Information Security in Practice

- Purpose and role of information security - an overview - Regulatory requirements and legal obligations, including liability, administrative fines and criminal penalties - Current threat landscape and common attack vectors - Technical aspects of mobile devices and storage media, with regard to data espionage and sabotage - Phishing and social engineering - Technical security measures - Secure remote access to corporate data, encryption of critical network connections and token-based authentication - System hardening, patch and vulnerability management - Secure configuration of web services - Access control for external service providers - Logging and monitoring - Identity and access management - Incident and emergency management