Security Management Training in Belgrade

This instructor-led live training, available in Belgrade (online or onsite), is designed for intermediate-level IT auditors seeking to effectively incorporate AI tools into their audit practices.

Upon completion of this training, participants will be equipped to:

• Understand the fundamental concepts of artificial intelligence and their application within IT auditing contexts.
• Employ AI technologies, including machine learning, Natural Language Processing (NLP), and Robotic Process Automation (RPA), to enhance the efficiency, accuracy, and scope of audits.
• Conduct risk assessments using AI tools to facilitate continuous monitoring and proactive risk management.
• Incorporate AI into the planning, execution, and reporting phases of audits, thereby increasing the overall effectiveness of IT audit operations.

Encryption Key Management is the discipline of securely creating, storing, distributing, rotating, and retiring cryptographic keys to protect sensitive data and ensure regulatory compliance.

This instructor-led, live training (online or onsite) is aimed at intermediate-level IT and security professionals who wish to implement robust encryption key management practices and systems across enterprise environments.

By the end of this training, participants will be able to:

• Understand the lifecycle of encryption keys and best practices for their protection.
• Set up and manage key management systems (KMS) both on-prem and in the cloud.
• Implement access control and auditing for key usage.
• Comply with regulations and standards related to encryption key security.

Format of the Course

• Interactive lecture and discussion.
• Hands-on use of key management tools in lab environments.
• Guided exercises focused on secure key lifecycle implementation.

Course Customization Options

• To request a customized training for this course based on your infrastructure or compliance requirements, please contact us to arrange.

This instructor-led, live training in Belgrade (online or onsite) targets advanced-level security analysts who wish to enhance their skills in utilizing advanced Micro Focus ArcSight ESM capabilities to improve an organization's ability to detect, respond to, and mitigate cyber threats with greater precision and speed.

By the end of this training, participants will be able to:

• Optimize the use of Micro Focus ArcSight ESM to enhance monitoring and threat detection capabilities.
• Construct and manage advanced ArcSight variables to refine event streams for more precise analysis.
• Develop and implement ArcSight lists and rules for effective event correlation and alerting.
• Apply advanced correlation techniques to identify complex threat patterns and reduce false positives.

This instructor-led, live training in Belgrade (online or onsite) is aimed at beginner-level law enforcement officers who wish to gain a deeper understanding of human behavior, enhancing their skills in communication, empathy, conflict resolution, and overall effectiveness in their roles.

By the end of this training, participants will be able to:

• Have a deeper understanding of human psychology.
• Develop advanced communication and conflict resolution skills for more effective interaction with the public, colleagues, and in negotiation scenarios.
• Promote awareness and understanding of diverse cultural backgrounds, improving community policing and relations with various demographic groups.

This instructor-led, live training in Belgrade (online or onsite) is aimed at beginner-level security professionals who wish to gain the knowledge and skills necessary to adapt to the rapidly evolving digital landscape in the security industry.

By the end of this training, participants will be able to:

• Understanding Digital Transformation in security.
• Learn how digital solutions can improve security operations, efficiency, and effectiveness.
• Manage security-related data for informed decision-making.

This instructor-led, live training in Belgrade (online or on-site) is designed for security managers at the introductory level who wish to effectively adopt and utilize technology in their field.

By the end of this training, participants will be able to:

• Understand the evolution of technology in security.
• Learn how to effectively blend traditional security methods with modern technological solutions.
• Understand the basics of cybersecurity, risks associated with digital systems, and how to protect against cyber threats in the security industry.

This instructor-led, live training in Belgrade (online or onsite) is designed for beginner-level security managers and designers who aim to effectively plan, design, and implement security strategies that are cohesive, technologically advanced, and aligned with legal and ethical standards.

By the conclusion of this training, participants will be able to:

• Integrate security requirements into architectural and facility design processes.
• Evaluate threats and vulnerabilities to guide security planning efforts.
• Formulate comprehensive security plans that address diverse threat scenarios.
• Develop robust emergency response and crisis management protocols.

This instructor-led, live training in Belgrade (online or onsite) is designed for beginner-level security administrators who wish to deepen their understanding of security practices within an organization.

Upon completion of this training, participants will be capable of:

• Gaining a solid understanding of the fundamentals of security operations and administration.
• Identifying and mitigating a variety of security threats and vulnerabilities.
• Implementing and managing security solutions effectively.
• Comprehending the legal and ethical implications within security operations.
• Preparing for incident response and disaster recovery scenarios.

This instructor-led, live training in Belgrade (online or onsite) is aimed at advanced-level professionals who wish to gain a comprehensive understanding of fraud examination concepts and prepare for the Certified Fraud Examiner (CFE) exam.

By the end of this training, participants will be able to:

• Gain comprehensive knowledge of fraud examination principles and the fraud examination process.
• Learn to identify, investigate, and prevent various types of financial fraud schemes.
• Understand the legal environment related to fraud, including the legal elements of fraud, relevant laws, and regulations.
• Acquire practical skills in conducting fraud investigations, including evidence collection, interviewing techniques, and data analysis.
• Learn to design and implement effective fraud prevention and deterrence programs within organizations.
• Gain confidence and knowledge to successfully pass the Certified Fraud Examiner (CFE) exam.

This instructor-led, live training in Belgrade (online or onsite) is designed for advanced-level security managers who seek to gain the knowledge and skills required to excel in the certification exam and their roles as security management professionals.

By the end of this training, participants will be able to:

• Understand the five domains of ISSMP.
• Develop skills to manage an information security program.
• Learn to establish and maintain security governance.
• Gain insights into risk management, incident response, and continuity planning.
• Prepare effectively for the ISSMP certification exam.

This instructor-led, live training in Belgrade (online or onsite) is intended for IT professionals who wish to gain proficiency in using the CipherTrust Solution suite.

By the end of this training, participants will be able to:

• Understand the CipherTrust Solution and its basic functions.
• Evaluate device architecture and usage schemes.
• Manage CipherTrust product suite.

This instructor-led, live training in Belgrade (online or onsite) is aimed at security managers who wish to learn basic to intermediate-level CCTV security surveillance and management skills.

By the end of this training, participants will be able to:

• Familiarize themselves with the types of CCTV systems and know their benefits and features.
• Understand cabling and CCTV systems setup requirements.
• Install, configure, and manage CCTV systems.

Description:

Note: Please note that this revised CISM exam content outline applies to exams beginning on June 1, 2022.

The CISM® certification is the most prestigious and rigorous qualification available globally for Information Security Managers today. It offers a platform to join an exclusive peer network of professionals who are equipped to continuously learn and adapt to the expanding opportunities and challenges in Information Security Management.

Our CISM training methodology ensures comprehensive coverage of all four CISM domains, with a clear emphasis on building core concepts and solving ISACA-released CISM exam questions. This course provides intensive training and rigorous exam preparation for the ISACA’s Certified Information Security Manager (CISM®) Examination.

Our instructors encourage all participants to review the ISACA-released CISM QA&E (Questions, Answers, and Explanations) as part of their exam preparation. The QA&E is particularly effective in helping participants understand the style of ISACA questions, the approach to solving them, and aids in the rapid assimilation of CISM concepts during live classroom sessions.
All our trainers possess extensive experience in delivering CISM training. We are committed to thoroughly preparing you for the CISM examination.

Goal:

The primary objective is to help you pass your CISM examination on the first attempt.

Objectives:

• Apply the knowledge acquired in a practical manner that benefits your organization.
• Establish and maintain an information security governance framework to achieve your organization's goals and objectives.
• Manage information risk to an acceptable level to meet business and compliance requirements.
• Establish and maintain information security architectures (including people, processes, and technology).
• Integrate information security requirements into the contracts and activities of third parties and suppliers.
• Plan, establish, and manage the capability to detect, investigate, respond to, and recover from information security incidents to minimize business impact.

Target Audience:

• Security professionals with 3-5 years of front-line experience.
• Information security managers or individuals with management responsibilities.
• Information security staff and assurance providers who require an in-depth understanding of information security management, including: CISOs, CIOs, CSOs, privacy officers, risk managers, security auditors, compliance personnel, BCP/DR personnel, and executive and operational managers responsible for assurance functions.

This instructor-led, live training in Belgrade (online or onsite) is aimed at security professionals who wish to learn and improve how to handle security threats and perform security risk assessments.

By the end of this training, participants will be able to:

• Manage security systems and handle any hostile environment.
• Manage any security risks or threats.
• Learn how to conduct security risk assessments.

Open Source Software (OSS) Management involves overseeing the entire lifecycle of open-source components within an organization to ensure their use is secure, compliant, and efficient.

This instructor-led live training, available either online or onsite, targets intermediate-level IT professionals who aim to implement best practices for managing open-source software in enterprise and government settings.

Upon completing this training, participants will be equipped to:

• Implement robust OSS policies and governance frameworks.
• Utilize SBOM and SCA tools to identify, track, and manage open-source dependencies.
• Mitigate risks related to licensing issues and security vulnerabilities.
• Accelerate OSS adoption to maximize innovation and cost efficiency.

Course Format

• Interactive lectures and discussions.
• Case studies and scenario-based exercises.
• Hands-on demonstrations using OSS management tools.

Customization Options

• The course can be tailored to fit specific organizational OSS policies and toolchains. Please contact us to arrange this.

This instructor-led, live training in Belgrade (online or onsite) is tailored for intermediate-level cybersecurity professionals aiming to enhance their understanding of GRC frameworks and apply them to secure and compliant business operations.

By the end of this training, participants will be able to:

• Understand the key components of cybersecurity governance, risk, and compliance.
• Conduct risk assessments and develop risk mitigation strategies.
• Implement compliance measures and manage regulatory requirements.
• Develop and enforce security policies and procedures.

This instructor-led, live training in Belgrade (online or onsite) is designed for developers and individuals seeking to learn and apply OAuth to provide applications with secure delegated access.

By the end of this training, participants will be able to:

• Master the core principles of OAuth.
• Comprehend native applications and address their specific security challenges when using OAuth.
• Gain knowledge of and understand common OAuth protocol extensions.
• Connect with any OAuth authorization server.

This instructor-led, live training in Belgrade (online or onsite) is designed for intermediate-level system administrators seeking to learn how to use Siteminder to implement various authentication methods.

Upon completion of this training, participants will be able to:

• Grasp the core concepts of Siteminder and its pivotal role in authentication and access management.
• Configure and manage user authentication workflows using Siteminder.
• Deploy various authentication methods supported by Siteminder.
• Troubleshoot common issues related to Siteminder authentication.
• Integrate Siteminder with other identity providers to enable federated authentication.

Tackling money laundering requires a strong international focus. Compliance officers, AML officers, MLROs, KYC analysts, auditors, and managers must understand how to ensure adherence to Subsidiary 373.01, the Prevention of Money Laundering and Funding of Terrorism Regulations (PMLFTR).

Under the PMLFTR, all Subject Persons, including those operating within the regulated financial services sector, are obligated to appoint a Money Laundering Reporting Officer (MLRO).

This practical course provides you with the knowledge and essential guidance needed to address AML compliance within your organization, with particular attention to the regulatory framework in Malta.

Description:

Basel III represents a global regulatory framework governing bank capital adequacy, stress testing, and market liquidity risk. Initially established by the Basel Committee on Banking Supervision between 2010 and 2011, the implementation timeline for the Accord was extended until March 31, 2019. Basel III bolsters bank capital requirements by enhancing liquidity standards and reducing leverage.
Unlike its predecessors, Basel I and II, Basel III mandates distinct reserve levels for various deposit types and borrowing categories. Rather than replacing previous standards, it operates in conjunction with them. Navigating this complex and evolving regulatory environment can be challenging; our course and training programs are designed to help you anticipate and manage these changes and their effects on your institution. As an accredited training partner of the Basel Certification Institute, we guarantee that our training materials and content remain current and effective.

Objectives:

• Prepare participants for the Certified Basel Professional Examination.
• Develop practical strategies and techniques for defining, measuring, analyzing, improving, and controlling operational risk within banking organizations.

Target Audience:

• Board members with risk oversight responsibilities
• Chief Risk Officers (CROs) and Heads of Risk Management
• Risk Management team members
• Compliance, legal, and IT support staff
• Equity and Credit Analysts
• Portfolio Managers
• Rating Agency Analysts

Overview:

• Introduction to Basel norms and amendments to the Basel Accord (III)
• Regulations addressing market, credit, counterparty, and liquidity risk
• Stress testing for various risk measures, including formulation and delivery methods
• The anticipated impact of Basel III on the international banking industry, featuring practical application demonstrations
• The necessity for new Basel norms
• The Basel III norms
• Objectives of the Basel III norms
• Basel III implementation timeline

Who is it for:

Anyone with an interest in information security, whether as a career or for general business knowledge.

This certificate is relevant to anyone requiring an understanding of Information Security Management Principles as well as those with an interest in information security either as a potential career or as an additional part of their general business knowledge. It is very much a firm foundation on which other qualifications can be built or which provides a thorough general understanding to enable organisations to begin to ensure their information is protected appropriately.

What will I learn:

Candidates should be able to demonstrate:

• Knowledge of the concepts relating to information security management.
• Understanding of current national legislation and regulations which impact upon information security management.
• Awareness of current national and international standards, frameworks and organisations which facilitate the management of information security.
• Understanding of the current business and common technical environments in which information security management must operate.
• Knowledge of the categorisation, operation and effectiveness of controls of different types and characteristics.

Target Audience:

This course is designed for anyone interested in information security, whether they are considering it as a career path or seeking to enhance their general business acumen.

This certification is valuable for professionals who need a solid grasp of Information Security Management Principles, as well as those curious about entering the field of information security. It serves as a robust foundation for pursuing further qualifications and provides a comprehensive overview that helps organizations safeguard their information assets effectively.

Learning Outcomes:

Upon completion, candidates will be able to demonstrate:

• A clear understanding of the core concepts related to information security management.
• Insight into national legislation and regulations that influence information security management.
• Familiarity with prevailing national and international standards, frameworks, and organizations that support information security management.
• Comprehension of the business and technical environments in which information security management operates.
• Knowledge of how different types and characteristics of controls are categorized, operated, and evaluated for effectiveness.

Note: This is the four-day version of the course, which includes an extra day compared to the standard delivery to allow ample time for exam preparation and practice exercises.

Target Audience:

This course is designed for professionals involved in information security and information assurance disciplines.

Learning Outcomes:

Upon completion, candidates will be able to demonstrate:

• The significant business benefits derived from effective information risk management.
• The ability to articulate and apply information risk management terminology accurately.
• Competence in conducting threat and vulnerability assessments, business impact analyses, and risk assessments.
• A thorough understanding of control principles and risk treatment strategies.
• Skills to present findings in a format suitable for developing a risk treatment plan.
• Proficiency in using information classification schemes.

Description:

This four-day event (CGEIT training) serves as the definitive preparation for the exam, designed to ensure you pass the challenging CGEIT exam on your first attempt.
The CGEIT qualification is an internationally recognized symbol of excellence in IT governance, awarded by ISACA. It is intended for professionals responsible for managing IT governance or those with significant advisory or assurance responsibilities in this area.
Achieving CGEIT status will broaden your market recognition and enhance your influence at the executive level.

Objectives:

This seminar is designed to prepare delegates for the CGEIT examination by enabling them to supplement their existing knowledge and understanding, thereby ensuring they are better prepared to pass the exam as defined by ISACA.

Target Audience:

Our training course is designed for IT and business professionals who possess significant IT governance experience and are undertaking the CGEIT exam.

A comprehensive, hands-on 3-day course designed to equip participants with the essential knowledge and skills needed to manage information security, information assurance, or information risk management processes. The CISMP course is aligned with the latest national information assurance frameworks (IAMM), as well as ISO/IEC 27002 and 27001, which serve as the code of practice and standard for information security. This course is a CESG Certified Training (CCT) course.

The course follows the latest BCS syllabus and prepares delegates for the 2-hour multiple-choice BCS examination.

This qualification provides delegates with detailed knowledge of the concepts relating to information security; (confidentiality, integrity, availability, vulnerability, threats, risks and countermeasures), along with an understanding of current legislation and regulations which impact information security management. Award holders will be able to apply the practical principles covered throughout the course ensuring normal business processes become robust and more secure.

Learning Objectives

This COBIT 2019 Foundation course serves as an introduction to the COBIT 2019 framework, empowering you to understand how an integrated business framework for the governance and management of enterprise IT can be leveraged to achieve IT-business alignment, reduce costs, and boost productivity. The syllabus areas covered in this course include:

• Introduction to the new framework
• Key concepts and terminology
• Governance and framework principles
• Governance system and components
• Governance and management objectives
• Performance management
• Designing a customized governance system

This instructor-led live training in Belgrade (available online or on-site) is designed for compliance professionals in the payment services sector who wish to establish, implement, and enforce a compliance program within their organization.

By the end of this training, participants will be able to:

• Understand the rules established by government regulators for payment service providers.
• Formulate the internal policies and procedures required to satisfy government regulations.
• Implement a compliance program that adheres to relevant laws.
• Ensure that all corporate processes and procedures align with the compliance program.
• Protect the business's reputation while shielding it from potential lawsuits.

Physical security forms the foundation of network protection. Through this instructor-led, live training session in Belgrade, attendees will gain insights into the security vulnerabilities associated with computer server rooms and discover methods to enhance security via strategic practices, planning, and technological solutions.

Upon completion of this course, participants will be equipped to:

• Evaluate their organization's security risks specific to computer server rooms.
• Implement control and monitoring systems to limit physical access to critical infrastructure.
• Create tailored access policies for various personnel.
• Effectively convey security protocols to team members.

Description:

Cybersecurity expertise is highly sought after, as threats continue to challenge enterprises globally. The vast majority of professionals surveyed by ISACA acknowledge this reality and aim to pursue roles requiring cybersecurity knowledge.
To bridge this skills gap, ISACA has introduced the Cybersecurity Fundamentals Certificate, offering education and verification of competencies in this critical field.

Objectives:

With cybersecurity threats escalating and a global shortage of adequately skilled security professionals widening, ISACA's Cybersecurity Fundamentals Certificate program provides an effective solution for rapidly training entry-level staff. It ensures they acquire the necessary skills and knowledge to succeed in the cyber landscape.

Target Audience:

This certificate program also serves as one of the most effective methods for acquiring foundational cybersecurity knowledge and starting to develop skills in this essential domain.

This instructor-led, live training (online or onsite) is designed for enterprise leaders who aim to understand data sovereignty principles and develop compliant data management strategies.

By the end of this training, participants will be able to define data sovereignty, identify relevant laws, assess compliance risks, and implement governance frameworks for cross-border data management.

In this instructor-led, live course in Belgrade, participants will learn how to formulate an effective security strategy to address the challenges posed by DevOps security.

This course offers an expert introduction to the newly enacted Accessibility Law, equipping developers with the practical skills necessary to design, develop, and maintain fully accessible applications. Beginning with a contextual discussion on the law's importance and implications, the curriculum quickly transitions to hands-on coding practices, tools, and testing techniques to ensure compliance and inclusivity for users with disabilities.

Course Objective:

Equipping participants with a foundational grasp of GRC processes and capabilities, along with the necessary skills to effectively integrate governance, performance management, risk management, internal control, and compliance initiatives.

Course Summary:

• Key GRC terminology and definitions
• Fundamental principles of GRC
• Essential components, practices, and activities
• The relationship between GRC and other professional disciplines

This instructor-led, live training in Belgrade (online or onsite) is aimed at developers and administrators who wish to produce software and products that are HiTRUST compliant.

By the end of this training, participants will be able to:

• Grasp the fundamental concepts of the HiTrust CSF (Common Security Framework).
• Recognize the administrative and security control domains within the HITRUST CSF.
• Gain insights into the various assessment types and scoring methods used by HiTrust.
• Comprehend the certification procedure and specific requirements for achieving HiTrust compliance.
• Apply best practices and practical tips for successfully adopting the HiTrust approach.

Why participate?

The ISO/IEC 27001 Foundation training equips you with the fundamental knowledge required to implement and manage an Information Security Management System (ISMS) in accordance with ISO/IEC 27001. Throughout this course, you will gain a comprehensive understanding of the various ISMS components, such as ISMS policies, procedures, performance metrics, management commitment, internal auditing, management review, and the principle of continual improvement.

Upon successful completion of the course, you will be eligible to take the examination and apply for the “PECB Certified ISO/IEC 27001 Foundation” credential. This certificate validates your grasp of the essential methodologies, requirements, frameworks, and management approaches defined by the standard.

Target Audience

• Professionals engaged in Information Security Management
• Individuals aiming to acquire knowledge about the core processes of Information Security Management Systems (ISMS)
• Career seekers interested in Information Security Management

Training Methodology

• Lectures are enhanced with practical questions and real-world examples
• Practical exercises feature illustrative examples and interactive discussions
• Practice tests mirror the format and style of the Certification Exam

ISO/IEC 27001 Lead Auditor

The ISO/IEC 27001 Lead Auditor training program equips you with the essential expertise to conduct Information Security Management System (ISMS) audits by applying internationally recognized audit principles, procedures, and techniques.

Why should you attend?

Through this training course, you will gain the knowledge and skills required to plan and execute both internal and external audits in accordance with ISO 19011 and the ISO/IEC 17021-1 certification process.

Based on practical exercises, you will master audit techniques and become competent in managing audit programs and teams, handling customer communications, and resolving conflicts.

Upon acquiring the necessary expertise to perform this audit, you may sit for the exam and apply for the “PECB Certified ISO/IEC 27001 Lead Auditor” credential. Holding a PECB Lead Auditor Certificate demonstrates that you possess the capabilities and competencies to audit organizations based on best practices.

Who should attend?

• Auditors seeking to perform and lead Information Security Management System (ISMS) certification audits
• Managers or consultants seeking to master an Information Security Management System audit process
• Individuals responsible for maintaining conformance with Information Security Management System requirements
• Technical experts seeking to prepare for an Information Security Management System audit
• Expert advisors in Information Security Management

Learning objectives

• Understand the operations of an Information Security Management System based on ISO/IEC 27001
• Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002 and other standards and regulatory frameworks
• Understand an auditor’s role to: plan, lead and follow-up on a management system audit in accordance with ISO 19011
• Learn how to lead an audit and audit team
• Learn how to interpret the requirements of ISO/IEC 27001 in the context of an ISMS audit
• Acquire the competencies of an auditor to: plan an audit, lead an audit, draft reports, and follow-up on an audit in compliance with ISO 19011

Educational approach

• This training is based on both theory and best practices used in ISMS audits
• Lecture sessions are illustrated with examples based on case studies
• Practical exercises are based on a case study which includes role playing and discussions
• Practice tests are similar to the Certification Exam

This course equips you with the competencies required to develop robust information security practices in accordance with ISO 27005, the standard specifically focused on information security risk management based on ISO 27001.

The ISO/IEC 27005 Lead Risk Manager training program equips you with the essential expertise to assist organizations in managing risks associated with all assets critical to Information Security, using the ISO/IEC 27005 standard as a guiding framework. Throughout this course, you will develop a comprehensive understanding of the process model for designing and implementing an Information Security Risk Management program. You will also gain in-depth knowledge of best practices for risk assessment methods, including OCTAVE, EBIOS, MEHARI, and harmonized TRA. This course supports the implementation of the ISMS framework outlined in the ISO/IEC 27001 standard.

Upon mastering the key concepts of Information Security Risk Management based on ISO/IEC 27005, you may take the exam to apply for the "PECB Certified ISO/IEC 27005 Lead Risk Manager" credential. Holding a PECB Lead Risk Manager Certificate demonstrates that you possess the practical knowledge and professional capabilities to support and lead teams in managing Information Security Risks.

Target Audience

• Information Security risk managers
• Members of Information Security teams
• Professionals responsible for Information Security, compliance, and risk within an organization
• Individuals implementing or seeking compliance with ISO/IEC 27001, or those involved in risk management programs
• IT consultants
• IT professionals
• Information Security officers
• Privacy officers

Examination - Duration: 3 hours

The "PECB Certified ISO/IEC 27005 Lead Risk Manager" exam fully complies with the requirements of the PECB Examination and Certification Programme (ECP). The exam assesses the following competency domains:

• Domain 1: Fundamental principles and concepts of Information Security Risk Management
• Domain 2: Implementation of an Information Security Risk Management program
• Domain 3: Information security risk assessment
• Domain 4: Information security risk treatment
• Domain 5: Information security risk communication, monitoring, and improvement
• Domain 6: Information security risk assessment methodologies

General Information

• Certification fees are included in the exam price
• Training materials, comprising over 350 pages of content and practical examples, will be provided
• A participation certificate granting 21 CPD (Continuing Professional Development) credits will be issued
• In the event of exam failure, you may retake the exam within 12 months at no additional cost

Who can attend?

• Auditors seeking to perform and lead information security management system (ISMS) audits
• Managers or consultants seeking to master the information security management system audit process
• Individuals responsible to maintain conformity with the ISMS requirements in an organization
• Technical experts seeking to prepare for the information security management system audit
• Expert advisors in information security management

Learning objectives

By the end of this training course, the participants will be able to:

1. Explain the fundamental concepts and principles of an information security management system (ISMS) based on ISO/IEC 27001
2. Interpret the ISO/IEC 27001 requirements for an ISMS from the perspective of an auditor
3. Evaluate the ISMS conformity to ISO/IEC 27001 requirements, in accordance with the fundamental audit concepts and principles
4. Plan, conduct, and close an ISO/IEC 27001 compliance audit, in accordance with ISO/IEC 17021-1 requirements, ISO 19011 guidelines, and other best practices of auditing
5. Manage an ISO/IEC 27001 audit program

Educational approach

• This training is based on both theory and best practices used in ISMS audits
• Lecture sessions are illustrated with examples based on case studies
• Practical exercises are based on a case study which includes role playing and discussions
• Practice tests are similar to the Certification Exam

This instructor-led, live training in Belgrade (online or onsite) is aimed at public sector professionals who wish to use information security management and IT service management practices to strengthen digital security strategies and protect institutional digital assets.

By the end of this training, participants will be able to: explain core information security concepts, identify risks in information systems and services, apply practical security controls, and support secure IT service delivery.

Target Audience

This program is designed for all staff members seeking a practical grasp of Compliance principles and effective Risk Management strategies.

Course Delivery Format

The training utilizes a hybrid approach that features:

• Guided group discussions
• Slideshows and presentations
• Analysis of case studies
• Practical, real-world examples

Learning Objectives

Upon completion of the course, participants will be capable of:

Gaining a comprehensive understanding of core Compliance concepts, alongside national and global initiatives focused on managing related risks.

Articulating how organizations and their teams can build an effective Compliance Risk Management Framework.

Defining the roles and responsibilities of the Compliance Officer and the Money Laundering Reporting Officer, and understanding their integration within the broader business structure.

Identifying key risk areas within Financial Crime, particularly regarding international operations, offshore jurisdictions, and high-net-worth individuals.

This guided, live training (online or in-person) is intended for cloud professionals aiming to design and implement multi-cloud architectures that prevent vendor lock-in and uphold data sovereignty.

By the conclusion of this training, participants will be able to identify vendor lock-in risks, design portable architectures, enforce data sovereignty controls, and utilize cloud-agnostic tools effectively.

This instructor-led, live training in Belgrade (online or onsite) focuses on analyzing the risks of Open Data while reducing vulnerability to disasters or data loss.

By the end of this training, participants will be able to:

• Understand the core concepts and benefits of Open Data.
• Differentiate between various types of data.
• Recognize the risks of Open Data and learn how to mitigate them.
• Master the management of Open Data risks and develop a contingency plan.
• Apply Open Data risk mitigation strategies to reduce disaster risk.

This instructor-led, live Payment Card Industry Professional training in Belgrade (online or onsite) provides an individual qualification for industry practitioners who wish to demonstrate their professional expertise and understanding of the PCI Data Security Standard (PCI DSS).

By the end of this training, participants will be able to:

• Understand the payment process and the PCI standards designed to protect it.
• Understand the roles and responsibilities for entities involved in the payment industry.
• Have deep insight into, and understanding of, the 12 PCI DSS requirements.
• Demonstrate knowledge of PCI DSS and how it applies to organizations that are involved in the transaction process.

The effectiveness of any enterprise's governance hinges on its board of directors… and the board's success depends entirely on its chairman. However, the role of board leader is not only the most critical for board efficacy but also the one with the least training and support. Board leaders and chief executives frequently engage in power struggles. This course reveals the secrets of the world’s top board leaders, offering “in-the-boardroom” insights and strategies from experienced board professionals.

This instructor-led, live training in Belgrade (online or onsite) is designed for IT administrators, security coordinators, and compliance managers who aim to identify, evaluate, and implement security policy management methods within their organizations.

Upon completion of this training, participants will be equipped to develop, manage, and monitor security policies that protect their organization's information, network, and physical and software assets.

This capstone course equips participants with the skills to design, deploy, and manage a fully sovereign digital infrastructure stack from the ground up. By the conclusion of the course, students will have established a functional miniature organization utilizing exclusively self-hosted, open-source tools for identity management, communication, productivity, development, security, AI, and monitoring—all without depending on Google, Microsoft, AWS, or any proprietary SaaS solutions.

Wazuh is an open-source security platform that provides unified XDR and SIEM capabilities for threat detection, integrity monitoring, incident response, and compliance. It aggregates endpoint telemetry into a self-managed analysis engine, offering a credible alternative to Splunk Enterprise Security, Microsoft Sentinel, and other cloud-native SIEMs.

Whether you are aiming for your initial board position, have recently secured a board role and need to prepare for your inaugural meeting, or represent a company looking to equip emerging leaders and diverse talents with the essential knowledge for boardroom integration and success, this one-day program is designed for you. It provides all the necessary insights to ensure you are effective, well-informed, and fully prepared from the moment you enter the boardroom.