Applied Cybersecurity Controls, Computer and Network Security
About This Course
Risk assessments identify what needs to be protected. Security strategies design the programme to protect it. This course puts those plans into operation.
Building on risk assessment foundations and security programme design, it develops the hands-on capability to implement, administer, and monitor cybersecurity safeguards across real organisational environments, applying recognised IT standards throughout.
You will plan end-to-end security administration and apply IT standards, security baselines, and policies to govern how controls are configured and enforced. You will design and operate internal controls over user access, defining control objectives, segregation of duties, and accountability through the IAAA model (Identity, Authentication, Authorisation, Accountability), and you will test and monitor those internal controls for effectiveness. You will align access control rules and permissions to IT standards and compliance requirements, manage role-based access as an internal control across the full joiner-mover-leaver lifecycle, and sustain network systems maintenance by administering and monitoring systems, networks, and endpoints. You will also investigate security breaches using structured diagnostic methodologies and keep controls current against emerging threats.
Practical sessions include a live demonstration of BYOD security controls using Mobile Device Management (MDM) tools, covering real threat scenarios such as juice jacking via compromised charging infrastructure and O.MG cable attacks, the kind of physical attack vectors that governance frameworks identify but most training programmes never address operationally.
By the end of this course, you will be able to plan, implement, and sustain the operational security controls that convert a security programme into organisational protection.
What You'll Learn
- Apply IT standards, security baselines, and policies to govern how cybersecurity controls are configured and enforced
- Design, operate, and test internal controls over user access, defining control objectives, segregation of duties, and accountability
- Establish access control rules and permissions aligned to IT standards and compliance requirements
- Manage role-based access as an internal control across the joiner-mover-leaver lifecycle, assessing the risk of different permission levels
- Maintain and monitor systems, networks, and endpoints to detect anomalies and preserve visibility
- Plan and administer end-to-end security administration and operationalise programmes into live controls
- Implement BYOD controls and defend against physical attack vectors including juice jacking and O.MG cable attacks
- Investigate breaches using structured diagnosis, and apply website and API security tools
Entry Requirements
● Minimum age: 21
● 2 years in an IT, cybersecurity, system administration, network administration, infrastructure, security operations, or risk and compliance role
● Foundational cybersecurity knowledge (CIA triad, common threat categories, basic risk concepts, security programme structure)
● Working understanding of cybersecurity risk assessment and security programme design, evidenced through prior completion of a foundational course, professional certification (CompTIA Security+, CISA, CISSP foundational study), or equivalent on-the-job experience
● Familiarity with at least one regulatory framework (PDPA, MAS TRM, CSA Cyber Essentials, ISO 27001, or sector-equivalent)
● Familiarity with enterprise IT environments (user account management, network basics, endpoint administration)
● Computer literate at an intermediate level
● Proficient in written and spoken English at a professional working level
● Diploma or equivalent professional qualification