Cyber Security Training in Sofia

This instructor-led, live training in Sofia (online or onsite) targets advanced cybersecurity professionals, AI engineers, and IoT developers who wish to implement robust security measures and resilience strategies for Edge AI systems.

By the end of this training, participants will be able to:

• Grasp the security risks and vulnerabilities associated with Edge AI deployments.
• Apply encryption and authentication techniques to protect data.
• Design resilient Edge AI architectures capable of withstanding cyber threats.
• Utilize secure strategies for deploying AI models in edge environments.

This instructor-led, live training in Sofia (online or onsite) targets intermediate-level cybersecurity specialists and data scientists who aim to leverage LLMs to strengthen security defenses and enhance threat intelligence capabilities.

Upon completion of this training, participants will be able to:

• Grasp the significance of LLMs within the cybersecurity landscape.
• Deploy LLMs for the purpose of detecting and analyzing threats.
• Apply LLMs to streamline security automation and incident response.
• Seamlessly integrate LLMs into current security infrastructure.

This instructor-led, live training in Sofia (online or onsite) is designed for intermediate to advanced cybersecurity professionals and technical leads who want to learn how to implement AI models to strengthen security processes, automate threat detection and response, and conduct predictive analysis.

Upon completion of this training, participants will be able to:

• Grasp the role of AI in modern cyber security.
• Create machine learning models for anomaly and threat detection.
• Apply AI to automate incident response and security operations.
• Assess the ethical and operational implications of AI in cybersecurity.

This instructor-led, live training in Sofia (online or onsite) is aimed at intermediate-level analysts who wish to effectively analyze, secure, and protect their organization's data and networks from cyber threats.

By the end of this training, participants will be able to:

• Gain a comprehensive understanding of the current cybersecurity landscape.
• Learn and apply industry-standard cybersecurity frameworks (e.g., NIST, ISO/IEC 27001) and best practices to enhance the security posture of their organization.
• Implement effective network security measures, including configuring firewalls, VPNs, IDS/IPS systems, and applying encryption techniques to protect data at rest and in transit.
• Identify, analyze, and respond to cybersecurity incidents using threat intelligence, SIEM tools, and incident response plans.

This instructor-led, live training in Sofia (online or onsite) is aimed at intermediate-level network administrators who wish to gain the essential skills to manage, administer, monitor, and maintain Fortinet security systems.

By the end of this training, participants will be able to:

• Configure and manage FortiGate firewalls.
• Monitor network traffic and manage incidents with FortiAnalyzer.
• Automate tasks and manage policies through FortiManager.
• Apply preventive maintenance strategies and troubleshoot network issues.

This instructor-led, live training in Sofia (online or onsite) is aimed at beginner-level network administrators who wish to use FortiGate 1100E to manage and secure their network environments effectively.

By the end of this training, participants will be able to:

• Understand the basic architecture and features of FortiGate 1100E.
• Learn how to deploy FortiGate 1100E in various network environments.
• Gain hands-on experience with basic configuration and management tasks.
• Understand security policies, NAT, and VPNs.
• Learn to monitor and maintain FortiGate 1100E.

This instructor-led, live training in Sofia (online or onsite) is designed for advanced-level professionals who wish to gain a comprehensive understanding of fraud examination concepts and prepare for the Certified Fraud Examiner (CFE) exam.

Upon completion of this training, participants will be able to:

• Acquire in-depth knowledge of fraud examination principles and the overall fraud examination process.
• Learn to identify, investigate, and prevent various types of financial fraud schemes.
• Understand the legal framework surrounding fraud, including its legal elements, applicable laws, and regulations.
• Develop practical skills for conducting fraud investigations, such as evidence collection, interviewing techniques, and data analysis.
• Learn to design and implement effective fraud prevention and deterrence programs within organizations.
• Gain the confidence and expertise needed to successfully pass the Certified Fraud Examiner (CFE) exam.

This instructor-led, live training in Sofia (online or on-site) is designed for intermediate-level network administrators who wish to manage and secure their networks using FortiGate firewalls.

By the end of this training, participants will be able to:

• Grasp FortiGate features and functionalities, with a focus on those introduced or enhanced in version 7.4.
• Configure and manage FortiGate devices while implementing advanced security capabilities.
• Deploy and oversee advanced security measures such as IPS, antivirus, web filtering, and threat management.
• Monitor network activities, analyze logs, and generate reports for auditing and compliance.

This instructor-led, live training in Sofia (online or onsite) is aimed at intermediate-level technical professionals who wish to delve deeper into the technical aspects and functionalities of Fortinet’s product line to effectively recommend, sell, and implement Fortinet security solutions.

By the end of this training, participants will be able to:

• Gain in-depth knowledge of Fortinet’s advanced security solutions and products.
• Understand the technical features, benefits, and deployment scenarios for each core Fortinet product.
• Configure, manage, and troubleshoot Fortinet solutions in diverse environments.
• Apply Fortinet products to address complex security challenges and requirements.

This instructor-led, live training in Sofia (online or onsite) is designed for security professionals seeking to learn how to leverage Cortex XDR for preventing and stopping sophisticated attacks.

Upon completion of this training, participants will be able to:

• Grasp the architecture and key components of Cortex XDR.
• Establish and manage profiles for exploit and malware prevention.
• Evaluate behavioral threats and track response activities.
• Execute basic troubleshooting for Cortex applications.

This instructor-led, live training in Sofia (online or onsite) targets beginner-level technical professionals who wish to understand the concept of the Security Fabric and how it has evolved to address the cybersecurity needs of organizations.

By the end of this training, participants will be able to:

• Learn the evolution of cybersecurity and how it has shaped current security technologies.
• Use Fortinet products to protect against specific types of cyber threats and attacks.
• Understand the integration and automation capabilities of Fortinet solutions in providing a coordinated response to cyber incidents.

This instructor-led live training in Sofia (available online or onsite) targets security professionals who wish to learn how to troubleshoot Palo Alto Networks' next-generation firewalls.

By the end of this training, participants will be able to:

• Understand the architecture of the next-generation firewall.
• Investigate and troubleshoot networking issues using firewall tools.
• Analyze advanced logs to resolve real-life scenarios.

This instructor-led, live training in Sofia (online or on-site) is aimed at beginner-level network security professionals who wish to learn the concept of cybersecurity and the current global threat landscape.

By the end of this training, participants will be able to:

• Understand the current global threat landscape and identify the main types of cyber adversaries.
• Recognize the primary types of malware and the mechanics of cyber attacks.
• Understand the basics of network security and the importance of a layered security approach.
• Learn about Fortinet's Security Fabric and how it addresses modern cybersecurity challenges.

This instructor-led, live training in Sofia (online or onsite) targets intermediate-level network and security professionals seeking to effectively administer and secure networks via Fortigate 600E equipment, with a dedicated focus on HA configurations to boost reliability and performance.

By the conclusion of this training, participants will be able to:

• Grasp the features, specifications, and operating principles of the Fortigate 600E firewall.
• Carry out the initial configuration of the Fortigate 600E, covering essential tasks such as configuring interfaces, routing, and defining initial firewall policies.
• Configure and manage advanced security features like SSL VPN, user authentication, antivirus, IPS, web filtering, and anti-malware capabilities to defend against diverse network threats.
• Troubleshoot typical issues in HA setups and effectively oversee HA environments.

Open Source Software (OSS) Management involves overseeing the lifecycle of open-source components within an organization to ensure their secure, compliant, and efficient utilization.

This instructor-led live training (available online or onsite) is designed for intermediate-level IT professionals seeking to implement best practices for managing open-source software in enterprise and government settings.

Upon completion of this training, participants will be able to:

• Develop effective OSS policies and governance frameworks.
• Utilize SBOM and SCA tools to identify, track, and manage open-source dependencies.
• Mitigate risks related to licensing and security vulnerabilities.
• Streamline OSS adoption to maximize innovation and cost savings.

Course Format

• Interactive lectures and discussions.
• Case studies and scenario-based exercises.
• Hands-on demonstrations with OSS management tools.

Customization Options

• This course can be tailored to specific organizational OSS policies and toolchains. Please contact us to arrange.

This instructor-led live training in Sofia (online or onsite) is aimed at security professionals who wish to learn how to manage firewalls at scale.

By the end of this training, participants will be able to:

• Design, configure, and manage the Panorama Firewall management server.
• Manage policies using device groups.
• Roll out network configurations to different firewalls.

This instructor-led, live training in Bulgaria (online or onsite) is designed for intermediate-level cybersecurity professionals who aim to enhance their understanding of GRC frameworks and apply them to secure and compliant business operations.

Upon completion of this training, participants will be equipped to:

• Grasp the fundamental elements of cybersecurity governance, risk, and compliance.
• Perform risk assessments and formulate strategies to mitigate identified risks.
• Execute compliance measures and handle regulatory obligations effectively.
• Create and enforce robust security policies and procedures.

The EC-Council Certified DevSecOps Engineer (ECDE) program is a practical course aimed at providing professionals with the expertise needed to integrate security measures throughout the entire DevOps lifecycle, thereby facilitating secure software development from the initial planning stages through to final deployment.

Delivered as an instructor-led live training session, available either online or on-site, this course targets intermediate-level software engineers and DevOps practitioners who aim to incorporate robust security protocols into their CI/CD pipelines, ensuring the delivery of secure and compliant code.

Upon completion of this training, participants will be capable of:

• Grasping the core principles and operational practices of DevSecOps.
• Securing each phase of the CI/CD pipeline using automated security tools.
• Applying secure coding methodologies and conducting vulnerability assessments.
• Preparing for the ECDE certification through practical laboratory exercises and comprehensive review.

Course Delivery Format

• Engaging lectures and interactive discussions.
• Practical application of DevSecOps tools within simulated pipeline environments.
• Supervised exercises focused on secure development and deployment strategies.

Customization Options

• For personalized training tailored to your team’s specific workflows or toolchain, please reach out to us to make arrangements.

This instructor-led live training in Sofia (online or on-site) is designed for security professionals who want to learn the fundamentals of managing Palo Alto Networks' next-generation firewalls.

By the end of this training, participants will be able to:

• Configure and manage the essential features of Palo Alto Networks firewalls.
• Administer security and NAT policies.
• Implement threat prevention strategies.
• Monitor network threats and traffic patterns.

User session recording technology enables organizations to capture, monitor, and audit user activities on IT systems, offering valuable insights for security, regulatory compliance, and forensic analysis.

This instructor-led live training, available online or onsite, targets beginner to intermediate IT and security professionals seeking to implement user session recording solutions to strengthen monitoring, compliance, and accountability.

Upon completion of this training, participants will be able to:

• Grasp the core principles of user session recording.
• Deploy and configure session recording solutions effectively.
• Analyze and audit recorded sessions to ensure compliance.
• Integrate session recording with existing security monitoring systems.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and practical practice.
• Hands-on implementation within a live-lab environment.

Course Customization Options

• To request a customized training session for this course, please contact us to make arrangements.

This instructor-led, live training in Sofia (online or onsite) is aimed at sysadmins who wish to use 389 Directory Server to configure and manage LDAP-based authentication and authorization.

By the end of this training, participants will be able to:

• Install and configure 389 Directory Server.
• Understand the features and architecture of 389 Directory Server.
• Learn how to configure the directory server using the web console and CLI.
• Set up and monitor replication for high availability and load balancing.
• Manage LDAP authentication using SSSD for faster performance.
• Integrate 389 Directory Server with Microsoft Active Directory.

This instructor-led, live training in Sofia (online or onsite) is intended for system administrators who wish to leverage Microsoft Active Directory to manage and secure data access.

By the end of this training, participants will be able to:

• Install and configure Active Directory.
• Establish a domain and define access permissions for users and devices.
• Administer users and machines via Group Policies.
• Regulate access to file servers.
• Configure a Certificate Service and oversee certificate management.
• Deploy and manage services including encryption, certificates, and authentication.

Building a secure networked application presents challenges even for developers familiar with cryptographic building blocks like encryption and digital signatures. To help participants grasp the role and application of these primitives, the course begins by establishing a strong foundation in the core requirements of secure communication—specifically secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also highlights common threats to these requirements alongside practical, real-world solutions.

Given that cryptography is central to network security, the curriculum covers key algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on complex mathematics, these topics are explored from a developer's perspective, featuring typical use-case examples and practical considerations such as the implementation of public key infrastructures. The course introduces security protocols used across various domains of secure communication, with a detailed examination of widely adopted protocol families like IPSEC and SSL/TLS.

Typical cryptographic vulnerabilities are examined, covering both specific algorithms and protocols. Topics include the BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, and POODLE attacks, as well as the RSA timing attack. For each issue, the practical implications and potential consequences are described without delving into deep mathematical theory.

Finally, since XML technology is pivotal for data exchange in networked applications, the course addresses XML security. This includes the use of XML in web services and SOAP messages, along with protective measures like XML signature and XML encryption. It also covers weaknesses in these protection mechanisms and XML-specific security issues, such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Comprehend the requirements of secure communication
• Learn about network attacks and defenses across different OSI layers
• Gain practical knowledge of cryptography
• Understand essential security protocols
• Recognize recent attacks targeting cryptosystems
• Learn about relevant recent vulnerabilities
• Understand security concepts in Web services
• Access sources and further reading on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ code demands rigorous defenses against malicious exploitation, memory corruption, and input validation bypasses. This course explores vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will apply secure coding guidelines, static analysis tools, and defensive programming techniques to eliminate weaknesses, enforce input sanitization, and deliver hardened software resilient against cyberattacks.

Even seasoned Java developers often lack a comprehensive grasp of the security services provided by Java and the various vulnerabilities that affect web applications built with it.

This course not only introduces the security components of the Standard Java Edition but also addresses security concerns within Java Enterprise Edition (JEE) and web services. The discussion begins with the fundamentals of cryptography and secure communication before diving into specific services. Various exercises cover both declarative and programmatic security techniques in JEE, as well as transport-layer and end-to-end security for web services. Participants engage in practical exercises to explore and apply the discussed APIs and tools firsthand.

The course also examines and explains the most common and severe programming flaws in the Java language and platform, along with web-related vulnerabilities. Beyond typical bugs made by Java programmers, the security vulnerabilities covered include language-specific issues and problems arising from the runtime environment. All vulnerabilities and associated attacks are demonstrated through accessible exercises, followed by recommended coding guidelines and mitigation techniques.

Participants attending this course will

• Comprehend the core concepts of security, IT security, and secure coding.
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to avoid them.
• Understand the security concepts underlying web services.
• Learn to utilize various security features within the Java development environment.
• Gain a practical understanding of cryptography.
• Understand the security solutions offered by Java EE.
• Learn about typical coding mistakes and how to prevent them.
• Gain insights into recent vulnerabilities within the Java framework.
• Acquire practical knowledge in using security testing tools.
• Access resources and further readings on secure coding practices.

Audience

Developers

Description

The Java programming language and its Runtime Environment (JRE) were engineered to eliminate many of the common, critical security vulnerabilities found in other languages, such as C and C++. However, software developers and architects must do more than simply utilize Java's security features (positive security); they must also recognize and mitigate the numerous vulnerabilities that remain relevant to Java development (negative security).

Before introducing security services, the course provides a concise overview of cryptographic foundations, establishing a shared baseline for understanding the purpose and functionality of the relevant components. Participants will apply their knowledge through several practical exercises, allowing them to experiment with the discussed APIs firsthand.

The curriculum also examines and explains the most frequent and severe programming flaws inherent to the Java language and platform. This includes both typical errors made by Java developers and issues specific to the language and its environment. Each vulnerability and its associated attack vectors are demonstrated through accessible exercises, followed by recommended coding guidelines and effective mitigation strategies.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding.
• Identify web vulnerabilities beyond the OWASP Top Ten and learn how to prevent them.
• Acquire the skills to utilize various security features within the Java development environment.
• Gain a practical understanding of cryptography.
• Recognize typical coding mistakes and learn how to avoid them.
• Stay informed about recent vulnerabilities affecting the Java framework.
• Receive sources and further reading materials on secure coding practices.

Audience

Developers

Today, numerous programming languages can compile code for the .NET and ASP.NET frameworks. This environment offers robust tools for security development; however, developers must understand how to apply architectural and coding-level techniques to implement the desired security measures, prevent vulnerabilities, or mitigate their exploitation.

This course aims to equip developers with the skills to prevent untrusted code from executing privileged actions, protect resources via strong authentication and authorization, facilitate remote procedure calls, manage sessions, and explore various implementation options through extensive hands-on exercises.

The introduction of vulnerabilities begins by highlighting common programming errors specific to .NET. The discussion on ASP.NET vulnerabilities also covers various environment settings and their impact. Furthermore, the topic of ASP.NET-specific vulnerabilities addresses general web application security challenges as well as specialized issues and attack vectors, such as ViewState attacks and string termination exploits.

Participants attending this course will

• Grasp fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to avoid them
• Master the use of various security features within the .NET development environment
• Gain practical experience with security testing tools
• Identify typical coding mistakes and learn how to avoid them
• Stay informed about recent vulnerabilities in .NET and ASP.NET
• Access resources and further reading materials on secure coding practices

Audience

Developers

This course equips PHP developers with the vital skills needed to shield their applications from modern Internet-based threats. It explores web vulnerabilities through practical PHP examples, extending beyond the OWASP Top Ten to cover a wide array of risks including various injection attacks, script injections, weaknesses in PHP session handling, insecure direct object references, file upload issues, and more. PHP-specific vulnerabilities are categorized into standard vulnerability types such as inadequate or incorrect input validation, flawed error and exception handling, misuse of security features, and time- or state-related problems. Specific attack vectors discussed include open_basedir circumvention, denial-of-service via magic floats, and hash table collision attacks. In each scenario, participants will learn the key techniques and functions required to mitigate these risks.

A significant emphasis is placed on client-side security, addressing issues related to JavaScript, Ajax, and HTML5. The course introduces essential PHP security extensions, such as hash, mcrypt, and OpenSSL for cryptographic purposes, as well as Ctype, ext/filter, and HTML Purifier for robust input validation. Best practices for hardening are provided with respect to PHP configuration (php.ini settings), Apache, and general server administration. Additionally, the course offers an overview of various security testing tools and methodologies available to developers and testers, including security scanners, penetration testing frameworks, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the explanation of vulnerabilities and the discussion of configuration practices are reinforced by hands-on exercises. These activities demonstrate the impact of successful attacks, illustrate how to implement mitigation strategies, and guide participants through the use of various extensions and tools.

Participants attending this course will

• Grasp fundamental concepts of security, IT security, and secure coding
• Identify web vulnerabilities beyond the OWASP Top Ten and learn how to prevent them
• Understand client-side vulnerabilities and adhere to secure coding practices
• Develop a practical understanding of cryptography
• Master the use of various PHP security features
• Recognize common coding errors and learn how to avoid them
• Stay informed about recent vulnerabilities within the PHP framework
• Gain practical experience using security testing tools
• Access resources and further reading materials on secure coding practices

Audience

Developers

This comprehensive Core training introduces the principles of secure software design, development, and testing via the Microsoft Secure Development Lifecycle (SDL). It offers a Level 100 overview of the SDL's foundational elements, followed by design strategies to identify and rectify flaws during the early phases of the development process.

Focusing on the development phase, the course surveys common security-related programming errors in both managed and native code. It presents attack vectors for the discussed vulnerabilities alongside corresponding mitigation techniques, all illustrated through hands-on exercises that offer participants engaging, live hacking experiences. The introduction to various security testing methods is complemented by demonstrations of the effectiveness of different testing tools. Participants gain insight into the operation of these tools by applying them to previously discussed vulnerable code through practical exercises.

Upon completion of this course, participants will

Grasp fundamental concepts of security, IT security, and secure coding

Become familiar with the essential steps of the Microsoft Secure Development Lifecycle

Acquire skills in secure design and development practices

Learn the principles of secure implementation

Understand security testing methodologies

• Access resources and further reading on secure coding practices

Target Audience

Developers, Managers

This instructor-led, live training in Sofia (available online or onsite) is designed for compliance professionals in the payment services industry who wish to create, implement, and enforce a compliance program within their organizations.

By the end of this training, participants will be able to:

• Understand the rules set forth by government regulators for payment service providers.
• Create the internal policies and procedures needed to satisfy government regulations.
• Implement a compliance program that adheres to relevant laws.
• Ensure that all corporate processes and procedures comply with the compliance program.
• Uphold the business's reputation while protecting it from lawsuits.

Description:

This course serves as an intensive, rigorous preparation for the ISACA Certified in Risk and Information Systems Control (CRISC) examination. The curriculum thoroughly addresses the four (4) most recent domains of the ISACA CRISC syllabus, with a strong emphasis on exam readiness. Participants will receive the official ISACA CRISC Review Manual along with the Question, Answer, and Explanation (Q,A&E) supplements. These resources are invaluable for helping delegates master the specific style of ISACA questions, understand the types of answers expected, and facilitate rapid retention of the course material.

The technical competencies and professional practices endorsed and evaluated by ISACA through the CRISC certification form the foundation for success in this industry. Holding the CRISC certification validates your expertise within the field. Given the increasing demand for professionals with specialized risk and control knowledge, ISACA’s CRISC has established itself as the preferred certification choice for individuals and organizations globally. Earning this certification reflects a dedication to serving your enterprise and profession with excellence.

Objectives:

• To equip you with the knowledge necessary to pass the CRISC examination on your first attempt.
• Demonstrate your commitment to delivering distinguished service to your organization through certification.
• Leverage the growing market demand for risk and control expertise to secure superior career positions and compensation packages.

You will learn:

• How to enable enterprises to achieve their business goals by designing, implementing, monitoring, and maintaining risk-based, efficient, and effective IS controls.
• The core technical skills and professional practices promoted by CRISC, which are essential building blocks for career success in the field.

This instructor-led, live training (available online or on-site) is designed for advanced users looking to enhance their expertise.

Cybersecurity involves the implementation of technologies, controls, and processes designed to safeguard computer systems, servers, networks, devices, applications, and data against malicious cyber attacks.

This instructor-led, live training session, available both online and onsite, is designed for individuals seeking to learn how to protect internet-connected systems from various cyber threats.

Upon completion of this training, participants will be capable of:

• Comprehending the fundamental concepts of cybersecurity.
• Identifying and understanding diverse cyber threats.
• Applying processes and best practices to defend internet-connected systems from cyber attacks.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and practical application.
• Hands-on implementation within a live-lab environment.

Customization Options

• To request a tailored training session for this course, please contact us to make arrangements.

This instructor-led, live training in Sofia (online or on-site) is designed for IT professionals who wish to learn and apply the fundamentals of Cybersecurity practices, processes, and tools in their organization.

By the end of this training, participants will be able to:

• Comprehend fundamental Cybersecurity concepts, definitions, architecture, and principles.
• Acquire skills to secure and protect digital assets, including networks, systems, applications, and data.
• Implement security models, frameworks, operational techniques, and incident response procedures.
• Assess and mitigate the impacts of cyber attacks, risks, threats, and vulnerabilities.
• Gain insights into cybersecurity challenges associated with emerging technologies.

This instructor-led, live training in Sofia (online or onsite) covers various aspects of enterprise security, from AI to database security. It also includes the latest tools, processes, and mindset needed to protect against attacks.

In this instructor-led live course in Sofia, participants will learn to formulate a robust security strategy to tackle DevOps security challenges.

This course offers a professional introduction to the recently enacted Accessibility Law, providing developers with the practical skills necessary to design, develop, and maintain fully accessible applications. Beginning with a contextual discussion on the significance and implications of the law, the course rapidly transitions into hands-on coding practices, tools, and testing techniques to ensure compliance and inclusivity for users with disabilities.

This course offers leaders and managers a comprehensive overview of cybersecurity issues and activities.

Participants will gain insights into various topics to enhance their knowledge and refine executive decision-making capabilities concerning cybersecurity threats.
 

Upon completion of this training, participants will be able to:

• Understand internet privacy and social network privacy
• Understand Personally Identifiable Information (PII) and its significance
• Secure online assets
• Maintain the privacy of business users
• Learn about cyber laws that protect privacy

Course Format

• Interactive lectures and discussions
• Extensive exercises and practice
• Hands-on implementation in a live lab environment

Course Customization Options

• To request customized training, please contact us

This instructor-led, live training in Sofia (online or onsite) is aimed at system administrators who wish to use FreeIPA to centralize the authentication, authorization and account information for their organization's users, groups, and machines.

By the end of this training, participants will be able to:

• Install and configure FreeIPA.
• Manage Linux users and clients from a single central location.
• Use FreeIPA's CLI, Web UI and RPC interface to set up and manage permissions.
• Enable Single Sign On authentication across all systems, services and applications.
• Integrate FreeIPA with Windows Active Directory.
• Backup, replicate and migrate an FreeIPA server.

This instructor-led live training in Sofia (online or onsite) is aimed at developers and administrators who wish to produce software and products that are HiTRUST compliant.

By the end of this training, participants will be able to:

• Understand the key concepts of the HiTrust CSF (Common Security Framework).
• Identify the HITRUST CSF administrative and security control domains.
• Learn about the different types of HiTrust assessments and scoring.
• Understand the certification process and requirements for HiTrust compliance.
• Know the best practices and tips for adopting the HiTrust approach.

Information security threats and attacks are constantly evolving and improving. The most effective defense against these risks is the proper implementation and management of information security controls and best practices. Furthermore, robust information security is a key expectation and requirement for customers, legislators, and other interested parties.

This training course is designed to prepare participants for implementing an information security management system (ISMS) based on ISO/IEC 27001. It aims to provide a comprehensive understanding of ISMS best practices and establish a framework for its continual management and improvement.

Upon completing the training course, you will be eligible to take the exam. If you successfully pass it, you can apply for the “PECB Certified ISO/IEC 27001 Lead Implementer” credential, which demonstrates your ability and practical knowledge to implement an ISMS in accordance with the requirements of ISO/IEC 27001.

Who Can Attend?

• Project managers and consultants involved in or concerned with the implementation of an ISMS
• Expert advisors seeking to master the implementation of an ISMS
• Individuals responsible for ensuring conformity to information security requirements within an organization
• Members of an ISMS implementation team

General information

• Certification fees are included in the exam price
• Training material containing over 450 pages of information and practical examples will be distributed
• A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued
• In case of exam failure, you can retake the exam within 12 months free of charge

Educational approach

• This training course contains essay-type exercises, multiple-choice quizzes, examples, and best practices used in the implementation of an ISMS.
• Participants are encouraged to communicate with each other and engage in discussions when completing quizzes and exercises.
• The exercises are based on a case study.
• The structure of the quizzes is similar to that of the certification exam.

Learning objectives

This training course will help you:

• Gain a comprehensive understanding of the concepts, approaches, methods, and techniques used for the implementation and effective management of an ISMS
• Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002, and other standards and regulatory frameworks
• Understand the operation of an information security management system and its processes based on ISO/IEC 27001
• Learn how to interpret and implement the requirements of ISO/IEC 27001 in the specific context of an organization
• Acquire the necessary knowledge to support an organization in effectively planning, implementing, managing, monitoring, and maintaining an ISMS

Audience

This course is designed for all staff members who need a practical grasp of Compliance principles and effective Risk Management techniques.

Course Format

The training employs a blended learning methodology that incorporates:

• Guided group discussions
• Slide-driven presentations
• Case study analysis
• Practical real-world examples

Course Objectives

Upon completion, participants will be capable of:

Gaining a comprehensive understanding of the core elements of Compliance, as well as national and international initiatives designed to manage related risks.

Articulating how organizations and their teams can implement an effective Compliance Risk Management Framework.

Clarifying the roles and responsibilities of Compliance Officers and Money Laundering Reporting Officers, and understanding how these functions fit into the broader business structure.

Recognizing critical risk areas within Financial Crime, specifically in the context of international operations, offshore jurisdictions, and high-net-worth client interactions.

This instructor-led, live training in Sofia (online or on-site) is designed for software testers who aim to secure their organization's network using Nmap.

Upon completion of this training, participants will be capable of:

• Establishing the required testing environment to begin using Nmap.
• Scanning network systems to identify security vulnerabilities.
• Identifying active and vulnerable hosts.

This instructor-led live training in Sofia (online or onsite) is aimed at system administrators who wish to use Okta for identity and access management.

By the end of this training, participants will be able to:

• Configure, integrate, and manage Okta.
• Integrate Okta into an existing application.
• Implement security with multi-factor authentication.

This instructor-led, live training in Sofia (online or onsite) is intended for system administrators who wish to use OpenAM to manage identity and access controls for web applications.

Upon completing this training, participants will be able to:

• Configure the necessary server environment to begin setting up authentication and access controls using OpenAM.
• Deploy single sign-on (SSO), multi-factor authentication (MFA), and user self-service capabilities for web applications.
• Leverage federation services (such as OAuth 2.0, OpenID, and SAML v2.0) to securely extend identity management across various systems and applications.
• Access and manage authentication, authorization, and identity services via REST APIs.

OpenVAS is a sophisticated open-source framework comprising various services and tools designed for network vulnerability scanning and management.

In this instructor-led live training, participants will gain hands-on experience in utilizing OpenVAS for network vulnerability scanning.

Upon completion of this training, participants will be capable of:

• Installing and configuring OpenVAS
• Understanding the core features and components of OpenVAS
• Setting up and executing network vulnerability scans using OpenVAS
• Reviewing and interpreting the results generated by OpenVAS scans

Audience

• Network engineers
• Network administrators

Course Format

• A combination of lectures, discussions, exercises, and extensive practical, hands-on training

Note

• To arrange a customized training session for this course, please contact us.

This instructor-led, live Payment Card Industry Professional training in Sofia (online or onsite) offers a professional certification for practitioners aiming to demonstrate their expertise and understanding of the PCI Data Security Standard (PCI DSS).

Upon completion of this course, participants will be able to:

• Comprehend the payment processing workflow and the PCI standards established to safeguard it.
• Grasp the roles and responsibilities of entities operating within the payment industry.
• Gain a thorough insight into, and understanding of, the 12 PCI DSS requirements.
• Showcase knowledge of PCI DSS and its application to organizations involved in the transaction process.

This instructor-led, live training session (available online or onsite) is designed for security engineers who aim to leverage IBM Qradar SIEM to address critical security use cases.

By the conclusion of this training, participants will be able to:

• Achieve visibility into enterprise data across on-premise and cloud environments.
• Automate security intelligence to hunt down threats and contain associated risks.
• Detect, identify, and prioritize threats effectively.

This course aims to assist with the following:

1. Enabling developers to master secure coding techniques.
2. Assisting software testers in assessing application security before production deployment.
3. Helping software architects understand application-related risks.
4. Guiding team leaders in setting security baselines for developers.
5. Assisting web masters in configuring servers to avoid misconfigurations.

This course explores secure coding concepts and principles for Java, utilizing the Open Web Application Security Project (OWASP) testing methodology. OWASP is a global online community dedicated to producing freely available articles, methodologies, documentation, tools, and technologies aimed at enhancing web application security.

This course delves into secure coding principles and best practices using ASP.NET, guided by the Open Web Application Security Project (OWASP) testing methodology. OWASP is a vibrant online community dedicated to producing freely accessible articles, methodologies, documentation, tools, and technologies focused on web application security.

The course explores the security features of the .NET Framework and provides strategies for securing web applications.