Cyber Security Training in Espírito Santo

If you're looking to learn the fundamentals of Cyber Security, advance tactics, or prepare for industry-recognized certifications, we've got you covered.

At an alarming rate, data breaches are occurring. We no longer have to wonder what will happen next, but rather when. It is now necessary for the C-suite to cooperate with IT experts to develop a resilient workforce and implement new security policies and procedures to address the fact that Cyber Securityis no longer only an IT problem.

Prepare for system breaches with our wide choice of product-specific Cyber Security training and industry-recognized certification preparatory classes. Become an expert in critical infrastructure risk management, secure coding, web security, and security awareness. We can provide you with the security training you need to manage critical infrastructure threats and comply with Department of Defense security standards, no matter what level of position you hold.

Cyber Security training is available as "online live training" or "onsite live training". Online live training (aka "remote live training") is carried out by way of an interactive, remote desktop. Onsite live Cyber Security training can be carried out locally on customer premises in Espírito Santo or in NobleProg corporate training centers in Espírito Santo.

NobleProg Training Place, City Vitoria-Work Center Corporate Alexandre Buaiz

300 - 20º andar, Vitoria, Brazil, 29050-545

The Vitoria Center offers spectacular 360-degree views of one of Brazil's most important cities, including the waters of Vitoria Bay and the landmark Third Bridge. It is located on the 20th floor of the stunning, high-profile Work Center Office Building, which features beautiful and modern architecture, like its instantly recognizable V-shaped blue-glass facade. The center is right at the heart of Enseada do Sua, the financial and commercial district of Vitoria, and is just walking distance from the best shopping and cultural attractions. Vitoria's two ports are among the most important in the country, exporting iron and steel among many other goods, but the city also has a thriving services sector, beaches that bring tourists and, in recent years, a growing oil industry too. Vitoria is an hour by plane along the Atlantic coast from Rio de Janeiro and Sao Paulo and the city's airport is a short drive from the Center.

Subcategories (9)

35 Hours

The ISO/IEC 27002 Lead Manager training empowers you with the essential expertise and knowledge to support an organization in implementing and managing Information Security controls as outlined in ISO/IEC 27002.

Upon completing this course, you will be eligible to take the exam and apply for the “PECB Certified ISO/IEC 27002 Lead Manager” credential. A PECB Lead Manager Certification demonstrates that you have mastered the principles and techniques for implementing and managing Information Security Controls based on ISO/IEC 27002.

Who should attend?

Managers or consultants aiming to implement an Information Security Management System (ISMS) based on ISO/IEC 27001 and ISO/IEC 27002
Project managers or consultants looking to master the Information Security Management System implementation process
Individuals responsible for information security, compliance, risk, and governance within an organization
Members of information security teams
Expert advisors in information technology
Information Security officers
Privacy officers
IT professionals
CTOs, CIOs, and CISOs

Learning objectives

Master the implementation of Information Security controls by adhering to the framework and principles of ISO/IEC 27002
Gain a comprehensive understanding of the concepts, approaches, standards, methods, and techniques required for the effective implementation and management of Information Security controls
Comprehend the relationship between the components of Information Security controls, including responsibility, strategy, acquisition, performance, conformance, and human behavior
Understand the importance of information security for the organization’s strategy
Master the implementation of information security management processes
Master the formulation and implementation of security requirements and objectives

Educational approach

This training is based on both theory and practice
Sessions of lectures illustrated with examples based on real cases
Practical exercises based on case studies
Review exercises to assist exam preparation
Practice test similar to the certification exam

General Information

Certification fees are included in the exam price
Training material containing over 500 pages of information and practical examples will be distributed to participants
A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued to participants
In case of exam failure, you can retake the exam within 12 months for free

389 Directory Server for Administrators

14 Hours

ABAP Secure code

14 Hours

Active Directory for Admins

21 Hours

Accountability in Professional Regulatory Boards — Legal, Procedural, and Jurisprudential Aspects (TCU)

14 Hours

Network Security and Secure Communication

21 Hours

Developing a secure networked application can be challenging, even for developers familiar with cryptographic building blocks like encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, the course begins by establishing a solid foundation on the core requirements of secure communication—secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also addresses common threats that compromise these requirements and presents real-world solutions.

As cryptography is central to network security, the course covers key algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on complex mathematics, these topics are explored from a developer’s perspective, featuring typical use-case examples and practical considerations such as public key infrastructures. The course introduces security protocols used in secure communication, offering an in-depth look at widely adopted protocol families like IPsec and SSL/TLS.

Common cryptographic vulnerabilities are discussed, covering issues related to specific algorithms and protocols such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each problem, the course outlines practical implications and potential consequences without delving into deep mathematical details.

Finally, recognizing the centrality of XML technology in data exchange for networked applications, the course examines the security aspects of XML. This includes the use of XML in web services and SOAP messages, along with protection mechanisms like XML Signature and XML Encryption. It also addresses weaknesses in these protections and XML-specific security issues such as XML injection, XML External Entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

Understand fundamental concepts of security, IT security, and secure coding
Comprehend the requirements of secure communication
Learn about network attacks and defenses across different OSI layers
Gain practical knowledge of cryptography
Understand essential security protocols
Learn about recent attacks against cryptosystems
Receive information on recent related vulnerabilities
Grasp security concepts for web services
Access resources and further readings on secure coding practices

Audience

Developers, Professionals

C/C++ Secure Coding

21 Hours

Advanced Java Security

21 Hours

.NET, C# and ASP.NET Security Development

14 Hours

Secure coding in PHP

21 Hours

This course equips PHP developers with the essential skills needed to build applications that are resilient against modern internet-based threats. We explore web vulnerabilities through PHP examples, extending beyond the OWASP Top Ten to cover a wide range of issues, including various injection attacks, script injections, weaknesses in PHP session handling, insecure direct object references, file upload vulnerabilities, and more. PHP-related vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, misuse of security features, and time- and state-related issues. For the latter, we examine attacks like open_basedir circumvention, denial-of-service via magic floats, and hash table collision attacks. In every scenario, participants will learn the key techniques and functions required to mitigate these risks.

A special emphasis is placed on client-side security, addressing security concerns related to JavaScript, Ajax, and HTML5. We introduce several PHP extensions for security purposes, such as hash, mcrypt, and OpenSSL for cryptography, as well as Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening are provided in the context of PHP configuration (php.ini), Apache, and general server settings. Finally, we provide an overview of various security testing tools and techniques that developers and testers can utilize, including security scanners, penetration testing and exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the introduction of vulnerabilities and the configuration practices are supported by hands-on exercises that demonstrate the consequences of successful attacks, show how to apply mitigation techniques, and introduce the use of various extensions and tools.

Participants attending this course will

Grasp fundamental concepts of security, IT security, and secure coding
Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to prevent them
Gain insight into client-side vulnerabilities and secure coding practices
Develop a practical understanding of cryptography
Learn to utilize various security features within PHP
Identify typical coding mistakes and learn how to avoid them
Stay informed about recent vulnerabilities in the PHP framework
Acquire practical knowledge in using security testing tools
Receive sources and further reading on secure coding practices

Audience

HiTrust Common Security Framework Compliance

14 Hours

PECB ISO/IEC 27001 Lead Implementer

35 Hours

Information security threats and attacks are constantly evolving and becoming more sophisticated. The most effective defense against these risks is the proper implementation and management of information security controls and best practices. Additionally, robust information security is a key expectation and requirement from customers, regulators, and other stakeholders.

This training course is designed to equip participants with the skills needed to implement an Information Security Management System (ISMS) based on ISO/IEC 27001. It aims to provide a comprehensive understanding of ISMS best practices and a framework for its ongoing management and improvement.

Upon completing the training course, you can take the associated exam. If you pass successfully, you may apply for the “PECB Certified ISO/IEC 27001 Lead Implementer” credential, demonstrating your ability and practical knowledge to implement an ISMS in accordance with the requirements of ISO/IEC 27001.

Who Can Attend?

Project managers and consultants involved in or responsible for the implementation of an ISMS
Expert advisors seeking to master ISMS implementation
Individuals responsible for ensuring organizational conformity to information security requirements
Members of an ISMS implementation team

General Information

Certification fees are included in the exam price
Training material, comprising over 450 pages of content and practical examples, will be provided
A participation certificate awarding 31 CPD (Continuing Professional Development) credits will be issued
In case of exam failure, you can retake the exam free of charge within 12 months

Educational Approach

This training course includes essay-type exercises, multiple-choice quizzes, examples, and best practices relevant to ISMS implementation.
Participants are encouraged to communicate and engage in discussions while completing quizzes and exercises.
The exercises are based on a case study.
The structure of the quizzes mirrors that of the certification exam.

Learning Objectives

This training course will help you:

Gain a comprehensive understanding of the concepts, approaches, methods, and techniques used for implementing and effectively managing an ISMS
Recognize the relationship between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
Understand the operation of an information security management system and its processes as defined by ISO/IEC 27001
Learn how to interpret and implement the requirements of ISO/IEC 27001 within the specific context of an organization
Acquire the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an ISMS

Certified Lead Ethical Hacker

35 Hours

Why should you attend?

The Certified Lead Ethical Hacker training course empowers you to develop the necessary expertise to carry out information system penetration tests by applying recognized principles, procedures, and penetration testing techniques. This allows you to identify potential threats within a computer network. Throughout this training, you will acquire the knowledge and skills required to manage a penetration testing project or team, as well as to plan and execute both internal and external pentests, in compliance with various standards such as the Penetration Testing Execution Standard (PTES) and the Open Source Security Testing Methodology Manual (OSSTMM). Additionally, you will gain a comprehensive understanding of how to draft reports and propose countermeasures. Through practical exercises, you will master penetration testing techniques and acquire the skills needed to manage a pentest team, as well as handle customer communication and conflict resolution.

The Certified Lead Ethical Hacking training course provides a technical perspective on information security through ethical hacking, utilizing common techniques such as information gathering and vulnerability detection, both inside and outside a business network.

The training is also aligned with the NICE (The National Initiative for Cybersecurity Education) Protect and Defend framework.

After mastering the necessary knowledge and skills in ethical hacking, you can take the exam and apply for the "PECB Certified Lead Ethical Hacker" credential. By holding a PECB Lead Ethical Hacker certificate, you will demonstrate that you have acquired the practical skills for performing and managing penetration tests according to best practices.

Who should attend?

Individuals interested in IT Security, particularly in Ethical Hacking, who wish to learn more about the topic or begin a process of professional reorientation.
Information security officers and professionals seeking to master ethical hacking and penetration testing techniques.
Managers or consultants wishing to learn how to control the penetration testing process.
Auditors wishing to perform and conduct professional penetration tests.
Persons responsible for maintaining the security of information systems within an organization.
Technical experts who want to learn how to prepare a pentest.
Cybersecurity professionals and information security team members.

21 Hours

Last Updated: 2026-06-15

Testimonials (7)

The trainer's practical knowledge and his engaging anecdotes.

Mario Beckel - IABG mbH

Course - Identity and Access Management (IAM)

Clarity and pace of explanations

Federica Galeazzi - Aethra Telecomunications SRL

Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response

More knowledge and give us a wake up call to put some attentions in terms of all our accounts security.

Karen May - Inspectra Ltd

Course - Cyber Security Awareness Training

Adaptation to the needs of the trainees in terms of time spent on each topic.

Ana - Administracao do Porto de Sines e do Algarve, S.A.

Course - CISM - Certified Information Security Manager

Machine Translated

The report and rules setup.

Jack - CFNOC- DND

Course - Micro Focus ArcSight ESM Advanced

Being approachable and pushing us into interaction

Daniel - EY GLOBAL SERVICES (POLAND) SP Z O O

Course - CISSP - Certified Information Systems Security Professional

I enjoyed refreshing my knowledge on the various subjects on cyber security. I was increasingly interested around cyber attacks, how they happen and what we (as an organisation) could potentially do to try and mitigate any risks. I did raise a question around AI in cyber attacks, and the answer was very in depth and interesting with a live example given on the spot.

Siobhan

Course - Executive Cyber Security Awareness