Course Overview

When IT Security Management practices are reactive and ad hoc in nature, IT Leadership cannot provide reasonable assurance to Senior Leadership that information is secure and IT risks are managed. The IT Audit and Security Baseline process enables organizations to identify weaknesses in security controls, so that they can be appropriately addressed, and monitored over time.

This hands-on workshop will teach participants the skills needed to establish an IT Audit and Security Baseline. Participants will learn how to identify poorly secured operating systems, databases and wireless, dial-up and Internet vulnerabilities. Participants will complete a series of simulations and exercises designed to build the knowledge to effectively use available tools. These tools identify critical security issues in the enterprise-wide network.

Participants are required to have a network-enabled Win2K/XP/Vista laptop with administrative rights to both the operating system and anti-virus software (to create a directory exempt from anti-virus scanning), an office application with word processing and spreadsheet capabilities (i.e. MS Word and Excel), and a CD-ROM drive.

Audience

• ITStaff

• ITLeaders

• Internal Auditors

Objectives

• Understand how to plan an IT audit and communicate effectively to stakeholder groups, including the IT department and senior leadership
• Identify, test, and document security controls for network devices, wireless networks, Windows envirnoments, Internet connections and databases
• Evaluating and reporting audit results
• Identifying solutions
• Communicating results to stakeholders

Examination And Certification

• Not applicable

Pre-Requisites

• Knowledge and understanding of information security architecture and technology concepts is beneficial. 

Location

Calgary Board of Education
Education Centre, Room T528
1221 - 8 Street SW
Calgary, AB T2R 0L4