Managing Enterprise Information Security: A Practical Approach for Achieving Defense-in-Depth

Dates

2008* Prices (USD)

2008 Dates
February 20-22, 2008 (SEI Arlington, VA)
June 17-19, 2008 (SEI Arlington, VA)
September 16-18, 2008 (CMU/CIC Bldg. Pittsburgh, PA)

Course Registration
Software Engineering Institute
Carnegie Mellon University
Pittsburgh, PA 15213-3890
Phone: 412 / 268-7388
FAX: 412 / 268-7401
Questions: courseregistration@sei.cmu.edu

To Register: 2008 Click Here

This course may also be offered by arrangement at customer sites. E-mail training-info@cert.org or call +1 412-268-9564 for details.

*Course dates and fees are subject to change.

U.S.
Course Fee:
Industry: $1725
Government: $1380
Academic: $1380

International
Course Fee:
$3450

   Register for
2008 Dates

Course Description

This three-day course begins with a brief review of the conceptual foundations of information security. Next, students will be introduced to the CERT^® Defense-in-Depth Framework: eight operationally focused and interdependent management components which will be synergistically applied to a fictitious organization's Information Technology (IT) enterprise (see "Topics" below). Through lectures, demonstrations, scenario-based exercises, small group activities, and open discussions, students will learn high-level best practices for effectively integrating each of these eight components into all aspects of IT operations. Further, the course scenario is used extensively to reinforce these best practices with technical information security implementations.

This course is designed for individuals charged with implementing information security throughout the IT enterprise. Therefore, this course is an ideal pursuit for CIO/CISOs, IT and Security managers, and/or system administrators and IT security personnel who would like to step up to the management level.

Audience   ·    Prerequisites    ·    Objectives   ·    Logistics

AUDIENCE

• IT managers and security personnel
• System Administrators
• Individuals tasked with leading an organization's IT and information security efforts.

PREREQUISITES
This course has no prerequisites.

TOPICS

• Foundations of Information Assurance
• The CERT^® Defense-in-Depth Framework
• Components of Defense-in-Depth
• Compliance Management
• Risk Management
• Identity Management
• Authorization Management
• Accountability Management
• Availability Management
• Configuration Management
• Incident Management

OBJECTIVES
Successful completion of this course will enable participants to

• Describe the CERT^® Defense-in-Depth framework and its components
• Holistically examine IT operations for IA threats and vulnerabilities
• Apply the framework to improve the overall security posture of IT operations

Course Materials
Participants will receive a course notebook and a CD containing course materials.

LOGISTICS

Class Schedule
This three-day course meets at the following times:
Days 1 & 2: 9:00 a.m.-5:00 p.m.
Day 3: 9:00 a.m. - 2:30 p.m.

Hotel and Travel Information
Information about traveling to the SEI offices is available on our
Travel and Lodging Web pages.

Questions about this course?
Please see our Frequently Asked Questions Web page for answers to some of the more common inquiries about SEI Education and Training.

If you need more information, contact us via e-mail at training-info@cert.org or telephone at +1 412-268-9564.

Related Products and Services

Courses
Information Security for Technical Staff
Advanced Information Security for Technical Staff

Publications
Handbook: Defense-in-Depth: Foundations for Secure and Resilient Enterprises

Other Related Information
CERT Training and Education
CERT-Certified Incident Handler Certification

Additional information and publications can be found on the CERT Web site.

Course Registration

^
TOP