Security Leader: Security Architecture

This training is taught in English.

The Security Architecture module of the Security Leader training (part of our Certified CISO training program) is a bit more technical, diving into security architectures. We do not only touch on theoretical architecture models and how to manage them but also talk about IoT, OT/ICS and cloud security concepts. Business continuity and disaster recovery is also part of this course, as certain high availability set-ups have impact on how you put your architecture together.

Too technical, you think. Don’t worry. We’ll teach you just about enough to have a meaningful conversation with your (security) architect(s). As a CISO, it is important to realize the impact of specific security strategies on the overall IT setup. It is important to be able to speak the same language – that’s why this module is geared towards bridging the gap between business risks and the more technical side of things.

At the end of this course, you will know which architectural frameworks are mostly used, how security integrates with them, and how to manage these components. But it is not only about architecture.

You will also receive practical advice and pointers on:

• Internet of Things security
• OT/ICS security
• Cloud security
• Business Continuity / Disaster Recovery

As such, you will receive a solid basis on security architectural set-ups and practices regardless of the sector you’re in.

Why take this course?

By the end of this course, you’ll have a firm grasp on:

• The meaning behind so-called “zero trust” architectures
• The major enterprise architecture frameworks and how security fits in
• The various cloud service models and the various security features associated with them
• The “shared responsibility” model when using cloud services and possible pitfalls and areas of attention
• OT/ICS security and how it differs from IT security
• Internet of Things major risks and current initiatives to tackle the issues
• Disaster Recovery and Business Continuity: What’s the difference, how do we create a BCP, and how do we apply high-availability principles in our architecture?

This course is also the second module in a unique program intended to lead to formal CISO certification. To check out other modules, download this file: CISO Brochure download.

Target group

Who is the Certified CISO programme’s  ‘Security Architecture’ module intended for? This module targets information and cybersecurity officers, managers, and other security professionals tasked with crafting a companywide information security upgrade strategy. As a CISO, it is important to know a bit of everything, including the more technical aspects of security, so you can assess the impact on IT and the company as a whole when putting together your strategy. This module zooms in on a variety of possible security architectures and approaches, not to transform you into a security architect but to introduce you to the concepts.

Learning goals

What you’ll learn in a nutshell:

• What is a “zero-trust” architecture?
• What are the major enterprise architecture frameworks?
• How do we apply security principles in these architectural frameworks?
• How do you manage architectural domains and building blocks in an architecture repository?
• Introduction to the 3 basic cloud service models and the shared responsibility concept
• Possible pitfalls and areas of attention when it comes to cloud security
• Which best practice resources are available to help you with cloud service security
• Comparison between security controls of your own data center, MS Azure, Amazon Web services, and Google Cloud
• Internet of Things security risks
• On-going initiatives and guidance to security IoT devices and their networks
• What are OT and ICS, and why are they different from them when it comes to security?
• Which standards and frameworks can help you secure OT/ICS environments?
• The difference between disaster recovery and business continuity
• How can a business continuity plan based on a BIA (Business Impact Assessment) be built?
• Which standards and frameworks can guide you while building a BCP?
• High availability considerations on various architectural levels

Learning approach

When it comes to establishing a Security Architecture, there are a variety of approaches. Multiple frameworks and concepts exist.

And it’s for that reason that this course has a two-fold objective. It aims to introduce you to the most important architectural frameworks available and to supply you with some practical insights required to apply them in cooperation with your (security) architect(s).

We’ve lined up highly skilled professionals in the trenches for years to accomplish this. They share practical advice and workarounds and teach you what you need to know. The course blends theoretical models and frameworks to give you an overview of what’s out there and practical exercises for applying what you’ve learned in real-life situations.

End product

At the end of the course, you will be awarded a certificate of completion. This module does not entail any exams or official certification.

Note: Have you got plans to pursue the entire ‘Certified CISO’ programme? In that case, you’ll need a certificate of completion for all modules, and they must have been obtained within the past two years. The first six modules must be completed to start the 7^th and final module, the ‘Master Project’, where you will apply the content of the previous modules to a single integrated project. Once finished, and if you obtain a positive evaluation, you’ll be awarded the ‘Certified CISO’ certificate.

Your bonus training package includes the following:

• Training material ( PDF format): handouts of the presentations with notes
• A list of useful links with additional information on architecture standards and frameworks discussed during class
• The exercises and their solutions (where applicable)

How to prepare yourself

This is a classroom-based, non-technical course. Bring something along (e.g., a laptop, notebook, tablet) to access the digital training materials and take extra notes.

.

Course prerequisites:

• A basic understanding of IT
• Some experience in a corporate environment as a manager could be beneficial, but is not essential.

Click here for more information about our teachers.