Security Management Training in Belgrade

This instructor-led live training, available in Belgrade (online or onsite), is designed for intermediate-level IT auditors seeking to effectively incorporate AI tools into their audit practices.

Upon completion of this training, participants will be equipped to:

• Understand the fundamental concepts of artificial intelligence and their application within IT auditing contexts.
• Employ AI technologies, including machine learning, Natural Language Processing (NLP), and Robotic Process Automation (RPA), to enhance the efficiency, accuracy, and scope of audits.
• Conduct risk assessments using AI tools to facilitate continuous monitoring and proactive risk management.
• Incorporate AI into the planning, execution, and reporting phases of audits, thereby increasing the overall effectiveness of IT audit operations.

Encryption Key Management is the discipline of securely creating, storing, distributing, rotating, and retiring cryptographic keys to protect sensitive data and ensure regulatory compliance.

This instructor-led, live training (online or onsite) is aimed at intermediate-level IT and security professionals who wish to implement robust encryption key management practices and systems across enterprise environments.

By the end of this training, participants will be able to:

• Understand the lifecycle of encryption keys and best practices for their protection.
• Set up and manage key management systems (KMS) both on-prem and in the cloud.
• Implement access control and auditing for key usage.
• Comply with regulations and standards related to encryption key security.

Format of the Course

• Interactive lecture and discussion.
• Hands-on use of key management tools in lab environments.
• Guided exercises focused on secure key lifecycle implementation.

Course Customization Options

• To request a customized training for this course based on your infrastructure or compliance requirements, please contact us to arrange.

This instructor-led, live training in Belgrade (online or onsite) targets advanced-level security analysts who wish to enhance their skills in utilizing advanced Micro Focus ArcSight ESM capabilities to improve an organization's ability to detect, respond to, and mitigate cyber threats with greater precision and speed.

By the end of this training, participants will be able to:

• Optimize the use of Micro Focus ArcSight ESM to enhance monitoring and threat detection capabilities.
• Construct and manage advanced ArcSight variables to refine event streams for more precise analysis.
• Develop and implement ArcSight lists and rules for effective event correlation and alerting.
• Apply advanced correlation techniques to identify complex threat patterns and reduce false positives.

This instructor-led, live training in Belgrade (online or onsite) is aimed at beginner-level law enforcement officers who wish to gain a deeper understanding of human behavior, enhancing their skills in communication, empathy, conflict resolution, and overall effectiveness in their roles.

By the end of this training, participants will be able to:

• Have a deeper understanding of human psychology.
• Develop advanced communication and conflict resolution skills for more effective interaction with the public, colleagues, and in negotiation scenarios.
• Promote awareness and understanding of diverse cultural backgrounds, improving community policing and relations with various demographic groups.

This instructor-led, live training in Belgrade (online or on-site) is designed for security managers at the introductory level who wish to effectively adopt and utilize technology in their field.

By the end of this training, participants will be able to:

• Understand the evolution of technology in security.
• Learn how to effectively blend traditional security methods with modern technological solutions.
• Understand the basics of cybersecurity, risks associated with digital systems, and how to protect against cyber threats in the security industry.

This instructor-led, live training in Belgrade (online or onsite) is designed for beginner-level security managers and designers who aim to effectively plan, design, and implement security strategies that are cohesive, technologically advanced, and aligned with legal and ethical standards.

By the conclusion of this training, participants will be able to:

• Integrate security requirements into architectural and facility design processes.
• Evaluate threats and vulnerabilities to guide security planning efforts.
• Formulate comprehensive security plans that address diverse threat scenarios.
• Develop robust emergency response and crisis management protocols.

This instructor-led, live training in Belgrade (online or onsite) is designed for beginner-level security administrators who wish to deepen their understanding of security practices within an organization.

Upon completion of this training, participants will be capable of:

• Gaining a solid understanding of the fundamentals of security operations and administration.
• Identifying and mitigating a variety of security threats and vulnerabilities.
• Implementing and managing security solutions effectively.
• Comprehending the legal and ethical implications within security operations.
• Preparing for incident response and disaster recovery scenarios.

This instructor-led, live training in Belgrade (online or onsite) is aimed at advanced-level professionals who wish to gain a comprehensive understanding of fraud examination concepts and prepare for the Certified Fraud Examiner (CFE) exam.

By the end of this training, participants will be able to:

• Gain comprehensive knowledge of fraud examination principles and the fraud examination process.
• Learn to identify, investigate, and prevent various types of financial fraud schemes.
• Understand the legal environment related to fraud, including the legal elements of fraud, relevant laws, and regulations.
• Acquire practical skills in conducting fraud investigations, including evidence collection, interviewing techniques, and data analysis.
• Learn to design and implement effective fraud prevention and deterrence programs within organizations.
• Gain confidence and knowledge to successfully pass the Certified Fraud Examiner (CFE) exam.

This instructor-led, live training in Belgrade (online or onsite) is designed for advanced-level security managers who seek to gain the knowledge and skills required to excel in the certification exam and their roles as security management professionals.

By the end of this training, participants will be able to:

• Understand the five domains of ISSMP.
• Develop skills to manage an information security program.
• Learn to establish and maintain security governance.
• Gain insights into risk management, incident response, and continuity planning.
• Prepare effectively for the ISSMP certification exam.

This instructor-led, live training in Belgrade (online or onsite) is aimed at security managers who wish to learn basic to intermediate-level CCTV security surveillance and management skills.

By the end of this training, participants will be able to:

• Familiarize themselves with the types of CCTV systems and know their benefits and features.
• Understand cabling and CCTV systems setup requirements.
• Install, configure, and manage CCTV systems.

Description:

Note: Please note that this revised CISM exam content outline applies to exams beginning on June 1, 2022.

The CISM® certification is the most prestigious and rigorous qualification available globally for Information Security Managers today. It offers a platform to join an exclusive peer network of professionals who are equipped to continuously learn and adapt to the expanding opportunities and challenges in Information Security Management.

Our CISM training methodology ensures comprehensive coverage of all four CISM domains, with a clear emphasis on building core concepts and solving ISACA-released CISM exam questions. This course provides intensive training and rigorous exam preparation for the ISACA’s Certified Information Security Manager (CISM®) Examination.

Our instructors encourage all participants to review the ISACA-released CISM QA&E (Questions, Answers, and Explanations) as part of their exam preparation. The QA&E is particularly effective in helping participants understand the style of ISACA questions, the approach to solving them, and aids in the rapid assimilation of CISM concepts during live classroom sessions.
All our trainers possess extensive experience in delivering CISM training. We are committed to thoroughly preparing you for the CISM examination.

Goal:

The primary objective is to help you pass your CISM examination on the first attempt.

Objectives:

• Apply the knowledge acquired in a practical manner that benefits your organization.
• Establish and maintain an information security governance framework to achieve your organization's goals and objectives.
• Manage information risk to an acceptable level to meet business and compliance requirements.
• Establish and maintain information security architectures (including people, processes, and technology).
• Integrate information security requirements into the contracts and activities of third parties and suppliers.
• Plan, establish, and manage the capability to detect, investigate, respond to, and recover from information security incidents to minimize business impact.

Target Audience:

• Security professionals with 3-5 years of front-line experience.
• Information security managers or individuals with management responsibilities.
• Information security staff and assurance providers who require an in-depth understanding of information security management, including: CISOs, CIOs, CSOs, privacy officers, risk managers, security auditors, compliance personnel, BCP/DR personnel, and executive and operational managers responsible for assurance functions.

Open Source Software (OSS) Management involves overseeing the entire lifecycle of open-source components within an organization to ensure their use is secure, compliant, and efficient.

This instructor-led live training, available either online or onsite, targets intermediate-level IT professionals who aim to implement best practices for managing open-source software in enterprise and government settings.

Upon completing this training, participants will be equipped to:

• Implement robust OSS policies and governance frameworks.
• Utilize SBOM and SCA tools to identify, track, and manage open-source dependencies.
• Mitigate risks related to licensing issues and security vulnerabilities.
• Accelerate OSS adoption to maximize innovation and cost efficiency.

Course Format

• Interactive lectures and discussions.
• Case studies and scenario-based exercises.
• Hands-on demonstrations using OSS management tools.

Customization Options

• The course can be tailored to fit specific organizational OSS policies and toolchains. Please contact us to arrange this.

This instructor-led, live training in Belgrade (online or onsite) is tailored for intermediate-level cybersecurity professionals aiming to enhance their understanding of GRC frameworks and apply them to secure and compliant business operations.

By the end of this training, participants will be able to:

• Understand the key components of cybersecurity governance, risk, and compliance.
• Conduct risk assessments and develop risk mitigation strategies.
• Implement compliance measures and manage regulatory requirements.
• Develop and enforce security policies and procedures.

This instructor-led, live training in Belgrade (online or onsite) is designed for intermediate-level system administrators seeking to learn how to use Siteminder to implement various authentication methods.

Upon completion of this training, participants will be able to:

• Grasp the core concepts of Siteminder and its pivotal role in authentication and access management.
• Configure and manage user authentication workflows using Siteminder.
• Deploy various authentication methods supported by Siteminder.
• Troubleshoot common issues related to Siteminder authentication.
• Integrate Siteminder with other identity providers to enable federated authentication.

Target Audience:

This course is designed for professionals involved in information security and information assurance disciplines.

Learning Outcomes:

Upon completion, candidates will be able to demonstrate:

• The significant business benefits derived from effective information risk management.
• The ability to articulate and apply information risk management terminology accurately.
• Competence in conducting threat and vulnerability assessments, business impact analyses, and risk assessments.
• A thorough understanding of control principles and risk treatment strategies.
• Skills to present findings in a format suitable for developing a risk treatment plan.
• Proficiency in using information classification schemes.

Description:

Cybersecurity expertise is highly sought after, as threats continue to challenge enterprises globally. The vast majority of professionals surveyed by ISACA acknowledge this reality and aim to pursue roles requiring cybersecurity knowledge.
To bridge this skills gap, ISACA has introduced the Cybersecurity Fundamentals Certificate, offering education and verification of competencies in this critical field.

Objectives:

With cybersecurity threats escalating and a global shortage of adequately skilled security professionals widening, ISACA's Cybersecurity Fundamentals Certificate program provides an effective solution for rapidly training entry-level staff. It ensures they acquire the necessary skills and knowledge to succeed in the cyber landscape.

Target Audience:

This certificate program also serves as one of the most effective methods for acquiring foundational cybersecurity knowledge and starting to develop skills in this essential domain.

This instructor-led, live training (online or onsite) is designed for enterprise leaders who wish to understand data sovereignty principles and develop compliant data management strategies.

By the end of this training, participants will be able to define data sovereignty, identify relevant laws, assess compliance risks, and implement governance frameworks for cross-border data management.

In this instructor-led, live course in Belgrade, participants will learn how to formulate an effective security strategy to address the challenges posed by DevOps security.

This course offers an expert introduction to the newly enacted Accessibility Law, equipping developers with the practical skills necessary to design, develop, and maintain fully accessible applications. Beginning with a contextual discussion on the law's importance and implications, the curriculum quickly transitions to hands-on coding practices, tools, and testing techniques to ensure compliance and inclusivity for users with disabilities.

Why participate?

The ISO/IEC 27001 Foundation training equips you with the fundamental knowledge required to implement and manage an Information Security Management System (ISMS) in accordance with ISO/IEC 27001. Throughout this course, you will gain a comprehensive understanding of the various ISMS components, such as ISMS policies, procedures, performance metrics, management commitment, internal auditing, management review, and the principle of continual improvement.

Upon successful completion of the course, you will be eligible to take the examination and apply for the “PECB Certified ISO/IEC 27001 Foundation” credential. This certificate validates your grasp of the essential methodologies, requirements, frameworks, and management approaches defined by the standard.

Target Audience

• Professionals engaged in Information Security Management
• Individuals aiming to acquire knowledge about the core processes of Information Security Management Systems (ISMS)
• Career seekers interested in Information Security Management

Training Methodology

• Lectures are enhanced with practical questions and real-world examples
• Practical exercises feature illustrative examples and interactive discussions
• Practice tests mirror the format and style of the Certification Exam

This instructor-led live training in Belgrade (online or onsite) is tailored for public sector professionals seeking to leverage information security management and IT service management practices. The program aims to strengthen digital security strategies and protect institutional digital assets.

By the end of this training, participants will be able to explain core information security concepts, identify risks in information systems and services, apply practical security controls, and facilitate secure IT service delivery.

Target Audience

This program is designed for all staff members seeking a practical grasp of Compliance principles and effective Risk Management strategies.

Course Delivery Format

The training utilizes a hybrid approach that features:

• Guided group discussions
• Slideshows and presentations
• Analysis of case studies
• Practical, real-world examples

Learning Objectives

Upon completion of the course, participants will be capable of:

Gaining a comprehensive understanding of core Compliance concepts, alongside national and global initiatives focused on managing related risks.

Articulating how organizations and their teams can build an effective Compliance Risk Management Framework.

Defining the roles and responsibilities of the Compliance Officer and the Money Laundering Reporting Officer, and understanding their integration within the broader business structure.

Identifying key risk areas within Financial Crime, particularly regarding international operations, offshore jurisdictions, and high-net-worth individuals.

This instructor-led, live training (online or onsite) is designed for cloud professionals seeking to design and implement multi-cloud architectures that prevent vendor lock-in and ensure data sovereignty.

By the conclusion of this training, participants will be able to identify vendor lock-in risks, design portable architectures, implement data sovereignty controls, and leverage cloud-agnostic tools.

The Lead Implementer course for the NIS 2 Directive provides participants with the necessary knowledge and practical skills to plan, execute, manage, monitor, and continuously enhance a cybersecurity program in alignment with the EU NIS 2 Directive requirements.

Through this live, instructor-led training (available online or on-site), participants will learn how to establish cybersecurity governance, implement risk management processes, build incident response capabilities, and apply suitable technical and organizational security measures. The course also prepares participants for the official PECB Certified NIS 2 Directive Lead Implementer certification exam.

By the end of this training, participants will be able to:

• Understand the objectives and requirements of the NIS 2 Directive.

• Plan and manage the implementation of a cybersecurity program aligned with NIS 2.

• Establish governance structures and cybersecurity roles and responsibilities.

• Conduct cybersecurity risk assessments and implement appropriate controls.

• Develop incident response, crisis management, and business continuity capabilities.

• Monitor, measure, and continually improve cybersecurity performance.

• Prepare for the PECB Certified NIS 2 Directive Lead Implementer certification exam.

Audience

This course is intended for:

• Cybersecurity managers and professionals

• Information Security Managers (ISMs)

• CISOs and security leaders

• IT managers and system administrators

• Risk and compliance managers

• Consultants responsible for cybersecurity implementation

• Professionals leading NIS 2 compliance initiatives

• Individuals preparing for the PECB Certified NIS 2 Directive Lead Implementer certification

Examination

The PECB Certified NIS 2 Directive Lead Implementer examination assesses participants' ability to understand, implement, and manage a cybersecurity program aligned with the NIS 2 Directive.

The examination covers the following competency domains:

• Domain 1: Fundamental concepts and definitions of the NIS 2 Directive

• Domain 2: Planning the implementation of NIS 2 Directive requirements

• Domain 3: Cybersecurity roles, responsibilities, and risk management

• Domain 4: Cybersecurity controls, incident management, and crisis management

• Domain 5: Communication and awareness

• Domain 6: Testing and monitoring of a cybersecurity program

Certification

After successfully passing the examination, participants may apply for one of the following PECB credentials, depending on their professional experience and project involvement:

Qualifying cybersecurity management experience may include activities such as:

• Conducting cybersecurity risk assessments

• Managing cybersecurity programs

• Implementing security controls

• Managing incident response processes

• Establishing cybersecurity performance metrics

• Conducting management reviews

• Leading cybersecurity teams

This instructor-led live training (online or onsite) is aimed at security engineers and firmware developers who wish to harden OpenBMC deployments against unauthorized access and firmware tampering.

This instructor-led, live Payment Card Industry Professional training in Belgrade (online or onsite) provides an individual qualification for industry practitioners who wish to demonstrate their professional expertise and understanding of the PCI Data Security Standard (PCI DSS).

By the end of this training, participants will be able to:

• Understand the payment process and the PCI standards designed to protect it.
• Understand the roles and responsibilities for entities involved in the payment industry.
• Have deep insight into, and understanding of, the 12 PCI DSS requirements.
• Demonstrate knowledge of PCI DSS and how it applies to organizations that are involved in the transaction process.

This capstone course teaches participants to design, deploy, and operate a complete sovereign digital infrastructure stack from the ground up. By the end of the course, students will have built a functioning mini-organization using only self-hosted, open-source tools: identity, communication, productivity, development, security, AI, and monitoring - all without reliance on Google, Microsoft, AWS, or proprietary SaaS.

Wazuh is an open-source security platform that provides unified XDR and SIEM capabilities for threat detection, integrity monitoring, incident response, and compliance. It aggregates endpoint telemetry into a self-managed analysis engine, offering a viable alternative to Splunk Enterprise Security, Microsoft Sentinel, and other cloud-native SIEMs.