5. アセット、脅威、そして脆弱性

Dive into the fundamentals of asset security, understanding the classification of digital and physical assets. Gain insights into NIST Cybersecurity Framework and core functionalities, preparing to assess and manage risks effectively.

• Learn about risk, threat, and vulnerability comprehension
• Explore security guidelines and their application
• Engage in practical challenges and asset security assessments

Discover the significance of security controls in safeguarding organizational assets. Acquire knowledge of encryption, access control, and information privacy regulations. Gain practical experience in enhancing access rights, authorization, and accounting in small to medium-sized enterprises.

• Understand the importance of minimal privilege principles and data lifecycle
• Explore symmetric and asymmetric encryption
• Participate in practical exercises and challenges related to information security

Delve into system vulnerabilities and the importance of multilayered defense. Learn about common vulnerabilities, vulnerability scanning techniques, and the significance of software updates. Acquire insights into penetration testing and understanding attackers' mindsets.

• Explore OWASP TOP 10 and open-source intelligence
• Engage in practical exercises to identify system vulnerabilities and protect against cyber attacks
• Enhance your understanding of cybercrime trends and apply threat modeling frameworks

Uncover the techniques used in social engineering, phishing, and malicious software. Explore threat modeling processes and understand the importance of proactive security measures. Gain practical experience in filtering malicious emails and preventing web-based exploits.

• Learn about the various types of phishing and malware
• Delve into the principles of effective threat modeling
• Participate in practical exercises to apply threat modeling frameworks