🕒 Duration: 4–6 Weeks | 🔍 Format: Instructor-Guided + Practical Assignments
Price: $2,997
This course is for those ready to go deeper into the technical side of cybersecurity. It focuses on vulnerability detection, assessment, remediation, and communication—ideal for roles in technical GRC, DevSecOps, or cloud security operations.
✅ What You’ll Learn:
- 🔍 CVE Scanning & Analysis (Nessus, AquaSec)
- 🛠 Exception Handling & eGRC Integration
- 🧑💻 Remediation Lifecycle (Patch, Exception, Risk Acceptance)
- 📊 Reporting to Engineers & Management
- 🔒 Secure Image Pipelines & Runtime Security
📦 Includes:
- Templates (Risk Matrix, Exception Forms)
- Case Studies from Real Environments
- Weekly Assignments with Instructor Feedback
| Week | Topic | Learning Outcomes |
|---|---|---|
| Week 1 | Introduction to Vulnerability Management | Understand vulnerabilities, CVE assignment, and VM’s role in compliance (PCI-DSS, NIST RMF). Learn VM lifecycle: Discover, Assess, Prioritize, Remediate, Report. |
| Week 2 | Hands-On with Nessus Essentials | Install, configure Nessus Essentials. Perform host discovery, scans (credentialed/non-credentialed), interpret CVSS scores, risk levels, and export scan reports. |
| Week 3 | Scanning with Qualys VMDR (Free Trial) | Launch Qualys scans, filter/group vulnerabilities, compare with Nessus, tag assets, schedule scans, set alert thresholds. |
| Week 4 | Web App Scanning with Qualys WAS | Scan test web app (e.g., DVWA) with Qualys WAS, understand SQLi/XSS, compare dynamic/static scanning, organize vulnerability data. |
| Week 5 | Exception Handling & Compliance Reporting | Document false positives, justifiable exceptions, use templates for requests, write remediation justifications, track in GRC systems. |
| Week 6 | Final Assessment & Report Writing | Perform scan, document vulnerabilities, map to PCI-DSS Req 6.1, submit professional report, exception form, review in live session. |