Cyber Security Training in Sao Paulo

This instructor-led, live training in Sao Paulo (online or onsite) is designed for advanced cybersecurity professionals, AI engineers, and IoT developers looking to implement strong security measures and resilience strategies for Edge AI systems.

Upon completing this training, participants will be able to:

• Identify security risks and vulnerabilities associated with Edge AI deployments.
• Apply encryption and authentication techniques to protect data.
• Architect resilient Edge AI systems capable of withstanding cyber threats.
• Deploy AI models securely within edge environments.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level cybersecurity professionals and data scientists who wish to utilize LLMs for enhancing cybersecurity measures and threat intelligence.

By the end of this training, participants will be able to:

• Understand the role of LLMs in cybersecurity.
• Implement LLMs for threat detection and analysis.
• Utilize LLMs for security automation and response.
• Integrate LLMs with existing security infrastructure.

This instructor-led, live training in Sao Paulo (online or onsite) is designed for intermediate to advanced cybersecurity professionals and technical leads who want to learn how to implement AI models to improve security workflows, automate threat detection and response, and conduct predictive analysis.

By the end of this training, participants will be able to:

• Grasp the role of AI in modern cybersecurity.
• Create machine learning models for anomaly and threat detection.
• Apply AI to automate incident response and security operations.
• Assess the ethical and operational implications of using AI in cybersecurity.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level analysts who wish to effectively analyze, secure, and protect their organization's data and networks from cyber threats.

By the end of this training, participants will be able to:

• Gain a comprehensive understanding of the current cybersecurity landscape.
• Learn and apply industry-standard cybersecurity frameworks (e.g., NIST, ISO/IEC 27001) and best practices to enhance the security posture of their organization.
• Implement effective network security measures, including configuring firewalls, VPNs, IDS/IPS systems, and applying encryption techniques to protect data at rest and in transit.
• Identify, analyze, and respond to cybersecurity incidents using threat intelligence, SIEM tools, and incident response plans.

This instructor-led, live training in Sao Paulo (online or onsite) is designed for intermediate-level network administrators who wish to gain the essential skills to manage, administer, monitor, and maintain Fortinet security systems.

By the end of this training, participants will be able to:

• Configure and manage FortiGate firewalls.
• Monitor network traffic and manage incidents with FortiAnalyzer.
• Automate tasks and manage policies through FortiManager.
• Apply preventive maintenance strategies and troubleshoot network issues.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at beginner-level network administrators who wish to use FortiGate 1100E to manage and secure their network environments effectively.

By the end of this training, participants will be able to:

• Understand the basic architecture and features of FortiGate 1100E.
• Learn how to deploy FortiGate 1100E in various network environments.
• Gain hands-on experience with basic configuration and management tasks.
• Understand security policies, NAT, and VPNs.
• Learn to monitor and maintain FortiGate 1100E.

This instructor-led, live training in Sao Paulo (online or onsite) is designed for advanced-level professionals who wish to gain a comprehensive understanding of fraud examination concepts and prepare for the Certified Fraud Examiner (CFE) exam.

Upon completion of this training, participants will be able to:

• Acquire comprehensive knowledge of fraud examination principles and the overall examination process.
• Learn to identify, investigate, and prevent various forms of financial fraud.
• Understand the legal landscape surrounding fraud, including the legal components of fraud, applicable laws, and regulations.
• Develop practical skills for conducting fraud investigations, such as evidence collection, interviewing techniques, and data analysis.
• Learn to design and implement effective fraud prevention and deterrence programs within organizations.
• Gain the confidence and knowledge necessary to successfully pass the Certified Fraud Examiner (CFE) exam.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level network administrators who wish to manage and secure their networks using FortiGate firewalls.

By the end of this training, participants will be able to:

• Understand FortiGate features and functionalities, particularly those introduced or enhanced in version 7.4.
• Configure and manage FortiGate devices and implement advanced security features.
• Deploy and manage advanced security measures like IPS, antivirus, web filtering, and threat management.
• Monitor network activities, analyze logs, and generate reports for auditing and compliance.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level technical professionals who wish to delve deeper into the technical aspects and functionalities of Fortinet’s product line to effectively recommend, sell, and implement Fortinet security solutions.

By the end of this training, participants will be able to:

• Gain in-depth knowledge of Fortinet’s advanced security solutions and products.
• Understand the technical features, benefits, and deployment scenarios for each core Fortinet product.
• Configure, manage, and troubleshoot Fortinet solutions in diverse environments.
• Apply Fortinet products to address complex security challenges and requirements.

This instructor-led, live training in Sao Paulo (online or onsite) targets beginner-level technical professionals seeking to learn about the Security Fabric concept and its evolution in addressing organizational cybersecurity needs.

By the end of this training, participants will be able to:

• Understand the evolution of cybersecurity and its influence on modern security technologies.
• Utilize Fortinet products to protect against specific cyber threats and attacks.
• Recognize the integration and automation capabilities of Fortinet solutions for coordinated incident response.

This instructor-led live training in Sao Paulo (online or onsite) is aimed at security professionals who wish to learn how to troubleshoot Palo Alto Networks' next-generation firewalls.

By the end of this training, participants will be able to:

• Understand the architecture of the next-generation firewall.
• Investigate and troubleshoot networking issues using firewall tools.
• Analyze advanced logs to resolve real-life scenarios.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at beginner-level network security professionals who wish to learn the concept of cybersecurity and the current global threat landscape.

By the end of this training, participants will be able to:

• Understand the current global threat landscape and identify the main types of cyber adversaries.
• Recognize the primary types of malware and the mechanics of cyber attacks.
• Understand the basics of network security and the importance of a layered security approach.
• Learn about Fortinet's Security Fabric and how it addresses modern cybersecurity challenges.

This instructor-led, live training in Sao Paulo (online or onsite) is designed for intermediate-level network and security professionals who want to effectively manage and secure networks using Fortigate 600E equipment, with a specific focus on HA configurations to enhance reliability and performance.

Upon completion of this training, participants will be able to:

• Comprehend the features, specifications, and operational principles of the Fortigate 600E firewall.
• Carry out the initial setup of the Fortigate 600E, including fundamental configuration tasks such as interface setup, routing, and establishing initial firewall policies.
• Configure and manage advanced security features like SSL VPN, user authentication, antivirus, IPS, web filtering, and anti-malware capabilities to protect against a wide range of network threats.
• Troubleshoot common issues within HA setups and effectively manage HA environments.

Managing Open Source Software (OSS) involves overseeing the entire lifecycle of open-source components within an organization to ensure their secure, compliant, and efficient utilization.

This instructor-led, live training (available online or onsite) targets intermediate IT professionals seeking to implement best practices for managing open-source software in enterprise and government settings.

Upon completing this training, participants will be capable of:

• Creating effective OSS policies and governance frameworks.
• Leveraging SBOM and SCA tools to identify, track, and manage open-source dependencies.
• Reducing risks related to licensing and security vulnerabilities.
• Accelerating OSS adoption to maximize innovation and cost savings.

Course Format

• Interactive lectures and discussions.
• Case studies and scenario-based exercises.
• Hands-on demonstrations using OSS management tools.

Customization Options

• This course can be customized to align with your organization's specific OSS policies and toolchains. Please contact us to arrange this.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level IT professionals who wish to enhance their skills in identifying and managing IT risk and implementing information systems controls, and prepare for the CRISC certification exam.

By the end of this training, participants will be able to:

• Understand the governance and risk management aspects of IT.
• Conduct IT risk assessments and implement risk responses.
• Design and implement information systems controls.
• Prepare effectively for the CRISC certification exam.

This instructor-led, live training in Sao Paulo (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to enhance their understanding of GRC frameworks and apply them to secure and compliant business operations.

By the end of this training, participants will be able to:

• Understand the key components of cybersecurity governance, risk, and compliance.
• Conduct risk assessments and develop risk mitigation strategies.
• Implement compliance measures and manage regulatory requirements.
• Develop and enforce security policies and procedures.

This instructor-led, live training in Sao Paulo (online or on-site) targets intermediate to advanced-level IT professionals and business leaders seeking to develop a structured approach to handling data breaches.

Upon completing this training, participants will be able to:

• Understand the causes and consequences of data breaches.
• Develop and implement strategies to prevent data breaches.
• Establish an incident response plan to contain and mitigate breaches.
• Conduct forensic investigations and assess the impact of breaches.
• Comply with legal and regulatory requirements for breach notification.
• Recover from data breaches and strengthen security postures.

The EC-Council Certified DevSecOps Engineer (ECDE) is a practical, hands-on program designed to empower professionals with the expertise needed to weave security throughout the entire DevOps lifecycle, ensuring robust security from the initial planning phases through to final deployment.

This live, instructor-led training—available both online and on-site—is tailored for intermediate-level software engineers and DevOps specialists who aim to incorporate security protocols into their CI/CD pipelines, guaranteeing the delivery of secure and compliant code.

Upon completion of this training, participants will be equipped to:

• Comprehend the core principles and practices of DevSecOps.
• Secure all stages of the CI/CD pipeline utilizing automated tools.
• Adopt secure coding standards and perform vulnerability scanning.
• Prepare effectively for the ECDE certification through practical laboratory exercises and review sessions.

Course Format

• Engaging lectures and interactive discussions.
• Practical application of DevSecOps tools within simulated pipelines.
• Guided exercises concentrating on secure development and deployment methodologies.

Customization Options

• For a tailored training experience aligned with your team’s specific workflows or toolchain, please reach out to us to arrange your custom session.

This instructor-led live training in Sao Paulo (online or onsite) is designed for security professionals eager to learn the fundamentals of managing Palo Alto Networks' next-generation firewalls.

By the end of this training, participants will be able to:

• Configure and manage essential firewall features of Palo Alto Networks.
• Manage security and NAT policies.
• Implement threat prevention strategies.
• Monitor network threats and traffic.

User session recording technology is utilized to capture, monitor, and audit user activity on IT systems, providing critical insights for security, compliance, and forensic investigations.

This instructor-led, live training (available online or onsite) is designed for beginner to intermediate-level IT and security professionals who aim to implement user session recording solutions to enhance monitoring, compliance, and accountability.

Upon completion of this training, participants will be able to:

• Grasp the principles of user session recording.
• Deploy and configure session recording solutions.
• Analyze and audit recorded sessions for compliance.
• Integrate session recording with security monitoring systems.

Format of the Course

• Interactive lecture and discussion.
• Abundant exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Sao Paulo (online or on-site) targets beginner to intermediate system administrators and security professionals who wish to learn how to implement Cloudflare for content delivery and cloud security, as well as mitigate DDoS attacks.

By the end of this training, participants will be able to:

• Configure Cloudflare for their websites.
• Set up DNS records and SSL certificates.
• Implement Cloudflare for content delivery and caching.
• Protect their websites from DDoS attacks.
• Implement firewall rules to restrict traffic to their websites.

This instructor-led live training in Sao Paulo (online or onsite) targets system administrators who wish to use 389 Directory Server to configure and manage LDAP-based authentication and authorization.

Upon completing this training, participants will be able to:

• Install and configure 389 Directory Server.
• Grasp the features and architecture of 389 Directory Server.
• Learn to configure the directory server via the web console and CLI.
• Establish and monitor replication to ensure high availability and load balancing.
• Manage LDAP authentication using SSSD for improved performance.
• Integrate 389 Directory Server with Microsoft Active Directory.

This instructor-led live training in Sao Paulo (online or onsite) is designed for system administrators who aim to utilize Microsoft Active Directory for managing and securing data access.

By the end of this course, participants will be able to:

• Install and configure Active Directory.
• Create a domain and specify access rights for users and devices.
• Manage users and machines using Group Policies.
• Control access to file servers.
• Set up a Certificate Service and manage certificates.
• Implement and manage services like encryption, certificates, and authentication.

Accountability in Professional Regulatory Boards is an applied course focusing on the legal framework, procedural duties, and TCU jurisprudence that guide oversight and accountability for professional councils in Brazil.

This instructor-led, live training (online or onsite) is aimed at intermediate-level to advanced-level professionals who wish to understand TCU oversight, prevent common irregularities, and strengthen internal controls and responses to audit findings.

By the end of this training, participants will be able to:

• Explain the institutional role of the TCU and the legal nature of professional councils.
• Identify common irregularities found by the TCU and understand relevant jurisprudence.
• Design internal control measures and segregation of duties to mitigate accountability risks.
• Prepare compliant annual accountability submissions (SISTC / e-Contas) and structured responses to TCU determinations.

Format of the Course

• Interactive lecture and legal analysis.
• Case study review and group discussion.
• Practical workshop and simulation exercises.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Sao Paulo (online or onsite) is designed for engineers who want to protect connected vehicles from cyber threats.

Upon completion of this training, participants will be able to:

• Implement cybersecurity measures within automotive systems.
• Select the most appropriate technologies, tools, and approaches.

Description:

This two-day CCSK Plus course encompasses all material from the CCSK Foundation course, building upon it with extensive practical labs during the second day of instruction. Participants will apply their knowledge through a series of exercises based on a scenario where a fictional organization transitions securely to the cloud. Upon completion, students will be thoroughly prepared for the CCSK certification exam, sponsored by the Cloud Security Alliance. Although the second day includes additional lectures, the majority of the time is dedicated to assessing, constructing, and securing cloud infrastructure through hands-on activities.

Objectives:

This is a two-day class that starts with CCSK- Basic training, followed by a second day of additional content and hands-on activities

Target Audience:

This class is geared towards security professionals, but is also useful for anyone looking to expand their knowledge of cloud security.

Developing a secure networked application can be challenging, even for developers familiar with cryptographic building blocks like encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, the course begins by establishing a solid foundation on the core requirements of secure communication—secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also addresses common threats that compromise these requirements and presents real-world solutions.

As cryptography is central to network security, the course covers key algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on complex mathematics, these topics are explored from a developer’s perspective, featuring typical use-case examples and practical considerations such as public key infrastructures. The course introduces security protocols used in secure communication, offering an in-depth look at widely adopted protocol families like IPsec and SSL/TLS.

Common cryptographic vulnerabilities are discussed, covering issues related to specific algorithms and protocols such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each problem, the course outlines practical implications and potential consequences without delving into deep mathematical details.

Finally, recognizing the centrality of XML technology in data exchange for networked applications, the course examines the security aspects of XML. This includes the use of XML in web services and SOAP messages, along with protection mechanisms like XML Signature and XML Encryption. It also addresses weaknesses in these protections and XML-specific security issues such as XML injection, XML External Entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Comprehend the requirements of secure communication
• Learn about network attacks and defenses across different OSI layers
• Gain practical knowledge of cryptography
• Understand essential security protocols
• Learn about recent attacks against cryptosystems
• Receive information on recent related vulnerabilities
• Grasp security concepts for web services
• Access resources and further readings on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ applications demands robust protection against malicious exploitation, memory corruption, and the circumvention of input validation. This program explores common vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will learn to apply secure coding standards, utilize static analysis tools, and implement defensive programming practices to eliminate weaknesses, ensure proper input sanitization, and build software that is resilient against cyber threats.

Even seasoned Java developers often struggle to fully master the extensive array of security services provided by Java, while also remaining unaware of the diverse vulnerabilities that can affect web applications built with Java.

In addition to introducing the security components of the Standard Java Edition, this course addresses security concerns within Java Enterprise Edition (JEE) and web services. The discussion begins with the foundational principles of cryptography and secure communication before moving on to specific services. Various exercises focus on declarative and programmatic security techniques in JEE, while covering both transport-layer and end-to-end security for web services. Participants will gain hands-on experience through practical exercises, allowing them to explore the discussed APIs and tools firsthand.

The course also examines and explains the most common and severe programming flaws associated with the Java language and platform, as well as web-related vulnerabilities. Beyond typical errors made by Java programmers, the covered security vulnerabilities include language-specific issues and problems arising from the runtime environment. All vulnerabilities and related attack vectors are demonstrated through clear, easy-to-understand exercises, followed by recommended coding guidelines and possible mitigation techniques.

Participants attending this course will

• Grasp the basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to avoid them
• Comprehend the security concepts underlying web services
• Acquire skills in using various security features of the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions provided by Java EE
• Learn about typical coding mistakes and strategies to prevent them
• Receive information regarding recent vulnerabilities in the Java framework
• Obtain practical knowledge in using security testing tools
• Access sources and further reading materials on secure coding practices

Audience

Developers

Today, numerous programming languages can compile code for the .NET and ASP.NET frameworks. While this environment offers robust security development capabilities, developers must understand how to apply architecture-level and coding-level techniques to implement desired security features, prevent vulnerabilities, and mitigate their exploitation.

This course aims to equip developers with the skills to prevent untrusted code from executing privileged actions, safeguard resources through strong authentication and authorization, manage remote procedure calls and sessions, and explore various implementation strategies through extensive hands-on exercises.

The course introduces various vulnerabilities by highlighting common programming issues in .NET development. It also examines ASP.NET vulnerabilities, including the impact of different environment settings. Additionally, it covers ASP.NET-specific security challenges, such as ViewState attacks and string termination attacks, alongside broader web application security concerns.

Participants in this course will

• Grasp the fundamental concepts of security, IT security, and secure coding practices
• Identify web vulnerabilities beyond the OWASP Top Ten and learn how to avoid them
• Utilize the various security features available in the .NET development environment
• Acquire practical experience with security testing tools
• Recognize typical coding errors and understand how to prevent them
• Stay informed about recent vulnerabilities in .NET and ASP.NET
• Access resources and further reading materials on secure coding practices

Audience

Developers

This course equips PHP developers with the essential skills needed to build applications that are resilient against modern internet-based threats. We explore web vulnerabilities through PHP examples, extending beyond the OWASP Top Ten to cover a wide range of issues, including various injection attacks, script injections, weaknesses in PHP session handling, insecure direct object references, file upload vulnerabilities, and more. PHP-related vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, misuse of security features, and time- and state-related issues. For the latter, we examine attacks like open_basedir circumvention, denial-of-service via magic floats, and hash table collision attacks. In every scenario, participants will learn the key techniques and functions required to mitigate these risks.

A special emphasis is placed on client-side security, addressing security concerns related to JavaScript, Ajax, and HTML5. We introduce several PHP extensions for security purposes, such as hash, mcrypt, and OpenSSL for cryptography, as well as Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening are provided in the context of PHP configuration (php.ini), Apache, and general server settings. Finally, we provide an overview of various security testing tools and techniques that developers and testers can utilize, including security scanners, penetration testing and exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the introduction of vulnerabilities and the configuration practices are supported by hands-on exercises that demonstrate the consequences of successful attacks, show how to apply mitigation techniques, and introduce the use of various extensions and tools.

Participants attending this course will

• Grasp fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to prevent them
• Gain insight into client-side vulnerabilities and secure coding practices
• Develop a practical understanding of cryptography
• Learn to utilize various security features within PHP
• Identify typical coding mistakes and learn how to avoid them
• Stay informed about recent vulnerabilities in the PHP framework
• Acquire practical knowledge in using security testing tools
• Receive sources and further reading on secure coding practices

Audience

Developers

This comprehensive SDL core training offers a deep dive into secure software design, development, and testing methodologies via the Microsoft Secure Development Lifecycle (SDL). It begins with a foundational Level 100 overview of the essential building blocks of SDL, progressing to design techniques aimed at identifying and remedying flaws during the early stages of the development process.

Focusing on the development phase, the course examines common security-related programming bugs in both managed and native code. It presents attack vectors associated with these vulnerabilities alongside corresponding mitigation strategies, all illustrated through hands-on exercises that provide participants with practical, live hacking experience. The training then introduces various security testing methods and demonstrates the effectiveness of different testing tools. Participants gain insight into how these tools operate by applying them to previously discussed vulnerable code through practical exercises.

Participants attending this course will

Grasp fundamental concepts of security, IT security, and secure coding.

Become familiar with the essential steps of the Microsoft Secure Development Lifecycle.

Learn secure design and development practices.

Understand principles of secure implementation.

Comprehend security testing methodology.

• Access resources and further readings on secure coding practices.

Audience

Developers, Managers

Cybersecurity involves applying technologies, controls, and processes to safeguard computer systems, servers, networks, devices, software, and data against malicious cyber attacks.

This instructor-led live training (available online or onsite) is designed for anyone looking to learn how to protect internet-connected systems from various cyber threats.

By the end of this training, participants will be able to:

• Understand the core concept of cybersecurity.
• Learn and comprehend different types of cybersecurity threats.
• Master the processes and best practices for protecting internet-connected systems from cyber attacks.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and practice sessions.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Sao Paulo (online or onsite) explores various facets of enterprise security, ranging from AI to database protection. The curriculum also covers the latest tools, processes, and mindsets required to effectively defend against attacks.

In this instructor-led live course in Sao Paulo, participants will learn how to formulate a proper security strategy to tackle DevOps security challenges.

This live, instructor-led training in Sao Paulo covers the system architectures, operating systems, networking, storage, and cryptographic considerations essential for designing secure embedded systems.

Upon completion, participants will have a strong grasp of security principles, challenges, and technologies. More importantly, they will acquire the practical skills necessary to develop safe and robust embedded software.

This course offers an expert introduction to the newly enacted Accessibility Law, equipping developers with the practical skills needed to design, develop, and maintain fully accessible applications. Beginning with a contextual discussion on the law's importance and implications, the course quickly transitions to hands-on coding practices, tools, and testing techniques to ensure compliance and inclusivity for users with disabilities.

This program offers leaders and managers a comprehensive overview of the key issues and activities related to cybersecurity.

Leaders will gain insights across various topics, building their knowledge and refining their executive decision-making capabilities regarding cyber threats.

By the conclusion of this training, participants will be equipped to:

• Understand privacy concerns on the Internet and social networks
• Recognize what PII is and why it matters
• Learn how to secure online activities
• Maintain the privacy of business users
• Gain knowledge of cyber laws that protect privacy

Course Format

• Interactive lectures and discussions
• Extensive exercises and practice
• Hands-on implementation in a live-lab environment

Course Customization Options

• To request customized training for this course, please contact us to arrange.

This instructor-led, live training in Sao Paulo (online or onsite) targets system administrators who wish to use FreeIPA to centralize the authentication, authorization, and account information for their organization's users, groups, and machines.

By the end of this training, participants will be able to:

• Install and configure FreeIPA.
• Manage Linux users and clients from a single central location.
• Use FreeIPA's CLI, Web UI, and RPC interface to set up and manage permissions.
• Enable Single Sign-On authentication across all systems, services, and applications.
• Integrate FreeIPA with Windows Active Directory.
• Backup, replicate, and migrate a FreeIPA server.

This training course teaches how risk assessment for information security is done by combining the information on ISO/IEC 27005:2022 and ISO/IEC 27001. In addition to theoretical knowledge, this training course is equipped with practical exercises, quizzes, case studies, all of which make it a very engaging training course.

Information security threats and attacks increase and improve constantly. The best form of defense against them is the proper implementation and management of information security controls and best practices. Information security is also a key expectation and requirement of customers, legislators, and other interested parties.

This training course is designed to prepare participants in implementing an information security management system (ISMS) based on ISO/IEC 27001. It aims to provide a comprehensive understanding of the best practices of an ISMS and a framework for its continual management and improvement.

After attending the training course, you can take the exam. If you successfully pass it, you can apply for a “PECB Certified ISO/IEC 27001 Lead Implementer” credential, which demonstrates your ability and practical knowledge to implement an ISMS based on the requirements of ISO/IEC 27001.

Who Can Attend?

• Project managers and consultants involved in and concerned with the implementation of an ISMS
• Expert advisors seeking to master the implementation of an ISMS
• Individuals responsible for ensuring conformity to information security requirements within an organization
• Members of an ISMS implementation team

General information

• Certification fees are included in the exam price
• Training material containing over 450 pages of information and practical examples will be distributed
• A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued
• In case of exam failure, you can retake the exam within 12 months free of charge

Educational approach

• This training course contains essay-type exercises, multiple-choice quizzes, examples, and best practices used in the implementation of an ISMS.
• The participants are encouraged to communicate with each other and engage in discussions when completing quizzes and exercises.
• The exercises are based on a case study.
• The structure of the quizzes is similar to that of the certification exam.

Learning objectives

This training course will help you:

• Gain a comprehensive understanding of the concepts, approaches, methods, and techniques used for the implementation and effective management of an ISMS
• Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
• Understand the operation of an information security management system and its processes based on ISO/IEC 27001
• Learn how to interpret and implement the requirements of ISO/IEC 27001 in the specific context of an organization
• Acquire the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an ISMS

Audience

This course is designed for all employees seeking a practical grasp of Compliance and effective Risk Management.

Course Format

The training utilizes a blended methodology that incorporates:

• Facilitated discussions
• Slide-based presentations
• Case studies
• Real-world examples

Course Objectives

Upon completion of this course, participants will be able to:

Gain a robust understanding of the core aspects of Compliance, including national and international initiatives aimed at managing related risks.

Articulate how organizations and their teams can establish an effective Compliance Risk Management Framework.

Clarify the responsibilities of the Compliance Officer and the Money Laundering Reporting Officer, and comprehend how these roles are integrated within a business structure.

Identify critical risk areas in Financial Crime, with a specific focus on international operations, offshore centers, and high-net-worth clients.

This instructor-led, live training in Sao Paulo (available online or onsite) is aimed at system administrators who wish to use Okta for identity and access management.

By the end of this training, participants will be able to:

• Configure, integrate, and manage Okta.
• Integrate Okta into an existing application.
• Implement security with multi-factor authentication.

OpenLDAP is open-source software used to implement the LDAP (Lightweight Directory Access Protocol), which allows for the management and access to information directories. It is a popular directory server that can be used to store and share data about users, groups, network resources, and other objects in the network.

This instructor-led, live training in Sao Paulo (online or onsite) is designed for professionals who wish to conduct research on third parties while safeguarding their own privacy.

Upon completion of this training, participants will be able to:

• Install and configure advanced tools for conducting OSINT.
• Employ advanced techniques to collect publicly available data relevant to investigations.
• Eefficiently analyze large volumes of data.
• Generate intelligence reports based on findings.
• Leverage AI tools for facial recognition and sentiment analysis.
• Develop a strategy to define objectives and focus efforts on the most relevant and actionable data.

This course on Open Source Intelligence (OSINT) equips participants with the skills to efficiently and effectively locate critical intelligence across the Internet and the World Wide Web. The program is highly practical, giving attendees ample opportunity to explore and comprehend the hundreds of tools and websites at their disposal.
Building on foundational knowledge, the next level delves into the in-depth use of advanced tools essential for covert internet investigations and intelligence gathering. This hands-on approach ensures delegates have sufficient time to master the tools and resources covered.

This instructor-led, live Payment Card Industry Professional training in Sao Paulo (online or onsite) grants an individual qualification for industry practitioners seeking to demonstrate their professional expertise and understanding of the PCI Data Security Standard (PCI DSS).

Upon completion of this training, participants will be able to:

• Grasp the payment process and the PCI standards designed to safeguard it.
• Comprehend the roles and responsibilities of entities within the payment industry.
• Gain deep insight into and understanding of the 12 PCI DSS requirements.
• Demonstrate knowledge of PCI DSS and its application to organizations involved in the transaction process.

This instructor-led live training in Sao Paulo (online or onsite) is designed for security engineers who wish to use IBM QRadar SIEM to address pressing security use cases.

By the end of this training, participants will be able to:

• Gain visibility into enterprise data across on-premise and cloud environments.
• Automate security intelligence to hunt threats and contain risks.
• Detect, identify, and prioritize threats.

This Course in Sao Paulo aims to assist with the following:

1. Help Developers master the techniques of writing Secure Code
2. Help Software Testers verify the security of applications before publishing to the production environment
3. Help Software Architects understand the risks surrounding applications
4. Help Team Leaders establish security baselines for developers
5. Help Web Masters configure Servers to avoid misconfigurations

This course delves into secure coding principles and practices for Java, utilizing the testing methodologies of the Open Web Application Security Project (OWASP). The Open Web Application Security Project is an online community that provides freely available articles, methodologies, documentation, tools, and technologies focused on web application security.

This course explores secure coding concepts and principles for ASP.NET, guided by the Open Web Application Security Project (OWASP) testing methodology. OWASP is an online community that develops freely available articles, methodologies, documentation, tools, and technologies focused on web application security.

The course examines the security features of the .NET Framework and demonstrates how to secure web applications.