Intro to IT Security for Internal Audit - ESP-A-008
- Track: Management.
- Level: Awareness level - Provides a basic understanding of IT security responsibilities relative to a particular role
- Overview
This course is aimed at Internal Audit Departments (IA) or Heads of Function, giving them an overall view of Security within the areas that fall within the audit function, the course is presented in a non-technical context as a fundamental introduction to IT security. This course forms a part of an overall 4 part Training programme for the IA function—from introduction to development of Security related IA questions to training of the IA team in security aspects in order to fully understand the basic areas covered under the recognised ISO 27001 and other related ISACA and CISM certifications.
- Outline
· Security Terms / Concepts & Overview
· Case Studies examined with relation to Internal & External Security Incidents
· Implications of Internet Access
· Primary Personal IT Security Points
· Incident Response
· Legal Issues
- This course is suitable for
Those responsible for the auditing of IT systems and processes in relation to Security.
- Course duration
- 1 Day
- Course cost
On application. This includes courseware, refreshments and lunch on the day.
- Course dates
- Friday 13 March 2009
Ireland - Dublin - Tuesday 7 December 2010
Ireland - Dublin 
.- Course location
On-Site / Espion Training Center
- Content
Unit 1: Security Terms / Concepts & Overview
· Information Security Defined
· Why Care? The need for Information Security within the Organisation
· The Information Security Policy and its Importance
· Finding the Point - What is Driving IT and what are you trying to protect?
· The Threats – Internal & External Security Incidents.Unit 2: Case Studies – External & Internal Attacks
Unit 3: Implications of Internet Access
· How should an Organisation approach security?Unit 4: Primary Personal IT Security Points
· Anti-Virus
· Asset Management
· Physical Security
· Contingency PlanningUnit 5: Incident Response
· Detecting an Incident
· Types of Incidents
· Who Does it?
· The Forensic Response Process
· Validate the Incident
· Is there a need for Formal Analysis?
· Identifying Potential Evidence
· Where to look for EvidenceUnit 6: Legal Issues
· Irish Legislation
· Who is responsible for Compliance?
· Confidentiality
· Criminal Damages Act & Copyright