Information Security & Cyber Security Training

• Cyber Security Awareness
• Information Security Awareness
• Cyber Security Fundamentals for Employees
• Security Awareness for Corporate Professionals
• Understanding Cyber Threats
• Cyber Hygiene
• Everyday Cyber Security
• Safe Digital Behaviour
• Protecting Organisational Information
• Security Responsibilities of Employees
• Cyber Security Awareness for Remote Employees
• Cyber Security Awareness for Hybrid Workforces
• Cyber Security for New Joiners
• Annual Security Awareness Programs
• Role-Based Cyber Security Awareness

• Information Security Fundamentals
• Confidentiality, Integrity and Availability
• Information Security Principles
• Understanding Information Assets
• Information Classification
• Information Handling
• Information Security Responsibilities
• Information Security Risk Awareness
• Security Controls Awareness
• Information Security Governance Fundamentals
• Information Security for Business Professionals

• Phishing Awareness
• Recognising Phishing Emails
• Spear Phishing Awareness
• Email Security Awareness
• Identifying Suspicious Messages
• Business Email Compromise Awareness
• Safe Link and Attachment Practices
• Reporting Phishing Attempts
• Phishing Simulation Awareness
• Phishing Prevention for Employees

• Social Engineering Awareness
• Understanding Social Engineering
• Human-Based Cyber Attacks
• Impersonation Attacks
• Pretexting Awareness
• Baiting Awareness
• Tailgating Awareness
• Voice Phishing Awareness
• SMS Phishing Awareness
• Social Media Engineering Risks
• Recognising Manipulation Techniques
• Protecting Against Social Engineering

• Password Security
• Strong Password Practices
• Credential Protection
• Multi-Factor Authentication Awareness
• Password Manager Awareness
• Avoiding Credential Reuse
• Protecting Authentication Information
• Account Security
• Secure Login Practices
• Credential Theft Awareness

• Data Protection Awareness
• Protecting Sensitive Information
• Data Classification
• Secure Data Handling
• Data Sharing Practices
• Data Storage Awareness
• Confidential Information Management
• Protecting Customer Information
• Personal Data Awareness
• Secure File Sharing
• Secure Document Handling
• Data Loss Prevention Awareness

• Data Privacy Awareness
• Privacy Fundamentals for Employees
• Handling Personal Information
• Privacy Responsibilities
• Data Minimisation Awareness
• Secure Handling of Personal Data
• Privacy in the Workplace
• Privacy Risk Awareness
• Privacy and Cyber Security
• Responsible Information Use

Where organisations require training linked to particular privacy laws, regulations or internal compliance frameworks, the content should be aligned with the organisation's approved legal, compliance and policy requirements.

• Email Security Awareness
• Safe Email Practices
• Suspicious Email Identification
• Attachment Security
• Link Security
• Email Impersonation
• Business Email Compromise
• Secure Email Communication
• Protecting Confidential Information in Email
• Email Security for Corporate Employees

• Safe Internet Usage
• Secure Web Browsing
• Website Risk Awareness
• Malicious Website Awareness
• Download Safety
• Browser Security Awareness
• Online Fraud Awareness
• Safe Search Practices
• Secure Internet Behaviour

• Cyber Security for Remote Workers
• Secure Work-from-Home Practices
• Remote Access Security
• Home Network Security Awareness
• Secure Wi-Fi Practices
• Protecting Devices Outside the Office
• Secure Collaboration
• Remote Data Handling
• Remote Meeting Security
• Hybrid Work Security

• Mobile Security Awareness
• Smartphone Security
• Secure Mobile Working
• Mobile Application Awareness
• Device Locking and Authentication
• Mobile Data Protection
• Public Wi-Fi Awareness
• Lost Device Response
• Mobile Phishing Awareness
• Bring Your Own Device Awareness

• Physical Security Awareness
• Workplace Security Practices
• Tailgating Prevention
• Visitor Security Awareness
• Clean Desk Awareness
• Protecting Printed Information
• Secure Disposal Awareness
• Device Protection
• Workplace Access Awareness
• Protecting Confidential Conversations

• Insider Threat Awareness
• Understanding Insider Risk
• Accidental Insider Threats
• Malicious Insider Threat Awareness
• Information Misuse
• Privileged Access Awareness
• Recognising Suspicious Behaviour
• Reporting Insider Security Concerns
• Building Security Responsibility

• Cyber Fraud Awareness
• Digital Fraud
• Online Scam Awareness
• Payment Fraud Awareness
• Invoice Fraud
• Business Email Compromise
• Identity Fraud Awareness
• Social Engineering Fraud
• Financial Scam Awareness
• Fraud Prevention for Employees

• Secure Use of Generative AI
• AI Security Awareness
• Protecting Confidential Information When Using AI
• Data Privacy and AI
• AI Tool Risk Awareness
• Responsible AI Tool Usage
• Unapproved AI Tool Awareness
• AI Prompt Security
• AI-Generated Content Verification
• AI and Information Security
• Security Risks of Public AI Tools
• Shadow AI Awareness

Role-specific AI capability development can also be addressed separately through the Vebsters Role-Based AI Training portfolio.

• Cyber Security for Managers
• Information Security Responsibilities for Managers
• Cyber Risk Awareness for Managers
• Managing Security Behaviour in Teams
• Security Incident Escalation
• Protecting Team Information
• Security Responsibilities in Hybrid Teams
• Cyber Risk Decision-Making
• Managing Third-Party Security Awareness
• Manager Role in Building Security Culture

• Cyber Security Awareness for Senior Leaders
• Cyber Risk for Business Leaders
• Cyber Security for CXOs
• Understanding Enterprise Cyber Risk
• Cyber Security Governance Awareness
• Leadership Responsibilities in Cyber Security
• Cyber Incident Leadership
• Cyber Risk Decision-Making
• Security Investment Awareness
• Cyber Resilience for Leaders
• Board-Level Cyber Security Awareness

• Cyber Security for HR Professionals
• Protecting Employee Data
• Secure Recruitment Practices
• HR Data Security
• Employee Onboarding and Security
• Employee Offboarding and Access Awareness
• Social Engineering Risks for HR
• Protecting Candidate Information
• Secure HR Communication
• Insider Risk Awareness for HR

• Cyber Security for Finance Professionals
• Payment Fraud Awareness
• Invoice Fraud
• Business Email Compromise
• Financial Data Security
• Secure Payment Processes
• Social Engineering for Finance Teams
• Protecting Financial Information
• Cyber Risk in Vendor Payments
• Fraud Escalation Awareness

• Cyber Security for Sales Professionals
• Protecting Customer Information
• Secure Customer Communication
• Social Engineering Risks for Sales Teams
• Sharing Documents Securely
• CRM Security Awareness
• Customer Data Handling
• Secure Travel Practices
• Cyber Risk in Customer-Facing Roles

• Cyber Security for Procurement Professionals
• Third-Party Cyber Risk Awareness
• Supplier Security Awareness
• Vendor Security Considerations
• Secure Procurement Processes
• Cyber Risk in Supply Chains
• Protecting Commercial Information
• Third-Party Access Risk Awareness
• Vendor Data Handling
• Cyber Security Questions for Suppliers

• Secure Coding Fundamentals
• Security for Software Developers
• Secure Software Development
• OWASP Awareness
• Application Security Fundamentals
• Input Validation
• Authentication and Authorisation Fundamentals
• Session Security
• Secure Error Handling
• Secure API Development
• Secure Code Review
• Common Software Vulnerabilities
• Secrets Management Awareness
• Dependency Security
• Security in the Software Development Lifecycle

• Secure SDLC Fundamentals
• Security Requirements
• Threat Modelling Fundamentals
• Secure Design
• Secure Coding
• Security Testing
• Code Review
• Vulnerability Management
• Dependency Management
• Application Security Testing
• DevSecOps Fundamentals
• Security Throughout the Development Lifecycle

• Application Security Fundamentals
• Web Application Security
• Secure Web Development
• Common Application Vulnerabilities
• OWASP Top Risks Awareness
• Authentication Security
• Authorisation Security
• Session Management Security
• API Security
• Secure Application Configuration
• Application Vulnerability Management
• Application Security Testing Fundamentals

• API Security Fundamentals
• Secure API Design
• API Authentication
• API Authorisation
• API Access Control
• API Input Validation
• API Security Testing
• API Vulnerability Awareness
• Protecting API Keys and Secrets
• Secure API Development Practices

• Web Security Fundamentals
• Web Application Threats
• Secure Web Development
• Cross-Site Scripting Awareness
• Injection Vulnerabilities
• Authentication Weaknesses
• Access-Control Risks
• Session Security
• Web Security Testing Fundamentals
• Secure Web Configuration

• Network Security Fundamentals
• Network Threats
• Network Security Controls
• Firewalls
• Network Segmentation
• Secure Network Architecture
• Intrusion Detection Awareness
• Intrusion Prevention Awareness
• Network Monitoring
• VPN Security
• Wireless Security
• Network Access Control
• Network Security Troubleshooting

• Cloud Security Fundamentals
• Shared Responsibility Model
• Cloud Identity and Access Management
• Cloud Data Protection
• Cloud Network Security
• Cloud Configuration Security
• Cloud Logging and Monitoring
• Cloud Security Posture
• Cloud Workload Security
• Cloud Security Risk
• Secure Cloud Architecture
• Multi-Cloud Security Awareness

Platform-specific programs can be designed around organisational environments such as AWS, Microsoft Azure or Google Cloud where required.

• Identity and Access Management Fundamentals
• Authentication Fundamentals
• Authorisation Fundamentals
• Role-Based Access Control
• Privileged Access Awareness
• Access Governance
• Identity Lifecycle Management
• Multi-Factor Authentication
• Single Sign-On Fundamentals
• Zero Trust Identity Concepts
• Access Review Fundamentals
• Privileged Access Management Awareness

• Zero Trust Fundamentals
• Zero Trust Principles
• Identity-Centric Security
• Least Privilege
• Continuous Verification
• Device Trust
• Network Segmentation
• Zero Trust Architecture Awareness
• Implementing Zero Trust Principles
• Zero Trust for IT Teams

• Endpoint Security Fundamentals
• Device Security
• Endpoint Protection
• Malware Protection
• Endpoint Monitoring
• Patch Management Awareness
• Device Hardening
• Endpoint Detection and Response Awareness
• Secure Endpoint Configuration
• Mobile Endpoint Security

• Malware Awareness
• Ransomware Awareness
• Understanding Malware
• Ransomware Attack Lifecycle Awareness
• Preventing Malware Infection
• Safe File Handling
• Protecting Against Ransomware
• Incident Reporting
• Backup Awareness
• Ransomware Response Awareness

• Vulnerability Management Fundamentals
• Vulnerability Identification
• Vulnerability Assessment
• Vulnerability Prioritisation
• Remediation Management
• Patch Management
• Risk-Based Vulnerability Management
• Vulnerability Reporting
• Vulnerability Lifecycle Management
• Vulnerability Management for IT Teams

• Penetration Testing Fundamentals
• Ethical Hacking Fundamentals
• Penetration Testing Methodology
• Reconnaissance Fundamentals
• Web Application Testing
• Network Penetration Testing
• Vulnerability Validation
• Security Testing
• Reporting Security Findings
• Remediation Verification

Hands-on programs should be conducted only in authorised lab or organisational environments with appropriate permissions and controls.

• Ethical Hacking Fundamentals
• Cyber Attack Techniques Awareness
• Reconnaissance
• Vulnerability Discovery
• Network Security Testing
• Web Security Testing
• Authentication Testing
• Security Assessment
• Ethical Hacking Labs
• Reporting and Remediation

All practical exercises should be performed only within authorised environments.

• SOC Fundamentals
• Security Operations Fundamentals
• Role of a SOC Analyst
• Security Monitoring
• Event Analysis
• Alert Investigation
• Log Analysis
• Security Incident Triage
• Threat Detection
• Escalation Procedures
• SOC Processes
• SOC Analyst Development
• Security Operations Improvement

• SIEM Fundamentals
• Security Event Monitoring
• Log Collection
• Log Analysis
• Correlation Fundamentals
• Alert Investigation
• SIEM Use Cases
• Security Monitoring
• Incident Detection
• SIEM for SOC Analysts

Technology-specific programs can be developed according to the organisation's deployed SIEM environment.

• Threat Detection Fundamentals
• Security Event Analysis
• Threat Identification
• Indicators of Compromise
• Suspicious Activity Analysis
• Behavioural Detection Awareness
• Threat Detection Use Cases
• Detection Engineering Fundamentals
• Threat Analysis for SOC Teams

• Cyber Threat Intelligence Fundamentals
• Threat Intelligence Lifecycle
• Threat Actor Awareness
• Indicators of Compromise
• Threat Research
• Threat Analysis
• Intelligence Sources
• Threat Intelligence for SOC Teams
• Applying Threat Intelligence
• Threat Intelligence Reporting

• Incident Response Fundamentals
• Security Incident Management
• Incident Identification
• Incident Triage
• Incident Containment
• Incident Eradication
• Recovery
• Incident Communication
• Incident Escalation
• Post-Incident Review
• Cyber Incident Simulations
• Incident Response for Technical Teams

• Cyber Incident Leadership
• Executive Cyber Incident Awareness
• Cyber Crisis Decision-Making
• Incident Escalation
• Crisis Communication Awareness
• Business Continuity During Cyber Incidents
• Leadership Roles During Incidents
• Cyber Incident Tabletop Exercises

• Digital Forensics Fundamentals
• Evidence Handling Awareness
• Forensic Investigation Process
• Log Investigation
• Endpoint Investigation Fundamentals
• Network Forensics Awareness
• Incident Evidence Collection
• Digital Forensics for Incident Responders

• Security Monitoring Fundamentals
• Log Analysis
• Windows Security Logs
• Linux Security Logs
• Network Logs
• Application Logs
• Identifying Suspicious Events
• Security Monitoring Use Cases
• Log Investigation
• Security Analysis Techniques

• Threat Hunting Fundamentals
• Hypothesis-Based Hunting
• Threat Hunting Data Sources
• Indicators and Behaviours
• Log-Based Threat Hunting
• Endpoint Threat Hunting Fundamentals
• Network Threat Hunting Fundamentals
• Threat Hunting for SOC Teams

• DevSecOps Fundamentals
• Security in DevOps
• Shift-Left Security
• Secure CI/CD
• Code Security
• Dependency Security
• Secrets Management
• Container Security
• Infrastructure-as-Code Security
• Security Automation
• Security Testing in Pipelines
• DevSecOps Culture

• Container Security Fundamentals
• Docker Security
• Container Image Security
• Container Configuration Security
• Kubernetes Security Fundamentals
• Kubernetes Access Control
• Kubernetes Network Security
• Kubernetes Workload Security
• Secrets Management
• Container Runtime Security
• Kubernetes Security Monitoring

• Database Security Fundamentals
• Database Access Control
• Database Authentication
• Database Privilege Management
• Data Encryption Awareness
• Database Activity Monitoring
• Secure Database Configuration
• Database Vulnerability Awareness
• Protecting Sensitive Data
• Database Security for Administrators

• Data Security Fundamentals
• Data Classification
• Data Access Control
• Encryption Fundamentals
• Data Loss Prevention
• Secure Data Storage
• Secure Data Transfer
• Data Retention Awareness
• Data Security for Cloud Environments
• Protecting Sensitive Business Information

• Cryptography Fundamentals
• Encryption Concepts
• Symmetric and Asymmetric Encryption
• Hashing
• Digital Signatures
• Public Key Infrastructure Fundamentals
• Certificate Awareness
• Key Management Fundamentals
• Cryptography for Developers

• Security Architecture Fundamentals
• Designing Secure Systems
• Security Architecture Principles
• Defence in Depth
• Identity-Centric Architecture
• Network Security Architecture
• Cloud Security Architecture
• Application Security Architecture
• Security Design Reviews
• Enterprise Security Architecture Awareness

• Cyber Risk Fundamentals
• Information Security Risk Management
• Cyber Risk Identification
• Risk Assessment
• Risk Analysis
• Risk Treatment
• Security Control Selection
• Risk Monitoring
• Cyber Risk Reporting
• Third-Party Cyber Risk
• Cyber Risk for Managers
• Enterprise Cyber Risk Awareness

• Third-Party Cyber Risk Fundamentals
• Vendor Security Risk
• Supplier Security Assessment Awareness
• Third-Party Access Risk
• Security Requirements for Vendors
• Third-Party Data Risk
• Vendor Security Monitoring Awareness
• Supply Chain Cyber Security
• Third-Party Incident Awareness

• Information Security Governance Fundamentals
• Security Roles and Responsibilities
• Security Policies
• Security Standards
• Security Procedures
• Security Governance Structures
• Security Metrics Awareness
• Security Reporting
• Security Accountability
• Security Governance for Managers
• Governance for Security Leaders

• ISMS Fundamentals
• Information Security Management Awareness
• Security Policy Frameworks
• Risk-Based Security Management
• Security Control Awareness
• Information Security Roles
• Continual Improvement Awareness
• ISMS Awareness for Employees
• ISMS Awareness for Managers

Where formal ISO or other certification-specific training is required, the program scope should clearly distinguish awareness or capability training from accredited certification, auditor or qualification programs.

• ISO 27001 Awareness
• Information Security Management Awareness
• Understanding ISO 27001 Concepts
• Roles and Responsibilities
• Risk-Based Information Security
• Security Control Awareness
• Employee Responsibilities within an ISMS
• ISO 27001 Awareness for Managers

Certification, Lead Auditor and Lead Implementer programs should only be represented as such when delivered through the appropriate authorised or recognised certification route.

• Information Security Policy Awareness
• Acceptable Use Policy
• Password Policy Awareness
• Data Handling Policy
• Remote Working Policy
• Mobile Device Policy
• Access Control Policy
• Incident Reporting Policy
• AI Usage Policy Awareness
• Employee Security Responsibilities

• Building a Security Culture
• Security Mindset
• Human Risk Awareness
• Security Champions
• Security Ambassadors
• Cyber Security Behaviour
• Building Employee Security Responsibility
• Security Communication
• Security Awareness Campaigns
• Reinforcing Secure Behaviour

• Cyber Security Fundamentals
• Networking Fundamentals for Security
• Operating System Security Fundamentals
• Linux Fundamentals for Cyber Security
• Information Security Fundamentals
• Security Threats
• Vulnerability Fundamentals
• Web Security Fundamentals
• Network Security Fundamentals
• Security Monitoring Fundamentals
• Incident Response Fundamentals
• Security Labs
• Cyber Security Career Foundations

• SOC Analyst Fundamentals
• Security Monitoring
• Log Analysis
• SIEM Fundamentals
• Alert Investigation
• Incident Triage
• Threat Detection
• Threat Intelligence Fundamentals
• Incident Response
• Security Reporting
• Practical SOC Scenarios

• Network Security
• Endpoint Security
• Identity and Access
• Security Monitoring
• Cloud Security
• Vulnerability Management
• Security Automation
• Secure Configuration
• Security Architecture Fundamentals
• Incident Response
• Security Operations

• Application Security Fundamentals
• OWASP Awareness
• Secure Coding
• Threat Modelling
• Application Security Testing
• API Security
• Secure SDLC
• Code Review
• Vulnerability Management
• DevSecOps
• Security Architecture

• Cloud Security Fundamentals
• Cloud Identity
• Cloud Network Security
• Cloud Data Protection
• Cloud Workload Security
• Cloud Configuration
• Cloud Security Monitoring
• Cloud Vulnerability Management
• Cloud Incident Response
• Cloud Security Architecture
• Cloud Governance

• Security Management Fundamentals
• Cyber Risk Management
• Security Governance
• Security Program Management
• Security Metrics
• Security Reporting
• Incident Management
• Security Culture
• Third-Party Risk
• Security Leadership
• Communicating Cyber Risk to Business Leaders

Information Security & Cyber Security Training can also be structured specifically around roles. Examples include:

• Cyber Security Awareness for All Employees
• Cyber Security for First-Time Managers
• Information Security for HR Professionals
• Cyber Security for Finance Teams
• Security Awareness for Sales Professionals
• Data Protection for Customer Service Teams
• Cyber Security for Procurement Managers
• Third-Party Cyber Risk for Vendor Management Teams
• Secure Coding for Software Developers
• Application Security for Development Teams
• DevSecOps for DevOps Engineers
• Cloud Security for Cloud Engineers
• Security Monitoring for SOC Analysts
• Incident Response for Security Teams
• Cyber Risk for Business Leaders
• Cyber Security Governance for Senior Leaders
• Information Security for CXOs

Programs can also be structured as progressive learning journeys.

• Employee Security Journey
• Cyber Security Awareness
• Phishing & Social Engineering
• Data Protection
• Secure Digital Behaviour
• Incident Reporting
• Role-Based Security Practice
• Developer Security Journey
• Security Fundamentals
• Secure Coding
• OWASP Awareness
• API Security
• Threat Modelling
• Secure SDLC
• DevSecOps
• SOC Analyst Journey
• Security Fundamentals
• Networking & Operating Systems
• Log Analysis
• SIEM
• Threat Detection
• Incident Triage
• Threat Intelligence
• Incident Response
• Security Manager Journey
• Security Operations
• Cyber Risk
• Governance
• Incident Management
• Third-Party Risk
• Security Culture
• Executive Security Communication
• Cloud Security Journey
• Cloud Fundamentals
• Identity
• Network Security
• Data Protection
• Workload Security
• Monitoring
• Vulnerability Management
• Cloud Security Architecture