The course prepares the student for taking a lead role in the creation of a corporate cyber risk management program within an organization. It covers the what, why, and how of effective cyber risk management using the Cyber Essentials Canada (CEC) Certification as the ideal model. The new national certification program CyberSecure Canada (CSC) is also introduced and discussed in detail. Security professionals will find this a powerful addition to their portfolio of security and risk management knowledge, and their certifications. It is also an excellent way for a Governance, Risk, and Compliance employee of an organization to better understand the process required to gain and maintain certification for both the CEC and CSC standards.
Why is it valuable for businesses to send their IT staff on this course?
Having key IT staff become Certified Cyber Essentials Canada Practitioners (CCECP), positions the organization to take full advantage of CE Canada’s CE and CE Plus certification programs, as well as the new national CyberSecure Canada certification program. This training certification equips students with practical knowledge of both the CEC and CSC frameworks for ongoing cybersecurity risk management. It also provides the spin-off benefits of creating a competitive corporate business advantage, as well as enhancing students’ professional career skills.
In addition, attendees will leave the class fully prepared to start a certification program for their own company, or for a client company. By focusing on a particular organization of interest during the class, the students will leave with a documented start to either or both of the CEC and CSC standards.
Who should take this course?
Aerospace Executives, Managed Service Providers (MSPs) and non-technical in-house employees will find this course especially valuable as they lead the organization towards certification in the CEC and/or CSC programs.
Registrants are expected to meet the following prerequisites to attend this course:
• Working level understanding of networking concepts;
• Working level understanding of Windows operating system concepts;
• Cybersecurity management experience is an asset;
• Have (or are seeking) a position with responsibility for IT architecture, security, operations, or GRC (Governance, Risk, & Compliance) within a business.
What subject areas will be covered?
This course will cover the key governance and technical subject areas for which the business must meet security requirements in order to obtain the CE Canada's CE or CE Plus certifications. This includes general background on CE Canada Certification and the CE Canada Code of Ethics, as well as technical requirements for network boundaries, firewalls and gateways; secure configurations; access controls; malware protection; and security patching. In addition, there will be detailed review and discussion about Canada's new national certification program CyberSecure Canada and how it complements the Cyber Essentials Canada certification program.
How is the CCECP course structured?
This 2-day course will be conducted in a live, in-person meeting place. Collaborative hands-on exercises are built into the agenda to familiarize the student with the Certification Portal tool. This also maximizes student engagement and knowledge retention by providing the opportunity for sharing experiences, knowledge, and lessons learned.
Each of the 5 CEC control areas and 13 CSC control areas will be covered in detail, with periods for open discussion and Q&A. The course will end with a 45 minute final exam, which students will need to pass with a mark of 70% in order to complete the course and attain certification.
What should I bring into the course?
We recommend that students bring a laptop and smartphone to the course. Wi-Fi will be provided.
If it is in accordance with your organization's security policies, it will also be helpful for you to bring soft copies of your security policies on your laptop for reference during exercises. For businesses that do not have formalized policies, or students who cannot bring them, we will provide sample policy templates for reference purposes.
Note: we ask that students set their smartphones to vibrate during their attendance at the course.
Who developed the CCECP course?
This revised version of the CCECP course was developed by Watsec Cyber Risk Management (Waterloo Security Ltd.) in collaboration with CE Canada. Watsec Cyber Risk Management (Waterloo Security Ltd.) is a CE Canada accredited Certification Body.
DATE & LOCATION
January 28, 2020
9:00am to 4:30 pm
January 29, 2020
9:00am to 4:30 pm
100 New Park Place #1400
COURSE & CERTIFICATION COST
$ 2,650.00 + HST & Fees
Course includes lunches and refreshments for 2-days.
Parking payable on-site by credit card only.
*Please proceed with registration and we will contact
you directly to obtain your desired payment method
(cheque, EFT, or credit card)