The GDPR legal framework

Practical GDPR interpretation, the scope of GDPR, the relevant subjects, the impact and influence on recent activities, remedial measures.

Personality and privacy protection

The Civil and Criminal Code, the interpretation of personality and privacy protection, the ways and possibilities of protection.

Criminal Code and Copyright

Crimes (against personality, privacy or secrecy rights, unauthorised access to an information system and data source, identity theft, against industry rights or copyright).

Legal aspects of cyber security

The Act on Cyber Security, the scope of the act, term definition, the system of cyber security.

Cyber vulnerability and attacks

Terminology, types of threats (backdoor, DoS, DDos, Eavesdropping, Spoofing, Tampering, Phishing, Clickjacking, Social Engineering, Google Hacking).

Attackers’ motivation

An attacker’s profile, the reasons for the undesired and malicious behaviour, possibilities of remedial measures.

The impacts of a security breach

Legal and technical cases, impact on the organization, damage assessment, image loss, risks related to the abuse of acquired information.

The possibilities and ways of protection

Security by design, security architecture, security measures (SIEM, IDS, IPS), vulnerability management (vulnerability reduction), HW security, secure OS, secure software development lifecycle.

The cyber security product and service portfolio

An overview of products and services for ensuring cyber security, hardware and software security (firewall, antivirus, mobile device management), services (security strategy, security audit, penetration testing).

Known attacks and breaches

Introducing case studies, causes, effects and remedial measures.

Critical infrastructure

The definition of critical infrastructure (bank systems, airport systems, hospital IS, utility systems – water management, heat, gas distribution etc.).

Information security in a company

Pre-evaluation, strategic planning, operational planning, implementation.