Auditing and Improving Cybersecurity Programs - In-Person

The sessions will be as follows:

Monday – 9:00 a.m. to 5:00 p.m.

Tuesday - 9:00 a.m. to 5:00 p.m.

Wednesday - 9:00 a.m. to 4:00 p.m.

Offered in-person in various cites each month on Monday-Wednesdays in sessions.

NASBA Program Disclosure

Program Level of Understanding: Intermediate

Prerequisites: Basic understanding of auditing and IT security

Advance Preparation: None

Delivery Format: On-site Training (Group-Live); Seminar (Group-Live)

NASBA Field(s) of Study: "Auditing" and "Information Technology"

CPE Credits: 24, based on 50 minutes of instruction per hour

• Deep Dive into Auditing Cybersecurity Best Practices: Gain an in-depth understanding of the essential components that constitute a robust Cybersecurity Program. Learn how to critically evaluate the effectiveness of an information security program and apply best practices in real-world computer security scenarios.

• Risk, Control, and Audit Dynamics: Explore the intricate relationship between risk management, control measures, and computer security auditing processes. Understand how these elements interplay to fortify cybersecurity defenses.

• Blueprint of an Effective Cybersecurity Program: Uncover the core features that define a successful Cybersecurity Program. From strategic planning to execution, learn what makes a cybersecurity framework resilient.

• Insider vs. Outsider Threats: Assess the landscape of cybersecurity threats, distinguishing between the risks posed by insiders and outsiders. Equip the cybersecurity auditor with strategies to assure the mitigate these threats effectively.

• Account Management Processes: Delve into the critical processes of Account Management, focusing on how to safeguard against unauthorized access and ensure user accountability.

• Privileged Account Limitations: Determine practical methods to manage and restrict Privileged accounts, minimizing the risk of security breaches through elevated access.

• Anatomy of a Cyber Attack: Identify the stages of a Cybersecurity attack, gaining insights into the attacker’s mindset and methodologies. This knowledge is crucial for preemptive defense and response strategies.

• Continuous Monitoring Techniques: Learn about the tools and techniques essential for continuous monitoring of security events. Stay one step ahead by detecting and addressing vulnerabilities in real time.

• Vulnerability Remediation Methods: Acquire the skills to identify and remediate security vulnerabilities, enhancing the resilience of cybersecurity infrastructures against potential threats.

• Learn the relationship between risk, control, and audits

• Understand the core features of an effective Cybersecurity Program

• Assess the risks posed by Insider and Outsider threats

• Identify the processes of Account Management

• Determine methods to limit Privileged accounts

• Identify the stages of a Cybersecurity attack

• Learn the tools and techniques for continuous monitoring of security events

• Identify methods to remediate security vulnerabilities

• Understanding how to be effective in auditing cybersecurity

Introduction Section 1 Introduction and Learning Objectives Section 2 Overview, Definitions and Concepts: Internal Control and Auditing Section 3 Components of Cybersecurity Programs Section 4 Internal Control and Cybersecurity Frameworks Section 5 AICPA Cybersecurity Risk Assessments Section 6 Security Certifications Section 7 Security and Privacy Laws and Regulations Section 8 Breach Disclosure Requirements Section 9 Understanding the Mission of the Organization Section 10 Tone at the Top - The Auditor's Influence Section 11 The Role of the CSO/ CISO Section 12 Evaluating a Cybersecurity Risk Assessment Section 13 Security Policy Development, Administration and Auditing Cybersecurity Section 14 Data Classification and Protection Methods Section 15 Protecting the Physical Equipment Section 16 Assessing Controls in Network Components Section 17 Account Authentication Section 18 Controlling Your Endpoints Section 19 DevOps Application Security Section 20 Configuration Management Section 21 Asset Audits Section 22 Vendor Management Section 23 Command, Communication and Control Section 24 Testing the Controls in Auditing Cybersecurity Section 25 Corrective Action Plans Section 26 Case Study: Anatomy of an Attack Section 27 Countermeasures Section 28 Summary and Wrap-Up

The Auditing and Improving Your Cybersecurity Program CPE training event is a comprehensive program designed to help cybersecurity auditor professionals improve their knowledge and skills in the field of cybersecurity auditing. Hosted by Dave Marshall, CCS founder, this event provides participants with a deep dive into the latest techniques and best practices for auditing cybersecurity programs.

Throughout the training, attendees will have the opportunity to interact with an industry expert and network with other cybersecurity auditor professionals in the cybersecurity field. The CPE event is designed for individuals working in IT, internal audit, risk management, and compliance roles. It is also designed for anyone looking to improve their knowledge and skills in cybersecurity auditing.

Attendees will learn about the fundamental concepts of cybersecurity and how to assess the effectiveness of cybersecurity programs and controls. The cybersecurity auditor program covers topics such as risk management, security governance, incident management, and compliance with industry standards and regulations.

The event is aimed at professionals who work in cybersecurity, IT, audit, risk management, and compliance roles. It is also ideal for individuals looking to improve their knowledge and skills in the field of cybersecurity auditing. The training is delivered by experienced instructors who have a deep understanding of the industry and the latest trends and developments.

In this CPE training session, the instructor possesses a significant amount of experience in the industry and is well versed in the latest trends and developments in the field of cybersecurity. The cybersecurity auditor training is approved for Continuing Professional Education (CPE) credits, making it a valuable investment for individuals looking to maintain their professional certifications, i.e. CIA, CISA, CPA and CFE.