Cyber Security Training in Wellington

This instructor-led, live training in Wellington (available online or on-site) is designed for advanced-level cybersecurity professionals, AI engineers, and IoT developers who wish to implement robust security measures and resilience strategies for Edge AI systems.

By the end of this training, participants will be able to:

• Understand security risks and vulnerabilities in Edge AI deployments.
• Implement encryption and authentication techniques for data protection.
• Design resilient Edge AI architectures capable of withstanding cyber threats.
• Apply secure AI model deployment strategies in edge environments.

This instructor-led, live training in Wellington (online or on-site) is designed for intermediate-level cybersecurity professionals and data scientists who wish to leverage LLMs to enhance cybersecurity defences and threat intelligence.

By the end of this training, participants will be able to:

• Understand the role of LLMs in cybersecurity.
• Implement LLMs for threat detection and analysis.
• Utilise LLMs for security automation and response.
• Integrate LLMs with existing security infrastructure.

This instructor-led, live training in Wellington (available online or on-site) is designed for intermediate to advanced-level cybersecurity professionals and technical leaders who wish to learn how to implement AI models to strengthen security processes, automate threat detection and response, and carry out predictive analysis.

By the end of this training, participants will be able to:

• Understand the role of AI in modern cybersecurity.
• Develop machine learning models for anomaly and threat detection.
• Implement AI to automate incident response and security operations.
• Evaluate the ethical and operational implications of using AI in cybersecurity.

This instructor-led, live training in Wellington (delivered online or on-site) is designed for intermediate-level analysts who wish to effectively analyse, secure, and safeguard their organisation's data and networks against cyber threats.

By the end of this training, participants will be able to:

• Gain a comprehensive understanding of the current cybersecurity landscape.
• Learn and apply industry-standard cybersecurity frameworks (e.g., NIST, ISO/IEC 27001) and best practices to strengthen their organisation's security posture.
• Implement effective network security measures, including configuring firewalls, VPNs, IDS/IPS systems, and applying encryption techniques to protect data both at rest and in transit.
• Identify, analyse, and respond to cybersecurity incidents using threat intelligence, SIEM tools, and established incident response plans.

This instructor-led, live training in Wellington (online or onsite) is aimed at intermediate-level network administrators who wish to gain the essential skills to manage, administer, monitor, and maintain Fortinet security systems.

By the end of this training, participants will be able to:

• Configure and manage FortiGate firewalls.
• Monitor network traffic and manage incidents with FortiAnalyzer.
• Automate tasks and manage policies through FortiManager.
• Apply preventive maintenance strategies and troubleshoot network issues.

This instructor-led, live training in Wellington (online or on-site) is designed for beginner-level network administrators who wish to effectively manage and secure their network environments using the FortiGate 1100E.

By the end of this training, participants will be able to:

• Understand the fundamental architecture and key features of the FortiGate 1100E.
• Learn how to deploy the FortiGate 1100E across various network environments.
• Gain hands-on experience with essential configuration and management tasks.
• Comprehend security policies, NAT, and VPNs.
• Acquire skills to monitor and maintain the FortiGate 1100E.

This instructor-led, live training in Wellington (delivered either online or on-site) is designed for advanced-level professionals seeking a comprehensive understanding of fraud examination concepts and preparation for the Certified Fraud Examiner (CFE) exam.

By the end of this training, participants will be able to:

• Develop a thorough understanding of fraud examination principles and the fraud examination process.
• Learn to identify, investigate, and prevent a range of financial fraud schemes.
• Understand the legal framework surrounding fraud, including the legal elements of fraud, relevant legislation, and regulations.
• Acquire practical skills in conducting fraud investigations, including evidence collection, interview techniques, and data analysis.
• Learn how to design and implement effective fraud prevention and deterrence programmes within organisations.
• Build the confidence and knowledge required to successfully pass the Certified Fraud Examiner (CFE) exam.

This instructor-led, live training in Wellington (online or on-site) is aimed at intermediate-level network administrators who wish to manage and secure their networks using FortiGate firewalls.

By the end of this training, participants will be able to:

• Understand FortiGate features and functionalities, particularly those introduced or enhanced in version 7.4.
• Configure and manage FortiGate devices and implement advanced security features.
• Deploy and manage advanced security measures such as IPS, antivirus, web filtering, and threat management.
• Monitor network activities, analyse logs, and generate reports for auditing and compliance.

This instructor-led, live training in Wellington (online or on-site) is aimed at intermediate-level technical professionals who wish to delve deeper into the technical aspects and functionalities of Fortinet's product line to effectively recommend, sell, and implement Fortinet security solutions.

By the end of this training, participants will be able to:

• Gain in-depth knowledge of Fortinet's advanced security solutions and products.
• Understand the technical features, benefits, and deployment scenarios for each core Fortinet product.
• Configure, manage, and troubleshoot Fortinet solutions in diverse environments.
• Apply Fortinet products to address complex security challenges and requirements.

This instructor-led, live training in Wellington (online or on-site) is aimed at beginner-level technical professionals who wish to learn the concept of the Security Fabric and how it has evolved to meet the cybersecurity needs of organisations.

By the end of this training, participants will be able to:

• Understand the evolution of cybersecurity and how it has shaped current security technologies.
• Use Fortinet products to protect against specific types of cyber threats and attacks.
• Grasp the integration and automation capabilities of Fortinet solutions in delivering a coordinated response to cyber incidents.

This instructor-led, live training in Wellington (available online or on-site) is designed for security professionals seeking to master the troubleshooting of Palo Alto Networks' next-generation firewalls.

By the conclusion of this training, participants will be able to:

• Grasp the architecture underpinning the next-generation firewall.
• Investigate and resolve networking issues using dedicated firewall tools.
• Analyse advanced logs to address real-world scenarios.

This instructor-led, live training in Wellington (delivered online or on-site) is aimed at beginner-level network security professionals who wish to learn the concepts of cybersecurity and understand the current global threat landscape.

By the end of this training, participants will be able to:

• Understand the current global threat landscape and identify the main types of cyber adversaries.
• Recognise the primary types of malware and the mechanics of cyber attacks.
• Understand the basics of network security and the importance of a layered security approach.
• Learn about Fortinet's Security Fabric and how it addresses modern cybersecurity challenges.

This instructor-led, live training in Wellington (online or on-site) is designed for intermediate-level network and security professionals seeking to effectively manage and secure networks using Fortigate 600E equipment, with a particular emphasis on High Availability (HA) configurations to ensure enhanced reliability and performance.

By the end of this training, participants will be able to:

• Understand the features, specifications, and operating principles of the Fortigate 600E firewall.
• Perform the initial setup of the Fortigate 600E, including essential configuration tasks such as configuring interfaces, routing, and initial firewall policies.
• Configure and manage advanced security capabilities including SSL VPN, user authentication, antivirus, IPS, web filtering, and anti-malware to protect against a wide range of network threats.
• Troubleshoot common issues in HA setups and effectively manage HA environments.

This instructor-led, live training in Wellington (online or on-site) is designed for service technicians, system administrators, or anyone seeking to master the proper installation, usage, and management of Honeywell security systems.

By the conclusion of this training, participants will be able to:

• Understand the core concepts of Honeywell security systems and their components.
• Correctly install and maintain a Honeywell security system.
• Leverage Honeywell's maintenance tools and management suite to effectively control security systems.

Open Source Software (OSS) Management is the practice of overseeing the lifecycle of open-source components within an organisation, ensuring their secure, compliant and efficient use.

This instructor-led, live training (delivered online or on-site) is designed for intermediate-level IT professionals who wish to implement best practices for managing open-source software in enterprise and government environments.

By the end of this training, participants will be able to:

• Establish effective OSS policies and governance frameworks.
• Use SBOM and SCA tools to identify, track and manage open-source dependencies.
• Mitigate risks associated with licensing and security vulnerabilities.
• Streamline OSS adoption while maximising innovation and cost savings.

Format of the Course

• Interactive lecture and discussion.
• Case studies and scenario-based exercises.
• Hands-on demonstrations with OSS management tools.

Course Customisation Options

• This course can be tailored to specific organisational OSS policies and toolchains. Please contact us to arrange.

This instructor-led, live training in Wellington (online or onsite) is aimed at intermediate-level to advanced-level developers who wish to understand and apply secure coding practices, identify security risks in software, and implement defenses against cyber threats.

By the end of this training, participants will be able to:

• Understand common security vulnerabilities in web and software applications.
• Analyse security threats and exploit techniques used by attackers.
• Implement secure coding practices to mitigate security risks.
• Use security testing tools to identify and fix vulnerabilities.

This instructor-led, live training in Wellington (available online or on-site) is designed for intermediate-level IT professionals seeking to strengthen their skills in identifying and managing IT risk, implementing information systems controls, and preparing for the CRISC certification examination.

Upon completion of this training, participants will be able to:

• Grasp the governance and risk management dimensions of IT.
• Conduct IT risk assessments and implement appropriate risk responses.
• Design and deploy effective information systems controls.
• Prepare confidently for the CRISC certification exam.

This instructor-led, live training in Wellington (online or on-site) is designed for intermediate-level cybersecurity professionals seeking to deepen their understanding of GRC frameworks and apply them to secure, compliant business operations.

By the end of this training, participants will be able to:

• Understand the key components of cybersecurity governance, risk, and compliance.
• Conduct risk assessments and develop effective risk mitigation strategies.
• Implement compliance measures and manage regulatory requirements.
• Develop and enforce security policies and procedures.

This instructor-led, live training in Wellington (online or on-site) is designed for intermediate to advanced-level IT professionals and business leaders who wish to develop a structured approach to handling data breaches.

By the end of this training, participants will be able to:

• Understand the causes and consequences of data breaches.
• Develop and implement data breach prevention strategies.
• Establish an incident response plan to contain and mitigate breaches.
• Conduct forensic investigations and assess the impact of breaches.
• Comply with legal and regulatory requirements for breach notification.
• Recover from data breaches and strengthen security postures.

The EC-Council Certified DevSecOps Engineer (ECDE) is a practical course designed to equip professionals with the skills needed to embed security throughout the DevOps lifecycle, enabling secure software development from initial planning through to deployment.

This instructor-led, live training (available online or on-site) is tailored for intermediate-level software and DevOps professionals who aim to integrate security practices into CI/CD pipelines, ensuring secure and compliant code delivery.

By the conclusion of this training, participants will be able to:

• Grasp the core principles and practices of DevSecOps.
• Secure each stage of the CI/CD pipeline using automated tools.
• Implement secure coding standards and conduct vulnerability scanning.
• Prepare for the ECDE certification through hands-on labs and review sessions.

Course Format

• Interactive lectures and group discussions.
• Practical application of DevSecOps tools within simulated pipelines.
• Guided exercises focused on secure development and deployment.

Course Customisation Options

• To request a customised training session for this course based on your team's workflows or toolchain, please contact us to make arrangements.

This instructor-led, live training in Wellington (available online or on-site) is designed for security professionals seeking to master the fundamentals of managing Palo Alto Networks' next-generation firewalls.

By the conclusion of this training, participants will be able to:

• Configure and manage the essential features of Palo Alto Networks' firewalls.
• Administer security and NAT policies.
• Implement threat prevention strategies.
• Monitor network threats and traffic patterns.

User session recording technology is used to capture, monitor, and audit user activity across IT systems, delivering valuable insights for security, compliance, and forensic investigations.

This instructor-led, live training (available online or on-site) is designed for beginner to intermediate-level IT and security professionals who wish to implement user session recording solutions to strengthen monitoring, ensure compliance, and enhance accountability.

By the end of this training, participants will be able to:

• Understand the core principles of user session recording.
• Deploy and configure session recording solutions effectively.
• Analyse and audit recorded sessions to ensure compliance.
• Integrate session recording with security monitoring systems.

Course Format

• Interactive lectures and group discussions.
• Abundant hands-on exercises and practical practice.
• Real-world implementation in a live lab environment.

Course Customisation Options

• To request a customised version of this training, please contact us to make arrangements.

This instructor-led, live training in Wellington (available online or on-site) is designed for beginner to intermediate-level system administrators and security professionals who want to learn how to implement Cloudflare for content delivery and cloud security, as well as how to mitigate DDoS attacks.

By the end of this training, participants will be able to:

• Configure Cloudflare for their websites.
• Set up DNS records and SSL certificates.
• Implement Cloudflare for content delivery and caching.
• Protect their websites from DDoS attacks.
• Implement firewall rules to restrict traffic to their websites.

This instructor-led, live training in Wellington (online or on-site) is intended for system administrators who wish to use 389 Directory Server to configure and manage LDAP-based authentication and authorisation.

By the end of this training, participants will be able to:

• Install and configure 389 Directory Server.
• Understand the features and architecture of 389 Directory Server.
• Learn how to configure the directory server using the web console and CLI.
• Set up and monitor replication for high availability and load balancing.
• Manage LDAP authentication using SSSD for improved performance.
• Integrate 389 Directory Server with Microsoft Active Directory.

This instructor-led, live training in Wellington (available online or on-site) is aimed at system administrators who wish to use Microsoft Active Directory to manage and secure data access.

By the end of this training, participants will be able to:

• Set up and configure Active Directory.
• Establish a domain and define user and device access rights.
• Manage users and machines through Group Policies.
• Control access to file servers.
• Set up a Certificate Service and manage certificates.
• Implement and manage services such as encryption, certificates, and authentication.

This instructor-led, live training in Wellington (online or on-site) is designed for engineers who wish to safeguard connected vehicles from cyber attacks.

By the end of this training, participants will be able to:

• Implement cyber security measures within automotive systems.
• Select the most appropriate technologies, tools, and approaches.

Building a secure networked application can be challenging, even for developers who have previously worked with various cryptographic components such as encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, the course first establishes a solid foundation covering the core requirements of secure communication—secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also explores typical issues that can compromise these requirements, along with real-world solutions.

As cryptography is a critical pillar of network security, the course examines key algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than delving into complex mathematical theory, these topics are presented from a developer's perspective, featuring practical use cases and considerations such as the implementation of public key infrastructures. The course introduces security protocols across various domains of secure communication, with in-depth coverage of widely used protocol families like IPSEC and SSL/TLS.

Common cryptographic vulnerabilities are examined, including those affecting specific algorithms and protocols such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding Oracle, Lucky Thirteen, POODLE, and the RSA timing attack. For each vulnerability, practical implications and potential consequences are outlined, again avoiding deep mathematical detail.

Finally, as XML plays a central role in data exchange for networked applications, the course addresses XML security. This includes the use of XML in web services and SOAP messages, along with protective measures such as XML signature and XML encryption. It also highlights weaknesses in these protections and XML-specific security threats, including XML injection, XML External Entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security and secure coding
• Understand the requirements of secure communication
• Learn about network attacks and defenses at different OSI layers
• Have a practical understanding of cryptography
• Understand essential security protocols
• Understand some recent attacks against cryptosystems
• Get information about some recent related vulnerabilities
• Understand security concepts of Web services
• Get sources and further readings on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ applications demands stringent defences against malicious exploitation, memory corruption, and the bypass of input validation. This course explores common vulnerability patterns, such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will implement secure coding guidelines, utilise static analysis tools, and apply defensive programming techniques to mitigate weaknesses, enforce rigorous input sanitization, and produce robust software that withstands cyberattacks.

Even seasoned Java programmers often don't fully grasp the full range of security services provided by Java, nor are they always aware of the various vulnerabilities that affect web applications written in Java.

Alongside introducing the security components of Standard Java Edition, this course addresses security issues within Java Enterprise Edition (JEE) and web services. The discussion of specific services is grounded in the fundamentals of cryptography and secure communication. Through a variety of exercises, participants explore declarative and programmatic security techniques in JEE, while also covering both transport-layer and end-to-end security for web services. The practical application of all these components is demonstrated through several hands-on exercises, allowing participants to test the discussed APIs and tools themselves.

The course also examines and explains the most common and severe programming flaws in the Java language and platform, as well as web-related vulnerabilities. Beyond typical bugs made by Java programmers, the security vulnerabilities covered include both language-specific issues and problems arising from the runtime environment. All vulnerabilities and their corresponding attacks are demonstrated through easy-to-understand exercises, followed by recommended coding guidelines and possible mitigation techniques.

Participants attending this course will

• Understand the basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Understand the security concepts of web services
• Learn to utilise various security features of the Java development environment
• Develop a practical understanding of cryptography
• Understand the security solutions offered by Java EE
• Learn about typical coding mistakes and how to avoid them
• Gain information about some recent vulnerabilities in the Java framework
• Acquire practical knowledge in using security testing tools
• Receive sources and further reading recommendations on secure coding practices

Audience

Developers

Today, a variety of programming languages can compile code to the .NET and ASP.NET frameworks. This environment offers robust tools for security development, yet developers must understand how to apply architecture- and coding-level programming techniques to implement desired security functions, avoid vulnerabilities, and limit their exploitation.

The aim of this course is to equip developers with the ability to prevent untrusted code from performing privileged actions, protect resources via strong authentication and authorization, provide remote procedure calls, handle sessions, introduce different implementations for certain functionality, and more, through numerous hands-on exercises.

The introduction to various vulnerabilities begins by presenting typical programming problems encountered when using .NET, while the discussion on ASP.NET vulnerabilities covers various environment settings and their impacts. Finally, the topic of ASP.NET-specific vulnerabilities addresses not only general web application security challenges but also special issues and attack methods, such as ViewState attacks and string termination attacks.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to avoid them
• Learn to utilise various security features within the .NET development environment
• Gain practical knowledge in using security testing tools
• Learn about typical coding mistakes and how to avoid them
• Receive information regarding recent vulnerabilities in .NET and ASP.NET
• Access sources and further reading materials on secure coding practices

Audience

Developers

This course equips PHP developers with essential skills to build applications resilient against modern internet-based attacks. Web vulnerabilities are explored through PHP-focused examples that extend beyond the OWASP Top Ten, covering a range of injection attacks, script injections, session handling exploits in PHP, insecure direct object references, file upload issues, and more. PHP-specific vulnerabilities are introduced and categorised under standard vulnerability types such as missing or improper input validation, incorrect error and exception handling, misuse of security features, and time- and state-related issues. For the latter, we examine attacks like open_basedir circumvention, denial-of-service via magic floats, and hash table collision attacks. In each scenario, participants will become familiar with the most critical techniques and functions needed to mitigate these risks.

Special attention is given to client-side security, addressing security concerns related to JavaScript, Ajax, and HTML5. A variety of PHP security-related extensions are introduced, including hash, mcrypt, and OpenSSL for cryptography, as well as Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening are presented in the context of PHP configuration (setting php.ini), Apache, and server-level settings. Finally, an overview is provided of various security testing tools and techniques available to developers and testers, including security scanners, penetration testing frameworks, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the introduction of vulnerabilities and the configuration practices are reinforced through numerous hands-on exercises. These demonstrate the real-world impact of successful attacks, illustrate how to apply mitigation techniques, and introduce the use of various extensions and tools.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Gain knowledge of client-side vulnerabilities and secure coding practices
• Develop a practical understanding of cryptography
• Learn how to utilise various PHP security features
• Identify typical coding mistakes and learn how to avoid them
• Stay informed about recent vulnerabilities in the PHP framework
• Gain hands-on experience with security testing tools
• Access resources and further reading materials on secure coding practices

Audience

Developers

The Combined SDL core training offers insight into secure software design, development and testing through the Microsoft Secure Development Lifecycle (SDL). It provides a Level 100 overview of the fundamental building blocks of SDL, followed by design techniques to detect and rectify flaws in the early stages of the development process.

Focusing on the development phase, the course gives an overview of typical security-relevant programming bugs in both managed and native code. Attack methods are presented for the discussed vulnerabilities, along with associated mitigation techniques, all explained through a series of hands-on exercises that provide live hacking experiences for participants. An introduction to different security testing methods is followed by demonstrations of the effectiveness of various testing tools. Participants can understand how these tools operate through practical exercises, applying them to the vulnerable code previously discussed.

Participants attending this course will

Understand basic concepts of security, IT security and secure coding

Become familiar with the essential steps of the Microsoft Secure Development Lifecycle

Learn secure design and development practices

Learn about secure implementation principles

Understand security testing methodology

• Gain access to sources and further reading on secure coding practices

Audience

Developers, Managers

Cyber Security is the practice of applying technologies, controls, and processes to protect computer systems, servers, networks, devices, programs, and data from malicious cyber attacks.

This instructor-led, live training (online or onsite) is designed for anyone who wishes to learn how to protect internet-connected systems from a range of cyber threats.

By the end of this training, participants will be able to:

• Understand the concept of Cyber Security.
• Learn and understand the different types of Cyber Security threats.
• Learn processes and best practices to protect internet-connected systems from cyber attacks.

Course Format

• Interactive lectures and discussions.
• Ample exercises and practice opportunities.
• Hands-on implementation in a live-lab environment.

Course Customisation Options

• To request a customised training session for this course, please contact us to arrange.

This instructor-led, live training in Wellington (online or on-site) explores the various facets of enterprise security, ranging from artificial intelligence to database protection. It also covers the latest tools, processes, and mindsets necessary to defend against attacks. 

In this instructor-led, live course in Wellington, participants will learn how to formulate the appropriate security strategy to address the DevOps security challenge.

This instructor-led, live training in Wellington explores the system architectures, operating systems, networking, storage, and cryptographic issues that need to be considered when designing secure embedded systems.

By the end of this course, participants will have a thorough grasp of security principles, concerns, and technologies. More importantly, participants will gain the skills required to develop safe and secure embedded software.

This course offers an expert-level introduction to the newly enacted Accessibility Law, equipping developers with the practical skills needed to design, develop, and maintain fully accessible applications. Beginning with a contextual discussion on the law's significance and implications, the course swiftly transitions into hands-on coding practices, tools, and testing techniques to ensure compliance and inclusivity for users with disabilities.

This course provides leaders and managers with an overview of the key issues and activities associated with cybersecurity.

Leaders will gain insights across a range of topics designed to strengthen their understanding and sharpen their decision-making capabilities in relation to cybersecurity threats.

By the end of this training, participants will be able to:

• Understand the Internet and social network privacy
• Recognise Personally Identifiable Information (PII) and its importance
• Learn how to secure online activities
• Understand how to maintain the privacy of business users
• Gain knowledge of cyber laws that protect privacy

Course Format

• Interactive lectures and discussions.
• Abundant exercises and practical application.
• Hands-on implementation in a live-lab environment.

Course Customisation Options

• To request a customised version of this course, please contact us to make arrangements.

This instructor-led, live training in Wellington (online or onsite) is aimed at security engineers and compliance officers who wish to harden EXO deployments, control model access, and govern AI workloads running entirely on-premise.

This instructor-led, live training in Wellington (delivered online or on-site) is designed for system administrators who wish to use FreeIPA to centralise authentication, authorisation and account information for their organisation's users, groups and machines.

By the end of this training, participants will be able to:

• Install and configure FreeIPA.
• Manage Linux users and clients from a single central location.
• Use FreeIPA's CLI, Web UI and RPC interface to set up and manage permissions.
• Enable Single Sign-On authentication across all systems, services and applications.
• Integrate FreeIPA with Windows Active Directory.
• Backup, replicate and migrate a FreeIPA server.

This instructor-led, live training in Wellington (online or onsite) is aimed at system administrators and IT professionals who wish to use RSPAMD, SpamAssassin, and DMARC to secure self-hosted email servers.

By the end of this training, participants will be able to configure anti-spam solutions, implement email authentication protocols, and maintain secure sovereign mail infrastructure.

Audience

This course is designed for all staff who need a practical grasp of Compliance and effective Risk Management.

Course Format

Training is delivered through a blended approach that includes:

• Facilitated discussions
• Slide-based presentations
• Case studies
• Real-world examples

Course Objectives

By the end of the course, participants will be able to:

Develop a solid understanding of the key aspects of Compliance, as well as national and international initiatives aimed at managing associated risks.

Explain how organisations and their teams can establish an effective Compliance Risk Management Framework.

Describe the responsibilities of the Compliance Officer and the Money Laundering Reporting Officer, and understand how these roles integrate within a business structure.

Identify critical risk areas in Financial Crime, particularly in the context of international operations, offshore centres, and high-net-worth clients.

This course will equip attendees with the skills to scan, test, exploit, and secure their own systems, providing in-depth knowledge and hands-on experience with current essential security technologies. Participants will gain a clear understanding of how perimeter defences operate and will then proceed to scan and attack their own networks in a safe, controlled environment—ensuring no real network is harmed. Attendees will learn how intruders escalate privileges and discover the steps required to secure systems effectively. Key topics include Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows, and Virus Creation.

This instructor-led, live training in Wellington (online or on-site) is designed for system administrators who wish to use Okta for identity and access management.

By the end of this training, participants will be able to:

• Configure, integrate, and manage Okta effectively.
• Integrate Okta into existing applications.
• Implement robust security measures using multi-factor authentication.

This instructor-led, live training in Wellington (available online or on-site) is designed for individuals who wish to conduct research on third parties while safeguarding themselves against similar scrutiny.

By the end of this training, participants will be able to:

• Install and configure advanced tools for conducting OSINT operations.
• Apply advanced techniques to collect publicly available data pertinent to an investigation.
• Efficiently analyse large volumes of data.
• Produce intelligence reports based on findings.
• Leverage AI tools for facial recognition and sentiment analysis.
• Develop a strategic approach to define objectives and direct efforts toward the most relevant and actionable data.

This Introduction to Open Source Intelligence (OSINT) course equips delegates with the skills needed to locate critical intelligence more efficiently and effectively across the Internet and World Wide Web. The course is highly practical, giving participants ample opportunity to explore and understand hundreds of available tools and websites.
It progresses to advanced levels, focusing on in-depth use of sophisticated tools essential for covert internet investigations and intelligence gathering. Again, the course remains highly practical, allowing delegates the time to explore and master the tools and resources covered.

This instructor-led, live Payment Card Industry Professional training in Wellington (online or on-site) provides an individual qualification for industry practitioners who wish to demonstrate their professional expertise and understanding of the Payment Card Industry Data Security Standard (PCI DSS).

By the end of this training, participants will be able to:

• Understand the payment process and the PCI standards designed to safeguard it.
• Grasp the roles and responsibilities of entities involved in the payments industry.
• Gain deep insight into, and a thorough understanding of, the 12 PCI DSS requirements.
• Demonstrate knowledge of PCI DSS and how it applies to organisations involved in the transaction process.

This instructor-led live training in Wellington (online or onsite) is aimed at security engineers who wish to use IBM QRadar SIEM to address pressing security use cases.

By the end of this training, participants will be able to:

• Gain visibility into enterprise data across on-premise and cloud environments.
• Automate security intelligence to hunt threats and to contain risks.
• Detect, identify, and prioritise threats.

This course in Wellington aims to support the following: 

1. Help developers master secure coding techniques
2. Assist software testers in evaluating application security before deployment to the production environment
3. Enable software architects to understand the risks associated with applications
4. Support team leaders in establishing security baselines for developers
5. Aid web administrators in configuring servers to prevent misconfigurations

This course covers secure coding concepts and principles in Java through the Open Web Application Security Project (OWASP) methodology of testing. The Open Web Application Security Project is an online community that produces freely available articles, methodologies, documentation, tools, and technologies in the field of web application security.

This course covers secure coding concepts and principles using ASP.NET through the Open Web Application Security Project (OWASP) testing methodology. OWASP is an online community that produces freely available articles, methodologies, documentation, tools, and technologies in the field of web application security.

This course explores the .NET Framework security features and how to secure web applications.