Security Management Training in Portugal

This instructor-led live training in Portugal (online or onsite) is designed for intermediate-level IT auditors who wish to effectively incorporate AI tools into their audit practices.

By the end of this training, participants will be able to:

• Understand the fundamental concepts of artificial intelligence and its application within IT auditing.
• Leverage AI technologies, including machine learning, NLP, and RPA, to enhance the efficiency, accuracy, and scope of audits.
• Conduct risk assessments using AI tools to facilitate continuous monitoring and proactive risk management.
• Incorporate AI into the planning, execution, and reporting phases of audits, thereby improving overall IT audit effectiveness.

Encryption Key Management is the discipline of securely creating, storing, distributing, rotating, and retiring cryptographic keys to protect sensitive data and ensure regulatory compliance.

This instructor-led, live training (online or onsite) is aimed at intermediate-level IT and security professionals who wish to implement robust encryption key management practices and systems across enterprise environments.

By the end of this training, participants will be able to:

• Understand the lifecycle of encryption keys and best practices for their protection.
• Set up and manage key management systems (KMS) both on-prem and in the cloud.
• Implement access control and auditing for key usage.
• Comply with regulations and standards related to encryption key security.

Format of the Course

• Interactive lecture and discussion.
• Hands-on use of key management tools in lab environments.
• Guided exercises focused on secure key lifecycle implementation.

Course Customization Options

• To request a customized training for this course based on your infrastructure or compliance requirements, please contact us to arrange.

This instructor-led, live training in Portugal (online or onsite) is tailored for advanced-level security analysts who wish to elevate their skills in utilizing advanced Micro Focus ArcSight ESM content to improve an organization's ability to detect, respond, and mitigate cyber threats with greater precision and speed.

By the end of this training, participants will be able to:

• Optimize the use of Micro Focus ArcSight ESM to enhance monitoring and threat detection capabilities.
• Construct and manage advanced ArcSight variables to refine event streams for more precise analysis.
• Develop and implement ArcSight lists and rules for effective event correlation and alerting.
• Apply advanced correlation techniques to identify complex threat patterns and reduce false positives.

This instructor-led, live training in Portugal (online or onsite) is designed for beginner-level security professionals who wish to gain the knowledge and skills necessary to adapt to the rapidly evolving digital landscape in the security industry.

By the end of this training, participants will be able to:

• Grasp the concept of digital transformation within the security domain.
• Comprehend how digital solutions can enhance security operations, efficiency, and effectiveness.
• Manage security-related data to facilitate informed decision-making.

This instructor-led, live training in Portugal (online or onsite) is designed for beginner-level security managers who wish to effectively leverage and apply technology in their field.

Upon completion of this training, participants will be capable of:

• Gaining insight into the progression of technology within the security field.
• Mastering the integration of conventional security methods with contemporary technological solutions.
• Comprehending the fundamentals of cybersecurity, the risks linked to digital systems, and strategies to safeguard against cyber threats specific to the security industry.

This instructor-led, live training in Portugal (online or onsite) is aimed at beginner-level security managers and designers who wish to effectively plan, design, and implement security strategies that are integrated, technologically advanced, and compliant with legal and ethical standards.

By the end of this training, participants will be able to:

• Learn how to integrate security considerations into architectural and facility design.
• Assess threats and vulnerabilities to inform security planning.
• Develop comprehensive security plans that address a range of threats.
• Create effective emergency response and crisis management plans.

This instructor-led, live training in Portugal (online or onsite) is aimed at beginner-level security administrators who wish to deepen their understanding of security practices within an organization.

By the end of this training, participants will be able to:

• Understand the fundamentals of security operations and administration.
• Identify and mitigate various security threats and vulnerabilities.
• Implement and manage security solutions.
• Understand legal and ethical considerations in security operations.
• Prepare for incident response and disaster recovery.

This instructor-led, live training in Portugal (online or on-site) is designed for senior security managers who wish to be well-equipped with the knowledge and skills needed to excel in the exam and their roles as security management professionals.

By the end of this training, participants will be able to:

• Understand the five domains of ISSMP.
• Develop skills to manage an information security program.
• Learn to establish and maintain security governance.
• Gain insights into risk management, incident response, and continuity planning.
• Prepare effectively for the ISSMP certification exam.

This instructor-led training, delivered in Portugal (online or onsite), is intended for IT professionals who want to learn how to utilize the CipherTrust Solution suite.

By the end of this training, participants will be able to:

• Understand the CipherTrust Solution and its core functionalities.
• Evaluate device architecture and usage patterns.
• Manage the CipherTrust product suite.

Description:

Note: Please note that this updated CISM exam content outline applies to examinations commencing from 1 June 2022.

CISM® stands as the most prestigious and rigorous qualification for Information Security Managers worldwide. This certification offers you a pathway to join an elite network of peers who continuously learn and adapt to the evolving opportunities and challenges within Information Security Management.

Our CISM training methodology delivers comprehensive coverage of the four CISM domains, focusing on building core concepts and mastering the resolution of CISM exam questions released by ISACA. This course serves as intensive training and rigorous exam preparation for ISACA’s Certified Information Security Manager (CISM®) Examination.

Our instructors recommend that all delegates thoroughly review the ISACA-released CISM QA&E (Questions, Answers, and Explanations) as part of their exam preparation. The QA&E is invaluable in helping delegates grasp the ISACA question style, the approach to solving these questions, and facilitating rapid assimilation of CISM concepts during live classroom sessions.
All our trainers possess extensive experience in delivering CISM training. We will ensure you are fully prepared for the CISM examination.

Goal:

The primary objective is to pass your CISM examination on the first attempt.

Objectives:

• Apply the knowledge acquired in a practical manner that benefits your organisation
• Establish and maintain an information security governance framework to achieve your organisation’s goals and objectives
• Manage information risk to an acceptable level to meet business and compliance requirements
• Establish and maintain information security architectures (people, process, technology)
• Integrate information security requirements into the contracts and activities of third parties/suppliers
• Plan, establish, and manage the capability to detect, investigate, respond to, and recover from information security incidents to minimise business impact

Target Audience:

• Security professionals with 3-5 years of front-line experience
• Information security managers or individuals with management responsibilities
• Information security staff and assurance providers requiring an in-depth understanding of information security management, including: CISOs, CIOs, CSOs, privacy officers, risk managers, security auditors, compliance personnel, BCP/DR personnel, and executive and operational managers responsible for assurance functions

This instructor-led, live training in Portugal (online or onsite) is designed for developers and anyone interested in learning to use OAuth to grant applications secure delegated access.

Upon completing this training, participants will be able to:

• Grasp the fundamentals of OAuth.
• Comprehend native applications and their specific security challenges when employing OAuth.
• Learn and understand common extensions to OAuth protocols.
• Integrate with any OAuth authorization server.

This instructor-led, live training in Portugal (online or onsite) is designed for intermediate-level system administrators seeking to learn how to utilize Siteminder for implementing various authentication methods.

Upon completion of this training, participants will be able to:

• Grasp the core concepts of Siteminder and its pivotal role in authentication and access management.
• Configure and manage user authentication processes within Siteminder.
• Deploy various authentication methods supported by Siteminder.
• Troubleshoot common issues associated with Siteminder authentication.
• Integrate Siteminder with external identity providers to facilitate federated authentication.

Target Audience:

This course is designed for individuals with an interest in information security, whether they are considering it as a professional career path or seeking to enhance their general business knowledge.

The certification is suitable for anyone who needs to understand the principles of Information Security Management. It is particularly valuable for those interested in information security as a potential career or as a complementary skill set within their broader business expertise. The course provides a solid foundational base upon which further qualifications can be developed, or it offers a comprehensive general understanding that enables organisations to begin protecting their information appropriately.

Learning Outcomes:

Upon completion, candidates should be able to demonstrate:

• Knowledge of the core concepts related to information security management.
• An understanding of current national legislation and regulations that impact information security management.
• Awareness of existing national and international standards, frameworks, and organisations that support information security management.
• A comprehension of the current business and technical environments in which information security management operates.
• Knowledge of the categorisation, operation, and effectiveness of controls of various types and characteristics.

Target Audience:

This course is designed for anyone interested in information security, whether to pursue it as a career or to enhance their general business knowledge.

This certificate is ideal for individuals who need to understand Information Security Management Principles, as well as those interested in information security either as a potential career path or as a valuable addition to their business expertise. It establishes a solid foundation for further qualifications and provides a comprehensive overview to help organisations ensure their information is adequately protected.

Learning Outcomes:

Participants will be able to demonstrate:

• A clear understanding of the concepts related to information security management.
• Knowledge of current national legislation and regulations that impact information security management.
• Awareness of national and international standards, frameworks, and organisations that facilitate information security management.
• An understanding of the current business and technical environments in which information security management operates.
• Knowledge of the categorisation, operation, and effectiveness of various types and characteristics of controls.

Note: This is the four-day course, which adds one extra day to the standard delivery to allow more time for exam preparation and practice exercises.

Target Audience:

This certification is designed for professionals engaged in the fields of information security and information assurance.

Learning Outcomes:

Upon completion, candidates will demonstrate the ability to:

• Articulate how effective information risk management delivers significant business value.
• Utilize and explain information risk management terminology with clarity.
• Perform threat and vulnerability assessments, business impact analyses, and risk assessments.
• Apply the fundamental principles of controls and risk treatment.
• Present findings in a structured format suitable for developing a risk treatment plan.
• Implement information classification schemes effectively.

Description:

This intensive four-day event (CGEIT training) serves as the definitive preparation for the examination, meticulously designed to ensure you pass the rigorous CGEIT exam on your first attempt.
The CGEIT qualification is an internationally recognised symbol of excellence in IT governance, awarded by ISACA. It is tailored for professionals responsible for managing IT governance or holding significant advisory or assurance responsibilities in this field.
Attaining CGEIT status will enhance your recognition within the marketplace and increase your influence at the executive level.

Objectives:

This seminar is designed to prepare delegates for the CGEIT examination by enabling them to supplement their existing knowledge and understanding, thereby better equipping them to pass the exam as defined by ISACA.

Target Audience:

Our training course is intended for IT and business professionals with substantial IT governance experience who are undertaking the CGEIT exam.

Physical security forms the bedrock of network security. Through this instructor-led, live training in Portugal, attendees will explore the security risks inherent in computer server rooms and discover how to strengthen protection via intelligent practices, strategic planning, and the effective implementation of technology.

Upon completion of this training, participants will be capable of:

• Evaluating their organization's security risks concerning computer server rooms.
• Establishing control and monitoring systems to limit physical access to critical infrastructure.
• Crafting access policies tailored to various team members.
• Communicating security policies effectively to team members.

Description:

Cybersecurity expertise is in high demand as persistent threats continue to impact enterprises globally. A significant majority of professionals surveyed by ISACA acknowledge this trend and intend to pursue roles requiring cybersecurity knowledge.
To address this need, ISACA has launched the Cybersecurity Fundamentals Certificate, offering education and validation of skills in this critical field.

Objectives:

Amidst rising cybersecurity threats and a growing global shortage of qualified security professionals, ISACA's Cybersecurity Fundamentals Certificate programme provides an effective solution for rapidly training entry-level staff, ensuring they possess the necessary skills and knowledge to succeed in the cybersecurity landscape.

Target Audience:

This certificate programme is also one of the most effective ways to acquire foundational cybersecurity knowledge and begin building your skills and expertise in this essential area.

This instructor-led, live training (available online or onsite) targets enterprise leaders who wish to understand data sovereignty principles and develop compliant data management strategies.

By the end of this training, participants will be able to define data sovereignty, identify relevant laws, assess compliance risks, and implement governance frameworks for cross-border data management.

In this instructor-led, live course in Portugal, participants will learn how to formulate an effective security strategy to address the challenges of DevOps security.

Why participate?

The ISO/IEC 27001 Foundation training equips you with the essential knowledge to implement and manage an Information Security Management System (ISMS) in accordance with ISO/IEC 27001. Throughout this course, you will gain a comprehensive understanding of ISMS components, such as policy development, procedural frameworks, performance metrics, managerial commitment, internal auditing, management reviews, and strategies for continual improvement.

Upon successful completion of this course, you will be eligible to take the examination and apply for the "PECB Certified ISO/IEC 27001 Foundation" credential. This PECB Foundation Certificate validates your grasp of fundamental methodologies, requirements, frameworks, and management approaches.

Who should attend?

• Professionals involved in Information Security Management.
• Individuals aiming to acquire knowledge regarding the core processes of Information Security Management Systems (ISMS).
• Those interested in pursuing a career path in Information Security Management.

Educational approach

• Lectures are reinforced with practical questions and real-world examples.
• Practical exercises incorporate examples and guided discussions.
• Practice tests mirror the format and difficulty of the Certification Exam.

ISO/IEC 27001 Lead Auditor

The ISO/IEC 27001 Lead Auditor training programme empowers you to develop the necessary expertise to conduct an Information Security Management System (ISMS) audit by applying globally recognised audit principles, procedures, and techniques.

Why should you attend?

Throughout this training course, you will acquire the knowledge and skills required to plan and execute internal and external audits in compliance with the ISO 19011 standard and the ISO/IEC 17021-1 certification process.

Through practical exercises, you will master audit techniques and become competent in managing an audit programme, leading audit teams, handling customer communication, and resolving conflicts.

Upon acquiring the necessary expertise to perform this audit, you may sit for the exam and apply for the 'PECB Certified ISO/IEC 27001 Lead Auditor' credential. Holding a PECB Lead Auditor Certificate demonstrates that you possess the capabilities and competencies to audit organisations based on best practices.

Who should attend?

• Auditors seeking to perform and lead Information Security Management System (ISMS) certification audits
• Managers or consultants aiming to master the Information Security Management System audit process
• Individuals responsible for maintaining conformance with Information Security Management System requirements
• Technical experts preparing for an Information Security Management System audit
• Expert advisors in Information Security Management

Learning objectives

• Understand the operations of an Information Security Management System based on ISO/IEC 27001
• Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
• Understand the auditor’s role in planning, leading, and following up on a management system audit in accordance with ISO 19011
• Learn how to lead an audit and audit team
• Learn how to interpret the requirements of ISO/IEC 27001 in the context of an ISMS audit
• Acquire the competencies of an auditor to plan an audit, lead an audit, draft reports, and follow up on an audit in compliance with ISO 19011

Educational approach

• This training is based on both theory and best practices used in ISMS audits
• Lecture sessions are illustrated with examples based on case studies
• Practical exercises are based on a case study which includes role playing and discussions
• Practice tests are similar to the Certification Exam

This course equips you with the competencies required to implement information security frameworks in accordance with ISO 27005, a standard focused on information security risk management based on ISO 27001.

The ISO/IEC 27005 Lead Risk Manager training equips you with the essential expertise to assist an organisation in managing risks across all assets critical to Information Security, using the ISO/IEC 27005 standard as a reference framework. Throughout this course, you will gain comprehensive knowledge of the process model for designing and developing an Information Security Risk Management programme. The training also covers a thorough understanding of best practices for risk assessment methods, including OCTAVE, EBIOS, MEHARI, and Harmonized TRA. This course supports the implementation of the ISMS framework outlined in the ISO/IEC 27001 standard.

Upon mastering the necessary concepts of Information Security Risk Management based on ISO/IEC 27005, you may take the exam and apply for the “PECB Certified ISO/IEC 27005 Lead Risk Manager” credential. Holding a PECB Lead Risk Manager Certificate demonstrates that you possess the practical knowledge and professional capabilities to support and lead teams in managing Information Security Risks.

Who should attend?

• Information Security risk managers
• Members of Information Security teams
• Individuals responsible for Information Security, compliance, and risk within an organisation
• Individuals implementing or seeking compliance with ISO/IEC 27001, or those involved in risk management programmes
• IT consultants
• IT professionals
• Information Security officers
• Privacy officers

Examination - Duration: 3 hours

The “PECB Certified ISO/IEC 27005 Lead Risk Manager” exam fully complies with the requirements of the PECB Examination and Certification Programme (ECP). The exam assesses the following competency domains:

• Domain 1: Fundamental principles and concepts of Information Security Risk Management
• Domain 2: Implementation of an Information Security Risk Management programme
• Domain 3: Information security risk assessment
• Domain 4: Information security risk treatment
• Domain 5: Information security risk communication, monitoring, and improvement
• Domain 6: Information security risk assessment methodologies

General Information

• Certification fees are included in the exam price
• Training material comprising over 350 pages of information and practical examples will be provided
• A participation certificate awarding 21 CPD (Continuing Professional Development) credits will be issued
• In the event of exam failure, you may retake the exam within 12 months at no additional cost

This live, instructor-led training in Portugal (online or onsite) is aimed at public sector professionals who wish to use information security management and IT service management practices to strengthen digital security strategies and protect institutional digital assets.

By the end of this training, participants will be able to: explain core information security concepts, identify risks in information systems and services, apply practical security controls, and support secure IT service delivery.

This instructor-led, live training (online or onsite) is targeted at cloud professionals who aim to design and implement multi-cloud architectures that avoid vendor lock-in and ensure data sovereignty.

By the end of this training, participants will be able to identify vendor lock-in risks, design portable architectures, implement data sovereignty controls, and leverage cloud-agnostic tools.

This instructor-led, live training in Portugal (online or onsite) concentrates on analyzing the risks associated with Open Data while minimizing vulnerability to disasters or data loss.

Upon completion of this training, participants will be able to:

• Grasp the concepts and benefits of Open Data.
• Distinguish between various types of data.
• Recognize the risks associated with Open Data and learn how to mitigate them.
• Develop skills to manage Open Data risks and formulate contingency plans.
• Apply Open Data risk mitigation strategies to lower the likelihood of disasters.

This instructor-led, live training in Portugal (online or onsite) targets IT administrators, security coordinators, and compliance managers who wish to identify, evaluate, and implement security policy management methods for their organization.

By the end of this training, participants will be able to develop, manage, and monitor security policies to protect their organization's information, network, and physical and software assets.

This capstone course empowers participants to design, deploy, and manage a fully sovereign digital infrastructure stack from the ground up. Upon completion, students will have constructed a functioning miniature organisation utilising exclusively self-hosted, open-source tools across identity, communication, productivity, development, security, AI, and monitoring domains—all without depending on Google, Microsoft, AWS, or proprietary SaaS solutions.

Wazuh is an open-source security platform offering unified XDR and SIEM capabilities for threat detection, integrity monitoring, incident response, and compliance. By aggregating endpoint telemetry into a self-managed analysis engine, it provides a credible alternative to Splunk Enterprise Security, Microsoft Sentinel, and other cloud-native SIEMs.