ISO LEAD PEN TEST PROFESSIONAL

ISO LEAD PEN TEST PROFESSIONAL

Master Professional Penetration Testing

*International Certification by Professional Evaluation and Certification Board (PECB)*

Background ISO LEAD PEN TEST PROFESSIONAL

Lead Pen Test Professional training enables you to develop the necessary expertise to lead a professional penetration test by using a mix of practical techniques and management skills.

This course is designed by industry experts with in-depth experience in the Penetration Testing field. Unlike other trainings, this training course is focused specifically on the knowledge and skills needed by professionals looking to lead or take part in a penetration test. It drills down into the latest technical knowledge, tools and techniques in key areas including infrastructure, Web Application security, Mobile security and Social Engineering. In addition, this course concentrates on how to practically apply what is learned on current day-to-day penetration testing and does not expand on unrelated, dated or unnecessary theoretical concepts.

Along with the in-depth hands-on practical skills, this training course equips you with the management skills you need to lead a penetration test, taking into account business risks and key business issues. The individuals who complete the course have the right blend of the real business and technical competencies needed to be a respected, understood and professional penetration tester. On the last day of the training course, you will get to use the skills learned in a comprehensive capture and flag penetration testing exercises.

Objectives ISO LEAD PEN TEST PROFESSIONAL

• Learn how to interpret and illustrate the main Penetration Testing concepts and principles
• Understand the core technical knowledge needed to organize and carry out an effective set of Pen Tests
• Learn how to effectively plan a Penetration Test and identify a scope which is suitable and appropriate based on risk
• Acquire hands-on practical skills and knowledge on relevant tools and techniques used to efficiently conduct a Penetration Testing
• Learn how to effectively manage the time and resources needed to scale a specific Penetration Test

Contents

1. Introduction to Penetration Testing, ethics, planning and scoping

• Course objectives and structure
• Penetration Testing principles
• Legal and ethical issues
• Fundamental principles of information security and risk management
• Penetration Testing approaches
• Penetration Testing phases
• Management of a Penetration Test

2. Technical foundation knowledge and techniques (with practical exercises in all areas)

↑Technical foundation knowledge

• Technical foundation knowledge

3. Conducting a Penetration Test (using tools and techniques) and reviewing testing areas

• Conducting a penetration test – Infrastructure testing
• Conducting a penetration test – Web application penetration testing
• Conducting a penetration test – Mobile testing
• Conducting a penetration test – Social engineering testing
• Conducting a penetration test – Physical security testing

4. Analyzing results from testing, reporting and follow up

• Documentation of the test quality review and reporting
• Action plans and follow up
• Managing a test program
• Competence and evaluation of penetration testers
• Capture the flag exercises
• Closing the training

5. Certification Exam

Examination

• Domain 1: Fundamental principles and concepts in Penetration Testing
• Domain 2: Technical foundations for Penetration Testing
• Domain 3: Scoping and planning a Penetration Test
• Domain 4: Conducting a Penetration Test including test types, tools and methods
• Domain 5: Specific Penetration Testing types and techniques (infrastructure, application, mobile technology and social engineering)
• Domain 6: Analyzing results and the reporting process
• Domain 7: Penetration Test follow up

Certification

Metode

Metode pelatihan dapat dilakukan dengan tiga metode dimana Peserta dapat memilih metode yang sesuai. Metode tersebut adalah :

1. Metode Peserta Belajar Online Mandiri (Asinkron) yaitu:

• Peserta belajar secara mandiri melalui website yang disediakan setelah mendapatkan akun untuk mengakses materi.
• Apabila diperlukan peserta dapat diskusi atau konsultasi terkait dengan materi yang akan difasilitasi  oleh konsultan/trainer dari PT Expertindo melalui berbagai media seperti Google Meet, Zoom, Microsoft Teams, Team link, atau WhatsApp sesuai dengan kesepakatan

2. Metode Live Online Training(Sinkron) yaitu :

• Instruktur mengajar secara LIVE dengan durasi 4 jam perhari selama 3 hari secara terjadwal
• Media Live training dapat menggunakan Google Meet, Zoom, Microsoft Teams atau Team link.

3. Metode Offline Training(Classroom) yaitu:

• Instruktur mengajar secara tatap muka dengan durasi 8 jam perhari selama 3 hari secara terjadwal
• Teknik yang digunakan: presentasi, diskusi, tanya jawab, studi kasus, brainstorming.

Ketentuan  Online  Training

Persiapan Peserta

• Dianjurkan menggunakan laptop, bukan smartphone.
• Koneksi internet yang stabil.
• Buku dan alat tulis.
• Peserta menginstall aplikasi sesuai yang akan digunakan, sebelum jadwal training berlangsung. Untuk yang mempunyai kesulitan, bisa menghubungi staff kami sebelum jadwal training berlangsung

Platform yang digunakan

• Beberapa alternative platform Zoom, Google Meet, Hang Out,  Team link atau Webex untuk conference live training
• Google Classroom untuk memuat materi, tugas dan dokumen lain yang dapat diakses peserta dengan link dan kode kelas yang akan diberikan oleh penyelenggara sebelum pelaksanaan training.

Cara masuk ke video conference

• Penyelenggara akan memberikan undangan berupa link.
• Klik linktersebut, ikuti arahan selanjutnya.
• Anda akan dibawa masuk ke dalam video conference.

Investasi dan Fasilitas

Lead Instructor

In House Training lainnya yang beritanya dapat dilihat di link berikut => In House Training.

Untuk judul dan informasi online training, kunjungi juga website PT Expertindo lainnya di alamat www.e-trainingonline.com