IT Security Training Roadmap

S A N S I T S e c u r i t y Tr a i n i n g a n d Yo u r C a r e e r R o a d m a p S E C U R I T Y

Beginners

Incident Handling SEC504 Hacker Techniques, Exploits, and Incident Handling

SEC501 Advanced Security Essentials – Enterprise Defender

FOR508 Advanced Computer Forensic Analysis & Incident Response

GCIH

GCED

GCFA

SEC301 NOTE: If you have experience in the field, please consider our more advanced course - SEC401.

SEC301 Intro to Information Security

Additional Incident Handling Courses www.sans.org/security-training/curriculums/security

SEC560 Network Pen Testing and Ethical Hacking

SEC542 Web App Pen Testing and Ethical Hacking

GPEN

GWAPT

SEC660 Advanced Pen Testing, Exploits, and Ethical Hacking

GSEC

SEC642 Advanced Web App Pen Testing and Ethical Hacking

SEC575 Mobile Device Security and Ethical Hacking

SEC617 Wireless Ethical Hacking, Pen Testing, and Defenses GAWN

GXPN

Network Security SEC501 Advanced Security Essentials – Enterprise Defender

SEC566 Implementing & Auditing the Twenty Critical Security Controls - In-Depth

SEC540 VoIP Security Additional Network Security Courses www.sans.org/security-training/curriculums/security

AUDIT CURRICULUM

FOR408 Computer Forensic Investigations - Windows In-Depth

SEC301 Intro to Information Security

GCFE

SEC401 SANS Security Essentials Bootcamp Style

FOR508 Advanced Computer Forensic Analysis & Incident Response GCFA

FOR563 Mobile Device Forensics

FOR610 REM: Malware Analysis Tools & Techniques

GCFW

SEC503 Intrusion Detection In-Depth

GISF

SEC501 Advanced Security Essentials – Enterprise Defender

SEC505 Securing Windows

AUD507 Auditing Networks, Perimeters, and Systems GSNA

New!

SEC579 Virtualization and Private Cloud Security

GSEC

MGT512 SANS Security Leadership Essentials For Managers with Knowledge Compression™

MGT525 IT Project Management, Effective Communication, and PMP Exam Prep GCPM

GSLC

MGT414 SANS® +S™ Training Program for the CISSP® Certification Exam

SEC506 Securing Linux/Unix

GISP

GCUX Additional Management Courses www.sans.org/security-training/curriculums/management

Additional System Administration Courses www.sans.org/security-training/curriculums/security

L E G A L C U RRI C U L U M SEC301 Intro to Information Security

SOFTWARE SECURITY CURRICULUM Defense DEV522 Defending Web Applications Security Essentials GWEB

SEC401 SANS Security Essentials Bootcamp Style

Attack

LEG523 Law of Data Security and Investigations

SEC542 Web App Pen Testing and Ethical Hacking

GLEG

GWAPT

AUD566 Implementing & Auditing the Twenty Critical Security Controls – In-Depth

Additional Audit Courses http://it-audit.sans.org

GISF

GCWN

GSEC

AUD407 Foundations of Auditing Information Systems

SEC401 SANS Security Essentials Bootcamp Style

GCED

GISF

GSEC

SEC301 Intro to Information Security

GCIA

New!

SEC642 Advanced Web App Pen Testing and Ethical Hacking

GREM Additional Forensic Courses http://computer-forensics.sans.org

GISF

Additional Intrusion Analysis Courses www.sans.org/security-training/curriculums/security

FORENSICS CURRICULUM

FOR558 Network Forensics

GCED

SEC301 Intro to Information Security

System Administration

New!

GCED

New!

SEC502 Perimeter Protection In-Depth

SEC401 SANS Security Essentials Bootcamp Style

SEC504 Hacker Techniques, Exploits, and Incident Handling GCIH

Intrusion Analysis SEC501 Advanced Security Essentials – Enterprise Defender

GISF

Penetration Testing Additional Penetration Testing Courses http://pen-testing. sans.org

MANAGEMENT CURRICULUM

C U R R I C U L U M

GIAC certification available for courses indicated with GIAC acronyms

Secure Coding JAVA

.NET

DEV541 Secure Coding in Java/JEE (4-Day Course)

DEV544 Secure Coding in .NET (4-Day Course)

GSSP-JAVA

GSSP-.NET

DEV530 Essential Secure Coding in Java/JEE (2-Day Course)

DEV532 Essential Secure Coding in ASP.NET (2-Day Course)

C & C++

PCI

DEV543 Secure Coding in C & C++

DEV536 Secure Coding for PCI Compliance

Additional Software Security Courses http://software-security.sans.org