Build Your Human Defense
Elite training programs designed to transform your organisation's greatest vulnerability into its strongest line of defense. Twice monthly sessions, board to workforce.
IRAP Assessor Training Course
Delivered by the Australian Information Security Academy (AusISA)
Australia's flagship 5-day intensive IRAP Assessor Training — scenario-based and hands-on, aligned to ASD's IRAP Common Assessment Framework. Delivered exclusively by active ASD-endorsed IRAP assessors and practitioners. Prepares you for the IRAP assessor examination and ASD endorsement.
Investment
$7,620
AUD + GST
Assessors: $3,950 + GST
The Executive Briefing: Leading Through a Cyber Crisis
C-Suite Executives, Board Members, and Senior Leadership
In a major security breach, leadership decisions are paramount. This non-technical workshop uses realistic, tabletop simulations to prepare leaders for the strategic, legal, and reputational challenges of a significant cyber incident.
- Understand the anatomy of a major cyberattack and its business implications.
- Practice crisis communication protocols for internal and external stakeholders.
- Navigate complex decisions regarding ransom demands, regulatory disclosure, and business continuity.
- Develop a clear understanding of their role and responsibilities during a crisis to ensure a coordinated and effective response.
The Human Perimeter: Security Awareness for the Modern Workforce
All employees, contractors, and staff members — including specialized modules for privileged users (IT admins, system owners, executive assistants).
Human error remains the entry point for a vast majority of security breaches. Standard, once-a-year awareness training often fails to create lasting change. This program is designed to move beyond simple compliance and build a resilient security culture.
- Identify and Report Threats: Recognize sophisticated phishing, smishing, and social engineering attacks and understand the exact reporting procedure.
- Master Digital Hygiene: Understand the critical importance of strong passwords, MFA, and the risks of public Wi-Fi and unsecured devices.
- Protect Sensitive Data: Learn to identify and properly handle sensitive company and client information.
- Privileged User Responsibilities (Specialized Module): Equip elevated-access users to understand advanced threats targeting their accounts.
- Cultivate a Security Mindset: Foster a culture where every employee feels ownership and responsibility for security.
Privileged User Training (PUT): Defending the Keys to the Kingdom
System administrators, network engineers, database administrators, IT operations staff, and any privileged user who holds elevated access — the primary targets for advanced adversaries.
Cyberspace is unforgiving, and the speed at which cybercriminals exploit vulnerabilities has shrunk dramatically. As a privileged user — whether a system administrator, network engineer, or database admin — you hold the 'keys to the kingdom' and are a primary target for advanced adversaries. Designed for the modern threat landscape, this intensive two-day course frames cybersecurity through a dynamic 'Aggressor vs. Defender' (Red Team vs. Blue Team) lens. You will learn to integrate proactive security into your natural decision-making process to anticipate failure and drastically reduce your organisation's attack surface.
1. The Zero-Trust Adversary (Red Team Tradecraft)
- The Attacker's Mindset: Break down the stages of targeted cyber intrusions, from reconnaissance to data exfiltration.
- Modern Exploitation: Analyze how adversaries use 'Living Off The Land' (LOTL) techniques to blend in with normal network activity and evade detection.
- Identity & Credential Theft: Deep dive into how attackers bypass cleartext passwords using Pass-the-Hash (PtH) attacks and forge Kerberos 'Golden Tickets' to achieve total domain dominance.
2. Engineering Modern Defenses (Blue Team Architecture)
- Align your defenses with modern cyber security strategic mandates — meaningful logging (not just log everything), replace legacy IT, manage third-party risk, and think Resilience through technical assessment.
- Locking Down Access: Discover how Privileged Access Management (PAM) acts as a secure vault, stopping 'privilege creep' through temporary Just-in-Time (JIT) access and automated password rotation.
- Defense-in-Depth: Move beyond compliance — which is merely a static minimum baseline — to build dynamic, layered security controls that include phishing-resistant MFA and strict network segmentation.
- Threat Hunt: Kill - the modern thinking that moves security assessment from simply a vulnerability scan to a proactive 24/7 security understanding.
3. The Human Firewall & Active Detection
- Spotting the Invisible: Learn why well-trained people are often better at detecting subtle breaches than automated alerts, and how to define your system's 'normal' baseline.
- Social Engineering Psychology: Understand the 'Cialdini 6' principles of persuasion that attackers use to bypass rational thought, and how generative AI is scaling these threats.
- A Culture of Intervention: Adopt the modern principle of the 'Six Pillars of Operational Excellence' — the expectation that any team member must actively halt an operation if they spot an unacceptable security risk.