Introduction
This course is designed to provide learners with the knowledge and skills to protect their information assets and systems from cyber threats. The course covers the five technical controls of Cyber Essentials Plus: firewalls, secure configuration, user access control, malware protection, and patch management. The course also covers the legal and regulatory aspects of cyber security, such as the Data Protection Act, the Computer Misuse Act, and the GDPR.
The course is suitable for anyone who wants to improve their cyber security awareness and practice, as well as for those who are preparing for the Cyber Essentials Plus accreditation.
Course Objectives
- Understand the cyber threat landscape and the common types of cyber attacks
- Identify the key components of a cyber security policy and the benefits of Cyber Essentials and Cyber Essentials Plus
- Apply the five technical controls of Cyber Essentials Plus to secure networks, devices, and data
- Recognise the legal implications of cyber security and the responsibilities of data controllers and processors
- Prepare for the Cyber Essentials Plus accreditation and demonstrate your compliance with UK standards
Module 1
Introduction to Cyber Security
- What is cyber security and why is it important?
- What are the common types of cyber threats and attacks? What are the impacts and costs of cyber incidents?
- What are the best practices and standards for cyber security?
- What is Cyber Essentials Plus and how does it help you protect your information assets?
Module 2
Firewalls and Internet Gateways
- What are firewalls and internet gateways and how do they work?
- What are the benefits and limitations of firewalls and internet gateways?
- How to configure firewalls and internet gateways to prevent unauthorised access and malicious traffic?
- How to test and monitor firewalls and internet gateways to ensure their effectiveness?
- How to comply with the Cyber Essentials Plus requirements for firewalls and internet gateways?
Module 3
Secure Configuration
- What is secure configuration and why is it important?
- What are the common vulnerabilities and risks of insecure configuration?
- How to apply secure configuration settings to your devices and systems?
- How to use encryption, authentication, and password policies to enhance your security?
- How to comply with the Cyber Essentials Plus requirements for secure configuration?
Module 4
User Access Control
- What is user access control and why is it important?
- What are the common threats and challenges of user access control?
- How to implement user access control policies and procedures?
- How to use roles, permissions, and privileges to limit user access?
- How to comply with the Cyber Essentials Plus requirements for user access control?
Module 5
Malware Protection
- What is malware and how does it affect your systems and data?
- What are the common types and sources of malware?
- How to prevent, detect, and remove malware from your devices and systems?
- How to use antivirus, anti-spyware, and anti-ransomware software to protect your information assets?
- How to comply with the Cyber Essentials Plus requirements for malware protection?
Module 6
Patch Management
- What is patch management and why is it important?
- What are the common vulnerabilities and risks of outdated software?
- How to update and patch your software and systems regularly?
- How to use automated tools and processes to simplify patch management?
- How to comply with the Cyber Essentials Plus requirements for patch management?
Module 7
Legal and Regulatory Aspects of Cyber Security
- What are the legal and regulatory frameworks for cyber security in the UK?
- What are the main provisions and principles of the Data Protection Act, the Computer Misuse Act, and the GDPR?
- What are the rights and obligations of data subjects, data controllers, and data processors?
- How to report and respond to data breaches and cyber incidents?
- How to demonstrate your compliance with the UK laws and regulations?
Module 8
Cyber Essentials Plus Certification Exam Preparation
- What are the objectives and format of the Cyber Essentials Plus accreditation?
- What are the eligibility and registration criteria for the exam?
- How to prepare for the exam and review the key topics and concepts?
- How to take the exam and receive your results and certificate?
- How to maintain your certification and keep up with the latest cyber security developments?
Please note: A minimum of 4 delegates are required to run this course. If this is not met then this course may be rescheduled.
