Course Details

Objective

By the end of the course, participants will be able to understand

• Understand the principles and best practices of network and system auditing.
• Implement monitoring techniques to detect anomalies and potential security breaches.
• Evaluate network configurations and systems for security vulnerabilities.
• Analyze logs, network traffic, and system activities to identify unauthorized access or activities.
• Create and execute audit plans to ensure the integrity of networks and systems.
• Understand perimeter security and ways to assess and reinforce it.

Content

Day 1: Introduction to Auditing and Monitoring

• • Overview of network and system auditing
  • Key concepts of auditing, monitoring, and compliance
  • Tools and technologies for network and system auditing
  • Understanding IT infrastructures: Networks, Perimeters, and Systems
  • Security frameworks and standards (NIST, ISO 27001, etc.)
  • Identifying risk factors in networks and systems

Day 2: Network Auditing Techniques

• • Assessing network configurations for security gaps
  • Vulnerability scanning and network mapping tools (Nmap, Nessus)
  • Reviewing network devices (routers, switches, firewalls) and their configurations

Day 3: System Auditing and Security Assessments

• • Auditing system logs and access control mechanisms
  • Identifying misconfigurations in servers and workstations
  • Configuring and using intrusion detection/prevention systems (IDS/IPS)

Day 4: Perimeter Security and External Threats

• • Understanding perimeter security: Firewalls, VPNs, and DMZs
  • Auditing perimeter devices and their configurations
  • Detecting and mitigating external threats

Day 5: Implementing Audits and Monitoring in Practice

• • Building a comprehensive auditing plan
  • Continuous monitoring strategies for ongoing security
  • Reporting findings and implementing corrective actions

NOTE:

Pre-& Post Tests will be conducted.

Case Studies, Group Exercises, Group Discussions, Last Day reviews, and assessments will be carried out.

Methodology

A highly interactive combination of lectures and discussion sessions will be managed to maximize the amount and quality of information and knowledge transfer. The sessions will start by raising the most relevant questions and motivating everybody to find the right answers. You will also be encouraged to raise your own questions and to share in the development of the right answers using your own analysis and experiences.  Tests of multiple-choice type will be made available on daily basis to examine the effectiveness of delivering the course.

Very useful Course Materials will be given.

• 30% Lectures
• 30% Workshops and work presentation
• 20% Group Work& Practical Exercises
• 20% Videos& General Discussions