ajax, and HTML5. The course introduces several PHP security extensions, including hash, mcrypt, and OpenSSL for cryptography, as well as Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening are covered in the context of PHP configuration (php.ini), Apache, and general server settings. Additionally, the course provides an overview of security testing tools and techniques for developers and testers, including security scanners, penetration testing, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the introduction of vulnerabilities and configuration practices are reinforced with hands-on exercises. These demonstrate the impact of successful attacks, show how to implement mitigation strategies, and introduce the use of various extensions and tools.

Participants attending this course will

• Gain a solid understanding of security concepts, IT security, and secure coding principles
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Understand client-side vulnerabilities and adopt secure coding practices
• Develop a practical grasp of cryptography
• Learn to utilize various PHP security features effectively
• Identify common coding errors and understand how to avoid them
• Stay informed about recent vulnerabilities in the PHP framework
• Acquire practical experience with security testing tools
• Access resources and further reading on secure coding practices

Audience

Developers

This course explores the management of an incident response team. Considering the frequency and complexity of modern cyber attacks, incident response has become a critical function for organizations.

As the final line of defense, effective incident response relies on strong management processes to detect and respond efficiently. Managing such a team demands specialized skills and knowledge.

Cyber Security involves the application of technologies, controls, and processes to safeguard computer systems, servers, networks, devices, applications, and data against malicious cyber attacks.

This instructor-led, live training (available online or onsite) is designed for individuals who wish to learn how to protect internet-connected systems from various cyber threats.

By the end of this training, participants will be able to:

• Understand the core concepts of Cyber Security.
• Identify and comprehend different types of Cyber Security threats.
• Learn the processes and best practices for protecting internet-connected systems from cyber attacks.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and practice sessions.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request customized training for this course, please contact us to arrange.

This instructor-led, live training in Gaia (online or onsite) is designed for IT professionals seeking to learn and apply the fundamentals of cybersecurity practices, processes, and tools within their organizations.

By the end of this training, participants will be able to:

• Grasp cybersecurity concepts, definitions, architecture, and principles.
• Acquire skills to secure and protect digital assets (networks, systems, applications, and data).
• Deploy security models, frameworks, operational techniques, and incident handling procedures.
• Assess and mitigate the impact of cyber attacks, risks, threats, and vulnerabilities.
• Gain insights into cybersecurity challenges associated with emerging technologies.

This instructor-led, live training in Gaia (online or on-site) is designed for software engineers and IT professionals who wish to deepen their knowledge of CyBOK and strengthen their theoretical and practical cyber security skills.

Upon completion of this training, participants will be able to:

• Grasp the core concepts, definitions, and principles of cyber security.
• Develop in-depth cyber security expertise by applying the CyBOK knowledge areas.
• Acquire comprehensive foundational knowledge to effectively implement the CyBOK framework.
• Support community and organizational initiatives to prioritize data security and privacy.
• Explore opportunities to obtain specializations and credentials relevant to cyber security roles.

This course covers the fundamental principles and techniques of digital forensics investigation, along with an overview of the various computer forensics tools available. Participants will learn core forensic procedures to ensure the court admissibility of evidence, as well as the associated legal and ethical considerations.

Attendees will gain practical skills in conducting forensic investigations on both Unix/Linux and Windows systems with different file systems. The curriculum includes advanced topics such as wireless, network, web, database, and mobile crime investigations.

Designed for leaders and managers, this course offers a comprehensive overview of the critical issues and activities within cybersecurity.

Participants will gain insights into various topics that expand their understanding and refine their executive decision-making capabilities concerning cybersecurity threats.
 

Upon completion of this training, participants will be able to:

• Understand the implications of internet and social network privacy
• Recognise Personally Identifiable Information (PII) and its significance
• Learn methods to secure online assets
• Understand how to safeguard the privacy of business users
• Gain knowledge of cyber laws that protect privacy

Format of the Course

• Interactive lectures and discussions
• Extensive exercises and practice sessions
• Hands-on implementation in a live-lab environment

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led live training in Gaia (online or onsite) is aimed at system administrators who wish to use FreeIPA to centralize the authentication, authorization and account information for their organization's users, groups, and machines.

By the end of this training, participants will be able to:

• Install and configure FreeIPA.
• Manage Linux users and clients from a single central location.
• Use FreeIPA's CLI, Web UI and RPC interface to set up and manage permissions.
• Enable Single Sign On authentication across all systems, services and applications.
• Integrate FreeIPA with Windows Active Directory.
• Backup, replicate and migrate an FreeIPA server.

This instructor-led, live training (online or onsite) is targeted at cloud professionals who aim to design and implement multi-cloud architectures that avoid vendor lock-in and ensure data sovereignty.

By the end of this training, participants will be able to identify vendor lock-in risks, design portable architectures, implement data sovereignty controls, and leverage cloud-agnostic tools.

This instructor-led, live training in Gaia (online or onsite) is aimed at network engineers and infrastructure professionals who wish to use SONiC and ONL to deploy and manage open network infrastructure on white-box switches.

By the end of this training, participants will be able to: understand SONiC and ONL architecture, deploy open-source NOS on white-box hardware, configure networking features, and implement monitoring and automation.

OpenVAS is an advanced open source framework which consists of several services and tools for network vulnerability scanning and management.

In this instructor-led, live training, participants will learn how to use OpenVAS for network vulnerability scanning.

By the end of this training, participants will be able to:

• Install and configure OpenVAS
• Learn the fundamental features and components of OpenVAS
• Configure and implement network vulnerability scans with OpenVAS
• Review and interpret OpenVAS scan results

Audience

• Network engineers
• Network administrators

Format of the course

• Part lecture, part discussion, exercises and heavy hands-on practice

Note

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live Payment Card Industry Professional training in Gaia (online or onsite) offers a professional qualification for industry practitioners seeking to demonstrate their expertise and comprehension of the PCI Data Security Standard (PCI DSS).

Upon completion of this training, participants will be able to:

• Grasp the payment process and the PCI standards established to safeguard it.
• Comprehend the roles and responsibilities of entities within the payment industry.
• Gain a thorough insight into and understanding of the 12 PCI DSS requirements.
• Showcase knowledge of PCI DSS and its application to organizations involved in the transaction process.

This instructor-led, live training in Gaia (online or onsite) targets IT administrators, security coordinators, and compliance managers who wish to identify, evaluate, and implement security policy management methods for their organization.

By the end of this training, participants will be able to develop, manage, and monitor security policies to protect their organization's information, network, and physical and software assets.

This instructor-led, live training in Gaia (online or onsite) is aimed at technical persons who wish to apply the most suitable tools and techniques to secure both telecom as well as wireless networks.