EC-Council’s CHFI certifies individuals in the specific security discipline of computer forensics from a vendor-neutral perspective. The CHFI certification will fortify the application knowledge of law enforcement personnel, system administrators, security officers, defense and military personnel, legal professionals, bankers, security professionals, and anyone who is concerned about the integrity of the network infrastructure.

• Police and other law enforcement personnel
• Defense and Military personnel
• e-Business Security professionals
• Systems administrators
• Legal Professionals
• Government Agencies
• I.T Managers
• Banking, Insurance and other professionals

You have sufficient knowledge and an arsenal of hacking tools and you are also proficient in writing custom hacking code. Is that enough? Can you become an industry accepted security professional? Will organizations hire you to help them protect their systems? Do you have any knowledge in applying a suitable methodology to conduct a penetration test for an enterprise client?
The ECSA program offers a seamless learning progress, continuing where the CEH program left off. Unlike most other pen-testing programs that only follow a generic kill chain methodology; the ECSA presents a set of distinguishable comprehensive methodologies that are able to cover different pen testing requirements across different verticals.

• Ethical Hackers
• Panetration Testers
• Network server administrators
• Firewall Administrators
• Securiy Testers
• System Administrators and Risk Assessment professionals

• Acknowledge the correlation between ISO/IEC 27001, ISO/IEC 27002 and other standards and regulatory frameworks
• Master the concepts, approaches, methods and techniques used for the implementation and effective management of an ISMS
• Learn how to interpret the ISO/IEC 27001 requirements in the specific context of an organization
• Learn how to support an organization to effectively plan, implement, manage, monitor and maintain an ISMS
• Acquire the expertise to advise an organization in implementing Information Security Management System best practices

Instructor Profile: Mr. Tufail Ahmad Abbasi (Lead Implementer ISO 27001:2013)
MS-Information Security(Gold Medal)

• Managers or consultants involved in Information Security Management
• Expert advisors
• ISMS team memberss
• Individuals responsible for maintaining conformance with ISMS requirements

Day 1

• Introduction to the management of an Information Security Management System (ISMS) based on ISO 27001 and launching an ISMS
• Planning an ISMS based on ISO27001

• Launching and implementing an ISMS based in ISO27001
• Control, act and the certification audit of the ISMS according to ISO 27001

After completing this workshop, participants will be able to:

• Identify key purpose, benefits, and process of information classification and how it is used to determine Access Control policies and identifying the process for assessing the effectiveness of implemented controls.
• Provide the basic understanding of Telecommunication and Network Security concepts, required components for minimizing security risks, securing channels of communication, and techniques for preventing and detecting network-based attacks.

• Define and apply the Information Security Governance and Risk Management framework including the policies, concepts, principles, structures and standards that are established for the protection of information assets, and how to assess the effectiveness of that protection.
• Explain the details of Software Development Security, including the activities and processes pertaining to the planning, programming, and management of software and systems that manage software including ways to secure applications through design and control interfaces, and assess the usefulness of their application security.
• Identify the concepts within Cryptography, including the terms and application of public and private algorithms, distribution management, methods of attack, and the application, development, and use of digital signatures for authenticity and electronic transactions, and non repudiation processes.

• Identify the Security Architecture and Design concepts focusing on the architecture of security systems that provide for the availability, integrity, and confidentiality of organizational assets. Learners will address concepts, principles, structures, frameworks, and standards used in the design and implementation of security requirements of individual components, and enterprise wide systems.
• Identify the key terms and processes of Security Operations and how to protect and control information processing assets in a centralized or distributed environment through the daily tasks required to keep security services operating reliably and efficiently.
• Identify and apply the Business Continuity and Disaster Recovery Planning requirements necessary to develop the preparation, processes, and practices necessary to ensure the preservation of the business in case of major disruptions to normal business operations including the project scope and planning, how to conduct a business impact analysis, identify recovery strategies, develop the recovery plan and implement it.

• Define and explain the Legal, Regulations, Investigations, and Compliance concepts of and internationally accepted methods, processes, and procedures used in computer crime legislation and regulations specific to the investigative measures and techniques used to identify the occurrence of an incidence, and the gathering, analysis, and management of evidence.
• Define and apply the requirements necessary for the overall Physical (Environmental) Security processes for the evaluation of physical, environmental, and procedural risks that might be present in a facility, organization, or structure where information systems are stored and managed.

• Chief Information Security Officer
• Security Systems Engineer
• Security Manager
• Security Auditor
• Security Consultant

The objective of this module is to give an overview about the Cyber-crimes in order to use secure and safe online environment. The module is encompassed of “cyber-crime definition, types of cyber-crime, categorization of cyber-crimes in Pakistan, cyber-crimes statistics, cyber-crimes event catalogue (Pakistan) and a case study based on real incident”.

The objective of this module is to give an overview about the cyber-bullying, its dangerous symptoms, statistics, consequences, risk factors, mitigation techniques, and guidelines in order to use secure and safe online environment. The module is encompassed of “essential terminologies, cyber-bullying definition, and its types, common channels of cyber bullying, cyber-bullying statistics and usage, cyber-bullying case studies, news items, solution and guidelines and a case study based on real incident.”

The objective of this module is to give an overview to the students and youth about the cyber-profiling, its dangerous symptoms, statistics, consequences, risk factors, mitigation techniques, and guidelines in order to use secure and safe online environment. The module is encompassed of “cyber-profiling definition, what employers can see and monitor, what parents can see and monitor, what people can see and monitor, what government can see and monitor, what terrorists can see, monitor, and exploit, what criminals can see, monitor and exploit and a case study based on real incident”.

The objective of this module is to give an overview about the cyber-privacy, some statistics, consequences, risk factors, mitigation techniques, and guidelines in order to use secure and safe online environment. The module is encompassed with “cyber/online privacy definition”, “cyber/social media privacy statistics”, “Facebook privacy hierarchy”, “who can be informed when you visit a website”, “cyber/online privacy issues, risks, and detailed guidelines” and case study based on real incident.

The objective of this module is to give an overview about the cyber-privacy, some statistics, consequences, risk factors, mitigation techniques, and guidelines in order to use secure and safe online environment. The module is encompassed with “cyber security for smartphone definition”, “internet use on smartphones and associated risk”, “top 10 most dangerous things people do with smartphones”, “careless behavior of mobile users”, “how smartphones hack your life”, “internet dangers and smartphones”, “smartphone theft level”, “growing threat of smartphones-mobile malware”, “mobile apps and their impacts”, and a case study based on real incident”.

The objective of this module is to give an overview about some important and recommended guidelines and mitigation techniques for using mobile devices in order to use secure and safe online environment. The module is encompassed with contents like “protect your mobile device (Do’s and Don’ts”, “basic security configurations of android”, “basic security configurations of IOS”, “smart guidelines for smart security of mobile devices”, “what to do if your mobile phone or PDA is stolen”, “ quiz based questionnaire to ensure best cyber security practices”.

• End Users
• Technical Personnel's
• Managment Personnel's
• HR/Finance/Admin Personnel's
• Parents
• Students

Upon completion of the Project Management Professional (PMP) training, you will be able to demonstrate professional level competencies in the following key areas of project management and project management leadership :

• Manage the selection and initiation of individual projects and of portfolios of projects in the enterprise.
• Conduct project planning activities that accurately forecast project costs, timelines, and quality. Implement processes for successful resource, communication, and risk and change management.
• Demonstrate effective project execution and control techniques that result in successful projects.
• Conduct project closure activities and obtain formal project acceptance.
• Demonstrate a strong working knowledge of ethics and professional responsibility.
• Demonstrate effective organizational leadership and change skills for managing projects, project teams, and stakeholders.

Instructor Profile: Mr. Ameer Zaib Khan

• Project Manager
• Project Lead
• Managers
• Consultants
• Operation Managers
• Quality Specialist

• Introduction to Projects , Program and portfolio Management
• Project Management Framework
• Project Management Processes
• Integration Management
• Scope Management
• Schedule Management
• Cost Management
• Quality Management
• Resource Management
• Communication management
• Risk Management
• Procurement Management
• Stakeholder Management
• Professional and Social Responsibility

• Understand the General Data Protection Regulation requirements and the fundamental principles of privacy
• Understand the obligations, roles and responsibilities of the Data Protection Officer
• Understand the concepts, approaches, methods and techniques to effectively participate in the implementation process of a compliance framework with regard to the protection of personal data

Instructor Profile: Mr. Bilal Mazhar
Certified GDPR (F), ISO 27001 LA, LI, CEH, CHFI

• Individuals involved in Personal Data Protection and Information Security
• Individuals seeking to gain knowledge about the main privacy principles
• Individuals interested to pursue a career in Data Protection

Candidates should expect to gain competencies in the following areas after successful completion of the training course:

• Information Security Governance
• Information Risk Management and Complia nce
• Information Security Program Development and Management
• Information Security Incident Management.

Instructor Profile: Syed Shahzad Tayyeb (CISM)

• Chief Information Officers
• Chief Information Security Officers
• Security Professionals who are taking or considering taking the CISM examination
• Anyone seeking an overall understanding of essential IT security risks and controls.

Domain 1: Information Security Governance

• Methods to develop an information security strategy
• Relationship among information security and business goals, objectives, functions, processes and practices
• Fundamental concepts of governance and how they relate to information security
• Integrate information security into corporate governance
• Develop security policies
• Develop business cases with budgetary planning
• Information security management roles and responsibilities
• Methods to select, implement and interpret metrics
• Methods to implement an information security framework

Domain 2: Information Risk Management and Compliance

• Methods to establish an information asset classification model consistent with business
• Information asset valuation methodologies
• Methods to assign the responsibilities for and ownership of information assets and risk
• Risk assessment and analysis methodologies
• Risk reporting and monitoring requirements
• Risk treatment strategies and methods to apply them
• Techniques for integrating risk management into business and IT processes
• Techniques for integrating risk management into business and IT processes
• Compliance reporting processes and requirements

Domain 3: Information Security Program Development and Management

• Methods to align information security program requirements with other business functions
• Methods to identify, acquire, manage and define requirements for internal and external resources
• Methods to design information security controls
• Methods to develop information security standards, procedures and guidelines
• Methods to establish and maintain effective information security awareness and training programs
• Methods to integrate information security requirements into organizational processes

Domain 4: Information Security Incident Management- Incident management concepts and practices

• Business continuity planning (BCP) and disaster recovery planning (DRP) and their relationship to the incident response plan
• Incident classification, damage containment, and escalation processes
• Forensic requirements and capabilities for collecting, preserving and presenting evidence
• Post-incident review practices and investigative methods to identify root causes and determine corrective actions