Technical and Operational Security
67 courses available
Technical and Operational Security covers advanced training in ethical hacking and penetration testing (applications, networks, cloud), SIEM configuration, building a Security Operations Center, incident response and forensics, plus network security, cryptography, zero trust and DevSecOps. This is the broadest operational-technical area of the security catalog.
Send this link to a security team building its own SOC, or to a specialist preparing for an offensive-security certification — this is hands-on training, not an introductory course.
Beginner
Basics of z/OS RACF Administration.
This course begins with an introduction to the z/OS environment, TSO and ISPF/PDF, batch processing and z/OS data sets. Hands-on labs allow you to gain experience in viewing and assigning data sets, submitting a batch job, and reviewing job results. After an introduction to z/OS, you will learn, through lectures and exercises, how to use the basic parameters of RACF commands and panels to define users and groups, protect general resources, z/OS data sets and select a basic set of RACF options.
from 14,500 PLNIBM QRadar SIEM Foundations (BQ105G)
Authorized IBM training (BQ105G) — a three-day entry-level QRadar SIEM course: architecture and data flow, log sources, network flows and QRadar Network Insights, the Custom Rule Engine, working with offenses, searching with AQL, reporting and the admin console.
from 8,700 PLNSecurity Intelligence Fundamentals
Security Intelligence is a fairly new discipline for organizations of all sizes, having evolved from traditional log management and security information and event management solutions. This course focuses on the current IT and security landscape, as well as the business and IT factors behind a holistic approach to IT security, which is a prerequisite for successfully preventing malicious attacks and misuse of valuable enterprise assets.
from 5,800 PLNIntermediate
AI/ML Pipeline Security — MLSecOps in Practice
Training on securing MLOps pipelines covering training infrastructure hardening, model registry security, AI model supply chain security, secrets management in ML workflows, vulnerability scanning in ML CI/CD, and production model monitoring.
from 3,200 PLNApplication Security (AppSec/DevSecOps) — OWASP, SAST/DAST/SCA
A three-day shift-left security training: integrating static analysis (SAST), dynamic analysis (DAST), and open-source component analysis (SCA) into the CI/CD cycle, aligned with OWASP Top 10 and the Cyber Resilience Act (CRA) requirements for software manufacturers.
from 4,200 PLNCloud Native Security - Kubernetes Security, Falco, OPA
Security in the era of containers and Kubernetes encompasses supply chain security, runtime protection, and compliance. The program focuses on practical tools and processes ensuring a security-first approach. The training combines theory with hands-on labs on real Kubernetes environments. The lab-based methodology provides practical experience with enterprise security tools.
from 5,800 PLNCyber Security Training in Public Administration
Cyber security training designed for government employees, focusing on the practical aspects of protecting information in an official environment. The program includes identification of modern digital threats, recognition of socio-technical techniques and implementation of effective data security methods. Classes are conducted in the form of interactive workshops using real examples of security incidents, practical exercises and threat simulations.
from 1,400 PLNCybersecurity Roles, Processes & Operating System Security
A one-day course on cybersecurity fundamentals — SOC roles, ITIL processes, the CIA triad, AAA, access control, OWASP Top 10, Windows/Linux/macOS security, virtualization and the cloud.
from 2,000 PLNEffective RACF Administration
This course prepares you to be a more effective security administrator as you gain experience and confidence in using the RACF z/OS Security Server component. To reinforce the lectures, the course offers hands-on exercises in which you use the RACF z/OS Security Server component to define users, configure group structures, define general resources, protect z/OS data sets and use several RACF tools.
from 14,500 PLNExpert Issues on Cybersecurity
The training focuses on the practical aspects of cybersecurity in the context of the duties of a Security Officer. The program covers legal requirements, risk management and cyber security incident response procedures. Classes are conducted in the form of workshops combining theory with practical aspects of the implementation of the Plenipotentiary's tasks, with particular attention to institutional specifics and legal requirements.
from 2,200 PLNGDPR CIPP/EU Certification
Increase your knowledge of personal data protection and earn the GDPR CIPP/EU certification.
from 2,200 PLNIBM Security QRadar SIEM Administration.
IBM Security QRadar SIEM enables you to minimize the time gap between the occurrence of suspicious activity and its detection. There are many administrative tools you can use to manage your QRadar SIEM deployment. This course covers system configuration, data source configuration, and remote network and service configuration.
from 5,800 PLNHow to Secure Mobile Apps
The training focuses on methods of protecting and securing mobile applications. The program covers practical aspects of security testing, attack techniques used by modern intruders and mechanisms that make it difficult to reverse engineer mobile applications. The classes combine theory and practice, also taking into account issues in the area of network security monitoring. Participants will learn tools and methods for testing mobile application security in a real environment.
from 1,900 PLNICS/SCADA Security Essentials — Industrial Systems Security
Training on ICS/SCADA industrial systems security fundamentals. Covers ICS architecture (Purdue Model), industrial protocols (Modbus, DNP3, OPC UA), threats to OT environments, OT network monitoring, ICS-specific incident response, and IT/OT convergence challenges.
from 4,500 PLNIBM Storage Protect Version 8.1.12 Implementation and Administration
A five-day IBM course (TS619G) on IBM Storage Protect — installation, configuration, storage pools, policy management, client backup, schedules and reports. For backup and storage administrators.
from 15,310 PLNImplementation and Management of Public Key Infrastructure (PKI).
A training course designed to provide participants with an in-depth understanding of the concept, implementation and practical application of Public Key Infrastructure (PKI). The training combines theory with intensive hands-on workshops, enabling participants to gain the skills necessary to design, implement and manage PKI-based solutions in business and technology environments.
from 4,500 PLNImplementing RACF Security for CICS/ESA and CICS/TS
This course teaches how to implement security for CICS systems using RACF as an external security manager. The lecture material will first explain the implementation tasks for a CICS system in a single region, and then extend to CICS systems in multiple regions connected to an MRO or ISC. In the class, you will learn both the CICS and RACF definitions necessary to establish effective security controls for CICS. You will learn how to:
from 14,500 PLNImplementation of PKI and TLS Security
A one-day technical training course on the implementation of Public Key Infrastructure (PKI) and TLS protocol. Participants will learn the practical aspects of implementing and managing digital certificates and securing network communications. The training is workshop-based, with an emphasis on practical exercises and real-world problem solving.
from 1,850 PLNIMS Security
Learn about Information Management System (IMS) implementation using Resource Access Control Facility (RACF) as an external security manager and installation of provided security exit procedures. Apply classroom lectures with security paper lab exercises in which you configure security definitions.
from 14,880 PLNInformation Analysis
The training develops practical information analysis skills in the context of challenges facing public and private sector organizations. The program focuses on methods for analyzing phenomena, processes and events, as well as creating recommendations and strategic bases. The workshop combines theory and practice, emphasizing the use of analytical tools, forecasting techniques and the creation and analysis of databases. The classes are conducted in an interactive format, where participants work on real cases.
from 1,700 PLNInnovative Blockchain Applications in Business: From Theory to Practice
A training course focusing on practical applications of blockchain technology in various business sectors beyond cryptocurrencies. Participants will learn advanced blockchain concepts, learn how to design and implement solutions based on the technology, and understand its potential in transforming business processes. The training combines theory with intensive workshops, enabling participants to gain the skills necessary to implement innovative blockchain solutions in real business scenarios.
from 2,500 PLNInformation Security
The training introduces a systematic approach to information security based on current industry standards and norms. The program covers aspects of personal data protection, intellectual property and compliance with the National Interoperability Framework. The class focuses on the practical aspects of identifying threats and implementing effective security measures in an organization. The course is conducted in the form of interactive workshops, combining theory with analysis of real cases.
from 800 PLNIT Security Incident Analysis
The training focuses on practical methods for analyzing IT security incidents and identifying anomalies in large data sets. The workshop program includes techniques for analyzing text files and network traffic dumps. Participants work on real cases, learning to recognize attack patterns and respond effectively to threats. The classes are conducted in the form of intensive workshops, where theory is immediately verified through practical exercises.
from 2,200 PLNLead Application Security Manager.
Lead Application Security Manager training allows you to develop the knowledge and skills necessary to establish, implement, maintain and continuously improve your application security program. During this training, you will gain an understanding of Secure Software Development Life Cycle (Secure SDLC) best practices. You will learn how to integrate security activities at every stage of application development, from design and coding to testing and deployment, to minimize vulnerabilities and protect against attacks.
from 6,400 PLNLead Cloud Security Manager.
Lead Cloud Security Manager training allows you to gain expertise in establishing, implementing, maintaining and continuously improving a cloud security program based on ISO/IEC 27017 and ISO/IEC 27018 standards. During this training, you will gain knowledge of cloud security concepts and principles, and learn how to manage and maintain a cloud security program to protect data in a cloud environment.
from 6,500 PLNLead Penetration Testing Manager.
Lead Penetration Testing Professional training allows you to develop the knowledge and skills necessary to plan, conduct and manage penetration testing. This training provides an understanding of methodologies and techniques for testing the security of systems, networks and applications. You will learn how to think like an attacker, use a variety of tools and techniques to identify and exploit vulnerabilities, and how to professionally report results to improve the overall security status of an organization.
from 6,400 PLNManagement and Neutralization of DDoS Attacks
The training course \Advanced Cybersecurity Strategies: Managing and Neutralizing DDoS Attacks\ is an intensive two-day course designed for IT professionals who want to improve their knowledge and skills in defending against Distributed Denial of Service (DDoS) attacks. In todays digital world, where DDoS attacks are becoming increasingly sophisticated and destructive, the ability to effectively defend against them is critical to maintaining business continuity and protecting an organizations reputation.During the course, participants will explore various aspects of DDoS attacks, from their typology to advanced mitigation techniques. The program includes practical workshops on analyzing network traffic, configuring defense systems and creating effective incident response procedures. Experts with many years of experience in cyber security will share their knowledge by presenting real cases of attacks and strategies for neutralizing them.The training emphasizes practical skills that participants can immediately apply in their organizations. Through interactive sessions, attack simulations and exercises using advanced tools, trainees will learn to identify, analyze and effectively repel DDoS attacks of various types and scales.
from 3,000 PLNMITRE ATT&CK — A Framework of Attack Tactics and Techniques
The training introduces participants to the MITRE ATT&CK framework, providing knowledge of the taxonomy of tactics and techniques used in cyberattacks.
from 1,850 PLNNetwork Security (Penetration Testing)
The program is designed with an emphasis on the practical aspects of protecting networks from threats and techniques for conducting penetration tests of infrastructure. The training is carried out in the form of workshops, during which participants learn tools to improve the implementation of security tests. The class also covers issues in the area of network security monitoring, which allows for a holistic view of the process of securing network infrastructure.
from 2,700 PLNNetwork Security with Cisco and Palo Alto Networks — Switching, Routing and Next-Generation Firewall
A three-day course that prepares participants to design, configure and secure network infrastructure built on Cisco and Palo Alto Networks equipment, and to monitor network security. The program runs through three thematic days: from designing a secure local network and layer-two protection mechanisms, through securing the routing process, segmenting traffic and hardening the devices themselves, to the architecture of a next-generation firewall and the configuration of its core functions. The configuration exercises, in which participants carry out the tasks discussed themselves, form a separate block of the program.
from 3,900 PLNOWASP Top 10 for Agentic AI Applications — Autonomous AI Agent Security
Training on autonomous AI agent security based on the new OWASP Top 10 for Agentic Applications standard. Covers tool use risks, excessive autonomy, agent-to-agent attacks, guardrails for autonomous agents, agentic system monitoring, and secure AI agent architecture design.
from 2,450 PLNRansomware Response — Preparation, Response, and Recovery
Training on ransomware attack response covering the ransomware kill chain, preparation (backups, segmentation, EDR), detection and containment, forensic analysis, recovery strategies, and legal and negotiation aspects. The program builds organizational readiness for one of the most common and costly cyberattack types.
from 3,450 PLNSecurity and Compliance in the Google Cloud Ecosystem
The training focuses on designing, implementing and managing secure infrastructure in the Google Cloud Platform environment. The program covers the practical aspects of implementing security mechanisms, managing identity and ensuring compliance with applicable regulations. Sessions are run as workshops based on real security scenarios and industry best practices. The training prepares participants for the Professional Cloud Security Engineer exam and for work as a cloud security specialist.
from 2,700 PLNSecurity of Embedded Systems (Embedded)
An intensive, three-day training course combining theory and practice in securing embedded systems. The program covers the full cycle of secure software development - from architecture design to deployment and testing. Participants will learn the latest techniques for protecting IoT devices and industrial systems through hands-on workshops and case studies. The training is conducted in an interactive format, with an emphasis on sharing experiences and solving real-world problems.
from 4,000 PLNSecurity Operations on AWS
Security Operations on AWS shows you how to effectively use AWS security services to stay secure and compliant in the AWS cloud. The course focuses on AWS-recommended security best practices that you can implement to increase the security of your data and systems in the cloud. The course highlights the security features of key AWS services, including compute, storage, network and database services. This course also addresses common security control objectives and compliance standards, and explores use cases for running regulated workloads on AWS in various verticals around the world. You'll also learn how to leverage AWS services and tools for automation and continuous monitoring - taking your security operations to the next level.
from 8,600 PLNThreat Hunting Fundamentals — Proactive Threat Detection
Training on threat hunting fundamentals covering proactive threat detection methodology, hypothesis creation, data source analysis (logs, EDR, network traffic), practical use of ELK, Splunk, and Velociraptor, TTP-based hunting, and documenting findings.
from 3,450 PLNWeb Application Security
Intensive workshop training in web application security, combining theory and practice through analysis of over a dozen vulnerable systems. The program includes a detailed discussion of typical vulnerabilities, methods for detecting them and techniques for protecting against attacks. Each module begins with a theoretical introduction, followed by practical exercises using real-world examples. Participants receive access to additional materials and documentation to support their own security testing.
from 2,700 PLNZero Trust Architecture in IT Security
A strategic workshop for transforming the IT security model to a "never trust, always verify" architecture that eliminates the assumption of trusted internal networks. The program covers identity and context management, network microsegmentation, least privilege, and replacing VPNs with software-defined perimeters. The methodology begins with a maturity audit of the current security state and concludes with a 90-day transformation plan. The workshop prepares organizations for security challenges in the world of hybrid work and cloud.
from 3,000 PLNZero Trust Security - SASE, Microsegmentation and Identity Management
Transformation from perimeter-based security to Zero Trust with practical implementation in hybrid cloud environments. The program focuses on identity and microsegmentation as foundations of modern security. The training combines strategic planning with practical implementation in enterprise environments. The migration-focused methodology provides a practical roadmap for organizations.
from 5,400 PLNz/OS Security Server RACF, Implementing and Customization
The z/OS Security Server RACF Training: Implementing and Customization covers creating and managing the RACF database, customizing profiles and features, program control, and multi-layer security.
from 8,700 PLNz/VM RACF and DirMaint Implementation
This course introduces students to the implementation of DirMaint and RACF Security Server software products for z/VM. The class focuses on the required steps for implementing DirMaint and RACF Security Server for z/VM in a z/VM 6.3 environment. Students participate in hands-on labs where they install, customize and use these two software products from an end-user and system programmer's point of view.
from 14,500 PLNAdvanced
Advanced Applications of SSL/TLS Protocols in Secure Communications
A training course focusing on the practical use of SSL/TLS protocols to secure communications in information systems. Participants will gain an in-depth understanding of how these protocols work, learn how to configure and integrate them into applications, and learn security best practices. The training combines theory with intensive hands-on workshops, enabling participants to gain the skills necessary to effectively implement and manage secure communications in a variety of IT environments.
from 6,000 PLNAdvanced Cryptographic Techniques in Information Systems
Training focusing on the practical application of advanced cryptographic techniques in modern information systems. Participants will gain comprehensive theoretical knowledge and practical skills in the design and implementation of cryptographic mechanisms, from basic algorithms to complex security protocols. The training combines theory with intensive workshops, enabling participants to implement advanced security features on their own and analyze potential threats in real-world scenarios.
from 6,000 PLNAdversary Simulation with Atomic Red Team and MITRE ATT&CK
Training on threat simulation using Atomic Red Team and MITRE ATT&CK. Covers the Atomic Red Team framework, writing custom atomics, ATT&CK technique coverage, automated testing with Invoke-AtomicRedTeam, detection rule validation, and building an adversary simulation program.
from 3,450 PLNAI/ML Model Security — OWASP LLM Top 10 and Adversarial ML
An advanced training on AI and ML system security covering the full OWASP LLM Top 10, adversarial ML techniques, and LLM red teaming. The program addresses model attacks (prompt injection, data poisoning, model extraction), MLOps pipeline security, training data protection with differential privacy and federated learning, and building secure AI applications with guardrails, content filtering, and monitoring. Participants conduct practical attacks and implement defenses in a lab environment.
from 2,950 PLNAI Security Automation — SOC and Threat Detection with AI
Training on security operations automation using AI. Covers ML-based anomaly detection, automated incident response, NLP for log analysis, AI-driven threat intelligence, reducing false positives with ML, and building AI-powered SOC workflows.
from 3,450 PLNAI Security — Protecting GenAI/LLM Pipelines
A two-day technical training on securing GenAI and LLM pipelines: prompt injection, training data/model poisoning, data leakage through models, and AI model supply chain security, aligned with the CAISP methodology.
from 3,200 PLNAWS Security Specialty — Certification Preparation
Intensive training preparing for the AWS Certified Security - Specialty exam. Covers advanced IAM policies, KMS and encryption, VPC security, GuardDuty/SecurityHub/Detective, incident response in AWS, and logging and monitoring (CloudTrail, Config, CloudWatch).
from 4,500 PLNAZ-500 Microsoft Azure Security Technologies — Exam Preparation
Training preparing for the AZ-500 Microsoft Azure Security Technologies exam. Covers Entra ID (Azure AD) security, network security (NSG, Firewall, WAF), data protection (Key Vault, encryption), security operations (Sentinel, Defender), governance and compliance, and workload protection.
from 4,500 PLNCISSP — Exam Preparation (ISC2)
A five-day intensive training preparing candidates for the CISSP (Certified Information Systems Security Professional) exam from ISC2 — a complete review of the eight Common Body of Knowledge domains, with a strong focus on exam strategy and practice questions.
from 7,900 PLNCloud Incident Response — Incident Response in AWS, Azure, and GCP
Training on incident response in AWS, Azure, and GCP cloud environments. Covers cloud IR methodology, cloud evidence collection (snapshots, logs, API trails), AWS IR (GuardDuty, Detective), Azure IR (Sentinel, Defender), container forensics, and IR automation.
from 3,950 PLNCloud Threat Hunting — AWS, Azure, and GCP
Training on threat hunting in AWS, Azure, and GCP cloud environments. Covers cloud-specific TTPs, hunting in CloudTrail/Azure Activity Log/GCP Audit Log, identity-based threats, cloud lateral movement, serverless threats, and cloud hunting automation.
from 3,950 PLNCloudflare - CDN, Security and Protection Against DDoS
Practical training in the implementation and management of Cloudflare services, with a special focus on security aspects and protection against DDoS attacks. Participants will learn the advanced features of the platform, learn to configure and optimize security and monitor the effectiveness of protection. The program includes workshops on real-world examples to gain practical experience in managing website security and performance.
from 2,450 PLNComputer Network Security
The \Computer Network Security\ training course is a comprehensive educational program that combines theory and practice in the field of cyber security. The course includes two levels: basic (2 days) and extended (additional day), allowing participants to gain an in-depth understanding of network infrastructure protection.
from 3,000 PLNExploiting the Advanced Features of RACF
This course teaches you how to implement some of the advanced features available in RACF. Through a combination of classroom lectures and lab exercises, you will learn how to set up an RRSF environment, including how to use RRSF features to administer the security of remote RACF databases from one centralized location, allowing users to synchronize password changes between several related user IDs, using RRSF features to automatically keep two or more separate RACF databases in sync. Other major features you'll learn about include sysplex RACF data sharing and sysplex communication, RACF support for z/OS UNIX, DB2 security using RACF, Network Job Entry (NJE) security, operator commands, program control and backup, RACF database recovery, PassTickets, digital certificates and program signature.
from 11,600 PLNGCP Professional Cloud Security Engineer — Certification Preparation
Training preparing for the Google Cloud Professional Cloud Security Engineer certification. Covers IAM and organization policies, network security (VPC, Cloud Armor), data protection (Cloud KMS, DLP), Security Command Center, compliance and audit, and incident management in GCP.
from 3,950 PLNIBM Security QRadar SIEM Advanced Topics.
IBM Security QRadar helps minimize the time gap between the occurrence of suspicious activity and its detection. Attacks and policy violations leave traces in log events and network flows of information systems. To connect the dots, QRadar SIEM correlates these distributed events and flows into crimes that alert you to suspicious activity. Using the skills taught in this course, you will be able to configure the processing of unusual events, work with reference data and develop custom rules.
from 5,800 PLNModern Application Security
Advanced training in securing modern applications, focusing on the latest techniques and methods to protect against cyber threats. The program covers practical aspects of security implementation in web, mobile and cloud applications. Participants work on real-world examples, learning to identify security vulnerabilities and implement appropriate protection mechanisms using modern security tools and frameworks.
from 3,900 PLNOffensive AI — How Attackers Leverage Artificial Intelligence
Advanced training on offensive AI use in cyberattacks. The program covers AI-powered phishing and spear phishing, deepfakes in social engineering, automated vulnerability discovery using LLMs, AI-assisted reconnaissance, and defense methods against AI-augmented attacks.
from 3,450 PLNOT Network Security Architecture — Industrial Network Segmentation and Monitoring
Advanced training on OT network security architecture. Covers Purdue Model implementation, IT/OT DMZ design, industrial firewalls, OT network monitoring (Nozomi, Claroty, Dragos), asset discovery in OT environments, and remote access security.
from 3,450 PLNPenetration Testing — Hands-On Workshop with Kali Linux
A five-day hands-on workshop taking you from zero to running an independent penetration test with Kali Linux — the full cycle: reconnaissance, scanning, vulnerability exploitation, privilege escalation, and reporting, in a lab with real practice targets.
from 8,900 PLNPurple Team Operations — Red and Blue Team Collaboration
Training on Purple Team operations combining offensive and defensive team competencies. Covers purple teaming methodology, adversary emulation planning, detection validation, gap analysis (MITRE ATT&CK coverage), collaborative exercises, and metrics and reporting.
from 3,950 PLNReverse Engineering and Code Security Techniques
An intensive training course focusing on the practical aspects of reverse engineering and methods to protect code from analysis. Participants will learn advanced techniques for binary analysis, debugging and code decompilation on Windows and Linux platforms. The training combines theory with intensive hands-on workshops, enabling participants to gain the skills necessary to effectively analyze and protect software.
from 6,000 PLNSecure Programming in C/C++
Advanced training in secure programming, focusing on identifying and eliminating vulnerabilities in C/C++ code. The program combines security theory with practical techniques for securing applications against the most common threats. Participants work on real-world code examples, learning to identify potential security vulnerabilities and implement appropriate safeguards. The training uses a workshop methodology, where each topic is analyzed both theoretically and practically, with an emphasis on understanding exploit mechanisms and protection methods.
from 3,600 PLNTechnical Aspects of NIS2/KSC Implementation
The training provides technical professionals with advanced knowledge and practical skills to implement NIS2 and KSC requirements. The program is delivered through intensive technical workshops with hands-on labs elements, led by experienced practitioners. Participants will learn how to design a secure architecture, manage vulnerabilities, respond to incidents and implement cryptographic mechanisms. The goal is to translate legal requirements into concrete technical and organizational solutions in the IT environment.
from 4,500 PLNThreat Hunting with MITRE ATT&CK — Advanced Techniques
Advanced threat hunting training based on the MITRE ATT&CK framework. Covers ATT&CK Navigator, mapping threats to TTPs, hunting playbooks per technique, emulation with Atomic Red Team, detection engineering, and measuring hunting program maturity.
from 3,950 PLNZero Trust Architecture — Design and Implementation
A three-day Zero Trust Architecture design workshop: from the NIST SP 800-207 reference model and the CSA CCZT certification path to a full implementation roadmap covering microsegmentation, identity management, and continuous trust evaluation.
from 4,200 PLNCan't find the right training?
We design custom training programs. Describe your needs and we'll prepare a tailored offer.
Ask about training