Auditing and Improving Cybersecurity Programs - In-Person

• Deep Dive into Cybersecurity Auditor Best Practices: Gain an in-depth understanding of the essential components that constitute a robust Cybersecurity Program. Learn how to critically evaluate the effectiveness of an information security program and apply best practices in real-world computer security scenarios.

• Risk, Control, and Audit Dynamics: Explore the intricate relationship between risk management, control measures, and computer security auditing processes. Understand how these elements interplay to fortify cybersecurity defenses.

• Blueprint of an Effective Cybersecurity Program: Uncover the core features that define a successful Cybersecurity Program. From strategic planning to execution, learn what makes a cybersecurity framework resilient.

• Insider vs. Outsider Threats: Assess the landscape of cybersecurity threats, distinguishing between the risks posed by insiders and outsiders. Equip the cybersecurity auditor with strategies to assure the mitigate these threats effectively.

• Account Management Processes: Delve into the critical processes of Account Management, focusing on how to safeguard against unauthorized access and ensure user accountability.

• Privileged Account Limitations: Determine practical methods to manage and restrict Privileged accounts, minimizing the risk of security breaches through elevated access.

• Anatomy of a Cyber Attack: Identify the stages of a Cybersecurity attack, gaining insights into the attacker’s mindset and methodologies. This knowledge is crucial for preemptive defense and response strategies.

• Continuous Monitoring Techniques: Learn about the tools and techniques essential for continuous monitoring of security events. Stay one step ahead by detecting and addressing vulnerabilities in real time.

• Vulnerability Remediation Methods: Acquire the skills to identify and remediate security vulnerabilities, enhancing the resilience of cybersecurity infrastructures against potential threats.

• Learn the relationship between risk, control, and audits

• Understand the core features of an effective Cybersecurity Program

• Assess the risks posed by Insider and Outsider threats

• Identify the processes of Account Management

• Determine methods to limit Privileged accounts

• Identify the stages of a Cybersecurity attack

• Learn the tools and techniques for continuous monitoring of security events

• Identify methods to remediate security vulnerabilities

Introduction Section 1 Introduction and Learning Objectives
Section 2 Overview, Definitions and Concepts: Internal Control and Auditing
Section 3 Components of Cybersecurity Programs
Section 4 Internal Control and Cybersecurity Frameworks
Section 5 AICPA Cybersecurity Risk Assessments
Section 6 Security Certifications
Section 7 Security and Privacy Laws and Regulations
Section 8 Breach Disclosure Requirements
Section 9 Understanding the Mission of the Organization
Section 10 Tone at the Top - The Auditor's Influence
Section 11 The Role of the CSO/ CISO
Section 12 Evaluating a Cybersecurity Risk Assessment
Section 13 Security Policy Development, Administration and Auditing
Section 14 Data Classification and Protection Methods
Section 15 Protecting the Physical Equipment
Section 16 Assessing Controls in Network Components
Section 17 Account Authentication
Section 18 Controlling Your Endpoints
Section 19 DevOps Application Security
Section 20 Configuration Management
Section 21 Asset Audits
Section 22 Vendor Management
Section 23 Command, Communication and Control
Section 24 Testing the Controls
Section 25 Corrective Action Plans
Section 26 Case Study: Anatomy of an Attack
Section 27 Countermeasures
Section 28 Summary and Wrap-Up

The Auditing and Improving Your Cybersecurity Program CPE training event is a comprehensive program designed to help professionals improve their knowledge and skills in the field of cybersecurity auditing. Hosted by Dave Marshall, CCS founder, this event provides participants with a deep dive into the latest techniques and best practices for auditing cybersecurity programs.

Throughout the training, attendees will have the opportunity to interact with an industry expert and network with other professionals in the cybersecurity field. The CPE event is designed for individuals working in IT, internal audit, risk management, and compliance roles. It is also designed for anyone looking to improve their knowledge and skills in cybersecurity auditing.

Attendees will learn about the fundamental concepts of cybersecurity and how to assess the effectiveness of cybersecurity programs and controls. The program covers topics such as risk management, security governance, incident management, and compliance with industry standards and regulations.

The event is aimed at professionals who work in cybersecurity, IT, audit, risk management, and compliance roles. It is also ideal for individuals looking to improve their knowledge and skills in the field of cybersecurity auditing. The training is delivered by experienced instructors who have a deep understanding of the industry and the latest trends and developments.

In this CPE training session, the instructor possesses a significant amount of experience in the industry and is well versed in the latest trends and developments in the field of cybersecurity. The training is approved for Continuing Professional Education (CPE) credits, making it a valuable investment for individuals looking to maintain their professional certifications, i.e. CIA, CISA, CPA and CFE.