Learning Outcomes

NIS2 Directive - The Essentials

NIS2 Directive - Objectives and Obligations

NIS2 - Articles 21 and 23

Complying With NIS 2 - The Importance of GAP Analysis

Lesson Summary

This module discusses the implications of the NIS2 Directive, a cybersecurity regulation imposed in the EU.  The module compares the NIS2 Directive against the NIS Directive. Various obligations and requirements for compliance are also explained, along with implementing the important articles of the Directive.

Fundamentals of NIS 2 Directive - EU Cybersecurity Enhancement - Course Assessment

This free online course aims to build your foundations regarding the requirements of the NIS2 Directive.

Fundamentals of NIS2 Directive - EU Cybersecurity Enhancement

With cybersecurity incidents constantly increasing, various regulations and countries are working around the clock to enact and impose new rules and standards for added protection. One such standard is the NIS2 Directive, which has its scope in the territory of the European Union. In this short course, we explore this new Directive, the requirements to show compliance, and its important articles and requirements.

Need of Information Security Management System (ISMS) - Business Case

Important Terminologies in ISO 27000:2018

Important Frameworks on Information Security

This module briefly overviews information security management systems (ISMS), including their business case and justification. It also presents essential discussions on recognized standards in this subject, ultimately equipping learners with a foundational understanding of ISMS principles and best practices.

Leadership and Organization's Context

Planning & Support Functions

Operations, Evaluation & Improvement

This module provides a detailed overview of the auditable requirements of ISO 27001:2019, covering Clauses 4 to 10. It includes Clause 4 on the Context of the Organization, Clause 5 on Leadership, Clause 6 on Planning, Clause 7 on Support, Clause 8 on Operation, Clause 9 on Performance Evaluation, and Clause 10 on Improvement.

Introduction to New Information Security Controls in ISO 27001:2022

Annex A - Information Security Controls (Part 1) in ISO 27001:2022

Annex A - Information Security Controls (Part 2) in ISO 27001:2022

This module provides a detailed overview of the Annex - A of ISO 27001which is focused on information security operation control. The controls are revamped for better integration with NIST and other security protocols.

ISMS Risk Management With ISO 27005 & ISO 27001

ISO 27005 - Steps of Managing Information Security Risks

ISO 27005 - Risk Evaluation, Risk Treatment and Controls

In this module, we will discuss the concept of risk management based on information security in the ISO/IEC 27005 standard. The module also discusses risk treatment from controls and the input to trigger risk assessment, etc.

ISO 27002:2022 Relationship with ISO 27001

ISO 27002:2022 Assistance to ISO 27001:2022 Compliance

Introduction to the Controls in ISO 27701

This module provides comprehensive guidance on implementing ISO/IEC 27001 information security management system using ISO/IEC 27002 and ISO/IEC 27701 privacy management system standards.

Fundamental Controls (Annex - A-5 to Annex - A-7) in ISO 27001:2013

Fundamental Controls (Annex - A-8 to Annex - A-10) in ISO 27001:2013

Essential Controls (Annex - A.11 to Annex - A-12) in ISO 27001:2013

ISMS Vital Controls (Annex - A.13 to Annex - A-14) in ISO 27001:2013

ISMS Vital Controls (Annex - A.15 to Annex - A-18) in ISO 27001:2013

This module provides an overview of information security operational controls such as security policies, organization of information security, human resource security, asset management, access control, cryptography, physical and environmental security, operations security, communication security, system maintenance, supplier relationships and more.

Diploma in ISO 27001:2022 - Information Security Management System (ISMS) - Assessment

In this free online course, learn about the essentials of ISO/IEC 27001:2022 information security management systems.

Diploma in ISO 27001:2022 - Information Security Management System (ISMS)

Are you ready to dive deep into the world of information security? This in-depth course on ISO 27001:2022 provides you with a thorough understanding of the standard and the practical expertise to build a powerful Information Security Management System (ISMS). You'll explore crucial ISMS controls, discover effective implementation strategies, and become fluent in the essential language of information security. Begin your journey to mastery now!

Information Security Risk Management With ISO 27005

Steps of Managing Information Security Risks

Establishing Context & IS Risk Management Process - Clause 5 to 6.4.2

Establishing Context - Clause 6.4.2 to 6.5

In this module, we will discuss the concept of information security in the ISO/IEC 27005 standard. We will also explore different information security frameworks. The module will discuss the requirements of Clauses 5 and 6 regarding establishment of an organizational information management security system.

Information Security Risk Assessment - Clause 7

IS Risk Evaluation, Risk Treatment and Controls - Clause 7.4 to 8.5

Risk Treatment, Assessment & Leverage ISMS Process - Clause 8.6 to 10

IS Risk Management Leverages ISMS Processes -  Clause 10.4 to 10.8

In this module, you learn about the essential requirements of performing an information security risk assessment. You will also learn about the requirements of evaluation of information security risks, implementation of controls, information security risk treatment, communicating the risks, and leveraging the ISMS process.

ISO 27005 - Essentials of Information Security Risk Management - Course Assessment

This free online course explains the standard requirements for creating an information security management systems.

ISO 27005 - Essentials of Information Security Risk Management

This detailed course specifies the ISO/IEC 27005 standard requirements regarding establishing information security management systems for organizations.  Whether understanding the importance of risk assessment, identifying and mitigating threats, or developing a comprehensive security framework, this course provides the essential knowledge and tools for individuals and organizations striving to enhance their cybersecurity posture.

Introduction to Data Protection

General Data Protection Regulation (GDPR) and UK GDPR

Privacy Policies and Procedures in the UK and EU

Data Breaches and Incident Response in the UK and EU

Risk Management in the UK and EU

Data Protection Impact Assessments (DPIAs) in the UK and EU

Collaboration and Communication in the UK and EU

UK and EU Data Protection Landscape After Brexit

In this module, we will look at the principles of data protection laws and regulations in the UK and EU. We will also go through the process of developing and implementing data policies within these jurisdictions. Collaboration between UK and EU will be discussed in managing risk, carrying out impact assessments, and incident response plans.

The Role of a Data Protection Officer (DPO)

DPO and Other Job Responsibilities

Why a Company Needs a DPO

Data Transfers and International Data Protection

Data Protection Audits and Compliance Monitoring

Data Protection in Emerging Technologies

Data Privacy Impact on Marketing and Advertising

In this module, we will look at the primary role of a DPO, their responsibilities, and their importance shall be examined. International data protection standards and data audit compliance will be discussed along with challenges posed by technological advances in the modern landscape. We will also look at the impact of data privacy on marketing.

Data Protection Officer Training - Course assessment

Train as a data protection officer in this free online course that explains how to protect the integrity of information.

Data Protection Officer Training

This data protection course takes an in-depth look at the basic skills and information you need to become a trained data protection officer who safeguards the information stored by organizations. We outline the current trends in the field to equip you with the ability to cope with these challenges. In a data-driven world, competent data protection officers are in high demand. Sign up to acquire this valuable skill and advance your career.

The Need of Information Security Management System (ISMS) - Business Case

This module provides a brief overview of the information security (ISMS) with its business case and justification. It also presents some important discussions on its some recognized standards on this subject. The module also covers important terminologies of information security as explained in ISO 27000. Learners will also learn important summary of ISO 27001 clauses.

This module provides a detailed overview on the requirements of ISO 27001:2019 which are audit-able. This module covers these requirements from Clause - 4 which is Context of the Organization, Clause - 5 which is Leadership, Clause - 6 which is Planning, Clause - 7 which is Support, Clause - 8 which is Operation,  Clause - 9 which is Performance Evaluation and lastly Clause - 10 which is on Improvement.

The Fundamental Controls (Annex - A.5 to Annex - A-10)

The Essential Controls (Annex - A.11 to Annex - A-14)

Vital Controls of ISMS (Annex - A.15 to Annex - A-18)

This module provides a detailed overview on the Annex - A of ISO 27001:2013 which is focused on information security operation control. The controls categories are  information security policies, organization of information security, human resource security, assess management, access control, cryptography, physical environmental security, Operations security, Communication security, system acquisition maintenance, supplier relationships and security incident management, Business Continuity etc.

ISO/IEC 27001 - Dynamics of Information Security Management System (ISMS) - Assessment

In this free online course learn about the requirements of information security management systems.

ISO/IEC 27001 - Dynamics of Information Security Management System (ISMS)

This free online course on ISO 27001 explains the latest standard on information security management systems (ISMS). You will be introduced to the context of ISMS, and the business case for ISMS. You will also learn about other standards on information security, terminology used in ISMS, the requirements in ISO 27001:2013 and a brief guide on how to implement those requirements. Start learning about information security management systems today.

Understanding and Promoting Ethics

Security Governance

Legal and Compliance Issues

Incident Requirements

This module introduces the 5 pillars of Information Security, ISC2 Code of Professional Ethics and the security control frameworks. You'll learn about privacy regulations and the role of security in investigative processes. You'll explore the organisations' role in creating and maintaining security policies, standards, procedures, and guidelines.

Implementing Business Continuity

Risk Management Concepts

Threat Modelling

This module discusses how security risk analysis impacts business continuity planning. You’ll explore the methodologies for threat modelling and the significance of employment agreements in identifying and mitigating security risks. You’ll learn about the emerging threats and strategies for mitigating risks with actionable security policies.

Classify Information and Assets

Establish Information and Asset Handling Requirements

Provision Information and Assets Securely

Ensure Appropriate Asset Retention

Data Security Controls and Compliance Requirements

This module discusses steps to ensuring asset security. You'll learn to classify information, categorise assets and the importance of guidelines and Zero-trust policies in information and asset management. You'll explore the critical role of compliance in managing the data lifecycle and protection against breaches and unauthorised access.

Implementing Secure Design Principles

Understanding Security Models

Assessing and Mitigating Vulnerabilities in Security Architectures

Mitigating Vulnerabilities in Security Architecture

This module introduces security models and teaches you to identify vulnerabilities and enhance the security system. You'll explore strategies for aligning and implementing security controls with the organisation's risk management. You'll learn about cryptographic methods and the role of Public Key Infrastructure (PKI) in secure communications.

Interim Assessment 1

This assessment enables you to review your learning to determine your knowledge and understanding of the first four modules of the course. 
If you do not achieve the required grade after the first attempt, you can retake the assessment until a successful outcome is achieved.

Cryptanalytic Attacks

Designing Site and Facility Security Controls

Managing the Information System Lifecycle

Emerging Security Technologies

This module examines how cryptanalytic attacks target weaknesses in cryptographic systems. It emphasizes integrating security early in development and covers key concepts such as security principles, Homomorphic encryption, and quantum-safe solutions to reduce vulnerabilities and combat threats.

Applying Secure Design Principles in Network Architectures

Traffic Flows and Segmentation

Securing Network Components

Network Security and Its Implications for Modern Communication

Quantum-Safe Cryptography and Post-Quantum Network Security

In this module, you'll explore the role of security network models in systematic protection against cyber threats. You'll learn about the security challenges of 5G network and transport architectures, traffic segmentation, and secure communication channel strategies to mitigate security risks.

Controlling Physical and Logical Access to Assets

Federated Identity with a Third-Party Service

Manage the Identity and Access Provisioning Lifecycle

Modern Identity and Access Management (IAM) Strategies

This module discusses strategies to control physical and logical access to sensitive information. You'll learn about the concept and application of Federated Identity Management (FIM) in simplifying access across multiple systems. You'll explore advanced authentication systems to meet security and usability requirements of organisations.

Design and Validate Assessment, Test, and Audit Strategies

Conduct Security Control Testing

Collect Security Process Data

Analyse Test Output and Generate Report

This module covers principles for designing and validating security assessments. Learn techniques to identify vulnerabilities, conduct internal, external, and third-party audits, and apply automated tools and AI-driven solutions for continuous compliance across varied environments.

Interim Assessment 2

This assessment enables you to review your learning to determine your knowledge and understanding of modules 5 to 8 of the course. 
If you do not achieve the required grade after the first attempt, you can retake the assessment until a successful outcome is achieved.

Understand and Comply with Investigations

Conduct Logging and Monitoring Activities

Perform Configuration Management

Conduct Incident Management

This module explores digital forensics techniques and the role of IDPS and SIEM systems in monitoring, detecting, and preventing security threats. You'll learn how AI, sandboxing, and third-party security services enhance detection capabilities. You'll also examine media management, protection techniques, and data-safeguarding methods.

Implement and Support Patch and Vulnerability Management

Test Disaster Recovery Plans (DRP)

Threat intelligence and Threat Hunting

This module discusses patch and vulnerability management, change management processes, and recovery strategies. You’ll explore disaster recovery, business continuity, physical security controls, and insider threat management. You’ll also learn how threat intelligence and threat-hunting techniques help enhance organisational security.

Understand & Integrate Security in the Software Development Life Cycle

Assess the Effectiveness of Software Security

Security in Software Development Methodologies

Software Security Assurance and Compliance

Secure API Development & API Security Best Practices

This module explores integrating security into SDLC methodologies and applying secure coding practices. You’ll learn to assess security in acquired software, apply controls in CI/CD pipelines, and ensure compliance. You’ll master secure API development, threat mitigation, and strategies to maintain security throughout the software lifecycle.

Certified Information Systems Security Professional (CISSP 2024) - Course Assessment

Advance your cybersecurity skills, ensure compliance, and protect information systems with this free online course.

Diploma in Certified Information Systems Security Professional (CISSP 2024)

Are you ready to become a top cybersecurity professional? This course equips you with cutting-edge skills in risk management, security governance, and threat modelling. Gain expertise in security architecture, enforce compliance and achieve CISSP certification to advance your career in cybersecurity. This course was reviewed and approved by a qualified subject matter expert, Asim Suleman, a Cybersecurity Specialist. Enrol now!

Introduction

What Was Updated?

Climate Change

What Else Was Updated?

Succeeding at Your ISO 27001 Audit

In this module, you will review the 2024 amendments to ISO 27001: 2022 and their implications for your latest ISO Audit process. You will also learn about the importance of the ISO 27001 standard and the new 2024 update and how it affects your company, climate change and its effects on humankind, and interested parties.

ISO 27001: 2022/Amd 1: 2024 Update - Information Security Management Systems - Assessment

Learn how to stay compliant with the ISO 27001 2024 Amendment with this free online course from Alison.

ISO 27001: 2022/Amd 1: 2024 Update - Information Security Management Systems

Are you ready for the latest information security changes? Our "ISO 27001: 2022/Amd 1: 2024 Amendment—Information Security Management Systems" course dives into critical updates that could impact your business. Learn how the amendment aligns with global standards addressing Climate Change. Gain insights into the audit process, understand what ISO auditors look for, and keep your company compliant and secure in an evolving landscape.

Basics of Internal Auditing for Information Security Management

Auditing Essentials for Information Security Management

Winding Up the Audit

Limitations and Challenges of ISMS Internal Audits

This module discusses the methods for conducting an internal audit specifically for the information security systems of an organization. In this regard, concepts, such as audit sampling and its types, assurance map, stakeholder interactions, audit fieldwork, and audit supervision have been thoroughly discussed.

Internal Auditing - Information Security Management Systems (ISMS) - Course Assessment

This free online course will teach you the basics of auditing an organization's information security management systems.

Internal Auditing - Information Security Management Systems (ISMS)

Auditing organizations and businesses against an information security management system can be pretty challenging. This is why Alison has published this exclusive but comprehensive course on auditing an organization against an information security system's requirements. This course discusses some of the key aspects of this subject area, such as audit plans, assurance maps, audit planning, audit sampling, and the roles of ISMS auditors.

Fundamentals of OCTAVE Security Risk Management - Learning Outcomes

Overview of OCTAVE Risk Assessment and its Importance

Overview of OCTAVE Method Phases

Overview of Octave-S Method and Importance of OCTAVE Method

Fundamentals of OCTAVE Security Risk Management - Lesson Summary

Fundamentals of OCTAVE Security Risk Management Framework - Course Assessment

Learn about the basics of OCTAVE Security Framework and risk-based security management in this free online course.

Fundamentals of OCTAVE Security Risk Management Framework

This course covers the fundamentals of the OCTAVE Security Framework, a risk-based approach to cybersecurity. It explores OCTAVE Strategic (OCTAVE-S), which helps organizations assess risks at a strategic level, and OCTAVE Allegro, which focuses on identifying and managing information security risks quickly and effectively. Both approaches guide organizations in building strong, adaptable and flexible security strategies.

Course Overview

What is Social Engineering?

What is Maleware?

Password Management

Secure Internet Usage

In the module, you will learn how to become security-aware citizens, protect yourself and make others aware of security risks. The module details topics such as social engineering, malware, password management, and secure internet usage to help you learn effective defense techniques.

A Brief Guide to Cyber Security - Assessment

Learn how to prevent, detect and react to a cyber attack to protect data in this free online cyber security course.

A Brief Guide to Cyber Security

Cyber security has gained more prominence as colossal breaches make headlines and threaten information across the globe. Almost all cases are due to human errors like clicking on an attachment and installing malware or revealing sensitive information to hackers. However, being aware of cyber attack tactics and techniques can dramatically reduce the chances of a data breach. This cyber security training course explains how to prevent such attacks.

Introduction to Cyber Law

Cyber Law, Cyber Ethics and Online Gambling

Cyber Security and Trust in Cyberspace

This module introduces you to cybercrime's threats to a personal device or a system. You will learn about the legal and policy frameworks that guide lawyers and decision-makers in a world of cybersecurity and data privacy. Explore the online gambling laws of the UK and the importance of trust in cyberspace.

Threat Factors: Computer as a Target

Threats to Cyber Security by Criminals and Organised Crimes

Threats to Cybersecurity by Criminals, Hacktivists and Nation-States

This module discusses different types of cyber threats. You'll discover how computers and mobile devices are targeted for fraud, child pornography and intellectual property trafficking, stealing identities, or invading privacy with malware. You'll learn about different types of hackers and local, national and international cybersecurity threats.

Cyberterrorism

Cryptocurrency and Fraud

Jurisdiction

In this module, you will learn about the "dark web" and how it is used to access illegal goods, services, and information. You will explore the use of cryptocurrency and the rules that guide its use for transactions in cyberspace. You'll also learn about cyberterrorism and the UK's multijurisdictional approach to counter cybercrime.

Thwart the malicious attacks of cyber criminals and protect your cyberspace with this free online course.

Are you uncertain about safeguarding personal and sensitive information in cyberspace? Enroll in this course, where we'll guide you through cyber laws and ethics. Explore the realm of cyber threats posed by criminals, hackers, and organised groups, along with the levels of online jurisdiction. Gain an insightful understanding of the dark web and delve into the diverse strategies employed by the UK government to prevent and mitigate cyberattacks.