Short, intense, hands-on.

What you'll be able to do

• Map and enumerate an application's real attack surface
• Find and exploit injection, access-control and authentication flaws
• Chain low-severity findings into a demonstrable business impact
• Write a finding the way a client will actually act on it

Agenda

1. Recon and mapping · scoping an application honestly
2. Injection: SQL, command, template
3. Broken access control and IDOR at scale
4. Authentication, session handling and JWT failures
5. Reporting: severity, evidence and remediation that lands

What you'll be able to do

• Reason about IAM policies and spot privilege-escalation paths
• Detect and remediate public exposure of storage and compute
• Design VPC boundaries that survive a compromised workload
• Turn on the logging you will need before an incident, not after

Agenda

1. The shared responsibility model, applied honestly
2. IAM: policies, roles, and the escalation paths people miss
3. S3, EBS and snapshot exposure
4. VPC design, security groups and egress control
5. CloudTrail, GuardDuty and building a usable audit trail

What you'll be able to do

• Triage an alert queue under time pressure without losing the real one
• Read logs and correlate events across sources
• Separate a true positive from noise, and justify the call
• Escalate with the context an incident responder needs

Agenda

1. How a SOC runs: tiers, shifts, SLAs and handover
2. Log sources and what each one can and cannot tell you
3. SIEM querying and building a usable detection
4. Phishing triage end to end
5. Incident escalation, documentation and handover discipline

What you'll be able to do

• Scope an ISMS without making it unmanageably large
• Run a risk assessment that produces decisions, not a spreadsheet
• Select and justify Annex A controls defensibly
• Prepare evidence your certification auditor will accept

Agenda

1. Scoping and the statement of applicability
2. Risk assessment and treatment, done practically
3. Annex A control selection and justification
4. Documentation: what you need and what you do not
5. Internal audit and management review

What you'll be able to do

• Define and defend your cardholder data environment scope
• Use segmentation to reduce scope legitimately
• Understand what changed in v4.0 and what it means for you
• Assemble evidence in the form an assessor expects

Agenda

1. Scoping the CDE and the cost of getting it wrong
2. Segmentation strategy and validation
3. v4.0 changes and the customised approach
4. Requirement walkthrough for control owners
5. Evidence preparation and common assessment failures

What you'll be able to do

• Recognise current phishing, vishing and business email compromise patterns
• Understand why smart people click, and design around it
• Know exactly what to do in the sixty seconds after a suspicious message

Agenda

1. How attacks are built and targeted today
2. Live teardown of real-world lures
3. Invoice fraud and BEC for finance teams
4. Reporting: making it fast and blame-free