IT-Security Practitioner (S-ITSP)

IT-Security Practitioner Course Modules

Module 1 – Introduction

Topics:
• IT security concepts
• Security requirements and security design principles
• Threats, attacks and actors
• IT security strategy principles
• Securing IT infrastructures

Exercises:
• Assets, Owners, Threats and Countermeasures
• Threats and the CIA triad
• Attack trees
• Protocols and devices
• Security zoning
• Threat Actors
• Nmap

Module 2 – Laws, Regulations, Standards and Best Practices

Topics:
• Cybercrime & computer crime
• Responsible disclosure
• Working with law enforcement
• Intellectual property and IT Security
• Privacy and IT Security
• Sector-specific security requirements
• Standards and best practices (ISO, NIST, ENISA, CIS, OWASP)

Exercises:
• Develop a Secure Teleworking Policy
• Implement a Secure Teleworking Policy
• Establish technical requirements for allowing BYOD

Module 3 – Incident Management

Topics:
• Incident handling
• Incident handling workflow
• Incident detection
• Incident registration
• Triage
• Incident resolution

Exercises:
• Incident Handling Workflow
• Metasploit

Module 4 – Network Security

Topics:
• Network Architecture
• Network Segmentation
• Intrusion Detection Systems
• Firewalls and Intrusion Prevention Systems
• Hardening devices
• Unified Threat Management Systems

Exercises:
• Secure network architecture
• Intrusion detection using Snort
• Firewalls and Intrusion Prevention Systems
• Using Snort as an IPS
• Configuration and hardening

Module 5 – System Security

Topics:
• System Security Planning
• Operating System Hardening
• Benchmark Security Testing
• Security Maintenance
• Linux and Windows system security
• Hardening Windows and Linux/Unix systems

Exercises:
• Benchmark Linux Debian
• Configurating & Hardening Devices
• Benchmark Windows

Module 6 – Mobile Security & IoT Security

Mobile security
• Issues (OWASP)
• Attack vectors
• Targets
• Security controls
IoT security
• IoT Types
• Issues (OWASP)
• Attack vectors
• Targets
• Security controls

Module 7 – Application Security

Topics:
• Software basics
• Making software more robust
• Software bugs
• Buffer overflows in depth
• Secure use of software

Exercises:
• Patch Management Policy
• Nessus
• John the Ripper

Module 8 – Encryption

Topics:
• Confidentiality with Symmetric Encryption
• Message Authentication
• Public Key Encryption and Digital Signatures
• Applications Using Cryptography
• Hashing and how it is applied to safeguard integrity
• Encryption of data in store, or in transport
• Block ciphers and stream ciphers
• “state-of-the-art” algorithms and protocols
• Application of SSL/TLS
• Encryption best practices

Exercises:
• Public Key Encryption
• Public Key Encryption and Digital Signatures
• SSL/ TLS

Module 9 – Identity and Access Management

Topics:
• Identity and access management
• User authentication methods and security issues
• Access control mechanisms
• User management

Exercises:
• Information classification model
• Attack tree for eavesdropping or replay attacks
• Design a Role-based Access Control model
• Open standards: OAuth and OpenID, SAML

Module 10 – Ethical Hacking hands on (not part of the exam)

Topics:
• Penetration testing practice
• Brute-force login
• Information disclosure vulnerabilities
• SQL injection
• Reading local system files
• Grabbing usernames and passwords from the database
• Gaining a php shell through SQL injections
• Creating a reverse shell to gain command-line access to the server
• Gaining root access to the server

IT-Security Practitioner Certification Exam

The certification exam is conducted by the SECO-Institute, Europe’s leading security and continuity certification body. The exam voucher is included in the course fee, but you need to schedule your exam with the SECO-Institute. Upon successful completion of the exam, you will receive an exam certificate and an invitation to register your official SECO-IT-Security Practitioner (S-ITSP) certification title free. By activating your certification title, you will become a certified professional in your field and you will receive a shareable digital badge to verify your competence to clients, employers and fellow professionals.

Exam information

• Exam language: English
• Exam delivery: Online exam via a certified proctor
• Exam format: 10 multiple-choice questions, 5 open questions and 1 case study
• Duration: 120 minutes

Why earn a SECO IT-Security Practitioner (S-ITSP) certificate?

The SECO ITSP certification exam tests your understanding of today’s IT security playing field and your ability to perform the main tasks of an IT security manager. With an S-ITSP certificate, you can qualify yourself for junior or mid-level positions in IT security management.

Your S-ITSP credential will verify that you possess core technical and management skills employers look for in IT security professionals, such as vulnerability management, incident management, network, system, mobile and application security, security architecture and penetration testing– and all that combined with management, compliance and business insights. This unique combination will help you succeed in a more senior security role or continue your learning path to becoming a high-level security specialist.