Diotraining | Provide More Knowledge And Capability Pelatihan IT Security Audit – Diorama Training Department

Jl. H Zainuddin No 43 Lantai 3, Radio Dalam Kebayoran Baru. Jakarta Selatan

0212-7592-098 (Office Hour) info@diotraining.com

Pelatihan IT Security Audit

IT Security Audit Training

The IT Security Audit course is designed to provide practical view  in conducting IT audit and assurance in one organization. The course is designed to support professional staffs   to expand their understanding of
information technology (IT) audit.  The course presents a more in-depth view on the fundamentals of IT auditing by highlighting  on topics such as:  IT  audit and control analysis, examination of control evidence in conducting IT audit, application control, Operating System and IT Infrastructure audit, and management of IT audit. The course will include discussion and exercises related to general control examinations and application system auditing. The course will also focus on control research and analysis for IT-related topic areas. In addition, through discussion and exercises, participants will gain a working understanding of the process of developing audit work programs encompassing all elements of IT infrastructures. Participants  will be expected to gain a working understanding of how to identify, reference and implement IT management and control policies, standards and related auditing standards. Regarding the latter, the objective is to learn how to identify and interpret the requirements of the standards and. implement the standards in auditing process. IT Secuity  Auditing covers the latest auditing tools alongside real-world examples, ready-to-use checklists, and valuable templates. Each class session will include discussion on an IT audit  management, security, control or audit issues that participants   should be familiar with.

Objectives & Benefits IT Security Audit Training

At the completion of this course, the participants should be able to :
?  Participants shall obtain an expanded understanding on  the role of IT auditors in evaluating IT-related operational and control risk and in assessing the appropriateness and adequacy of management control practices and IT-related controls inside participants’ organization, with the focus on IT infrastructures
?  The partipants shall obtain the capabilityon  how to analyze Windows, UNIX, and Linux systems; secure databases; examine wireless networks and devices; and audit applications. Plus, participants  get up-to-date information on legal standards and practices, privacy and ethical issues, and the CobiT standard.
?  Participants shall obtain the capability in conducting IT audit and implement  techniques in performing assurance, attestation, and audit engagements
?  Capability to build  and maintain an IT audit function within the organization with maximum effectiveness and value
?  Participants shall obtain an expanded familiarity with the principle references in IT governance, control and security as related to IT audit
•  Participants shall obtain the working ability to plan, conduct, and report on information technology audits with specific focus on infrastructure vulnarability assesment and assurance, and drill down upon application vulnarabilities
?  Participants shall obtain  an understanding of the role of IT auditors regarding IT-related compliance and regulatory audits, such as evaluating control standards
?  Capability to use  best prractices  and methodologies such as: COSO, CobiT, ITIL, ISO, and NSA INFOSEC

Target Audience
?  IT Managers
?  Security Managers
?  Auditing Staffs
?  IT Operation Staffs.

Course Contents & Description IT Security Audit

1. Audit Overview The class session will focus on IT audit concepts and processes, which includes: review of some of the key fundamentals of IT auditing, including general auditing standards, risk-based auditing, pre-audit objectives, determining scope and audit objectives, and the process of performing an IT audit. The class session will include discussion on IT performance, controls, control self-assessment, risk analysis, and the objectives of the  IT audit or assurance report.
2. Building an Effective Internal IT Audit Function The class session will focus on management issues regarding how to manage IT audit and assurance functions. The class material will include developing and assessing staff knowledge and skills, competency measurement, assignment of staff, documentation and continuing education requirements.
3. The Audit Process
Perform IT audit in accordance with IT audit standards, guidelines and best practices to assist the organizations in ensuring that its information technology and business system are protected and controlled.
4. Auditing Techniques
Describing all techniques which are available to implemented for IT infrastructure auditing
5. Auditing Entity-Level Controls
Describing all entities control level which encompassing embedded controls in the areas such as:
?  Operating system control in UNIX-, Linux-, and Windows-based
operating systems
?  Controls in  network routers, switches, firewalls, WLANs, and mobile devices
?  Entity-level controls, data centers, and disaster recovery plans
?  Controls in  Web servers, platforms, and applications
?  Database  critical controls
6. Auditing Data Centers and Disaster Recovery Describe how to conduct data center as disaster recovery site with all supporting infrastructures
7. Auditing Switches, Routers, and Firewalls Describe how to perform auditing on network infrastructure and network appliances
8. Auditing Windows Operating Systems Describe how to conduct auditing on operating system using effective and control-piercing methodology within the Windows operating system environment
9. Auditing Unix and Linux Operating Systems Describe how to conduct auditing on operating system using reliant and control-focus  methodology within the Unix  operating system environment
10.Auditing Web Servers
Describe how to perform auditing on Web Servers  infrastructure and net DMZ devices
11.Auditing Databases
Describe how to perform auditing on organization’s Database  and all operating support elements
12.Auditing Applications
Describe how to perform auditing on organization’s Enterprise Applications and the supporting modules
13.Auditing WLAN and Mobile Devices
Describe how to perform auditing on Wide Area Network infrastructure and interface able mobile devices.

Instruktur

Instruktur dalam Pelatihan dan Training ini akan dibawakan oleh seorang yang ahli dalam bidang ini.

Metode

1. Presentasi

2. Diskusi antar peserta

3. Studi kasus

4. Simulasi

5. Evaluasi

6. Konsultasi dengan instruktur

 

Jadwal Diotraining.com tahun 2020 :

21-23 Januari 2020

18-20 Februari 2020

17-19 Maret 2020

14-16 April 2020

16-18 Juni 2020

14-16 Juli 2020

11-13 Agustus 2020

8-10 September 2020

13-15 Oktober 2020

10-13 November 2020

15-17 Desember 2020

Jadwal tersebut dapat disesuaikan dengan kebutuhan calon peserta

Lokasi Pelatihan Diotraining.com :

  • Yogyakarta, Hotel Dafam Malioboro (7.250.000 IDR / participant)
  • Jakarta, Hotel Amaris Tendean (7.750.000 IDR / participant)
  • Bandung, Hotel Golden Flower (7.750.000 IDR / participant)
  • Bali, Hotel Ibis Kuta (8.500.000 IDR / participant)
  • Lombok, Hotel Jayakarta (8.750.000 IDR / participant)

Investasi Pelatihan tahun 2020 ini :

Investasi pelatihan selama tiga hari tersebut menyesuaikan dengan jumlah peserta (on call). *Please feel free to contact us.

Apabila perusahaan membutuhkan paket in house training, anggaran investasi pelatihan dapat menyesuaikan dengan anggaran perusahaan.

Fasilitas Pelatihan di Diorama untuk Paket Group (Minimal 2 orang peserta dari perusahaan yang sama):

  • FREE Airport pickup service (Gratis Antar jemput Hotel/Bandara)
  • FREE Transportasi Peserta ke tempat pelatihan .
  • Module / Handout
  • FREE Flashdisk
  • Sertifikat
  • FREE Bag or bagpackers (Tas Training)
  • Training Kit (Dokumentasi photo, Blocknote, ATK, etc)
  • 2xCoffe Break & 1 Lunch, Dinner
  • FREE Souvenir Exclusive

Jadwal Pelatihan masih dapat berubah, mohon untuk tidak booking transportasi dan akomodasi sebelum mendapat konfirmasi dari Marketing kami. Segala kerugian yang disebabkan oleh miskomunikasi jadwal tidak mendapatkan kompensasi apapun dari kami.

Technorati Tags: training reviu kertas kerja,temuan audit dan teknik penulisan laporan hasil audit yang efektif pasti jalan,training review kertas kerja pasti jalan,training teknik penulisan laporan hasil audit pasti jalan,training penyusunan laporan hasil audit pasti jalan,pelatihan reviu kertas kerja,pelatihan review kertas kerja pasti running

Tinggalkan Balasan

This site uses Akismet to reduce spam. Learn how your comment data is processed.