Learning Outcomes

Need of Information Security Management System (ISMS) - Business Case

Important Terminologies in ISO 27000:2018

Important Frameworks on Information Security

Lesson Summary

This module briefly overviews information security management systems (ISMS), including their business case and justification. It also presents essential discussions on recognized standards in this subject, ultimately equipping learners with a foundational understanding of ISMS principles and best practices.

Leadership and Organization's Context

Planning & Support Functions

Operations, Evaluation & Improvement

This module provides a detailed overview of the auditable requirements of ISO 27001:2019, covering Clauses 4 to 10. It includes Clause 4 on the Context of the Organization, Clause 5 on Leadership, Clause 6 on Planning, Clause 7 on Support, Clause 8 on Operation, Clause 9 on Performance Evaluation, and Clause 10 on Improvement.

Introduction to New Information Security Controls in ISO 27001:2022

Annex A - Information Security Controls (Part 1) in ISO 27001:2022

Annex A - Information Security Controls (Part 2) in ISO 27001:2022

This module provides a detailed overview of the Annex - A of ISO 27001which is focused on information security operation control. The controls are revamped for better integration with NIST and other security protocols.

ISMS Risk Management With ISO 27005 & ISO 27001

ISO 27005 - Steps of Managing Information Security Risks

ISO 27005 - Risk Evaluation, Risk Treatment and Controls

In this module, we will discuss the concept of risk management based on information security in the ISO/IEC 27005 standard. The module also discusses risk treatment from controls and the input to trigger risk assessment, etc.

ISO 27002:2022 Relationship with ISO 27001

ISO 27002:2022 Assistance to ISO 27001:2022 Compliance

Introduction to the Controls in ISO 27701

This module provides comprehensive guidance on implementing ISO/IEC 27001 information security management system using ISO/IEC 27002 and ISO/IEC 27701 privacy management system standards.

Fundamental Controls (Annex - A-5 to Annex - A-7) in ISO 27001:2013

Fundamental Controls (Annex - A-8 to Annex - A-10) in ISO 27001:2013

Essential Controls (Annex - A.11 to Annex - A-12) in ISO 27001:2013

ISMS Vital Controls (Annex - A.13 to Annex - A-14) in ISO 27001:2013

ISMS Vital Controls (Annex - A.15 to Annex - A-18) in ISO 27001:2013

This module provides an overview of information security operational controls such as security policies, organization of information security, human resource security, asset management, access control, cryptography, physical and environmental security, operations security, communication security, system maintenance, supplier relationships and more.

Diploma in ISO 27001:2022 - Information Security Management System (ISMS) - Assessment

In this free online course, learn about the essentials of ISO/IEC 27001:2022 information security management systems.

Diploma in ISO 27001:2022 - Information Security Management System (ISMS)

Are you ready to dive deep into the world of information security? This in-depth course on ISO 27001:2022 provides you with a thorough understanding of the standard and the practical expertise to build a powerful Information Security Management System (ISMS). You'll explore crucial ISMS controls, discover effective implementation strategies, and become fluent in the essential language of information security. Begin your journey to mastery now!

Introduction to GDPR and Data Protection

Key Principles and Requirements of GDPR

Data Processing and Subject Rights

Data Security and Risk Management

Data Breach Notification

Data Protection Impact Assessments

GDPR for Healthcare

This module will begin by helping you examine the rights of data subjects. We will also help you with the key principles and requirements of GDPR. This module will help you understand data processing and subject rights. Finally, this module will answer questions like, "What is data protection?" and "What are the best practices for data processing?"

Privacy by Design and Default

Accountability, Auditing and Certification

Cross-Border Data Transfers

Enforcement, Penalties and Remedies

Writing a Data Privacy Plan

The Need for GDPR Awareness Training

GDPR for E-commerce Businesses

This module will begin by helping you examine privacy by design and default. We will also help you with the principles of auditing and certification. This module will help you understand the strategies for ensuring compliance with cross-border regulations. Finally, this module will answer questions like, "What are the key elements of GDPR?"

Overview of GDPR for HR and Recruitment

GDPR for Marketing

GDPR for Education

GDPR and Cybersecurity

GDPR and Artificial Intelligence

GDPR and Blockchain

GDPR and Cloud Computing

This module will begin by helping you examine the strategies for GDPR compliance in E-commerce businesses. We will also help you with the principles of the impact of GDPR on HR and recruitment. This module will help you understand the GDPR implications for education post-Brexit. Finally, this module will answer questions like, "How is AI in GDPR?"

Diploma in GDPR and Data Protection - Course assessment

Learn how the General Data Protection Regulation (GDPR) protects information and privacy in this free online course.

Diploma in GDPR and Data Protection

This course explains how the General Data Protection Regulation (GDPR) protects the data and privacy rights of individuals effectively. We explain how organisations can ensure they comply with the GDPR by design and default and lay out the benefits of implementing proper data processing. The course provides answers to questions like ‘what are the key elements of GDPR?’, ‘what is the GDPR’ and ‘how does the GDPR affect me and my organisation?’.

Understanding and Promoting Ethics

Security Governance

Legal and Compliance Issues

Incident Requirements

This module introduces the 5 pillars of Information Security, ISC2 Code of Professional Ethics and the security control frameworks. You'll learn about privacy regulations and the role of security in investigative processes. You'll explore the organisations' role in creating and maintaining security policies, standards, procedures, and guidelines.

Implementing Business Continuity

Risk Management Concepts

Threat Modelling

This module discusses how security risk analysis impacts business continuity planning. You’ll explore the methodologies for threat modelling and the significance of employment agreements in identifying and mitigating security risks. You’ll learn about the emerging threats and strategies for mitigating risks with actionable security policies.

Classify Information and Assets

Establish Information and Asset Handling Requirements

Provision Information and Assets Securely

Ensure Appropriate Asset Retention

Data Security Controls and Compliance Requirements

This module discusses steps to ensuring asset security. You'll learn to classify information, categorise assets and the importance of guidelines and Zero-trust policies in information and asset management. You'll explore the critical role of compliance in managing the data lifecycle and protection against breaches and unauthorised access.

Implementing Secure Design Principles

Understanding Security Models

Assessing and Mitigating Vulnerabilities in Security Architectures

Mitigating Vulnerabilities in Security Architecture

This module introduces security models and teaches you to identify vulnerabilities and enhance the security system. You'll explore strategies for aligning and implementing security controls with the organisation's risk management. You'll learn about cryptographic methods and the role of Public Key Infrastructure (PKI) in secure communications.

Interim Assessment 1

This assessment enables you to review your learning to determine your knowledge and understanding of the first four modules of the course. 
If you do not achieve the required grade after the first attempt, you can retake the assessment until a successful outcome is achieved.

Cryptanalytic Attacks

Designing Site and Facility Security Controls

Managing the Information System Lifecycle

Emerging Security Technologies

This module examines how cryptanalytic attacks target weaknesses in cryptographic systems. It emphasizes integrating security early in development and covers key concepts such as security principles, Homomorphic encryption, and quantum-safe solutions to reduce vulnerabilities and combat threats.

Applying Secure Design Principles in Network Architectures

Traffic Flows and Segmentation

Securing Network Components

Network Security and Its Implications for Modern Communication

Quantum-Safe Cryptography and Post-Quantum Network Security

In this module, you'll explore the role of security network models in systematic protection against cyber threats. You'll learn about the security challenges of 5G network and transport architectures, traffic segmentation, and secure communication channel strategies to mitigate security risks.

Controlling Physical and Logical Access to Assets

Federated Identity with a Third-Party Service

Manage the Identity and Access Provisioning Lifecycle

Modern Identity and Access Management (IAM) Strategies

This module discusses strategies to control physical and logical access to sensitive information. You'll learn about the concept and application of Federated Identity Management (FIM) in simplifying access across multiple systems. You'll explore advanced authentication systems to meet security and usability requirements of organisations.

Design and Validate Assessment, Test, and Audit Strategies

Conduct Security Control Testing

Collect Security Process Data

Analyse Test Output and Generate Report

This module covers principles for designing and validating security assessments. Learn techniques to identify vulnerabilities, conduct internal, external, and third-party audits, and apply automated tools and AI-driven solutions for continuous compliance across varied environments.

Interim Assessment 2

This assessment enables you to review your learning to determine your knowledge and understanding of modules 5 to 8 of the course. 
If you do not achieve the required grade after the first attempt, you can retake the assessment until a successful outcome is achieved.

Understand and Comply with Investigations

Conduct Logging and Monitoring Activities

Perform Configuration Management

Conduct Incident Management

This module explores digital forensics techniques and the role of IDPS and SIEM systems in monitoring, detecting, and preventing security threats. You'll learn how AI, sandboxing, and third-party security services enhance detection capabilities. You'll also examine media management, protection techniques, and data-safeguarding methods.

Implement and Support Patch and Vulnerability Management

Test Disaster Recovery Plans (DRP)

Threat intelligence and Threat Hunting

This module discusses patch and vulnerability management, change management processes, and recovery strategies. You’ll explore disaster recovery, business continuity, physical security controls, and insider threat management. You’ll also learn how threat intelligence and threat-hunting techniques help enhance organisational security.

Understand & Integrate Security in the Software Development Life Cycle

Assess the Effectiveness of Software Security

Security in Software Development Methodologies

Software Security Assurance and Compliance

Secure API Development & API Security Best Practices

This module explores integrating security into SDLC methodologies and applying secure coding practices. You’ll learn to assess security in acquired software, apply controls in CI/CD pipelines, and ensure compliance. You’ll master secure API development, threat mitigation, and strategies to maintain security throughout the software lifecycle.

Certified Information Systems Security Professional (CISSP 2024) - Course Assessment

Advance your cybersecurity skills, ensure compliance, and protect information systems with this free online course.

Diploma in Certified Information Systems Security Professional (CISSP 2024)

Are you ready to become a top cybersecurity professional? This course equips you with cutting-edge skills in risk management, security governance, and threat modelling. Gain expertise in security architecture, enforce compliance and achieve CISSP certification to advance your career in cybersecurity. This course was reviewed and approved by a qualified subject matter expert, Asim Suleman, a Cybersecurity Specialist. Enrol now!

Cyber Crimes and the Importance of DORA

DORA - Requirements and Framework

DORA - Requirements and Framework - Part 2

DORA - Implementation, Enforcement, and Penalties

DORA and Other Cybersecurity Regulations and Laws

This module analyzes the importance of cybersecurity regulations in the European Union. In this regard, it explains the importance of Digital Operational Resilience Act or DORA. It also mentions the five components of DORA's framework the main attributes of each. It also provides a comparison between DORA and similar regulations in the EU.

Fundamentals of Digital Operational Resilience Act (DORA) - Course Assessment

Learn about the essential concepts of the DORA Regulation and its framework with this free online course.

Fundamentals of Digital Operational Resilience Act (DORA)

The Digital Operational Resilience Act (DORA) is a Regulation directed towards the European Union (EU) financial entities. It helps them protect themselves against cyber-attacks. This course will equip Alison students with essential aspects of this Regulation, such as the ICT risk management framework, incident reporting, third-party risk management, etc. It will also compare DORA and other cybersecurity regulations in the EU.

Introduction to CISM and ISACA

Domains of CISM Exam - Part A

Domain of CISM Exam - Part B

Domains of CISM Exam  - Part C

In this module, you will learn about the CISM exam and its importance for IT professionals in great detail. You will also learn about different ISACA certifications, the CISM exam pattern, the exam schedule, and how to take retakes if needed. Moreover, the course also discusses the four domains of the CISM exam along with their key characteristics.

Introduction to Certified Information Security Manager (CISM) - Assessment

With this free online course, get oriented to the CISM certification in the field of information security management.

Introduction to Certified Information Security Manager (CISM)

CISM certification is one of the most widely known certifications acquired by information security management professionals. With this short course on Alison, developers at Exoexcellence Consultants intend to provide students with the basics of this certification, its benefits, and its implications. The course also provides a fair overview of the four domains of this certification, such as information security governance, risk management, etc.

Fundamentals of OCTAVE Security Risk Management - Learning Outcomes

Overview of OCTAVE Risk Assessment and its Importance

Overview of OCTAVE Method Phases

Overview of Octave-S Method and Importance of OCTAVE Method

Fundamentals of OCTAVE Security Risk Management - Lesson Summary

Fundamentals of OCTAVE Security Risk Management Framework - Course Assessment

Learn about the basics of OCTAVE Security Framework and risk-based security management in this free online course.

Fundamentals of OCTAVE Security Risk Management Framework

This course covers the fundamentals of the OCTAVE Security Framework, a risk-based approach to cybersecurity. It explores OCTAVE Strategic (OCTAVE-S), which helps organizations assess risks at a strategic level, and OCTAVE Allegro, which focuses on identifying and managing information security risks quickly and effectively. Both approaches guide organizations in building strong, adaptable and flexible security strategies.

Project Management and Portfolio Management

Oracle Primavera Versus MS Project

Primavera's Risk Analysis Tool

This module discusses the significant benefits of Oracle Primavera P6, especially concerning project and portfolio management. It also discusses all the considerable differences between Primavera and MS Project. Moreover, it also contains discussions on the primary key features of Primavera's risk analysis tool.

The Essentials of Oracle Primavera P6 - Course Assessment

This course introduces project management professionals to Oracle Primavera P6 and its major benefits.

The Essentials of Oracle Primavera P6

Project management and portfolio management hold critical importance in different organizations worldwide. In this regard, they employ various tools, such as Oracle Primavera P6. With this short course, the developers intend to give Alison's students a brief orientation on Oracle Primavera P6, its core attributes, and its vital benefits. The course also has a dedicated topic on the differences between Oracle Primavera P6 and Microsoft Project.

Understanding Fundamental Concepts

Identifying and Mitigating Bias in AI Systems

Ethical Decision Making in AI Development

Foundations of Deontological Ethics

Virtue Ethics and Character Development

Introduction to Ethics and Moral Philosophy

Ethical Dilemmas and Decision-Making Frameworks

Applications of Ethical Theories in Modern Context

Bias and Fairness in Machine Learning

The Impact of AI

This module covers essential aspects of AI ethics, focusing on identifying and addressing bias in AI systems. Learn about key concepts such as Ethics, Deontological Ethics, and Consequentialist Approaches. Additionally, the module examines important frameworks for understanding various moral approaches and reasoning processes.

Understanding Data Privacy Basics

Data Anonymization and Masking Techniques

Ethical Considerations

Identifying Sources of Bias in Data

Evaluating the Impact of Bias

Introduction to Automation Technologies

Impact of Automation on Various Industries

Strategies for Workforce Adaptation

Philosophical Foundations of Ethical AI

Regulatory Frameworks and Policy Issues

In this module, we will cover the concept of data privacy, including the collection, storage, and protection of personal and sensitive information. We will also discuss important techniques for data anonymization and masking to safeguard individual identities while still allowing for valuable data analysis.

Understanding Legal Foundations for AI

Regulatory Approaches to AI Development

International Perspectives on AI Regulations

Key International AI Standards

Compliance and Risk Management in AI

Introduction to Social Justice and Equity in AI

Mitigating Algorithmic Bias and Discrimination

Case Studies and Future Directions in AI

This module discusses the legal principles that govern AI technologies, along with essential legal concepts that underpin AI development and deployment. It also explores how ethical considerations are integrated into AI-policy making, including strategies for mitigating algorithmic bias and discrimination.

Environmental Impacts of AI

Ethical Considerations in AI Development

Foundations of Ethical Leadership in AI

Privacy and Data Protection in AI Systems

Building a Culture of Ethical AI Practices

Establishing Core Ethical Principles

Creating and Implementing Ethical Policies

Understanding Ethical Principles

Frameworks for Ethical Decision Making

Evaluating and Refining Ethical Standards

In this module, learn how AI can drive economic growth and social change while also creating economic inequality. Explore strategies for implementing robust privacy measures in AI systems to build trust and compliance. We also explain essential techniques for assessing the effectiveness of ethical policies in AI deployment.

Discover key principles of ethics, critical theories and framework of AI development in this free online course.

Diploma in AI Ethics: Navigating the Moral Compass of Business AI

Learn the key concepts of data privacy as well as the profound effects of AI on individuals and communities in this course. The course covers a range of topics, including theories of moral reasoning in ethical decision-making, ethical considerations in AI integration, algorithmic bias, and more.  This course will teach you about the ethical framework of policies and standards for effective AI deployment. Start this course today.