Data Security strategy for organizations

Course Curriculum

Chapter 1: Introduction

Lecture 1: Introduction

Lecture 2: What is Digital Information?

Lecture 3: Sensitive Data Types

Lecture 4: What are Sensitive Identifiable Information?

Lecture 5: Non-Public and Financial Information

Lecture 6: Intellectual Property

Lecture 7: Structured vs Unstructured Data

Lecture 8: Data Classification

Lecture 9: Data Lifecycle Management

Lecture 10: Thank you!

Chapter 2: Law and Industry Regulations

Lecture 1: Section Intro – Laws and Regulations

Lecture 2: PCI DSS (Payment Card Industry Data Security Standard)

Lecture 3: HIPAA (Health Insurance Portability and Accountability Act)

Lecture 4: GDPR (General Data Protection Regulation)

Lecture 5: SOX (Sarbanes–Oxley Act)

Lecture 6: ISO 27001

Lecture 7: Local legislations

Chapter 3: Data Governance and Management

Lecture 1: Section Intro – What is Security governance

Lecture 2: Security governance components

Lecture 3: Security policy framework

Lecture 4: Roles and responsibilities

Lecture 5: Security Risk Management

Lecture 6: What are Threats and Vulnerabilities

Lecture 7: How security risks are calculated

Lecture 8: Risk Management Framework

Lecture 9: Risk Identification

Lecture 10: Risk Assessment

Lecture 11: Risk Response

Lecture 12: Risk Monitoring

Lecture 13: Third Party Risks

Lecture 14: Security Awareness Training

Lecture 15: Security Metrics and Improvements

Chapter 4: Data Monitoring and Incident Response

Lecture 1: Section Intro

Lecture 2: Asset Management

Lecture 3: Example of an Asset Management Tool

Lecture 4: Structured vs Unstructured data access management and monitoring

Lecture 5: Access Monitoring Solutions

Lecture 6: File Access Monitoring Tool Demonstration

Lecture 7: Data Breach and Incident Response

Lecture 8: Incident Response Team and Process

Lecture 9: Incident Response Panning – Preparation phase

Lecture 10: Incident Response Panning – Identification phase

Lecture 11: Incident Response Panning – Containment phase

Lecture 12: Incident Response Panning – Remediation phase

Lecture 13: Incident Response Panning – Recovery phase

Lecture 14: Incident Response Panning – Lessons Learned phase

Lecture 15: Incident Response Panning – Table Top Exercises

Lecture 16: Data Breach Notification

Chapter 5: Data Security Technical Controls

Lecture 1: Section Intro

Lecture 2: Access Controls

Lecture 3: Defence in Depth

Lecture 4: Data Security Technical Controls

Lecture 5: Data Access Controls

Lecture 6: Data Encryption

Lecture 7: Data Loss Prevention

Lecture 8: Office 365 DLP Example

Lecture 9: Data Classification Tools

Lecture 10: Office 365 Data Classification Portal

Lecture 11: File Integrity Monitoring

Lecture 12: Logging and Monitoring

Lecture 13: Data Discovery and Protection

Lecture 14: Thank you!

Chapter 6: Optional Bonus Labs – Active Directory and File Audit

Lecture 1: My Notes, Before You Begin This Lab

Lecture 2: The Lab Environment

Lecture 3: The Virtual Machines

Lecture 4: Initial Configuration 1

Lecture 5: Initial Configuration 2

Lecture 6: ADAudit Plus Installation

Lecture 7: ADAudit Plus Initial Configuration

Lecture 8: Identity and Use activity Monitoring

Lecture 9: AD Users and Groups Changes Monitoring

Lecture 10: AD OU and GPO Monitoring

Lecture 11: Troubleshooting ADAudit Plus

Lecture 12: File Audit on ADAudit Plus

Lecture 13: FIM, Analytics and Alerts – ADAudit Plus