Auditing a Cybersecurity Programme

Course overview

Course Introduction

Today, security risks requiring audits are increasing dramatically. To prevent the data breaches that executives fear, auditors must be able to assess the effectiveness of a company's cybersecurity program.

This involves understanding the necessary controls, how to implement them, and how to evaluate their effectiveness.

Participants in this Auditing a Cybersecurity Programme training course will engage in various exercises designed to solidify their knowledge of creating and executing effective security solutions.

This Auditing a Cybersecurity Programme training course will equip them with the skills needed to perform cyber assessments, making them valuable assets to their organization's cyber defense team.

This training course will feature:

• Simulations of real cybersecurity program audits
• Tips for effective cybersecurity auditing
• Cyber risk assessments
• Threat analysis
• Case studies of cybersecurity breaches and their consequences

Training Objectives

By the end of this training course, delegates will be able to:

• Perform risk analysis of IT security breaches
• Get acquainted with ISO 27001 and COBIT5
• Acquire the knowledge of Information Security Management
• Understand the approach for incident response, Crisis Management and Disaster Recovery

Who should Attend?

This training course is suitable for many professionals but will greatly benefit:

• Auditors
• IT professionals who are interested in conducting cybersecurity audits, risk assessments, vulnerability and threat analysis or control self-assessments

Course outline

Day One: Introduction to Cybersecurity

• Vulnerability assessment
• Threat analysis 
• Cybersecurity risk assessment
• Cybersecurity program
• Cybersecurity risk auditing

Day Two: Inventory Security Management

• Inventory authorized and unauthorized devices
• Inventory authorized and unauthorized software
• Secure configurations
• Continuous vulnerability assessment and remediation
• Control use of administrative privileges
• Maintenance, monitoring and analysis of audit logs

Day Three: Network Security Management

• Email and web browser protection
• Malware defenses
• Security configurations for network devices 
• Wireless access control
• Limitation and control of network ports, protocols and services

Day Four: Data Security Management

• Data protection
• Controlled data access based on need to know
• Data recovery capability
• Boundary defenses
• Account monitoring and control
• Security skills assessment and training

Day Five: Security Incident Management

• Application software security
• Cybersecurity Incidents
• Incident response management
• Penetration tests
• Red team exercises

Dates and fees

Dates	City	Fee
14 - 18 Dec 2026	Barcelona, Spain	£3,850 + VAT
21 - 25 Dec 2026	Frankfurt, Germany	£3,250 + VAT
18 - 22 Jan 2027	Barcelona, Spain	£3,850 + VAT
15 - 19 Feb 2027	London, United Kingdom	£4,200 + VAT
15 - 19 Mar 2027	Munich, Germany	£4,250 + VAT
19 - 23 Apr 2027	Barcelona, Spain	£3,850 + VAT
17 - 21 May 2027	Paris, France	£4,500 + VAT
21 - 25 Jun 2027	Frankfurt, Germany	£3,250 + VAT
19 - 23 Jul 2027	Barcelona, Spain	£3,850 + VAT
16 - 20 Aug 2027	London, United Kingdom	£4,200 + VAT
20 - 24 Sep 2027	Istanbul, Turkey	£2,850 + VAT
18 - 22 Oct 2027	Cape Town, South Africa	£4,250 + VAT
15 - 19 Nov 2027	Barcelona, Spain	£3,850 + VAT
20 - 24 Dec 2027	Paris, France	£4,500 + VAT