SecuRetain - Cybersecurity Certification Online | Data Privacy Ransomware Certification

Access Control Awareness, Privileged Access Management Bundle

ACPAM Bundle Course Details

Bundle 1

Access control is an important security issue for businesses of all sizes. From the largest corporations employing specialized security controls to the salesperson on a service call opening their smartphone with a thumbprint, everyone encounters access control at some time during their workday.

Part I of the PAM course provides an overview of the privileges, how are they created, granted, etc. and the benefits of privileged access management. You will learn about privileged accounts, the types of privileged accounts, the privileged service accounts, privilege related risks, and challenges.

Access control prevents unauthorized access, records authorized access, protects the company from physical loss, and protects employees and customers from outside threats.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The course will provide employees, security, risk management, compliance, audit, and management personnel with the skills and techniques necessary to embed critical thinking skills in all aspects of access control security. The tools and techniques shared can be implemented in the access management process.

Part II of the PAM course contains thorough knowledge about the privileged account security controls, PAM solution partner considerations, how to baseline the PAM, and how to manage ongoing improvements.

The course learnings include critical questions to answer when you start the PAM program, third-party PAM access requirements, insider threat considerations, and more. The course enhances your knowledge in protecting privileged accounts and privilege access management best practices.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Part III of the PAM course contains thorough knowledge about the best practices for PAM management and PAM Implementation. You will study the concept of PAM as an implementation goal with a long-term view of security. The course enhances your PAM implementation knowledge along with education about the four pillars of successful PAM.

This interactive training course will ensure professionals and practitioners at all levels understand their roles and responsibilities, new developments, resources, and hallmarks of an effective compliance program. In this course, you will be asked to read through lessons, participate in learning activities, and partake in knowledge checks designed to reinforce learning, followed by the end of the course final assessment

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

In Phishing Awareness Part I, you will learn about social engineering attacks, types of attacks, attacks techniques, and telltale signs of phishing attacks providing employees with deep knowledge of social engineering attacks. The course is designed for the organizations that need to comply with the regulatory requirements, support phishing awareness campaigns, and educate employees about the impact of social engineering attacks.

In Part II of Phishing Awareness, the course is designed for the organizations that need to comply with the regulatory requirements, support phishing awareness campaigns, and educate employees about the impact of social engineering attacks, especially those having exposure to private data, financial data, highly sensitive, and confidential data.

BCDR Bundle

Bundle Course Details

Bundle 1

Business Continuity Planning (BCP) is the way an organization can prepare for and aid in Disaster Recovery (DR).

This Business Continuity Planning and Disaster Recovery certification course will provide every employee in the organization with the basic knowledge about disasters, risks covered by DR, use cases, challenges, DR Plan, etc.

A (reportable) breach is the unauthorized acquisition, access, use, or disclosure of sensitive/PII/PHI information in a manner not permitted by law or regulation and which compromises the security and privacy.

The course is designed to ensure employees understand the importance of acting quickly, make sure they are aware of the basic notification rule requirements, and the penalties for failure to comply.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The series BCP/DR Part I to BCP/DR Part V help learners understand a variety of topics in BCP and DR such as introduction to DR, the concept of disasters, introduction to BCP, DR processing plans, risk management techniques, facility protection during the DR period, data/system recovery, incident response and public service effect in the disaster recovery plan, disaster communication, etc.

The advanced course trains employees on the next steps instead of panicking. The training will educate employees to understand their roles and do’s and don’ts once the breach occurs.

The course also educates employees on the process of breach communication internal to the organization and very importantly communicating with outsiders.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

DR Part III & IV course explains the backup and recovery strategy development considerations, best practices for backup, different methods of backup, recovery methods, etc. The course includes knowledge questions as users progress through the training and final test.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

Disaster Recovery Part V course explains the cloud-based recovery methods and options: Bare Metal Recovery (BMR), Physical-to-virtual (P2V)Recovery, and Virtual-to-virtual (V2V) Recovery. The course details the benefits of cloud-based recovery and how to build the cloud-based DR plan. The course includes knowledge questions as users progress through the training and final test.

Cybersecurity Best Practices for Startups and Small Businesses Bundle

CBPS Bundle Course Details

Bundle 1

In Phishing Awareness Part I, you will learn about social engineering attacks, types of attacks, attacks techniques, and telltale signs of phishing attacks providing employees with deep knowledge of social engineering attacks.

The course is designed for the organizations that need to comply with the regulatory requirements, support phishing awareness campaigns, and educate employees about the impact of social engineering attacks, especially those having exposure to private data, financial data, highly sensitive, and confidential data.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The two most common ways that malware accesses your system are the Internet and email. There are many forms of malware, including viruses, exploits, adware, Trojan, worms, ransomware, and spyware. Just visiting a malicious website and viewing an infected page and/or banner ad can result in a drive-by malware download. All it takes is for one unsuspecting person to create an opening, and malware can infect an entire network.

The course is designed to educate employees to understand how malware can infect your device, how you can avoid malware, and what action you need to take when you get infected by malware.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

In Part II of Phishing Awareness, you will learn about different types of phishing attacks, techniques in discovering attacks, characteristics of phishing emails, etc. providing employees with very deep knowledge in responding to the growing amount of phishing emails. The course is designed for the organizations that need to comply with the regulatory requirements, support phishing awareness campaigns, and educate employees about the impact of social engineering attacks, especially those having exposure to private data, financial data, highly sensitive, and confidential data.

Cybersecurity Maturity Model Certification Bundle

CMMC Bundle Course Details

Bundle 1

The cyber actors continue to target the DIB sector and the Department of Defense (DoD) supply chain for intellectual property and unclassified information.

Part I of the course learnings include knowledge about NIST SP 800-171 Controls, Federal Acquisition Regulation (FAR) Clause 52.204.21 for protecting Federal Contract Information (FCI), Defense Federal Acquisition Regulation Supplement (DFARS) Clause 252.204-7012 for safeguarding Controlled Unclassified Information (CUI) and NIST SP 800-171 Protecting Controlled Unclassified Information in Non-Federal Systems and Organizations.

The course starts with the details about the CMMC model , how the model works, five process maturity levels, and five technical practices. The course learnings include knowledge about the CMMC capabilities, CMMC level 2 and level 3 practices beyond NIST 800-171, CMMC implementation, and scoring methodology.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The course details how the CMMC - Domains, Capabilities, Practices, and Processes - model works. The course learnings include preparing for CMMC assessment and understanding of CMMC specific controls over and above NIST 800-171controls. You will study CMMC level 4 and 5 requirements.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

You will learn to interpret the NIST SP 800-171 controls and apply the control guidance in gap analysis and remediation. The course includes deep dive to learn about Access Control, Awareness, and Training. This interactive training course will ensure professionals and practitioners at all levels understand their roles and responsibilities, new developments, resources, and hallmarks of an effective compliance program.

The course includes deep dive to learn about the Audit and Accounting Controls, Configuration Management controls, Identification &Authentication controls, Maintenance controls, and Media Protection Controls.

The course includes deep dive to learn about the Personnel Security, Physical Protection, Risk Management, Security Assessment, System & Communications Protection and System& Information Integrity controls.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

Disaster Recovery Part V course explains the cloud-based recovery methods and options: Bare Metal Recovery (BMR), Physical-to-virtual (P2V)Recovery, and Virtual-to-virtual (V2V) Recovery. The course details the benefits of cloud-based recovery and how to build the cloud-based DR plan. The course includes knowledge questions as users progress through the training and final test.

FedRAMP – NIST - FFIEC Bundle

FedRAMP Course Details

Bundle 1

The Federal Risk and Authorization Management Program (FedRAMP) is a U.S. government program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud service providers (CSPs). A CSP must have a FedRAMP Authority to Operate (ATO) to provide services to the federal as well as state agencies.

National Institute of Standards and Technology (NIST) is responsible for measurement science, standards, and technology in a way that promotes safety and collaboration for industry and government alike.

The NIST training outlines how implementing a security program based on the CSF framework can help organizations mitigate these issues. The framework core contains cybersecurity activities and informative references that are organized around particular functions.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The FedRAMP Program Management Office (PMO) mission is to promote the adoption of secure cloud services across the Federal Government.

National Institute of Standards and Technology (NIST) is responsible for measurement science, standards, and technology in a way that promotes safety and collaboration for industry and government alike. In this course, you will learn to apply the principles of the NIST Cybersecurity Framework (NIST CSF) to your organization.

The FFIEC Cybersecurity training ensures personnel has the necessary knowledge and skills to support security awareness and strengthen compliance. Also, management's behavior and priorities heavily influence employee awareness and policy compliance, so training and the commitment to security should start with management.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

NIST CSF helps build and augment a security program that equips the enterprise to keep pace with evolving threats and technologies. The NIST training outlines how implementing a security program based on the CSF framework can help organizations mitigate these issues. The framework core contains cybersecurity activities and informative references that are organized around particular functions.

The areas of cyber importance include Risk Management and Oversight, Threat Intelligence and Collaboration, Cybersecurity Controls, External Dependency Management, and Cyber Incident Management and Resilience. The FFIEC Cybersecurity Part II ensures personnel has the necessary knowledge and skills to implement FFIEC principles and perform maturity assessments with the help of a detailed case study.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

The users will learn about FedRAMP history, program governance, and administration, Office of Management and Budget (OMB) responsibilities, benefits of the program, how to implement information security controls (NIST SP 800-53) using a federal risk-based (NIST SP 800-37) approach, FedRAMP certification, steps to become FedRAMP compliant, FedRAMP standard operating procedure, initial review SOP/checklists, detailed review checklists, review and approve the procedure, an authorization process, FedRAMP Security Assessment Framework, NIST Special Publications Overview, Implementing NIST 800-53, NIST Special Publications Explained, etc.

Protecting systems, applications, and data in the cloud presents a new set of challenges for organizations to overcome. The cloud security training provides a comprehensive review of the knowledge required for understanding cloud computing and its information security risks and mitigation strategies.

Fraud Management Bundle

Fraud Bundle Course Details

Bundle 1

The Association of Certified Fraud Examiners (ACFE) published the results of the survey in its 2018 Report to the Nations on Occupational Fraud & Abuse where Organizations around the world lose an estimated 5% of their annual revenues to fraud. The organization needs to create an organizational culture and structure conducive to fraud risk management.

Internal fraud is an illegal act of employee against the company, and external fraud is perpetrated against the company by customers.

The course is designed to ensure employees understand fraud risk management basics, how to develop a fraud risk management program and fraud risk governance. The course is Part II in the ten-part series of fraud management courses designed to educate employees, managers, and management.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The course is designed to ensure employees understand the fraud risk assessment framework, how to execute fraud risk assessment, implement anti-fraud strategy, and features of the whistleblower program.

Culture affects the speed and flexibility with which organizations can adapt to changes and opportunities. In an organization, values and cultural leadership must come from the top. The role of the board and senior management is critical in setting the right culture. Senior management also needs a mechanism for measuring and monitoring a firm’s culture. The course is one of the important lessons in fraud management.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

It is difficult to understand the state of mind of a fraudster when he commits fraud. The course explains the Fraud Triangle and other fraud management tools: Fraud Diamond and Fraud 10-80-10 Rule. The course contains detailed knowledge of fraud classification categories, subcategories, fraud schemes, and methods used by perpetrators. The course is dedicated to enhancing the knowledge about fraud schemes and fraud tree.

The course Fraud Management Part VI A include case studies to explain the fraud under each classification, category, subcategory, and fraud schemes within Fraud Tree. The elaborate examples of fraud along with the knowledge of fraud prevention techniques for each fraud scheme provide the learner with very detailed knowledge to implement the fraud prevention programs.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

The course Fraud Management Part VIA and VI B include case studies to explain the fraud under each classification, category, subcategory, and fraud schemes within Fraud Tree.

The course Fraud Part VII will help you understand the fraud perpetrator characteristics, how to identify fraud in an organization, what are the red flags, how to identify them.

The course Fraud Part VIII includes detailed case studies and prevention techniques for each fraud area of Asset Misappropriation described in the fraud triangle: Theft of Cash on Hand, Theft of Cash Receipts,

Healthcare Bundle

Healthcare Bundle Course Details

Bundle 1

HITRUST Alliance is composed of leaders from the healthcare industry in the pursuit of a more coherent approach to healthcare security.

The HITRUST Foundation Part I course is designed to ensure employees understand the importance of HITRUST and fulfill the HITRUST training requirements. The series of HITRUST courses are useful for compliance, cybersecurity, information technology, and audit professionals to enhance security and compliance skills.

In Phishing Awareness Part I, you will learn about social engineering attacks, types of attacks, attacks techniques, and telltale signs of phishing attacks providing employees with deep knowledge of social engineering attacks.

The course is designed for the organizations that need to comply with the regulatory requirements, support phishing awareness campaigns, and educate employees about the impact of social engineering attacks

Bundle 2

Awareness – Refer to Awareness Bundle 1

HIPAA (Health Insurance Portability and Accountability Act) is a 1996 U. S. law that provides privacy standards to protect patients’ medical records and other health information provided to health plans, doctors, hospitals, and other health care providers.

The HIPAA compliance training is designed for the organizations that must comply with HIPAA requirements.

The two most common ways that malware accesses your system are the Internet and email. There are many forms of malware, including viruses, exploits, adware, Trojan, worms, ransomware, and spyware.

The course is designed to educate employees to understand how malware can infect your device, how you can avoid malware, and what action you need to take when you get infected by malware.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

The HITRUST Foundation Part II course is detailed guidance for the organization in the right scoping, selection of risk factor-based controls level, correctly applying HITRUST scoring, planning for certification, and certification.

The HITRUST Implementation Part II course is designed to provide the information to the management decision making and cost management by right-sizing the project and right implementation. The course is designed to ensure employees understand the importance of HITRUST and fulfill the HITRUST training requirements. The series of HITRUST courses are useful for compliance, cybersecurity, information technology, and audit professionals to enhance security and compliance skills.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

In Part II of Phishing Awareness, the course is designed for the organizations that need to comply with the regulatory requirements, support phishing awareness campaigns, and educate employees about the impact of social engineering attacks, especially those having exposure to private data, financial data, highly sensitive, and confidential data.

PCI DSS is meant to protect the cardholders (credit and debit) data to minimize or eliminate data breaches and other security incidents. Payment Card Industry (PCI) Awareness training is for employees working with the organizations that must comply with PCI Data Security Standard (PCI DSS) as well as anyone interested in learning more about PCI. The awareness course is designed to help employees recognize and avoid everyday security threats while ensuring that sensitive payment card data is continuously secure.

Incident Management/Problem Mgt/Breach Management Bundle

Incident Bundle Course Details

Bundle 1

Incident management (IM) is a key component of any business resiliency program.The employees will learn key concepts, understand different terminologies, etc. The course is designed to ensure employees understand the importance of acting quickly and to make sure they are aware of the basic requirements.

A (reportable) breach is the unauthorized acquisition, access, use, or disclosure of sensitive/PII/PHI information in a manner not permitted by law or regulation and which compromises the security and privacy.

The course is designed to ensure employees understand the importance of acting quickly, make sure they are aware of the basic notification rule requirements, and the penalties for failure to comply.

Bundle 2

Awareness – Refer to Awareness Bundle 1

Part II of the course will enhance your understanding of the incident management process. It starts with identifying incidents, critical success factors, and key performance indicators specific to IM.

The objective of incident management is to restore the service as quickly as possible while problem management deals with solving the underlying root cause of one or more incidents.

The Problem Management Awareness course will enable you to gain and apply the skills and techniques to your own organization to establish problem management best practices. You will learn when and how to implement a problem control process, understand the workarounds, develop policy and procedures, and define critical success factors as well as key performance indicators.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

The advanced course trains employees on the next steps instead of panicking. The training will educate employees to understand their roles and do’s and don’ts once the breach occurs.

The course also educates employees on the process of breach communication internal to the organization and very importantly communicating with outsiders.

The framework design is the key for organizations to move from their current state to their target state with the ability to identify gaps and prioritize gaps based on risk assessment.

The training explains how implementing a security program based on the framework can help organizations mitigate the security risk and consider the appropriate level of rigor for their cybersecurity program.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

Part III is for all professionals and practitioners to help them understand their roles and provides advanced knowledge in building a Cybersecurity Incident Response Team (CSIRT). The program is thorough about building a CSIRT, escalation, and adapting the CSIRT for different types of incidents. The training is supported by charts and flow diagrams along with detailed information on roles and responsibilities. 5.The course will train you on establishing problem management process roles and responsibilities, step by step approach in implementing key processes, defining process inputs/outputs, and reporting. You will also learn about drivers/inputs that trigger the problem management process.

ISMS-ISO-SOX Bundle

ISMS Bundle Course Details

Bundle 1

Information is an ASSET which, like other important business assets, has VALUE to an organization and consequently needs to be SUITABLY protected.

With the General Data Protection Regulation (GDPR) and ISO 27701 Privacy Information Management System, the European Union has set the rules and become the focal point of the global dialogue on individual data privacy. EU law protects all personal data, regardless of who collects it or how it is processed.

The ISO/IEC 27701:2019 standard is the first international privacy standard, which outlines the requirements for implementing a Privacy Information Management System (PIMS) to govern personal data, called Personal Identifiable Information (PII) in ISO 27701.

Part I of the ISO 27701 course starts with an introduction to ISO 27701 and underlying fundamental concepts. The course learnings include knowledge about driving factors, the need for ISO 27701, the relationship between various ISO standards e.g., ISO 27701, ISO 27001, and ISO 27002, controllers, processors, and comparison with GDPR.

Bundle 2

Awareness – Refer to Awareness Bundle 1

An ISMS is that part of the overall management system, based on a business risk approach, to establish, implement, operate, monitor, review, maintain and improve information security. ISO 27001 is the internationally recognized best practice framework for an Information Security Management System (ISMS). ISO/IEC 27001 is the only auditable international standard which defines the requirements for an Information Security Management System (ISMS).

Part II of the ISO 27701 course contains thorough knowledge about the structure of the ISO 27701 standard and control requirements.

The course learnings include knowledge about implementing ISO 27701, the importance of Annexure F, ISO 27701control specific guidance, and how to interpret the guidance.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

The training explains how implementing a security program based on the framework can help organizations mitigate the security risk and consider the appropriate level of rigor for their cybersecurity program. It explains employees on how their organization can move from their current state to their target state with the ability to identify gaps and prioritize gaps based on risk assessment. The course includes a security framework knowledge test as users progress through the training.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

ITGC, Process Controls, Security Framework Bundle

ITGC Bundle Course Details

Bundle 1

The course provides a detailed understanding of the COSO components, objectives, entity-level consideration, financial reporting assertions, use COBIT, ISO 27000, ITIL for SOX compliance, and more. The course content is precise and to the point with a focus on knowledge application and practical considerations.

The course ensures employees understand the importance of their role in a public company and comply with the regulatory requirements by implementing proper security controls to ensure that financial data is accurate and protected against loss.

Business Process Management (BPM) is a systematic approach to make an organization's processes more efficient and dynamic to meet the business's changing needs. Business process improvement is a strategic planning initiative to make the process more meaningful, efficient and contribute to overall business growth.

The learning begins with understanding the business process, business process lifecycle, and study of essential attributes of an ideal business process. The thorough knowledge of business process best practices, self-assessment, process mapping, SIPOC diagram, process types, and RACI matrix is essential for process control and risk management.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The course ITGC Part II is designed to ensure employees understand the importance of their role in a public company and comply with the regulatory requirements by implementing correct security controls to ensure that financial data is accurate and protected against loss. You will learn about evaluating and auditing IT general controls.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

In ITGC Part III of the course you will learn about the Information Technology Governance considerations in SOX compliance and SOX requirements for application change controls, data backup and recovery, systems development life cycle, and outsourcing financial applications.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

Part IV of the course starts with an overview of a business process, risk and risk taxonomy. The course learnings include knowledge about the basic steps for risk management, enterprise risk management components, causes for the failure of enterprise risk management framework, risk management policy, and many more.

The training explains how implementing a security program based on the framework can help organizations mitigate the security risk and consider the appropriate level of rigor for their cybersecurity program. It explains to employees how their organization can move from their current state to their target state with the ability to identify the gap and prioritize gaps based on risk assessment.

The Risk assessment training provides your employees with competence in risk management vital to protecting your institution and achieving compliance. The course provides in-depth knowledge of risk management concepts and fundamentals. The course improves risk awareness, promotes an open risk culture, and inclusion of risk in decision-making process.

Onboarding Bundle 1

Onboarding Bundle 1 Course Details

Bundle 1

This interactive training course will ensure professionals and practitioners at all levels understand their roles and responsibilities, new developments, resources, and hallmarks of an effective compliance program. In this course, you will be asked to read through lessons, participate in learning activities, and partake in knowledge checks designed to reinforce learning, followed by the end of the course final assessment.

Workplace safety and security is the responsibility of every employee. No workplace is immune to the threat of equipment theft, and loss of sensitive/private information, and intellectual property.

This course presents information on how employees can contribute to your organization's security. The course provides a comprehensive review of the knowledge required for understanding workplace security risks and actions that need to be taken by employees.

Bundle 2

Awareness – Refer to Awareness Bundle 1

This interactive training course will ensure professionals and practitioners at all levels understand their roles and responsibilities, new developments, resources, and hallmarks of an effective compliance program. In this course, you will be asked to read through lessons, participate in learning activities, and partake in knowledge checks designed to reinforce learning, followed by the end of the course final assessment.

Facility and Workplace Security Awareness Part II presents multiple use cases and practical examples to illustrate the workplace security challenges. The course provides a comprehensive review of the knowledge required for understanding workplace security risks and actions needs to be taken by employees.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

The objective of an effective Cyber Security and Privacy Awareness Training program is to empower employees to be proactive and aware of cybersecurity threats. The course includes cybersecurity and privacy knowledge test as users progress through the training. The training is designed to protect and preserve the confidentiality, integrity, and availability of information owned by or in the care of the corporation.

In Phishing Awareness Part I, you will learn about social engineering attacks, types of attacks, attacks techniques, and telltale signs of phishing attacks providing employees with deep knowledge of social engineering attacks. The course is designed for the organizations that need to comply with the regulatory requirements, support phishing awareness campaigns, and educate employees about the impact of social engineering attacks

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

In Part II of Phishing Awareness, the course is designed for the organizations that need to comply with the regulatory requirements, support phishing awareness campaigns, and educate employees about the impact of social engineering attacks, especially those having exposure to private data, financial data, highly sensitive, and confidential data.

Onboarding Bundle 2

Onboarding Bundle 2 Course Details

Bundle 1

The objective of an effective Cyber Security and Privacy Awareness Training program is to empower employees to be proactive and aware of cybersecurity threats. The process starts with the training of new employees, and it is an important opportunity to instill a security mindset into all roles early on.

The course includes cybersecurity and privacy knowledge test as users progress through the training. Cyber Security is the body of technologies, processes, and practices designed to protect networks, computers, programs, and data from attack, damage, or unauthorized access.

The training is designed to protect and preserve the confidentiality, integrity, and availability of information owned by or in the care of the corporation.

The course is intended to drive a culture of compliance from the top down and demonstrate to regulators and examiners their dedication to a standardized risk-based approach for protecting against money laundering threats and financial crime risks. The course is useful for organizations to satisfy mandatory training requirements within certain industries.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The two most common ways that malware accesses your system are the Internet and email. Malware, or “malicious software,” is an umbrella term that describes any malicious program or code that is harmful to systems. There are many forms of malware, including viruses, exploits, adware, Trojan, worms, ransomware, and spyware. Just visiting a malicious website and viewing an infected page and/or banner ad can result in a drive-by malware download. All it takes is for one unsuspecting person to create an opening, and malware can infect an entire network.

The course is designed to educate employees to understand how malware can infect your device, how you can avoid malware, and what action you need to take when you get infected by malware.

The cloud security training provides a comprehensive review of the knowledge required for understanding cloud computing and its information security risks and mitigation strategies.

In this extremely competing world of cloud and complex offering, one faces unique security challenges on an almost day-to-day basis. The course is designed to pass on the extensive knowledge of the cloud computing concepts, cloud reference architecture, cloud computing security concepts, AWS and Azure Cloud security basics, etc.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

The U.S. Congress enacted the Foreign Corrupt Practices Act (FCPA) in 1977 in response to findings that companies had been making hundreds of millions of dollars of questionable payments to foreign government officials, politicians, and political parties. The purposes of this act are to halt the bribery of foreign officials and restore public confidence in the integrity of the American business system.

The head of the DOJ's Criminal Division recently described the agency's focus on FCPA enforcement and warned executives and employees of personal accountability for FCPA violations. This FCPA training course explains the major principles of U.S. anti-corruption laws, persons subject to FCPA, implications, consequences, etc. The course is based on the FCPA Resource Guide released by the DOJ and SEC. This interactive FCPA training course will ensure employees at all levels understand their roles and responsibilities in protecting your company from the risk of bribery and corruption. The section ‘Consequences of Non-Compliance’ will educate employees on the ‘do’s and don’ts of FCPA’.

This interactive FCPA training course will ensure professionals and practitioners at all levels understand their roles and responsibilities, new developments, FCPA resources, and hallmarks of an effective compliance program.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

Risk management is the responsibility of all employees within an organization aiming towards building a risk-aware and responsible culture. Risk is defined as the potential for loss or damage when a threat exploits a vulnerability. Risk management is more complex today than ever. A gap in risk awareness across the three lines of defense creates disconnects and delays in handling the risk issues.

The Risk assessment training provides your employees with competence in risk management vital to protecting your institution and achieving compliance. The course provides in-depth knowledge of risk management concepts and fundamentals. The course improves risk awareness, promotes an open risk culture, and inclusion of risk in decision-making process.

The training explains how implementing a security program based on the framework can help organizations mitigate the security risk and consider the appropriate level of rigor for their cybersecurity program. It explains to employees how their organization can move from their current state to their target state with the ability to identify the gap and prioritize gaps based on risk assessment.

Privacy Bundle

Privacy Bundle Course Details

Bundle 1

The data privacy certification courses intend to provide employees with an understanding of personal data and information, the background and principles of data protection.

The course includes cybersecurity and privacy knowledge test as users progress through the training. Cyber Security is the body of technologies, processes, and practices designed to protect networks, computers, programs, and data from attack, damage, or unauthorized access.

The training is designed to protect and preserve the confidentiality, integrity, and availability of information owned by or in the care of the corporation.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The course content in Part I is focused on understanding GDPR driving factors, PII data types, the concept of identifiable personal information, and GDPR basics. The study includes learning about GDPR principle, controller and processor definitions, roles and responsibilities and lawful basis of data processing.

A (reportable) breach is the unauthorized acquisition, access, use, or disclosure of sensitive/PII/PHI information in a manner not permitted by law or regulation and which compromises the security and privacy.

The course is designed to ensure employees understand the importance of acting quickly, make sure they are aware of the basic notification rule requirements, and the penalties for failure to comply.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

The data privacy courses provide all staff with a comprehensive overview of data privacy rules, policy, and legislation in the United States as well as EU Data protection. The protection of US residents’ personal data is regulated by laws enacted on both the national and the state level.

The GDPR applies to the process carried out by organizations operating within the EU. It also applies to organizations outside the EU that offer goods or services to individuals in the EU. The course content in Part II provides an understanding of the data subject rights, GDPR accountability and governance principles, and data protection officer role. It explains the very important concepts of privacy by design, code of conduct principle, and data protection impact assessment.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

The course content in Part III explains the Data Protection Officer roles and responsibilities, GDPR security principal requirements, exemptions rules, data breach communication rules, penalties for violation of GDPR requirements, use of data for law enforcement purposes, protection of children data, and 10 step compliance checklist.

The course content in Part IV walks you through the GDPR articles, ten steps compliance checklist, GDPR implementation approach, project planning, and key GDPR concepts such as data mapping, readiness assessment, gap assessment, data protection by default, and by design.

The advanced course trains employees on the next steps instead of panicking. The course also educates employees on the process of breach communication internal to the organization and very importantly communicating with outsiders.

Project Management Bundle

Project Management Bundle Course Details

Bundle 1

The U.S. Congress enacted the Foreign Corrupt Practices Act (FCPA) in 1977 in response to findings that companies had been making hundreds of millions of dollars of questionable payments to foreign government officials, politicians, and political parties. The purposes of this act are to halt the bribery of foreign officials and restore public confidence in the integrity of the American business system.

The head of the DOJ's Criminal Division recently described the agency's focus on FCPA enforcement and warned executives and employees of personal accountability for FCPA violations. This FCPA training course explains the major principles of U.S. anti-corruption laws, persons subject to FCPA, implications, consequences, etc.

This interactive FCPA training course will ensure employees at all levels understand their roles and responsibilities in protecting your company from the risk of bribery and corruption. The section ‘Consequences of Non-Compliance’ will educate employees on the ‘do’s and don’ts of FCPA’.

The course is based on the FCPA Resource Guide released by the DOJ and SEC.

Bundle 2

Awareness – Refer to Awareness Bundle 1

This awareness and professional development online course will provide an overview of the requirements imposed on those persons subject to the Anti-Money Laundering Law, including information relating to currency transaction reports, suspicious activity reports, and customer identification programs.

The course is intended to drive a culture of compliance from the top down and demonstrate to regulators and examiners their dedication to a standardized risk-based approach for protecting against money laundering threats and financial crime risks. The course is useful for organizations to satisfy mandatory training requirements within certain industries.

This FCPA training course explains the major principles of U.S. anti-corruption laws, persons subject to FCPA, implications, consequences, etc. This interactive FCPA training course will ensure professionals and practitioners at all levels understand their roles and responsibilities, new developments, FCPA resources, and hallmarks of an effective compliance program.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

This interactive training course will ensure professionals and practitioners at all levels understand their roles and responsibilities, new developments, resources, and hallmarks of an effective compliance program. In this course, you will be asked to read through lessons, participate in learning activities, and partake in knowledge checks designed to reinforce learning, followed by the end of the course final assessment.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

This interactive training course will ensure professionals and practitioners at all levels understand their roles and responsibilities, new developments, resources, and hallmarks of an effective compliance program. In this course, you will be asked to read through lessons, participate in learning activities, and partake in knowledge checks designed to reinforce learning, followed by the end of the course final assessment

This FCPA training series Part I to III explains the major principles of U.S. anti-corruption laws, persons subject to FCPA, implications, consequences, etc. This interactive FCPA training course will ensure professionals and practitioners at all levels understand their roles and responsibilities, new developments, FCPA resources, and hallmarks of an effective compliance program.

System & Organization Controls (SOC) Bundle

SOC Bundle Course Details

Bundle 1

SOC stands for “System and Organization Controls” and is the agreed upon control procedures set by the American Institute of Certified Public Accountants (AICPA).

The training will help organizations to have in-house skill and end to end knowledge in deciding the type of certification, type of documentation, type of skills and type of controls required to certify. Part I is about basic understanding of SOC1, SOC2 and SOC3.

Part II explains the SOC2 audit requirements, who can perform the audit, and applying relevant SSAE 18 standards.

You will learn about SOC 1, SOC 2, SOC 3, SOC 2 +, SOC for Cyber Security, SOC for Supply Chain, and SOC 2 + Additional Subject Matter Reports as well as the scope and use of these reports.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The Part III provides in-depth knowledge of Trust Service, Criteria, Common Criteria and Supplemental criteria. You will learn to select the Trust Service Criteria for your organization, understand the underlying expectations under each Trust Service Criteria and the importance of Security criteria and why it is mandatory.

Part IV provides practical implementation knowledge of Common Criteria and Supplemental Criteria. You will learn about Generally Accepted Privacy Principles (GAPP), what’s included in the SOC report, what’s included in Management Assertions, and Description of the System. You will also learn about the latest AICPA guidelines - Description Criteria 200 (DC 200).

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Part V will further enhance your skills in key areas of writing system description which includes system overview, infrastructure details, relevant aspects of controls, and complementary user-entity controls. You will learn to describe the control environment, risk assessment process, information communication systems, and control monitoring process.

Part VI educates the user about vendor due to diligence and use of SOC2 reports. You will learn how user organizations can adopt the SOC report, identify the relevant report user organization will need from a vendor, understand the report content and different types of SOC reports. You will learn to interpret and evaluate the SOC report.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

Part VII trains the learner on how to prepare SOC Trust Service Criteria Control Documentation and how to write corporate SOC controls using suggested controls for each service criteria and category. You will learn the real-life example of how to write the controls.

The cloud security training provides a comprehensive review of the knowledge required for understanding cloud computing and its information security risks and mitigation strategies.

The course is designed to pass on the extensive knowledge of the cloud computing concepts, cloud reference architecture, cloud computing security concepts, AWS and Azure etc.

Vulnerability Management, Prevention, Detection, and Recovery from Cyberattacks, Vendor Risk Management Bundle

Vulnerability Bundle Course Details

Bundle 1

Business Continuity Planning (BCP) is the way an organization can prepare for and aid in Disaster Recovery (DR).

This Business Continuity Planning and Disaster Recovery certification course will provide every employee in the organization with the basic knowledge about disasters, risks covered by DR, use cases, challenges, DR Plan, etc.

A (reportable) breach is the unauthorized acquisition, access, use, or disclosure of sensitive/PII/PHI information in a manner not permitted by law or regulation and which compromises the security and privacy.

The course is designed to ensure employees understand the importance of acting quickly, make sure they are aware of the basic notification rule requirements, and the penalties for failure to comply.

Bundle 2

Awareness – Refer to Awareness Bundle 1

The series BCP/DR Part I to BCP/DR Part V help learners understand a variety of topics in BCP and DR such as introduction to DR, the concept of disasters, introduction to BCP, DR processing plans, risk management techniques, facility protection during the DR period, data/system recovery, incident response and public service effect in the disaster recovery plan, disaster communication, etc.

The advanced course trains employees on the next steps instead of panicking. The training will educate employees to understand their roles and do’s and don’ts once the breach occurs.

The course also educates employees on the process of breach communication internal to the organization and very importantly communicating with outsiders.

Bundle 3

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

The use of third-party services has become a valuable business practice in virtually every industry these days. By outsourcing services, corporations can reduce costs and allow management to sharpen their focus on core business activities. The use of outsourced services introduces an element of risk as vendors could have access to sensitive customer data, which elevates the cybersecurity threat or vendor services can directly impact corporate objectives.

Vendor risk management (VRM) is a comprehensive plan for identifying and decreasing potential business uncertainties and legal liabilities. Increased regulatory focus on vendor management has placed a greater burden on institutions to build a compliant program. For e.g., FFIEC, GLBA 501(b), etc.The VRM course is in two parts. The part I provide the knowledge of the fundamentals of vendor risk assessment, factors driving risk assessment, introduction to third-party risk management frameworks, etc.

Bundle 4

Awareness – Refer to Awareness Bundle 1

Awareness + – Refer to Awareness + Bundle 2

Advanced – Refer to Advanced Bundle 3

The use of third-party services has become a valuable business practice in virtually every industry these days. The use of outsourced services introduces an element of risk as vendors could have access to sensitive customer data, which elevates the cybersecurity threat or vendor services can directly impact corporate objectives.

The organization should formulate explicit third-party risk management (TPRM) framework, including a clear definition of ownership and governance, standardized workflows, and articulation of risk appetite in respect of third parties, which aims at creating alignment among the internal stakeholders. The TPRM course is in two parts. Part II provides knowledge of the TPRM frameworks and how to build and implement a TPRM framework. The course includes knowledge test as users progress through the training.