It truly has been a helluva of ride! The late nights were entirely worth it. My scrum meetings were 8pm. I’d get home just about that time or even later but nonetheless I was able to catch up. Through the process , I’ve realized that other than BA, product design is a hidden skill that I can and will be fine tuning. The first time I saw Figma, I’m like what kind of problem is this? But team members and I, we eventually made sense of it. Created a prototype even created a chat bot, I didn’t think I could do it. What’s even better is, not a single line of code was written.
The sacrifice and inconvenience of working and running this intense course through the past 7 weeks has been worth it. I’m definitely not where I was when we started, my mind is bigger, my understanding is broader and I know that I can do this. I’ve always wanted a remote job paying in $ and this step is one in the right direction. The confidence and understanding I’ve gained on the course is ridiculous, I’m not there yet, but I know I can get there and in time my learning will go past what I’ve learned at H&T, everything has been an eye opener, even to LinkedIn optimization, I can see all the ways my previous approaches/efforts were less than par. The course has given me a solid start point in my BA journey. I now understand why we’re encouraged to look beyond the certificate for now, the hands on learning experience that Heels and Tech offers is unmatched. I’m glad I took the course and by God’s grace, I’ll be back soon to tell you that I’ve gotten my dollar paying remote job. Special mention to Petrina who is such an awesome facilitator, I’ll be disturbing her from time to time 😁. It’s also great that Iyanu and Bisola were present in some of sessions. It showed that you were concerned about our learning process as well. It’s been a tough but rewarding experience.
Information Technology Management
KEY COURSE TOPICS
- Core Information Security Principles
- Risk Management
- Access Control
- Security Malware Threats
- Network Security
- Security Assessments and Testing
- Cryptography
- Incident Response
- Disaster Recovery and Business Continuity
- Personnel Policies
- And Much More
Introduction
Getting Started in Information Security
- The Many Areas of Information Security
- The State of Cybersecurity
- The Most Valuable Beginner IT Security Certifications
Core Information Security Principles
- Section Introduction The CIA Triad Authentication, Authorization, and Accounting (AAA)
- Defence in Depth Least Privilege
- Non-Repudiation
- Implicit Deny Legal and Regulatory Issues
- Information Security Governance
- Authentication Basics
- Identify Proofing
- General Password Rules
Risk Management
- Section Introduction
- Introduction to Risk Management
- Exploring Risks and Threats
- Quantitative Risk Analysis
- Attack Surface Analysis
Asset Management
- Section Introduction
- Identifying and Classifying Assets
- Understanding the Asset Lifecycle
- Data Retention
- Understanding Data States
Access Control
- Section Introduction
- Access Control
- Physical and Logical Access Controls
- Access Control Models
- Student Activity: Analysing Your Organization’s Access Control
Security Malware Threats
- Section Introduction
- Buffer Overflows
- Viruses and Polymorphic Viruses
- Worms
- Trojan Horses
- Logic Bombs
- Spyware and Adware
- Ransomware
- Rootkits
- Zero Day Attacks
- Protecting Against Malware
Additional Threats & Vulnerabilities
- Section Introduction
- Social Engineering
- Social Engineering Phone Impersonation Scenarios Overview
- Social Engineering Phone Call Impersonation
- Social Engineering Phone Impersonation Scenarios Discussion
- Email Spam, Spoofing, Phishing, and Pharming
- Protocol Spoofing
- Common Attack Methods
Network Segmentation & Isolation
- Section Introduction
- Introduction to Network Isolation
- Demilitarized Zone (DMZ)
- Basic Network Zones
- Virtual LANs (VLANs)
- Routers
- Network Address Translation (NAT)
- Access Control Lists (ACLs)
Network Security
- Section Introduction
- Virtual Private Networks
- Firewalls
- Web Proxy Servers
- Honeypots
- Intrusion Detection & Prevention Systems
Wireless Networking Security
- Wireless Encryption Standards
- Wireless Equivalent Privacy (WEP)
- Wi-Fi Protected Access (WPA)
- WPA Enterprise vs. Personal Mode
- Wireless Network Vulnerabilities & Security
- Common Wireless Security Threats
Security Assessments and Testing
- Section Introduction
- Vulnerability Assessments
- Penetration Testing
- Interview with a Professional Ethical Hacker Blog Article
- Security Assessments
Security Assessment Tools
- Section Introduction
- Wireshark Network Sniffing
- Nmap Zenmap Network Scanner
- Tenable Nessus Vulnerability Scanner
- Ethical Hacking for Beginners (YouTube Series)
Hardening End-User Systems and Servers
- Section Introduction
- Hardening End-User Systems
- Hardening Servers
- Patch and Change Management
- Separation of Services
Introduction to Cryptography
- Introduction to Cryptography
- Symmetric Encryption
- Asymmetric Encryption
- Hashing Algorithms
- Digital Certificates and Certificate Authorities
- Email Encryption Use Cases
- Windows Encrypted File System Use Case
- Revisiting VPN
- Software versus Hardware-Based Encryption
Incident Response, Disaster Recovery & Business Continuity
- Section Introduction
- Understanding Incidents and Disasters
- Incident Response
- Disaster Recovery and Business Continuity
Application Development Security
- Importance of IT Security in Application Development
- Software Development Lifecycle (SDLC)
- Static and Dynamic Testing
- Authorization to Operate (ATO)
- Application Development Security Quiz
SM
