Elements of Information Security

• Information Security Supports the Mission of the Organization
• Information Security Should Be Cost-Effective
• Responsibilities and Accountability Should Be Made Explicit
• Owners Have Security Responsibilities Outside Organizations

Roles and Responsibilities

• Senior Management
• Program and Functional Managers/Application Owners
• Users

Common Threats: A Brief Overview

• Fraud and Theft
• Employee Sabotage
• Loss of Physical and Infrastructure Support
• Threats to Personal Privacy

Core Pillar of Information Security

• Confidentiality
• Integrity
• Availability

General steps of Malicious Attack

• Footprinting
• Scanning
• Gaining Access
• Maintaining Access

Introduction to Virtual Machines and Virtualization

• Concept of Virtualization
• Need and Advantages of Virtualization

Installation and Configuration

• Hardware and Software Requirements
• Installation and Configuration
• Performance Optimization
• Storage Performance

Introduction to Windows Security

• Overview of Windows OS
• Windows File System
• Security Architecture in Windows
• User Account Security
• Account Security Strengthening

Cyber Social Media Threats

• Social Engineering
• Fake Emails
• Keystroke Loggers
• Phishing
• Identity Theft

Securing Your Cyber Social Life

• Awareness is the Key
• Email Security
• Online Account Security
• Secure Logout
• Browser Remember Password

Introduction to Penetration Testing

• Legal and Ethical Implications
• Types of Penetration Testing

Setting Up Web Application Penetration Testing Lab

• Collecting and Installing Pentest Tools
• Flexible Browser with Security Add-ons
• Setting up Browser Proxies

Beginning Application Penetration Testing

• Identification of Application Entry Points
• Testing for Security Vulnerabilities