Information Security for Information Technology Professionals

Name: Information Security for Information Technology Professionals
Author: KnowledgeCity

Master the essentials of information security and protect your organization from evolving cyber threats.

Preview the first lesson free — get full access to all 11 lessons.

Course: On-Demand

Information security means being able to protect data, which is at the heart of everything you do. There are several layers to information security. Information is at the deepest level, with application on top of that, then host, followed by network. All of these combined make up your critical assets. All of the traffic that is coming in from the Internet is going to enter your network. Your job is to prevent unauthorized outside sources from entering the network. It's important to have both your logical and physical infosec components operating at a high level to keep your network as secure as possible. From the network pieces, you have your host. Your host can be physical or virtual and is made up of your servers and operating system. On your host, you have your applications. Within the applications, you have the most important component to keep your data. Let's look at this system a little closer. Your network is made up of a variety of components, which can include your ethernet cables, routers, switches, gateways, firewalls, and more. The network is what allows edge devices, those that engage with your network, to come in. It also allows the devices within your network to get out. Edge devices include phones, tablets, laptops, desktops, and Internet of Things or IoT devices. Your host, which includes your OS, uses the network to allow traffic to get out. This can include traffic going to the Internet or going to the local access network or LAN. You will have applications running on your host. These applications vary widely from database servers to point of sale and customer relationship management systems. The application contains the data, the information we must secure. Information security uses both detective and preventative controls to protect data. Detective controls allow you to figure out if somebody has gained unauthorized access to your resources within your organization or if someone has attempted to gain access. Preventative controls do their best to prevent unauthorized actors from getting into your system in the first place. To aid in this, there are intrusion detection systems, or IDS, and intrusion prevention systems, or IPS. Using both detective and preventative methods helps improve your organization's network security.

Intermediate Provider : KnowledgeCity 11 Lessons · 26m in Arabic, English, Spanish

Course Description

As cyber threats become more sophisticated, protecting your organization's data is more critical than ever. The Information Security for IT Professionals course provides you with the knowledge and tools to secure systems across all layers—from networks and hosts to applications and data. You'll delve into key security concepts like the CIA triad (Confidentiality, Integrity, Availability), understand how to implement both detective and preventive controls, and learn to protect against threats ranging from DDoS attacks to AI-generated cyberattacks. By mastering these concepts, you’ll be prepared to ensure that your organization’s infrastructure remains secure, resilient, and ready to handle any potential breach. By the end of the course, you’ll be equipped to create and enforce robust security policies, implement disaster recovery plans, and stay ahead of new and emerging threats in the field of information security.

What You'll Learn

Apply the principles of confidentiality, integrity, and availability (the CIA triad)
Secure network systems and hosts across all layers of the infrastructure
Identify and mitigate vulnerabilities in IT infrastructure
Implement detective and preventive security controls
Develop and enforce security policies and disaster recovery plans
Protect against threats ranging from DDoS attacks to AI-generated cyberattacks

Key Takeaways

The CIA triad of confidentiality, integrity, and availability underpins securing systems across networks, hosts, applications, and data.
Effective information security combines both detective and preventive controls to defend IT infrastructure.
Identifying and mitigating vulnerabilities helps keep an organization's infrastructure secure, resilient, and ready to handle a breach.
Robust security policies, user training, and disaster recovery plans support business continuity.
Staying ahead of new and emerging threats, including AI-generated cyberattacks, is part of modern information security.

Frequently Asked Questions

Who is this course for?

It is designed for IT professionals who need to secure their organization's systems and data across networks, hosts, applications, and data layers.

What topics does this course cover?

It covers the CIA triad, protecting systems, system vulnerabilities and defenses, wireless networks, permissions and access, authentication, authorization and accounting, cryptography and encryption, disaster recovery and business continuity, and security policies and user training.

What skills will I gain from this course?

You will build skills in cyber security standards, disaster recovery planning, and vulnerability management.

What will I be able to do by the end of the course?

You will be equipped to create and enforce robust security policies, implement disaster recovery plans, and stay ahead of new and emerging threats in information security.

How is the course structured?

The course is organized into lessons that progress from an introduction through core security topics to disaster recovery, security policies and user training, and a concluding lesson.