Security Management Training in Rome

This instructor-led, live training in Rome (online or onsite) is designed for intermediate-level IT auditors who wish to effectively incorporate AI tools into their audit practices.

By the end of this training, participants will be able to:

• Understand the core concepts of artificial intelligence and how it is applied in the context of IT auditing.
• Utilize AI technologies such as machine learning, NLP, and RPA to improve audit efficiency, accuracy, and scope.
• Perform risk assessments using AI tools, enabling continuous monitoring and proactive risk management.
• Integrate AI into audit planning, execution, and reporting, enhancing the overall effectiveness of IT audits.

Encryption Key Management involves the secure creation, storage, distribution, rotation, and retirement of cryptographic keys to safeguard sensitive data and meet regulatory compliance requirements.

This instructor-led, live training (available online or onsite) targets intermediate-level IT and security professionals aiming to establish robust encryption key management practices and systems within enterprise environments.

Upon completion of this training, participants will be able to:

• Comprehend the lifecycle of encryption keys and adhere to best practices for their protection.
• Configure and manage Key Management Systems (KMS) in both on-premises and cloud environments.
• Implement access controls and auditing mechanisms for key usage.
• Ensure compliance with regulations and standards concerning encryption key security.

Format of the Course

• Interactive lectures and discussions.
• Practical application of key management tools in lab environments.
• Guided exercises focused on implementing secure key lifecycle processes.

Course Customization Options

• To arrange customized training tailored to your infrastructure or compliance needs, please contact us.

This instructor-led, live training session Rome (online or onsite) is designed for advanced security analysts eager to enhance their proficiency in using sophisticated Micro Focus ArcSight ESM features. The objective is to improve an organization's capability to detect, respond to, and mitigate cyber threats with greater precision and speed.

By the conclusion of this training, participants will be able to:

• Optimize Micro Focus ArcSight ESM usage to strengthen monitoring and threat detection.
• Construct and manage advanced ArcSight variables to refine event streams for more accurate analysis.
• Develop and implement ArcSight lists and rules for efficient event correlation and alerting.
• Apply advanced correlation techniques to detect complex threat patterns and reduce false positives.

This instructor-led, live training in Rome (online or on-site) is designed for beginner-level law enforcement officers who wish to deepen their understanding of human behavior, enhancing their skills in communication, empathy, conflict resolution, and overall effectiveness in their roles.

By the end of this training, participants will be able to:

• Gain a profound understanding of human psychology.
• Refine advanced communication and conflict resolution skills to foster more effective interactions with the public, colleagues, and during negotiations.
• Foster awareness and comprehension of diverse cultural backgrounds, thereby improving community policing and relations with various demographic groups.

This instructor-led, live training in Rome (online or onsite) is aimed at beginner-level security professionals who wish to gain the knowledge and skills necessary to adapt to the rapidly evolving digital landscape in the security industry.

By the end of this training, participants will be able to:

• Understanding Digital Transformation in security.
• Learn how digital solutions can improve security operations, efficiency, and effectiveness.
• Manage security-related data for informed decision-making.

This instructor-led, live training in Rome (available online or onsite) is designed for security managers at the beginner level who aim to effectively adopt and leverage technology in their field.

Upon completion of this training, participants will be able to:

• Grasp the evolution of technology within the security sector.
• Learn to effectively combine traditional security methods with modern technological solutions.
• Comprehend the fundamentals of cybersecurity, the risks associated with digital systems, and strategies to protect against cyber threats in the security industry.

This instructor-led, live training in Rome (online or onsite) is aimed at beginner-level security managers and designers who wish to effectively plan, design, and implement security strategies that are integrated, technologically advanced, and compliant with legal and ethical standards.

By the end of this training, participants will be able to:

• Learn how to integrate security considerations into architectural and facility design.
• Assess threats and vulnerabilities to inform security planning.
• Develop comprehensive security plans that address a range of threats.
• Create effective emergency response and crisis management plans.

This instructor-led, live training in Rome (online or onsite) is designed for beginner-level security administrators who want to deepen their understanding of organizational security practices.

Upon completion of this training, participants will be able to:

• Grasp the fundamentals of security operations and administration.
• Identify and mitigate various security threats and vulnerabilities.
• Implement and manage security solutions.
• Understand the legal and ethical considerations in security operations.
• Prepare for incident response and disaster recovery.

This instructor-led, live training in Rome (available online or on-site) is designed for advanced professionals seeking a comprehensive understanding of fraud examination concepts and preparation for the Certified Fraud Examiner (CFE) exam.

By the end of this training, participants will be able to:

• Gain comprehensive knowledge of fraud examination principles and the fraud examination process.
• Learn to identify, investigate, and prevent various types of financial fraud schemes.
• Understand the legal environment related to fraud, including the legal elements of fraud, relevant laws, and regulations.
• Acquire practical skills in conducting fraud investigations, including evidence collection, interviewing techniques, and data analysis.
• Learn to design and implement effective fraud prevention and deterrence programs within organizations.
• Gain confidence and knowledge to successfully pass the Certified Fraud Examiner (CFE) exam.

This instructor-led, live training in Rome (online or on-site) targets advanced-level security managers who wish to acquire the knowledge and skills necessary to excel in the exam and in their roles as security management professionals.

By the end of this training, participants will be able to:

• Understand the five domains of ISSMP.
• Develop skills to manage an information security program.
• Learn to establish and maintain security governance.
• Gain insights into risk management, incident response, and continuity planning.
• Prepare effectively for the ISSMP certification exam.

This instructor-led, live training in Rome (online or onsite) is aimed at beginner-level security professionals who wish to thoroughly understand how to protect physical assets, people, and facilities.

By the end of this training, participants will be able to:

• Understand the fundamentals of physical security.
• Learn about risk assessment and management in physical security.
• Explore various physical security measures and technologies.
• Understand the integration of physical security with other security domains.
• Develop skills in designing and implementing effective physical security plans.

This instructor-led, live training in Rome (online or on-site) is designed for IT professionals who wish to understand how to utilize the CipherTrust Solution suite.

By the end of this training, participants will be able to:

• Understand the CipherTrust Solution and its basic functions.
• Evaluate device architecture and usage schemes.
• Manage CipherTrust product suite.

This instructor-led, live training in Rome (online or onsite) targets security managers looking to develop foundational to intermediate skills in CCTV security surveillance and management.

Upon completing this training, participants will be able to:

• Identify various types of CCTV systems and understand their benefits and features.
• Grasp the cabling and setup requirements for CCTV systems.
• Install, configure, and manage CCTV systems effectively.

Description:

Note: Please note that this updated CISM exam content outline applies to exams commencing 1 June 2022.

CISM® stands as the most prestigious and rigorous qualification for Information Security Managers worldwide today. This credential offers you a pathway to join an exclusive peer network capable of continuously learning and adapting to the expanding opportunities and challenges within Information Security Management.

Our CISM training methodology delivers comprehensive coverage of the content across the four CISM domains, with a distinct emphasis on building core concepts and solving ISACA-released CISM exam questions. The course serves as an intensive training program and rigorous exam preparation for ISACA’s Certified Information Security Manager (CISM®) Examination.

Our instructors encourage all participants to review the ISACA-released CISM QA&E (Questions, Answers, and Explanations) as part of their exam preparation. The QA&E is particularly effective in helping participants understand the style of ISACA questions, the approach required to solve them, and aids in the rapid assimilation of CISM concepts during live classroom sessions.
All our trainers possess extensive experience in delivering CISM training. We will thoroughly prepare you for the CISM examination.

Goal:

The primary objective is to help you pass your CISM examination on the first attempt.

Objectives:

• Apply gained knowledge in a practical manner that benefits your organisation.
• Establish and maintain an Information security governance framework to achieve your organization's goals and objectives.
• Manage Information risk to an acceptable level to meet business and compliance requirements.
• Establish and maintain information security architectures (people, process, technology).
• Integrate information security requirements into the contracts and activities of third parties and suppliers.
• Plan, establish, and manage the capability to detect, investigate, respond to, and recover from information security incidents to minimize business impact.

Target Audience:

• Security professionals with 3-5 years of front-line experience.
• Information security managers or individuals with management responsibilities.
• Information security staff and information security assurance providers who require an in-depth understanding of information security management, including: CISO’s, CIO’s, CSO’s, privacy officers, risk managers, security auditors, compliance personnel, BCP/DR personnel, and executive and operational managers responsible for assurance functions.

This instructor-led, live training in Rome (online or onsite) is designed for security professionals who wish to learn and improve their ability to handle security threats and conduct security risk assessments.

By the end of this training, participants will be able to:

• Manage security systems and operate effectively in any hostile environment.
• Manage any security risks or threats.
• Learn how to conduct security risk assessments.

Open Source Software (OSS) Management involves the comprehensive oversight of open-source components throughout their lifecycle within an organization, guaranteeing secure, compliant, and efficient utilization.

Delivered as an instructor-led, live training session (available online or onsite), this program is designed for intermediate IT professionals aiming to implement best practices for managing open-source software in enterprise and government settings.

Upon completion of this training, participants will be equipped to:

• Develop effective OSS policies and governance structures.
• Utilize SBOM and SCA tools to identify, track, and manage open-source dependencies.
• Address risks related to licensing compliance and security vulnerabilities.
• Optimize OSS adoption to maximize innovation and cost efficiency.

Course Format

• Interactive lectures and discussions.
• Case studies and scenario-based exercises.
• Hands-on demonstrations featuring OSS management tools.

Customization Options

• This course can be customized to align with your organization’s specific OSS policies and toolchains. Please contact us to arrange.

This instructor-led live training in Rome (online or on-site) targets intermediate-level cybersecurity professionals aiming to enhance their understanding of GRC frameworks and apply them to secure and compliant business operations.

By the end of this training, participants will be able to:

• Comprehend the core elements of cybersecurity governance, risk, and compliance.
• Perform risk assessments and formulate strategies for risk mitigation.
• Execute compliance measures and oversee regulatory obligations.
• Create and enforce security policies and procedures.

This instructor-led, live training in Rome (online or onsite) is targeted at developers and anyone interested in learning and applying OAuth to provide applications with secure delegated access.

By the end of this training, participants will be able to:

• Learn the fundamentals of OAuth.
• Understand the native applications and their unique security issues when using OAuth.
• Learn and understand the common extensions to the OAuth protocols.
• Integrate with any OAuth authorization server.

This instructor-led, live training in Rome (online or onsite) is aimed at intermediate-level system administrators who wish to learn how to use Siteminder to implement various authentication methods.

By the end of this training, participants will be able to:

• Understand the core concepts of Siteminder and its role in authentication and access management.
• Configure and manage user authentication with Siteminder.
• Implement various authentication methods supported by Siteminder.
• Troubleshoot common issues related to Siteminder authentication.
• Integrate Siteminder with other identity providers for federated authentication.

Description:

Basel III represents a global regulatory framework focused on bank capital adequacy, stress testing, and market liquidity risk. Originally established by the Basel Committee on Banking Supervision in 2010–2011, the implementation timeline for the Accord was extended to March 31, 2019. Basel III enhances bank capital requirements by boosting liquidity levels while reducing leverage. Unlike its predecessors, Basel I and II, which are not fully superseded but rather complemented, Basel III mandates distinct reserve levels for various deposit types and borrowing structures.
Navigating this intricate and evolving regulatory landscape can be challenging. Our course and training programs are designed to help you anticipate changes and understand their impact on your institution. As an accredited training partner of the Basel Certification Institute, we guarantee that our educational materials and training quality remain current and highly effective.

Objectives:

• Prepare participants for the Certified Basel Professional Examination.
• Develop practical strategies and techniques for defining, measuring, analyzing, improving, and controlling operational risk within banking organizations.

Target Audience:

• Board members with risk oversight responsibilities
• Chief Risk Officers (CROs) and Heads of Risk Management
• Members of the Risk Management team
• Staff in Compliance, Legal, and IT support functions
• Equity and Credit Analysts
• Portfolio Managers
• Rating Agency Analysts

Overview:

• Introduction to Basel norms and amendments to the Basel Accord (III)
• Regulations concerning market, credit, counterparty, and liquidity risk
• Stress testing methodologies for various risk measures, including formulation and delivery
• Analysis of Basel III’s likely effects on the international banking industry, with practical application demonstrations
• Justification for the adoption of new Basel norms
• Key features of the Basel III Norms
• Objectives of The Basel III Norms
• Implementation timeline for Basel III

Description:

This four-day event (CGEIT training) serves as the definitive preparation for the exam period, designed to ensure you pass the challenging CGEIT exam on your first attempt.
The CGEIT qualification is an internationally recognized symbol of excellence in IT governance, awarded by ISACA. It is tailored for professionals responsible for managing IT governance or holding significant advisory or assurance responsibilities for IT governance.
Achieving CGEIT status will provide you with broader recognition in the marketplace, as well as increased influence at the executive level.

Objectives:

This seminar has been designed to prepare Delegates for the CGEIT examination by enabling them to supplement their existing knowledge and understanding to be better prepared to pass the exam, as defined by ISACA.

Target Audience:

Our training course is for IT and business professionals, with significant IT governance experience who are undertaking the CGEIT exam.

This comprehensive, hands-on 3-day course is designed to equip participants with the essential knowledge and skills needed to manage information security, information assurance, and information risk processes effectively. The CISMP curriculum aligns with the latest national information assurance frameworks (IAMM), as well as ISO/IEC 27002 and 27001, which serve as the industry-standard code of practice for information security. This program is recognized as a CESG Certified Training (CCT) course.

Following the most recent BCS syllabus, the course prepares attendees for the 2-hour multiple-choice BCS examination.

Earners of this qualification will gain detailed insight into core information security concepts—including confidentiality, integrity, availability, vulnerability, threats, risks, and countermeasures—as well as an understanding of current legislation and regulations affecting information security management. Certificate holders will be able to apply the practical principles learned throughout the course, ensuring that routine business processes become more robust and secure.

This instructor-led, live training in Rome (online or onsite) is designed for compliance professionals in the payment services sector who aim to establish, execute, and enforce an effective compliance program within their organizations.

Upon completion of this training, participants will be able to:

• Grasp the regulatory requirements imposed by government authorities on payment service providers.
• Develop internal policies and procedures necessary to meet government regulations.
• Implement a compliance program that aligns with applicable laws.
• Ensure that all corporate processes and procedures adhere to the compliance program.
• Protect the business's reputation and shield it from legal liabilities.

The foundation of network security lies in the physical layer. In this instructor-led, live training in Rome, participants will explore the security vulnerabilities associated with computer server rooms and discover how to enhance protection through strategic planning, best practices, and the implementation of appropriate technologies.

Upon completion of this training, participants will be able to:

• Evaluate the security risks specific to their organization's computer server rooms.
• Establish control and monitoring systems to limit physical access to critical infrastructure.
• Create access policies tailored to different user groups.
• Effectively communicate security protocols to team members.

Description:

Cybersecurity expertise is highly sought after as global enterprises face persistent threats. A significant majority of professionals surveyed by ISACA acknowledge this trend and intend to pursue roles requiring cybersecurity competence.
To address this need, ISACA has introduced the Cybersecurity Fundamentals Certificate, designed to provide education and validate skills in this critical field.

Objectives:

Amidst escalating cyber threats and a growing global shortage of qualified security professionals, ISACA's Cybersecurity Fundamentals Certificate programme offers an effective method to rapidly equip entry-level staff with the necessary skills and knowledge to thrive in the cybersecurity landscape.

Target Audience:

This certificate program serves as one of the most effective avenues for acquiring foundational cybersecurity knowledge and beginning to develop competencies in this essential domain.

This instructor-led, live training session (online or onsite) is tailored for enterprise leaders who aim to understand data sovereignty principles and develop compliant data management strategies.

By the end of this training, participants will be able to define data sovereignty, identify applicable laws, assess compliance risks, and implement governance frameworks for effective cross-border data management.

In this instructor-led live course held in Rome, participants will acquire the skills to formulate a comprehensive security strategy to tackle the challenges of DevOps security.

This course offers an expert-level introduction to the newly enacted Accessibility Law, equipping developers with the practical skills necessary to design, develop, and maintain fully accessible applications. Beginning with a contextual discussion on the significance and implications of the law, the curriculum swiftly transitions into hands-on coding practices, tools, and testing techniques to ensure both compliance and inclusivity for users with disabilities.

Course Objective:

Equipping participants with a solid grasp of GRC processes and capabilities, along with the necessary skills to effectively integrate governance, performance management, risk management, internal control, and compliance activities.

Course Summary:

• Key terms and definitions in GRC
• Core principles of GRC
• Essential components, practices, and activities
• The connection between GRC and related disciplines

This instructor-led, live training in Rome (available online or onsite) is designed for developers and administrators who aim to create software and products that are HiTRUST compliant.

By the end of this training, participants will be able to:

• Understand the key concepts of the HiTrust CSF (Common Security Framework).
• Identify the HITRUST CSF administrative and security control domains.
• Learn about the different types of HiTrust assessments and scoring.
• Understand the certification process and requirements for HiTrust compliance.
• Know the best practices and tips for adopting the HiTrust approach.

This course equips you with the necessary competencies to establish robust information security practices in accordance with ISO 27005, a standard specifically designed for managing information security risks derived from ISO 27001.

This instructor-led, live training in Rome (online or onsite) is aimed at public sector professionals who wish to utilize information security management and IT service management practices to strengthen digital security strategies and protect institutional digital assets.

By the end of this training, participants will be able to explain core information security concepts, identify risks in information systems and services, apply practical security controls, and support secure IT service delivery.

Target Audience

This course is designed for all staff members who need a practical grasp of Compliance and effective Risk Management.

Course Format

The training utilizes a blended learning methodology that includes:

• Guided discussions
• Slide-based presentations
• Case studies
• Real-world examples

Learning Objectives

Upon completion, participants will be equipped to:

Gain a robust understanding of key Compliance aspects, alongside national and international initiatives focused on managing related risks.

Articulate how organizations and their teams can implement an effective Compliance Risk Management Framework.

Clarify the roles and responsibilities of the Compliance Officer and the Money Laundering Reporting Officer, and comprehend how these functions integrate into the business structure.

Pinpoint critical risk areas within Financial Crime, especially regarding international operations, offshore centers, and high-net-worth clients.

This instructor-led, live training (online or onsite) is designed for cloud professionals seeking to architect and implement multi-cloud solutions that prevent vendor lock-in and ensure data sovereignty.

By the end of this course, participants will be able to identify vendor lock-in risks, design portable architectures, enforce data sovereignty controls, and make effective use of cloud-agnostic tools.

This instructor-led live training in Rome (online or on-site) focuses on analyzing Open Data risks while reducing vulnerability to disasters or data loss.

Upon completing this training, participants will be able to:

• Grasp the core concepts and advantages of Open Data.
• Distinguish between various data types.
• Comprehend Open Data risks and the methods to mitigate them.
• Master Open Data risk management and contingency planning.
• Apply risk mitigation strategies to lower the threat of disasters.

This instructor-led, live training for Payment Card Industry Professionals in Rome (online or onsite) offers a professional qualification for practitioners seeking to demonstrate their expertise and understanding of the PCI Data Security Standard (PCI DSS).

Upon completion of this training, participants will be able to:

• Comprehend the payment process and the PCI standards established to safeguard it.
• Understand the roles and responsibilities of entities within the payment industry.
• Gain deep insight into, and a clear understanding of, the 12 PCI DSS requirements.
• Demonstrate knowledge of PCI DSS and its application to organizations involved in the transaction process.

This instructor-led, live training in Rome (online or onsite) is aimed at IT administrators, security coordinators, and compliance managers who wish to identify, evaluate, and implement security policy management methods for their organization.

By the end of this training, participants will be able to develop, manage, and monitor security policies to protect their organization's information, network, and physical and software assets.

This capstone course equips participants with the skills to design, deploy, and manage a complete sovereign digital infrastructure stack from the ground up. Upon completion, students will have assembled a functional mini-organization utilizing exclusively self-hosted, open-source tools covering identity, communication, productivity, development, security, AI, and monitoring—entirely independent of Google, Microsoft, AWS, or proprietary SaaS providers.

Wazuh is an open-source security platform providing unified XDR and SIEM capabilities for threat detection, integrity monitoring, incident response, and compliance. It aggregates endpoint telemetry into a self-managed analysis engine, offering a credible alternative to Splunk Enterprise Security, Microsoft Sentinel, and other cloud-native SIEMs