Auditing a Cybersecurity Programme
Intensive 5-day course · English, Arabic & European languages
- Duration5 days
- FormatClassroom or live online
- LanguageEnglish, Arabic or a European language
- CertificateARUK Certificate of Attendance
- FeeFrom £2,280 + VAT
Auditors and IT professionals assess cybersecurity programmes in this five-day course. Delegates study the controls involved in protecting devices, networks and data, and examine their implementation and effectiveness. Simulated audits, risk assessments, threat analysis and breach case studies accompany work on information security management, incident response, crisis management and disaster recovery.
Classroom
Public courses in our cities
- 26–30 Oct 2026Manama£3,080 + VAT
- 2–6 Nov 2026Barcelona£3,080 + VAT
- 9–13 Nov 2026Frankfurt£2,600 + VAT
- 16–20 Nov 2026Dubai£4,200 + VAT
- 14–18 Dec 2026Barcelona£3,080 + VAT
- 21–25 Dec 2026Frankfurt£2,600 + VAT
Show 37 more dates
- 28 Dec – 1 Jan 2026Riyadh£4,200 + VAT
- 4–8 Jan 2027Munich£3,400 + VAT
- 18–22 Jan 2027Barcelona£3,080 + VAT
- 18–22 Jan 2027Malaga£3,080 + VAT
- 1–5 Feb 2027Barcelona£3,080 + VAT
- 15–19 Feb 2027Paris£3,600 + VAT
- 15–19 Feb 2027Sarajevo£3,400 + VAT
- 8–12 Mar 2027Paris£3,600 + VAT
- 15–19 Mar 2027Frankfurt£2,600 + VAT
- 22–26 Mar 2027Dubai£4,200 + VAT
- 5–9 Apr 2027Barcelona£3,080 + VAT
- 12–16 Apr 2027Frankfurt£2,600 + VAT
- 19–23 Apr 2027Riyadh£4,200 + VAT
- 10–14 May 2027Barcelona£3,080 + VAT
- 17–21 May 2027Frankfurt£2,600 + VAT
- 24–28 May 2027Doha£4,200 + VAT
- 7–11 Jun 2027Munich£3,400 + VAT
- 21–25 Jun 2027Barcelona£3,080 + VAT
- 21–25 Jun 2027Geneva£4,200 + VAT
- 5–9 Jul 2027Barcelona£3,080 + VAT
- 19–23 Jul 2027Paris£3,600 + VAT
- 19–23 Jul 2027Abu Dhabi£4,200 + VAT
- 9–13 Aug 2027Paris£3,600 + VAT
- 16–20 Aug 2027Frankfurt£2,600 + VAT
- 23–27 Aug 2027Cairo£2,280 + VAT
- 6–10 Sep 2027Barcelona£3,080 + VAT
- 13–17 Sep 2027Frankfurt£2,600 + VAT
- 20–24 Sep 2027Jeddah£4,200 + VAT
- 11–15 Oct 2027Barcelona£3,080 + VAT
- 18–22 Oct 2027Frankfurt£2,600 + VAT
- 25–29 Oct 2027Singapore£4,200 + VAT
- 1–5 Nov 2027Munich£3,400 + VAT
- 15–19 Nov 2027Barcelona£3,080 + VAT
- 15–19 Nov 2027Muscat£3,080 + VAT
- 6–10 Dec 2027Barcelona£3,080 + VAT
- 20–24 Dec 2027Paris£3,600 + VAT
- 20–24 Dec 2027Casablanca£2,280 + VAT
Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%
Can't make these dates? We can run this course for your team on dates that suit you. Ask for custom dates · In-house options
Online (live)
With a trainer, on dates to suit your team
This course can be taught live online by a trainer, in English, Arabic or any European language, for one person or a whole team.
£1,850 + VAT
Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%
Tailor this course
Pick what you want changed and we’ll come back with a proposal and price.
Course overview
A cybersecurity audit tests the effectiveness of an organisation's security programme and the controls intended to prevent data breaches. Auditors need to understand which controls are necessary, how they are implemented and how to evaluate their operation. The course introduces vulnerability and threat analysis, cyber risk assessment and auditing before examining device and software inventories, configuration controls and the use of administrative privileges. ISO 27001 and COBIT5 inform the learning objectives.
Logs need attention. Network sessions examine browser and email protection, malware defences, wireless access and the control of ports, protocols and services, while data security covers access permissions, recovery and boundary defences. Application security and incident management follow, including penetration testing and red team exercises. Exercises on creating and executing security solutions, simulated programme audits and practical auditing tips support cyber assessment work. Breach case studies examine consequences alongside incident response, crisis management and disaster recovery.
Course objectives
By the end of the course, delegates will be able to:
- Analyse risks arising from IT security breaches
- Explain the role of ISO 27001 and COBIT5
- Describe information security management
- Explain approaches to incident response, crisis management and disaster recovery
Who should attend
This course suits:
- Auditors
- IT professionals interested in cybersecurity audits, risk assessments, vulnerability or threat analysis, and control self-assessments
Daily agenda
- Day 1
Cybersecurity assessment foundations
- Assessing vulnerabilities
- Analysing threats
- Assessing cybersecurity risks
- Understanding a cybersecurity programme
- Auditing cybersecurity risk
- Day 2
Securing devices, software and inventories
- Inventories of authorised and unauthorised devices
- Inventories of authorised and unauthorised software
- Establishing secure configurations
- Continuous assessment and remediation of vulnerabilities
- Controlling administrative privilege use
- Maintaining, monitoring and analysing audit logs
- Day 3
Network security controls
- Protecting email and web browsers
- Defences against malware
- Secure configurations for network devices
- Controlling wireless access
- Restricting and controlling network ports, protocols and services
- Day 4
Data protection and access management
- Protecting data
- Controlling data access on a need-to-know basis
- Capabilities for recovering data
- Boundary defence controls
- Monitoring and controlling accounts
- Assessing security skills and providing training
- Day 5
Managing security incidents
- Security of application software
- Cybersecurity incidents
- Managing incident response
- Penetration testing
- Exercises involving red teams
Certificate
Every delegate who completes the course receives an ARUK Training Certificate of Attendance.
Frequently asked questions
How do I register?
Choose a date and city in the schedule and press Register, or send us an enquiry. Our team confirms your place and sends an invoice.
Are fees shown with VAT?
Fees are shown per delegate and exclude VAT, which is added to the invoice where applicable.
Can this course be delivered for our team only?
Yes. Any ARUK course can be delivered in-house at your premises, in a meeting room we book for you, or 1-to-1.
Is this course available online?
Yes. We run it live online with a trainer, on dates that suit your team, for £1,850 + VAT per delegate.
Is there a group discount?
Yes. 20% for 2 delegates, 35% for 3 delegates and 50% for 5 or more delegates on the same course.
Can the course be delivered in Arabic or another language?
Yes. Our courses can be delivered in English, Arabic or any European language, by a trainer who teaches in that language. Mention your preferred language when you register or enquire.
What certificate will I receive?
An ARUK Training Certificate of Attendance.
Related courses
Artificial Intelligence (AI)-Based Cybersecurity Defense Strategies
26–30 Oct 2026 · Jeddah
View courseCertificate in Cyber Risk Management and Mitigation Strategies
26–30 Oct 2026 · Manama
View course


