|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/it-security-101-protecting-and-securing-computer-networks/
课程评论：没有评论
课程名称：IT与信息安全101 - 网络安全入门 课程概述：本课程将探讨如何保护组织的计算机网络，以防范内部和外部的网络安全威胁，涉及技术和人力多个方面。有时候，这些威胁是二者的结合，因此在规划组织的网络安全政策时保持警惕尤为重要。 课程主题包括： - 防范网络钓鱼和电话钓鱼（vishing）诈骗，识别这些诈骗的注意事项 - 检查组织网络中使用的设备的网络安全设置常见错误 - 网络安全测试及其对组织和安全人员的法律影响 - 非标准设备及防止面对面社交工程，特别是来自熟人的攻击 - 密码政策和防止用户之间的凭证共享 - 替代认证方式，如生物识别、安全系统打补丁和集中报告 课程还包括一些实际案例，帮助学员识别和解决类似问题。此外，课程还会涵盖信息安全的基础知识，包括遵循全球数据保护政策的要求及数据安全的多种方式。 信息安全部分课程主题包括： - 物理和逻辑信息安全及其实现方法 - 审计和问责，以监控和跟踪所有操作 - 数据保留政策，确保数据仅在需要时保存 - 文件和文件夹权限，防止敏感数据落入错误之手 - 活动日志和警报，帮助识别和预防信息安全威胁 - 与外部员工和承包商的合作 - 数据保护和合规性要求 - 处理信息安全漏洞的方法 - 报告义务及所需信息 - 根本原因分析概述，以了解信息安全事件的成因 请注意，课程内容旨在提供一般指导，而非法律建议。如有疑问，请咨询您公司的IT/信息安全部门，以获取有关组织政策和程序的具体信息。
Over this course, we'll be going over how to protect your organisation's computer network from any internal and external cyber security threats, whether this be from a technological or a human point of view. In some cases, these threats are a combination of both, meaning that it is especially important to be vigilant when planning how to implement cyber security policies within your organisation's computer network.Topics on the course:* Preventing phishing and vishing (telephone) scams, including what to watch out for when identifying them* Checking common mistakes with cyber security settings on devices that are in use on your organisation's network.* Cyber security testing and the associated legal considerations that these tests have on both on your organisation and on security staff personally.* Non-standard devices and preventing offline (face-to-face) social engineering, which can often be hard to detect, especially if it comes from someone you know.* Password policies and preventing credential sharing between end users at your organisation.* Alternative authentication, such as biometrics, system cyber security patching and centralised reporting.Also included are some real-world examples of situations where you might encounter the topics on the course, in order to help you identify these within your own organisation, and be able to resolve them appropriately. On the information security part of this course, we'll be covering some of the basics surrounding information security, and what you need to know in order to be compliant with most of the world's data protection policies, as well as some of the different ways in which data can be secured.Course topics include the following:* Physical and logical information security and the relevant methods with which this can be achieved.* Auditing and accountability so that any actions are monitored and tracked.* Data retention policies so that data is only held for as long as it is needed.* File and folder permissions to help keep sensitive data from falling into the wrong hands* Activity logs and alerts to help identify any information security threats and prevent future ones.* Dealing with external staff and contractors, who can often start working for an organisation on short notice* Data protection and compliance and what you need to know in order to best protect your company* How to deal with any information security breaches that may arise* Reporting obligations and what information you would need to provide on such a report* An overview of root cause analysis, so that you know what caused an information security incident in the first place.Note that the contents of this course are intended as general guidance and not legal advice. If in doubt, speak to your company's IT / information security department for specific information regarding your organisation's policies and procedures.
