Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Foundations of Information Security in Public Institutions
- Key security principles and their importance within government organizations
- Applying confidentiality, integrity, and availability to daily operations
- Typical threats facing public sector information and digital services
Governance, Policies, and Responsibilities
- Establishing security governance in an institutional setting
- Defining roles for managers, end-users, IT teams, service owners, and suppliers
- Implementing policies, standards, procedures, and accountability frameworks
Risk Management for Information and Services
- Identifying assets, threats, vulnerabilities, and potential business impacts
- Conducting basic risk assessments and prioritizing risks
- Choosing appropriate risk treatments and controls
Information Classification and Data Protection
- Categorizing institutional information based on sensitivity and usage
- Safeguarding documents, records, databases, and shared files
- Best practices for data storage, transfer, retention, and disposal
Identity and Access Management
- Basics of user accounts, authentication, and authorization
- Applying least privilege, separation of duties, and regular access reviews
- Managing access requests, modifications, and revocations
Secure Use of Systems and Digital Services
- Secure usage of email, web platforms, remote access, and shared tools
- Common user errors and strategies for prevention
- Practical steps to ensure safer daily operations
IT Service Management Basics and Security Integration
- The intersection of IT services and information security
- Incorporating security into service design, delivery, and support
- Handling service requests, incidents, changes, and maintaining service documentation
Incident Handling and Service Continuity
- Identifying security incidents and service disruptions
- Steps for reporting, escalation, containment, communication, and recovery
- Backups, recovery planning, and ensuring availability during outages
Security Awareness, Compliance, and Improvement
- Detecting phishing, social engineering, and other unsafe behaviors
- Adhering to institutional policies, audit requirements, and regulatory standards
- Monitoring controls and identifying opportunities for practical improvements
Practical Workshop and Action Planning
- Analyzing a public sector security and service management scenario
- Identifying risks and recommending service and security enhancements
- Developing a personal action plan for participants’ areas of responsibility
Requirements
- A foundational understanding of IT concepts, office systems, and the management of institutional information
- Familiarity with using information systems, email, shared files, and online services in daily tasks
- No prior programming experience is necessary
Target Audience
- Public sector staff responsible for using, managing, or overseeing digital information and services
- IT personnel, system administrators, and service management teams within government agencies
- Managers, coordinators, auditors, and compliance officers accountable for digital security and service quality
Testimonials (2)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.
