Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of Information Security in Public Institutions
- Key security principles and their importance in governmental organizations
- Maintaining confidentiality, integrity, and availability in daily operations
- Typical threats facing public sector information and digital services
Governance, Policies, and Responsibilities
- Implementing security governance within an institutional framework
- Defining the roles of managers, users, IT teams, service owners, and suppliers
- Establishing policies, standards, procedures, and accountability measures
Risk Management for Information and Services
- Identifying assets, threats, vulnerabilities, and potential business impacts
- Conducting basic risk assessments and prioritizing risks
- Selecting appropriate mitigation strategies and controls
Information Classification and Data Protection
- Categorizing institutional data based on sensitivity and intended use
- Safeguarding documents, records, databases, and shared files
- Best practices for data storage, transfer, retention, and disposal
Identity and Access Management
- Basics of user accounts, authentication, and authorization
- Implementing least privilege, separation of duties, and access reviews
- Managing access requests, modifications, and revocations
Secure Use of Systems and Digital Services
- Secure handling of email, web systems, remote access, and shared platforms
- Common user errors and strategies to prevent them
- Practical steps for enhancing safety in daily operations
IT Service Management Basics and Security Integration
- The interplay between IT services and information security
- Incorporating security considerations into service design, delivery, and support
- Managing service requests, incidents, changes, and basic service documentation
Incident Handling and Service Continuity
- Identifying security incidents and service disruptions
- Steps for reporting, escalation, containment, communication, and recovery
- Maintaining availability through backups, recovery planning, and disruption management
Security Awareness, Compliance, and Improvement
- Detecting phishing, social engineering attempts, and unsafe behaviors
- Aligning practices with institutional policies, audit requirements, and regulatory standards
- Monitoring controls and identifying actionable improvements
Practical Workshop and Action Planning
- Analyzing a public sector scenario involving security and service management
- Identifying risks and suggesting enhancements to services and security
- Developing an action plan for participants' specific areas of responsibility
Requirements
- Familiarity with fundamental IT concepts, office systems, and the handling of organizational information
- Practical experience utilizing information systems, email, shared files, and online services in daily workflows
- Programming experience is not a requirement
Target Audience
- Public sector staff engaged in using, managing, or overseeing digital information and services
- IT personnel, system administrators, and service management teams within government bodies
- Leaders, coordinators, auditors, and compliance officers accountable for digital security and service quality
Testimonials (2)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.
