• ## Essential Units for RQF Level 5 Cyber Security Training **Incident Response:** * • **Incident Identification:** Recognizing and understanding the signs and symptoms of an incident. * • **Incident Categorization:** Identifying the type of incident based on its characteristics. * • **Incident Containment:** Stopping the spread of the incident and mitigating its impact. * • **Incident Eradication:** Removing the malicious threat and restoring normal operations. * • **Lessons Learned:** Identifying and implementing lessons learned from past incidents. **Vulnerability Management:** * • **Vulnerability Scanning:** Identifying vulnerabilities in systems and applications. * • **Vulnerability Assessment:** Evaluating the severity and risk of identified vulnerabilities. * • **Vulnerability Remediation:** Addressing vulnerabilities to mitigate their impact. * • **Vulnerability Monitoring:** Continuously monitoring for new vulnerabilities and changes in existing vulnerabilities. **Threat Intelligence & Analysis:** * • **Threat Intelligence Gathering:** Collecting and analyzing information about potential threats. * • **Threat Modeling:** Creating and analyzing models of potential attacker behavior. * • **Threat Analysis:** Identifying and assessing the likelihood and impact of threats. * • **Threat Response Planning:** Developing and implementing plans to respond to threats. **Security Awareness & Training:** * • **Cybersecurity Awareness Training:** Educating employees on cyber threats and best practices. * • **Phishing Simulation:** Testing employees' ability to identify and avoid phishing attacks. * • **Social Engineering:** Understanding and preventing social engineering attacks. * • **Malware Awareness:** Educating employees on different types of malware and how to protect themselves. **Security Governance & Compliance:** * • **Security Policy Development:** Creating and implementing security policies and procedures. * • **Compliance Monitoring:** Monitoring compliance with relevant security regulations and standards. * • **Incident Reporting:** Reporting and investigating security incidents in accordance with policy. * • **Security Governance Framework:** Establishing a framework for overall security management. **Additional Units:** * **Cybersecurity Operations Center (SOC):** Monitoring and managing the security environment around the clock. * **Incident Response Team:** A team trained to respond to and recover from security incidents. * **Security Awareness Program:** A comprehensive program to promote cybersecurity awareness and behavior. * **Security Culture:** Building a culture of security within the organization.

Assessment

The assessment is done via submission of assignment. There are no written exams.