Security Awareness Training
Security Awareness Training is a formal education process targeting employees, aimed at enhancing their understanding of potential security threats, maintaining best practices in information security, promoting secure behavior, and developing necessary skills to detect and mitigate potential cyber threats.
Level 1: Emerging
At an emerging level, you are gaining preliminary knowledge of infosec concepts, understanding basic security threats and cautiously implementing simple preventative measures through regular security awareness training.
Level 2: Proficient
At a proficient level you are able to effectively participate in and contribute to security awareness training sessions, demonstrating a strong understanding of information security principles and best practices.
Level 3: Advanced
At an advanced level you are consistently updating Security Awareness Training programs, using innovative methods to engage employees, and ensuring a deep understanding of information security best practices throughout the organization.
Artificial Intelligence in Security
Artificial Intelligence in Security is the application of AI techniques, such as machine learning and predictive analytics, to identify patterns in data, analyze threats, and protect sensitive information against cyber threats, thus enhancing the efficiency and effectiveness of an organization's information security efforts.
Level 1: Emerging
At an emerging level, you are beginning to understand artificial intelligence application in security. You're gaining knowledge about AI threats, mitigation techniques, and the role of AI in enhancing security measures.
Level 2: Proficient
At a proficient level you are able to effectively implement and manage artificial intelligence technologies to enhance security measures, detect anomalies, and respond to cybersecurity threats within an organization.
Level 3: Advanced
At an advanced level, you are proficient in utilizing artificial intelligence in security to proactively detect and respond to complex threats, making strategic decisions to protect sensitive information effectively.
Virtualization Security
Virtualization Security is the process of ensuring and enhancing the security of a virtualized environment by executing comprehensive policies, procedures, and controls to protect data, applications, and infrastructures from potential threats and attacks prevalent in a virtualized environment.
Level 1: Emerging
At an emerging level, you are beginning to understand Virtualization Security. Your knowledge includes basic concepts, risks and mitigation in relation to safeguarding virtual environments within an organization.
Level 2: Proficient
At a proficient level you are able to effectively implement virtualization security measures to protect sensitive information and prevent unauthorized access to virtualized environments within the organization.
Level 3: Advanced
At an advanced level you are capable of effectively securing virtualized environments, implementing advanced access controls, encryption, and monitoring techniques to protect sensitive data and assets from potential threats.
Security Operations Center Management
Security Operations Center Management is the handling of a centralized unit dedicated to addressing cybersecurity issues, through threat identification, assessment and defense, to maintain an organization's information system's integrity, confidentiality and availability while promoting effective incident response strategies.
Level 1: Emerging
At an emerging level, you are gaining fundamental knowledge about securing a network. You're developing skills in managing security incidents, implementing defense measures, and coordinating a Security Operations Center.
Level 2: Proficient
At a proficient level you are able to effectively manage a Security Operations Center, overseeing the detection, analysis, and response to security incidents to ensure the protection of sensitive information.
Level 3: Advanced
At an advanced level you are proficient in leading and managing security operations centers, including implementing advanced detection and response strategies, threat intelligence, and incident response protocols within the information security domain.
Information Security Governance
Information Security Governance is the systematic approach to establishing, managing, and monitoring an organization's information security strategies, policies, and procedures. It ensures compliance with laws, regulations, and aligns with business objectives and risk management.
Level 1: Emerging
At an emerging level you are beginning to grasp essential aspects of Information Security Governance. You understand key policies, procedures, and regulations, but have limited experience in their practical implementation.
Level 2: Proficient
At a proficient level, you are able to establish and maintain an effective information security governance framework within the organization, ensuring alignment with business objectives and regulatory requirements.
Level 3: Advanced
At an advanced level, you are able to develop, implement, and oversee comprehensive information security governance strategies that align with organizational goals, risk appetite, and regulatory requirements.
Cyber Physical Systems Security
Cyber Physical Systems Security is the discipline focused on protecting integrated systems of computational and physical components. It involves enhancing resilience against cyber threats and ensuring seamless operational efficiency, encompassing cybersecurity, network security, information assurance, and advanced system-level security controls.
Level 1: Emerging
At an emerging level, you are beginning to understand the fundamentals of cyber-physical systems security, recognising potential vulnerabilities and threats but still developing preventive measures or responses in information security context.
Level 2: Proficient
At a proficient level, you are able to effectively secure cyber physical systems by implementing advanced security measures, conducting regular risk assessments, and ensuring compliance with industry standards and regulations.
Level 3: Advanced
At an advanced level, you are able to efficiently secure cyber physical systems by implementing advanced encryption techniques, intrusion detection systems, and ensuring secure network communications to protect critical infrastructure.
Cybersecurity Analytics
Cybersecurity Analytics is the process of collecting, aggregating, and analyzing data from multiple security-related sources to identify and assess potential cybersecurity threats, implement effective security measures, and improve the organization's overall information security posture by enhancing threat detection and response capabilities.
Level 1: Emerging
At an emerging level, you are still gaining necessary skills in cybersecurity analytics. You can identify basic threats and interpret security data, but require more experience for complex situations.
Level 2: Proficient
At a proficient level you are able to effectively analyze cybersecurity data to identify potential threats, trends, and patterns in order to protect information assets within the organization.
Level 3: Advanced
At an advanced level, you are able to effectively analyze and interpret complex cybersecurity data to proactively identify and mitigate potential threats to information security within the organization.
Quantum Computing and Security
Quantum Computing and Security is the study and application of quantum mechanics principles in computing to enhance information security. This includes creating cryptographic systems impervious to traditional computational attacks, offering superior data protection and privacy.
Level 1: Emerging
At an emerging level, you are acquiring knowledge about quantum computing principles, focusing on cryptographic risks and implications on information security. You can identify key terminology and recognize essential quantum threats.
Level 2: Proficient
At a proficient level you are able to understand the potential impact of quantum computing on information security, evaluate vulnerabilities, and implement appropriate measures to protect sensitive data from quantum threats.
Level 3: Advanced
At an advanced level you are adept at applying quantum computing principles to enhance information security measures, utilizing cryptographic algorithms and protocols that are resistant to quantum attacks.
Secure Coding Practices
Secure Coding Practices is the application of measures and procedures to prevent security vulnerabilities during software development. These practices involve assuring the integrity and confidentiality of data, identifying potential threats, and implementing security controls while writing and revising code.
Level 1: Emerging
At an emerging level, you are becoming familiar with secure coding practices. You can identify basic security vulnerabilities, are developing secure code writing skills and grasp fundamental cybersecurity principles.
Level 2: Proficient
At a proficient level you are implementing secure coding practices to protect against vulnerabilities and ensure information security. You are proficient in applying encryption, input validation, and other security controls effectively.
Level 3: Advanced
At an advanced level, you are able to expertly apply secure coding practices, ensuring that all code is free from vulnerabilities and follows industry best practices to protect sensitive information.
Web Application Security
Web Application Security is the process of protecting websites and online services against different security threats that exploit vulnerabilities in an application's code. It involves maintaining the confidentiality, integrity, and availability of the application data from unauthorized access, unethical use, disclosure, disruption, modification, or destruction.
Level 1: Emerging
At an emerging level, you are able to identify basic web application security threats, demonstrate general knowledge of secure coding practices, and follow guidelines for web application security.
Level 2: Proficient
At a proficient level, you are able to effectively implement secure coding practices, conduct regular security assessments, and respond to and mitigate web application security incidents within an Information Security framework.
Level 3: Advanced
At an advanced level, you are able to design and implement robust security measures to protect web applications against various cyber threats, minimizing vulnerabilities and ensuring data confidentiality and integrity.
