Cyber Security First Responder (CFR)

DAY I

Assessing Information Security Risk

• Identify the importance of Risk Management
• Assess Risk
• Mitigate Risk
• Integrate documentation into Risk Management

Creating an Information Assurance lifecycle process

• Evaluate Information Assurance lifecycle models
• Align Information Security operations to the Information Assurance lifecycle
• Align Information Assurance and compliance regulations

Analysing threats to computing and network environments

• Identify threat analysis models
• Assess the impact of reconnaissance incidents
• Assess the impact of systems hacking attacks
• Assess the impact of malware
• Assess the impact of hijacking and impersonation attacks
• Assess the impact of DoS incidents
• Assess the impact of threats to mobile security
• Assess the impact of threats to Cloud Security

DAY II

Designing secure computing and network environments

• Information security architecture design principles
• Design Access Control mechanisms
• Design cryptographic security controls
• Design application security
• Design computing systems security
• Design network security

Operating secure computing and network environments

• Implement change management in security operations
• Implement monitoring in security operations

DAY III

Assessing the security posture within a risk management framework

• Deploy a vulnerability management platform
• Conduct vulnerability assessments
• Conduct penetration tests on network assets
• Follow up on penetration testing

Collecting cyber security intelligence information

• Deploy a security intelligence collection and analysis platform
• Collect data information security intelligence sources

DAY IV

Analysing cyber security intelligence information

• Analyse security intelligence to address incidents
• Use SIEM tools for analysis

Responding to cyber security incidents

• Deploy an incident handling and response architecture
• Perform real-time incident handling tasks
• Prepare for forensic investigation

DAY V

Investigating cyber security incidents

• Create a forensic investigation plan
• Securely collect electronic evidence
• Identify the who, why, and how of an incident
• Follow up on the results of an investigation

Auditing secure computing and network environments

• Deploy a system and processes auditing architecture
• Prepare for audits
• Perform audits geared toward the Information Assurance lifecycle

Cyber Security First Responder (CFR) Exam