Qualified Network Security Policy Administrator & SOA Security Architect

How to architect, implement and secure your infrastructure with new NetCentric security SOA architecture, technologies and security usage policies & strategies to raise the level of information security and assurance in your organization.

This 5-day class provides a step by step way to take separate, diverse parts of your security technologies e.g., vulnerability penetration testing, anti-virus and incident response, certificates and network identity, firewalls, IDS (intrusion detection systems) and Forensics' investigations together into a cohesive and effective security policy and awareness program.

Learn how to build a program to reduce the Human Security gap in your company. Today's security policies need to build awareness of the potential problems while minimizing the cost of security incidents. Learn how to build a repeatable security architecture for web services, and create users policies that are well developed and accepted by all to raise the level of information security awareness in your enterprise.

After completing the security polices its time to bring the whole network together and deliver a secure infrastructure. You'll merge today's security technologies into your network with the assurance that your layering defense tactics and providing early warning systems. Bring together the separate, tactical, diverse parts of your network with the services, mechanisms, and objects that reflect security policies, business functions, and technologies into a process involving risk assessment, policy, awareness, technology and security management, and audit functions. Building a security architecture involves close examination of current business processes, technical capability, information security documentation, and existing risk. Students will leave this class with a document template outlining a best practice for an information security soa architecture framework.

When you're through, you'll have a comprehensive, roadmap understanding of SOA network security architecture techniques, tactics and policies that will take your organization into the future… safely.

The result? Advanced security architecture and policies that are custom-tailored to your organization's needs — and fleshed out with everything from a management approval process to implementation manuals.

Key topics:
•  Goals of Netcentric Operations
•  Identify the Components of a Basic SOA
•  Define Services Capable of Contributing to an SOA
•  Define a Security Business Model for SOA Development
•  Map Security Requirements to Specific Functions of an SOA
•  Develop a SOA SSAA and Appendixes
• Determining your organization's needs and recurring structure
• ROI and policies
• Creating manuals for implementation
• Maintaining security awareness and compliance

Who should attend:
CIOs with responsibility over information security, Network Administrators, Information Security Architects, Auditors, Consultants, and all others seeking to plan, implement, and manage an advanced information security policy program

Phase II — Beyond the Basics: Real Life
After mastering the basics of creating an information security policy, what comes next? Translating theory and strategy into workable programs, procedures, and standards that can stand up to the constantly changing demands of the real world.
• Policies, procedures, and standards in a changing environment
• Creating the Security Policies and Procedures Manual (SPPM)
• Creating the Security Administrator Manual (SAM) requirements outline
• Applying the principles: creating policy teams, writing and testing the policies, standards, and procedures
• Management approval process

Phase III — Advanced Awareness Programs
Even the best-laid information security policy isn't worth the paper it's printed on if no one pays attention to it. Learn how to ensure your policies are implemented from top to bottom, throughout your organization.
• Awareness, training, and the difference between them
• Getting the word out
• Changing behavior
• Finding allies
• Monitoring and maintaining the program

Phase IV
•  Goals of Netcentric Operations
•  Identify the Components of a Basic SOA
•  Define Services Capable of Contributing to an SOA
•  Identify Communications Types of an SOA
•  Understanding How Users Interact With a SOA
•  Define a Security Business Model for SOA Development
•  Map Security Requirements to Specific Functions of an SOA
•  Develop a SOA SSAA and Appendixes

In-Class Exercises
Special explorations designed to give you hands-on experience with the information security tools you'll need to achieve your goals.
• Defining the enterprise environment
• Determining organizational policy needs
• Creating organizational policies
• Security policies, standards, and procedures in a changing environment
• Developing an Advanced Awareness Program

Integration Strategies
•  Information security roles and responsibilities
•  Logistics planning
•  Technology vs. process
•  Effective change management practices
•  Executing pilot programs and proofs-of-concept
•  Business process reengineering
•  Establishing the continual information security program

In-Class Exercises
• Defining the “enterprise” environment
• Establishing a case-study enterprise and performing a gap analysis
• Creating a complete information security program for the enterprise
• Creating a technology comparison matrix
• Designing & configuring an advanced security architecture to match your technology