Cyber Cultura course
DiD: Defense in Depth
Layers of protection that complement each other, from the perimeter to the data.
Prepares students to design and orchestrate complementary layers of protection, across people, processes and technologies, to reduce the likelihood and impact of attacks.
- Workload
- 15 hours
- Format
- Online or in-company
- Investment
- R$180.00
Payment and access through Hotmart.
Who it’s for
- Security, infrastructure and architecture professionals who design or review controls.
- Managers who need to prioritize investments in security tools.
- Consultants and auditors who assess the maturity of environments.
What you’ll develop
- Tell defense in depth apart from layered security and know when to apply each.
- Map the layers: perimeter, network, endpoint, application, data, cloud and identity.
- Select controls and integrations (MFA, WAF/WAAP, EDR/XDR, DLP, PAM and Zero Trust).
- Measure effectiveness with metrics (KPI, KRI and KCI) and address overlaps and gaps.
- Connect the defensive architecture to business risks and legal requirements.
Syllabus
15 hours
01Defense in Depth concepts
- Historical overview
- What Defense in Depth is
- The difference between Defense in Depth and Layered Security
- Advantages of adopting Defense in Depth
- Disadvantages and inherent risks
- Elements of Defense in Depth
02Perimeter Protection
- Firewall
- DMZ: Demilitarized Zone
- IPS: Intrusion Prevention System
- WAF: Web Application Firewall
- MFA: Multi-Factor Authentication
- Anti-DDoS
- Bot Manager
- BAS: Breach and Attack Simulation
03Cloud Protection
- CASB: Cloud Access Security Broker
- IAM: Identity and Access Management
- Microsegmentation
- Zero Trust
- Posture Management
- Keys and Certificates
- Web and API Protection
04Network Protection
- Content Filtering
- Network Segmentation
- Remote Access and VPN
- PAM: Privileged Access Management
- NAC: Network Access Control
- Wi-Fi Security
- Microsegmentation
- Zero Trust
05Endpoint Protection
- Antimalware
- EDR: Endpoint Detection and Response
- MDM: Mobile Device Management
- Device Encryption
- Local Privilege Management
06Application Protection
- Secure Development
- API Security
- DevSecOps
- SAST: Static Application Security Testing
- DAST: Dynamic Application Security Testing
- IAST: Interactive Application Security Testing
07Data Protection
- Information Classification
- DLP: Data Loss Prevention
- DAM: Database Activity Monitoring
- FIM: File Integrity Monitoring
- Digital Certificates
- Anonymization
- Database Encryption
08Governance, Risk and Compliance (GRC)
- Policies, Standards and Procedures
- Data Protection and Compliance
- Security Risk Management
- Controls (ISO, NIST and CIS)
- Supplier Risk Assessment
- Business Continuity
- Awareness and Training
- Audits
09Security Operations (SecOps)
- SOC: Security Operations Center
- SIEM: Security Information and Event Management
- Incident Response
- Brand and Executive Monitoring
- Threat Hunting
- Identity and Access Management
- Hardening
- Vulnerability Management
- Pentest
- Software Assessment
- Patch Management
- Digital Forensics
10Practical example
- Introduction
- Defining the company scenario
- Analysis of tools and controls
- Maturity level and adherence to standards, regulations and laws
- Cyber risk assessment
- Action plan to raise security and data privacy
- Results and post-implementation measurements
What the course includes
- Video lessons
- Complete practical example
For your team
This course is also offered in-company, on-site or remote, as a private class for your company.
Cyber Cultura course
DiD: Defense in Depth
Payment and access through Hotmart.
cyber@cyberconsulting.com.br