BCS Practitioner Certificate in Information Assurance Architecture (CIAA) Training Course

This course is designed to enable participants to strengthen organizational resilience against a variety of threats, ensuring that organizations can effectively respond to incidents, maintain business operational availability, and protect their interests.

Who is it for:

Designed for professionals engaged in the fields of information security and information assurance.

This certification is particularly relevant for individuals seeking to gain a comprehensive understanding of Business Continuity Management, as well as those actively working within information security and assurance domains.

What will I learn:

Upon completion, candidates will be able to demonstrate:

• The role and necessity of business continuity management within an organization.
• The business continuity management life cycle.
• The key components of a business continuity management program.
• The importance of conducting risk assessments within business continuity management.
• The available options for developing a business continuity management strategy.
• How to prepare and develop plans for business continuity management response.
• The necessity of exercising, maintaining, and reviewing plans.
• The need to embed business continuity management awareness throughout the organization.

Target Audience:

This certification is designed for professionals engaged in the fields of information security and information assurance.

Learning Outcomes:

Upon completion, candidates will be able to demonstrate:

• How effective management of information risk drives significant business value.
• The ability to articulate and utilize information risk management terminology accurately.
• Skills in conducting threat and vulnerability assessments, business impact analyses, and risk assessments.
• An understanding of the principles governing controls and risk treatment.
• The capability to present findings in a format suitable for developing a risk treatment plan.
• The application of information classification schemes.

Description:

CISA® is the globally recognized and most sought-after certification for professionals specializing in IS audit and IT risk consulting.

Our CISA course is an intensive, highly competitive, and exam-oriented training program. Having successfully delivered over 150 CISA training sessions across Europe and worldwide, and having trained more than 1,200 delegates, Net Security has developed its in-house CISA training materials with the primary objective of ensuring that delegates pass the ISACA CISA® Exam. Our training methodology emphasizes a deep understanding of CISA IS auditing concepts and extensive practice with ISACA question banks released in the last three years. Over time, CISA holders have become highly sought after by renowned accounting firms, global banks, advisory and assurance firms, and internal audit departments.

While delegates may possess years of experience in IT auditing, their ability to solve CISA questionnaires depends entirely on their understanding of globally accepted IT assurance practices. The CISA exam is notoriously challenging because it often presents two plausible answers where only one is correct, testing your grasp of global IT auditing standards. To address these challenges, we provide top-tier trainers with extensive international experience in delivering CISA training.

The Net Security CISA manual covers all exam-relevant concepts, case studies, and Q&As across the five CISA domains. Additionally, trainers provide key supporting materials during the course, such as CISA notes, question banks, a CISA glossary, videos, revision documents, exam tips, and CISA mind maps.

Goal:

The ultimate goal is to pass your CISA examination on the first attempt.

Objectives:

• Apply gained knowledge in a practical manner to benefit your organization
• Deliver audit services in compliance with IT audit standards
• Provide assurance on leadership, organizational structure, and processes
• Provide assurance on the acquisition, development, testing, and implementation of IT assets
• Provide assurance on IT operations, including service operations and third-party interactions
• Provide assurance on the organization’s security policies, standards, procedures, and controls to ensure the confidentiality, integrity, and availability of information assets

Target Audience:

Finance/CPA professionals, IT professionals, Internal & External auditors, and Information security and risk consulting professionals.

This training is delivered as a workshop enriched with substantial theoretical knowledge. The curriculum aligns with the official CISA certification framework. Throughout the workshop, case studies will be analyzed to address specific topics. Instruction is conducted in English (with Polish available upon request), utilizing the ISACA handbook in English.
 

CISA Exam Content Scope:

• Information System Auditing Process (21%)
• Governance and Management of IT (17%)
• Information Systems Acquisition, Development, and Implementation (12%)
• Information Systems Operation and Business Resilience (23%)
• Protection of Information Assets (27%)

Exam Duration: 4 hours
Format: Multiple-choice test
Number of Questions: 200

Requirements to qualify for the CISA designation: 

1. Pass the CISA exam with a minimum score of 450.
2. Adhere to the ISACA Code of Professional Ethics
3. Commit to the CISA Continuing Professional Education (CPE) Policy
4. Accumulate at least 5 years of professional experience in information systems auditing, control, or security.
5. Comply with Information Systems Auditing Standards

If you have passed the exam and believe you meet these criteria, you can initiate your certification application: apply for certification here
An application fee of $50 is required.

Additionally, an annual renewal fee is required to maintain your certification. The fee is $40 per year for ISACA members and $75 for non-members.

This instructor-led, live training in Slovakia (online or onsite) targets beginner to intermediate-level system administrators and security professionals seeking to learn how to implement Cloudflare for content delivery and cloud security, as well as mitigate DDoS attacks.

By the end of this training, participants will be able to:

• Configure Cloudflare for their websites.
• Set up DNS records and SSL certificates.
• Implement Cloudflare for content delivery and caching.
• Protect their websites from DDoS attacks.
• Implement firewall rules to restrict traffic to their websites.

Description:

This course serves as an intensive, rigorous preparation for the ISACA Certified in Risk and Information Systems Control (CRISC) examination. The curriculum covers the most current four domains of the ISACA CRISC syllabus, with a strong emphasis on exam readiness. Participants will receive the official ISACA CRISC Review Manual along with the Question, Answer, and Explanation (Q&A&E) supplements, provided upon attendance. The Q&A&E resource is invaluable for helping attendees grasp the specific style of ISACA questions, identify the types of answers sought by examiners, and accelerate the assimilation of key concepts.

The technical competencies and practices endorsed and assessed by ISACA within the CRISC certification form the foundation for career success in this domain. Holding the CRISC certification validates your professional expertise. As the market demand for specialists with risk and control knowledge continues to rise, ISACA’s CRISC has become the preferred certification for professionals and organizations globally. This credential reflects a dedication to serving an enterprise and the profession with distinction.

Objectives:

• Enable you to pass the CRISC examination on your first attempt.
• Demonstrate your commitment to delivering distinguished service to an enterprise.
• Leverage the increasing market demand for risk and control expertise to secure better career positions and salary potential.

You will learn:

• How to help enterprises achieve their business goals by designing, implementing, monitoring, and maintaining efficient and effective IT controls based on risk.
• The technical skills and practices promoted by CRISC, which serve as the building blocks for success in the field.

This instructor-led, live training in Slovakia (online or onsite) is aimed at intermediate-level IT professionals who wish to enhance their skills in identifying and managing IT risk and implementing information systems controls, and prepare for the CRISC certification exam.

By the end of this training, participants will be able to:

• Understand the governance and risk management aspects of IT.
• Conduct IT risk assessments and implement risk responses.
• Design and implement information systems controls.
• Prepare effectively for the CRISC certification exam.

This instructor-led, live training in Slovakia (online or onsite) is aimed at supply chain professionals who wish to establish effective control and oversight of their supply chain, especially as it relates to cybersecurity.

By the end of this training, participants will be able to:

• Understand the security oversights that can bring about significant damage and disruption to a supply chain.
• Break down a complex security problem into manageable and actionable parts.
• Address common supply chain vulnerabilities by analyzing high risk areas and engaging with stakeholders.
• Adopt best practices in securing a supply chain.
• Noticeably reduce or eliminate the biggest risks to an organization's supply chain.

This instructor-led, live training in Slovakia (online or onsite) is aimed at intermediate-level to advanced-level IT professionals and business leaders who wish to develop a structured approach to handling data breaches.

By the end of this training, participants will be able to:

• Understand the causes and consequences of data breaches.
• Develop and implement data breach prevention strategies.
• Establish an incident response plan to contain and mitigate breaches.
• Conduct forensic investigations and assess the impact of breaches.
• Comply with legal and regulatory requirements for breach notification.
• Recover from data breaches and strengthen security postures.

This instructor-led, live training in Slovakia (online or onsite) is aimed at developers and administrators who wish to produce software and products that are HiTRUST compliant.

By the end of this training, participants will be able to:

• Understand the key concepts of the HiTrust CSF (Common Security Framework).
• Identify the HITRUST CSF administrative and security control domains.
• Learn about the different types of HiTrust assessments and scoring.
• Understand the certification process and requirements for HiTrust compliance.
• Know the best practices and tips for adopting the HiTrust approach.

Description:

This 'Practitioner'-level course is heavily focused on hands-on exercises designed to reinforce key concepts and build delegates' confidence in implementing business continuity management. It also encourages open debate and the exchange of knowledge and experience among participants.
Delegates will gain valuable insights from the trainers' extensive practical experience in business continuity management and their expertise as ISO 22301:2019 specialists.

Learning Outcomes:

• Explain the necessity of business continuity management (BCM) across all types of organizations
• Define the business continuity lifecycle
• Manage the business continuity programme effectively
• Gain sufficient understanding of an organization to identify mission-critical impact areas
• Determine the organization's business continuity strategy
• Establish an effective business continuity response
• Exercise, maintain, and review business continuity plans
• Embed business continuity practices within an organization
• Define terminology relevant to business continuity

By the end of the course, delegates will possess a detailed understanding of all key components of business continuity management, enabling them to return to their roles and make a significant contribution to their organization’s business continuity management process.

This instructor-led live training in Slovakia (online or onsite) is designed for security engineers who aim to leverage IBM Qradar SIEM to address critical security use cases.

By the conclusion of this training, participants will be able to:

• Gain visibility into enterprise data across on-premise and cloud environments.
• Automate security intelligence to hunt threats and to contain risks.
• Detect, identify, and prioritize threats.

This instructor-led live training in Slovakia (online or onsite) is aimed at developers who wish to integrate Snyk into their development tools to find and fix security issues in their code.

By the end of this training, participants will be able to:

• Understand the features and structure of Snyk.
• Use Snyk to find and fix code security issues.
• Integrate Snyk in a software development lifecycle.

This course introduces fundamental principles of security and IT security, focusing on strategies to defend against network attacks. Participants will develop a solid understanding of critical security protocols and the security frameworks underlying web services. The curriculum also examines recent attacks targeting cryptosystems and highlights associated vulnerabilities.