CYBERSEC-TP-RISK.AE1
Cybersecurity and Third-Party Risk
Learn to identify, assess, and mitigate cybersecurity risks posed by third-party vendors and suppliers.
- Practice in 17 Praktische Übungen — nothing to install
- 18 Interaktive Lektionen Und 66 topics mapped to the official exam objectives
- 272 Testfragen zur Praxis
Intermediate Selbstgesteuert · 1 Jahr Zugang 4.3/5 (105 Rezension)
17 Praktische LiveLabs
Practice real IT tasks in guided environments.
- Reale Umgebungen
- Automatisch bewertet
- Keine Installation
18Interaktive Lektionen
66Topics
17LiveLab
272Testfragen zur Praxis
2Videos
136Karteikarten
136Glossar der Begriffe
01 / Fähigkeiten, die Sie erwerben
What you will be able to do
Try Free →
Keine Kreditkarte benötigt
Our third-party cyber risk course focuses on the growing threat of cyberattacks and supply chain vulnerabilities. Learn to identify and mitigate cybersecurity threats, conduct thorough due diligence on third-party vendors, and establish effective risk management strategies. Explore topics such as supply chain attacks, cloud security, data privacy, and compliance regulations.
- Identify and assess potential cybersecurity risks posed by third-party vendors and suppliers
- Conduct thorough due diligence on third-party vendors to evaluate their security practices and compliance with industry standards
- Use supply chain security best practices to prevent attacks and data breaches
- Take actions to ensure compliance with the relevant cybersecurity regulations and standards (e.g. GDPR, HIPAA, PCI DSS)
- Implement strategies based on cybersecurity frameworks such as NIST Cybersecurity Framework and ISO 27001
- Maintain a proactive cybersecurity posture and continuously improve risk management processes
Course Highlights
-
18 Strukturierte Lektionen Umfassende Abdeckung der zentralen Kursziele
-
17 Praktische LiveLabs Interaktive, geführte Szenarien mit sofortiger Auswertung
-
272 Übungsfragen Bewertungstests mit ausführlichen Antwortbegründungen
-
1 Jahr voller Zugang Selbstgesteuertes Lernen, jederzeit auf allen Geräten zugänglich
02 / Lektionen & Labore
See exactly what you will learn and practice
Unterrichtsplan
18 Interaktive Lektionen · 66 topics01 Introduction 1 topics +
- Who Will Benefit Most from This Course?
02 What Is the Risk? 8 topics +
- The SolarWinds Supply‐Chain Attack
- The VGCA Supply‐Chain Attack
- The Zyxel Backdoor Attack
- Other Supply‐Chain Attacks
- Problem Scope
- Compliance Does Not Equal Security
- Third‐Party Breach Examples
- Conclusion
03 Cybersecurity Basics 5 topics · 3 LiveLab +
- Cybersecurity Basics for Third-Party Risk
- Cybersecurity Frameworks
- Due Care and Due Diligence
- Cybercrime and Cybersecurity
- Conclusion
3 LiveLab in this lesson — see the labs panel →
04 What the COVID‐19 Pandemic Did to Cybersecurity and Third‐Party Risk 3 topics · 1 LiveLab +
- The Pandemic Shutdown
- SolarWinds Attack Update
- Conclusion
1 LiveLab in this lesson — see the labs panel →
05 Third‐Party Risk Management 4 topics +
- Third‐Party Risk Management Frameworks
- The Cybersecurity and Third‐Party Risk Program Management
- The Kristina Conglomerate (KC) Enterprises
- Conclusion
06 Onboarding Due Diligence 3 topics +
- Intake
- Cybersecurity Third‐Party Intake
- Conclusion
07 Ongoing Due Diligence 8 topics · 2 LiveLab +
- Low‐Risk Vendor Ongoing Due Diligence
- Moderate‐Risk Vendor Ongoing Due Diligence
- High‐Risk Vendor Ongoing Due Diligence
- “Too Big to Care”
- A Note on Phishing
- Intake and Ongoing Cybersecurity Personnel
- Ransomware: A History and Future
- Conclusion
2 LiveLab in this lesson — see the labs panel →
08 On‐site Due Diligence 3 topics +
- On‐site Security Assessment
- On‐site Due Diligence and the Intake Process
- Conclusion
09 Continuous Monitoring 4 topics · 1 LiveLab +
- What Is Continuous Monitoring?
- Enhanced Continuous Monitoring
- Third‐Party Breaches and the Incident Process
- Conclusion
1 LiveLab in this lesson — see the labs panel →
10 Offboarding 2 topics · 1 LiveLab +
- Access to Systems, Data, and Facilities
- Conclusion
1 LiveLab in this lesson — see the labs panel →
11 Securing the Cloud 2 topics · 2 LiveLab +
- Why Is the Cloud So Risky?
- Conclusion
2 LiveLab in this lesson — see the labs panel →
12 Cybersecurity and Legal Protections 3 topics +
- Legal Terms and Protections
- Cybersecurity Terms and Conditions
- Conclusion
13 Software Due Diligence 7 topics · 3 LiveLab +
- The Secure Software Development Lifecycle
- On‐Premises Software
- Cloud Software
- Open Web Application Security Project Explained
- Open Source Software
- Mobile Software
- Conclusion
3 LiveLab in this lesson — see the labs panel →
14 Network Due Diligence 3 topics · 3 LiveLab +
- Third‐Party Connections
- Zero Trust for Third Parties
- Conclusion
3 LiveLab in this lesson — see the labs panel →
15 Offshore Third‐Party Cybersecurity Risk 4 topics · 1 LiveLab +
- Onboarding Offshore Vendors
- Country Risk
- KC's Country Risk
- Conclusion
1 LiveLab in this lesson — see the labs panel →
16 Transform to Predictive 5 topics +
- The Data
- Level Set
- A Mature to Predictive Approach
- The Predictive Approach at KC Enterprises
- Conclusion
17 Conclusion +
18 Appendix: Key Terms 1 topics +
- Glossary
Praktische Übungen Our edge
17 LiveLabs- Simulating the DoS Attack
- Performing a Phishing Attack
- Performing Local Privilege Escalation
- Establishing a VPN Connection
- Getting the TCP Settings and Information about the TCP Port
- Detecting a Phishing Site Using Netcraft
- Analyzing Malware
- Supplying Power to a SATA Drive
- Creating an Elastic Load Balancer
- Working with Amazon S3
- Attacking a Website Using XSS Injection
- Fuzzing Using OWASP ZAP
- Setting Up a Basic Web Server
- Studying CVSS Exercises with the CVSS Calculator
- Setting up a DMZ
- Enabling the TPM
- Using the Windows Firewall
Labore laufen direkt im Browser — nichts zu installieren.
03 / FAQS
Fragen, bevor Sie beginnen
What is risk in cyber security? +
Risk in cybersecurity refers to the likelihood of a security breach or data loss that will adversely impact an organization’s operations, reputation, or financial stability.
Who should take a course on Cybersecurity and Third-Party Risk? +
Individuals in various roles can benefit from this course, including:
- IT professionals
- Security analysts
- Risk managers
- Compliance officers
- Business leaders
How long does it take to complete the Cybersecurity and Third-Party Risk course? +
The duration of the third-party risk management training course depends on your prior knowledge and experience. However, you can complete it within 3-6 months.
What is the difference between third-party risk and vendor risk management? +
- Third-party risk discusses all potential risks associated with external entities, including vendors, suppliers, contractors, and business partners.
- Vendor risk management is a specific subset of third-party risk management that focuses on assessing and mitigating risks related to vendors.
What types of organizations benefit most from third-party risk management? +
Organizations of all sizes and industries can benefit from third-party risk management. But it is especially important for:
- Large enterprises with complex supply chains
- Organizations in highly regulated industries industries
- Companies that rely heavily on third-party vendors
What are the types of third-party risk?+
Common types of third-party risk include:
- Operational risk
- Financial risk
- Reputational risk
- Legal risk
Can I pursue any cybersecurity risk management certification after taking this course?+
Yes, you can pursue third-party risk management certifications such as:
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Certified Risk Manager (CRM)
Keep going
You might also like
Learn to Mitigate Supply Chain Cyber Risks
Prepare yourself for the evolving threat landscape by learning to manage cybersecurity and third-party risks.
- 1 Jahr voller Zugang
- 17 LiveLab enthalten
- Abschlusszertifikat
Keine Kreditkarte benötigt