Introductory training course on the information security

These course deals in detail with basic concepts, information security terms, recommendations of international standards for the security of information assets, building a threat and adversary model, procedures for establishing requirements for information security system and methods for the qualitative assessment of information risks from the implementation of threats.

The objective of the course is achievement of professional competences on information security. This course is the basic one of a series of retraining courses and developed for elementary level training specialist on information security.

The course include: 

• Basic terms and definitions on information security. Goals and objectives of information security. Information and information assets to be protected.
• ISO/IEC 27000, 27001, 27002. Relationship to other standards.
• An international approach to vulnerability identification and analysis. Tactics and techniques represented by MITRE ATT&CK Matrix.
• Risk assessment of a possible information security threat.
• Review of IAEA Nuclear Security Series in part of information and computer security, including TDL-005 “Computer Security Incident Response Planning at Nuclear Facilities”, TDL-006 “Conducting Computer Security Assessments at Nuclear Facilities”.
• Common practices for ensuring information and computer security.

Duration of training - 40 hours

Contacts: OYShkuta@rosatomtech.ru;  +7(484)39 29 083