CSF+P Cyber Security Foundation+Practitioner™

CSF+P Cyber Security Foundation+Practitioner™ - The Cyber Security Course to Start Your Career

ALC’s 5-day Cyber Security Foundation+Practitioner™ course is designed for anyone seeking a strong understanding of Information and Cyber Security to create a solid foundation on which to build their career. This course is ideal for those looking to start a career in Cyber Security, or to transition their career. There is no need for any prior experience and there are no pre-requisites to attend.

The course follows a robust syllabus covering all the key areas you need to know. At the same time, it provides maximum regional relevance by covering the appropriate sections from the Australian Government Information Security Manual (ISM).

Digital Badge Issued to all delegates who pass the exam

Delivery Format

ALC courses are delivered either 100% in-person or 100% live virtual. That way you get the best training experience.

We do not offer hybrid training whereby some participants are physically in class while others are joining remotely. This invariably results in a reduced learning experience. When trainers focus on the needs of one group, it is usually at the expense of the other.

Whether you are looking for Virtual Instructor-led Training (VILT) or Face-to-Face delivery, ALC has a delivery format to suit you!

Our VILT courses are delivered online, which allow you to join from the office, your home or any location worldwide. Whereas our Face-to-Face courses are delivered at CBD-based venues, provide opportunities to network in person with peers plus you get to enjoy a full day of catering.

Learning outcomes

The key objective is for each participant to complete the course and have a strong understanding and appreciation of the fundamentals of Cyber Security, these areas include:

• Cyber Security Governance
• Risk Management
• Security Architecture
• Physical Security
• Network Security
• Endpoint Security
• Cyber Resilience

One of the special features of this course is its mix of theory and practical exercises, all designed to maximise understanding and retention. Strong use is made of a case study. Participants are provided with a download link where sample templates for the case study may be found, along with useful artefacts referenced in the material. Exercises include:

• Develop an asset register
• Identify threats and determine risks based on current controls in the case study
• Evaluate service provider models, contrasting risks and opportunities
• Discuss risks associated with storing data in the cloud
• Select security architecture design principles
• Develop a data classification schema
• Recommend controls to bring risk down to an acceptable level in the case study
• List and prioritise business-critical operations for business continuity
• Evaluate the benefits of an in-house incident response capability versus using a managed service model

Who should attend

The course is designed for:

• Anyone starting a career in information / cyber security
• IT professionals wanting to transition their career into cyber security
• Anyone needing a robust introduction to cyber security
• Anyone planning to work in a position that requires cyber security knowledge
• Anyone with information / cyber security responsibilities
• Anyone who has learned “on the job” but who would benefit from a formal presentation to consolidate their knowledge
• Professionals familiar with basic IT and information security concepts and who need to round out their knowledge

Course contents

1. Cyber Security Governance

• Cyber Security Concepts
• Cyber Security Strategy
• Laws & Regulations
• Standards & Frameworks
• Roles & Responsibilities
• Training & Awareness
• Introduction to the Case Study and Practical Session

2. Risk Management

• Risk Management Concepts
• Risk Management
• Threats
• Controls
• NZ NCSC Critical Controls
• ACSC Essential Eight
• Practical session

3. Security Architecture

• Governance & Architecture
• Certification & Accreditation
• Service Models
• Cloud Computing
• Cryptography
• Emerging Technologies
• Practical session

4. Physical Security

• Perimeter Security
• Building Security
• Physical Access Control
• Environmental Controls

5. Network Security

• Network Fundamentals
• Network Security

6. Endpoint Security

• Endpoint Security
• Application Security
• Data Security
• Practical session

7. Incident Response

• Incident Response Management
• Business Continuity and Disaster Recovery
• Digital Forensics
• Security Assurance
• Practical session

8. Exam preparation

• Walkthrough of the mock exam
• Final exam study and preparation
• Final Exam – 2 hours

Course fees