Information and Communication Technologies are growing in importance day by day and have become a very important issue that must be emphasized whether in the private or public sector.<\/p>\n
Due to increasingly widespread information and communication technology, the network environment has become vast.<\/p>\n
In this age of widespread use of technologies, it has brought along harmful environments as well as benefits. These environments bring very important concepts such as cyber risk and threat to our agenda. These threats have a negative impact on the reputation and credibility of all public sector users of ICTs, especially those sectors with critical infrastructure (energy, finance, transportation, communications, etc.). It can have devastating private and public consequences, such as the compromise of confidential information or the unavailability of critical services.<\/p>\n
Therefore, public institutions and private sector companies should take all necessary security measures. According to the relevant legislation, these measures are mandatory.<\/p>\n
In this context, the National Cyber Incident Response Center (USOM, TR-CERT<\/strong> ) was established within the Information and Communication Technologies Authority in order to identify threats that may occur in the cyber environment against cyber security, to develop and share measures to reduce or eliminate the effects of possible attacks and incidents.<\/p>\n There are teams under the National Cyber Incident Response Center, or SOME for short. SOME stands for Cyber Incident Response Teams. SOMEs operate in sector and organization.<\/p>\n SOME hosts two teams, namely Corporate SOME and Sectoral SOME.<\/p>\n – Corporate SOME:<\/strong> It coordinates with ministries, individual public institutions and other public institutions with information processing. In SOME, they provide the necessary technical consultancy and assistance before cyber incidents and warn the institution or organization if necessary.<\/p>\n They provide support during and after a cyber incident.<\/p>\n SOME, defined as Cyber Incident Response Team;<\/strong><\/p>\n – Taking necessary precautions against cyber-attacks that may be made directly or indirectly to an organization,<\/em> Corporate SOME Training aims to provide the basic competencies necessary for Corporate SOME personnel to perform systematic record analysis and management, to identify important security vulnerabilities in the organization’s information systems and to coordinate cyber incident response.<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” scene_position=”center” text_color=”dark” text_align=”left” top_padding=”3%” overlay_strength=”0.3″ shape_divider_position=”bottom” bg_image_animation=”none” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_position=”all” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_link_target=”_self” column_shadow=”none” column_border_radius=”none” width=”1\/1″ tablet_width_inherit=”default” tablet_text_alignment=”default” phone_text_alignment=”default” overlay_strength=”0.3″ column_border_width=”none” column_border_style=”solid” bg_image_animation=”none”][toggles style=”minimal”][toggle color=”Extra-Color-2″ title=”About Education”][vc_column_text]Education Goals:<\/strong><\/p>\n Training Content:<\/p>\n <\/p>\n Computer security incident definitions<\/p>\n Discussions on the importance of data classification<\/p>\n Debates on the struggle for knowledge<\/p>\n Basic concepts of information security<\/p>\n Descriptions of various vulnerabilities, threats and attacks on information systems<\/p>\n Discuss computer security incidents with examples<\/p>\n Descriptions of different categories of events<\/p>\n Event prioritization<\/p>\n Definitions of incident response, incident management and forensic informatics<\/p>\n <\/p>\n Risk policy disclosures<\/p>\n Forms of risk policy management<\/p>\n Different steps for assessing and mitigating risks in the workplace outlined<\/p>\n Risk analysis definitions<\/p>\n Different risk mitigation strategies<\/p>\n Explanations of the importance of cost\/benefit analysis in the risk assessment process<\/p>\n Risk mitigation methods<\/p>\n Residual risk discussions<\/p>\n Risk assessment tools<\/p>\n <\/p>\n Explanation of requirements for incident response<\/p>\n Incident response processes<\/p>\n Incident response components descriptions<\/p>\n Explanation of incident response method<\/p>\n Explanation of various events and processing stages<\/p>\n Incident response plan definitions<\/p>\n Incident response plan steps outlined<\/p>\n Discussions on the importance of training and awareness raising for incident response and handling<\/p>\n Developing safety awareness and training lists<\/p>\n Incident response policy statements<\/p>\n Incident management and incident management objective discussions<\/p>\n Explanations about incident response team structure, personnel, team dependencies and team services<\/p>\n Defining the relationship between incident response, incident management and incident management<\/p>\n Discussions on best incident response practices<\/p>\n <\/p>\n Discussions on the need for incident response teams<\/p>\n CSIRT statements of objectives and strategies<\/p>\n CSIRT vision and mission statements<\/p>\n Explanations of CSIRT selection<\/p>\n Description of CSIRT’s place in the organization<\/p>\n Explanations of the relationship with the CSIRT environment<\/p>\n Descriptions of species around CSIRT<\/p>\n The best exercise descriptions for creating a CSIRT<\/p>\n CSIRT role description<\/p>\n Incident response team role definition<\/p>\n Different definitions of CSIRT services<\/p>\n Description of CSIRT policies and procedures<\/p>\n Explanation of CSIRT functioning in an incident<\/p>\n <\/p>\n Defining Dos and DDos attacks<\/p>\n Descriptions of event processing readiness for Dos attacks<\/p>\n Unauthorized access event types descriptions<\/p>\n Descriptions of the various stages of preparation of operational events for an unauthorized access incident<\/p>\n Descriptions of different incidents of inappropriate use<\/p>\n Descriptions of incident handling steps for misuse incidents<\/p>\n Multi-component event discussions<\/p>\n Descriptions of steps to prepare event processing for multi-component events<\/p>\n Network event simulation with example tools<\/p>\n <\/p>\n Explanations about viruses, worms, Trojans and spyware<\/p>\n Event handling preparation descriptions for malicious code events<\/p>\n Discussions on prevention, detection and analysis of malicious code incidents<\/p>\n Containment strategy descriptions for malicious code events<\/p>\n Evidence method descriptions of malicious code event collection and migration<\/p>\n Eradication method and recovery from malicious code events definitions<\/p>\n Descriptions of various measures for malicious code events<\/p>\n <\/p>\n Internal threat definitions<\/p>\n Anatomy of internal attack descriptions<\/p>\n Different technical descriptions for internal threat detection<\/p>\n Descriptions of internal threat responses<\/p>\n Inside incident response plan descriptions<\/p>\n Developing guidelines for internal threat prevention<\/p>\n Demonstration of various monitoring tools running<\/p>\n <\/p>\n Forensic informatics debates<\/p>\n Explains the objectives of forensic analysis<\/p>\n Forensic analysis role discussions in the face of the incident<\/p>\n Explanations of forensic informatics types<\/p>\n Discussions about forensic researchers and other people<\/p>\n Forensic informatics processes definitions<\/p>\n Forensic informatics policy statements<\/p>\n Forensics discussions in life system cycle information<\/p>\n Forensic analysis tool demonstrations such as Helix and Sysinternals tools<\/p>\n <\/p>\n Event reporting definitions<\/p>\n Designing the detail to be reported<\/p>\n Develop report formats<\/p>\n Discussions on disclosure issues<\/p>\n Descriptions of workplace incident reporting<\/p>\n Discussions on federal agency event categories<\/p>\n Develop incident reporting rules<\/p>\n <\/p>\n Event analysis definitions<\/p>\n Explanations of the principles of event analysis<\/p>\n Identification of different case resolution steps<\/p>\n Discussions on contingency planning \/ continuity of operations<\/p>\n Business continuity planning and business impact analysis discussions<\/p>\n Defining an incident resolution plan<\/p>\n Discussions about the incident recovery planning team<\/p>\n Incident recovery test definitions<\/p>\n <\/p>\n Security policy definition<\/p>\n Explanation of the foundations of security policy<\/p>\n Defining the security policy objective<\/p>\n Explanation of security policy objectives<\/p>\n Security policy features descriptions<\/p>\n Discussions on the implementation of security policies<\/p>\n Explanations of access control policies and their importance<\/p>\n Gaps in managerial security policy, asset control policy, audit trail policy, access policy, certification policy, evidence collection policy, information security policy, National Information Security Certification and Accreditation Process (NIACAP) descriptions<\/p>\n Developing physical security guidance<\/p>\n Discussions on personnel safety policies and guidance<\/p>\n Explanations of incident management laws<\/p>\n Legal processes in the event of an incident[\/vc_column_text][\/toggle][toggle color=”Extra-Color-2″ title=”Who Should Receive the Training?”][vc_column_text]\n [vc_row type=”full_width_content” full_screen_row_position=”middle” column_margin=”default” scene_position=”center” text_color=”dark” text_align=”center” overlay_strength=”0.3″ shape_divider_position=”bottom” bg_image_animation=”none” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_position=”all” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_link_target=”_self” column_shadow=”none” column_border_radius=”none” width=”1\/1″ tablet_width_inherit=”default” tablet_text_alignment=”default” phone_text_alignment=”default” overlay_strength=”0.3″ column_border_width=”none” column_border_style=”solid”…<\/p>\n","protected":false},"featured_media":108986,"template":"","meta":[],"product_brand":[],"product_cat":[580,294,253,245],"product_tag":[],"class_list":{"0":"post-108570","1":"product","2":"type-product","3":"status-publish","4":"has-post-thumbnail","6":"product_cat-academy-club","7":"product_cat-software","8":"product_cat-business-world","9":"product_cat-general","11":"first","12":"outofstock","13":"shipping-taxable","14":"product-type-simple"},"yoast_head":"\n
\n– Sectoral SOME:<\/strong> It coordinates with the sector working on energy, cyber security, technology, banking and finance sectors, transportation, critical public services, water management and electronic communications. Establishment of Sectoral SOME is mandatory in critical sectors.<\/strong><\/p>\n
\n– To have knowledge about current attack threats and their processes,<\/em>
\n– Ensuring information security of organizations,<\/em>
\n– The event viewer is in charge of setting up recording systems against extraordinary situations that may be made to the systems<\/em>.<\/p>\n\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n