Cursos de Ciberseguridad

This course guides learners through the process of customizing IBM Verify in their organization. It first covers the branding options in Verify, For organizations leveraging IBM Verify, which allow organizations to extend their brand into the authentication and user self-care cycle. Branding is the process of creating a strong, positive perception of an organization and its products or services in the mind of their consumers.The second unit explains how to plan and create a user journey orchestration, which focuses on creating intuitive and engaging user experiences, covering requirements such as account creation and registration, application requests, data privacy and consent interaction, seamless login experience routing, profile recovery, and multi-factor authentication enrollment. An orchestrated user journey helps ensure that individuals are experiencing processes that align with organizational goals to deliver optimal business outcomes while making these processes intuitive and easy to navigate.

La seguridad construida en los cimientos, no añadida al final. Modelado de amenazas y decisiones de diseño que evitan la vulnerabilidad antes de escribirla.

This course guides learners through the process of adopting IBM Verify in their organization. It covers the Verify architecture, integration with existing deployments, user import from existing sources, and strategies for migrating and securing legacy applications.

In this course, you learn about the IBM Verify Access architecture and deployment options and how to position the product within your organization’s landscape of security solutions. You gain skills around how to deploy Verify Access in a containerized environment or on a virtual machine. First, you improve your Verify Access administration skills by managing users, groups, and domains. Then, you are setting up the Reverse Proxy, including the configuration of authentication and authorization processes, protecting the object space with junctions. This course also provides a solid foundation around setting up logging and auditing, preparing you to successfully manage troubleshooting scenarios.

This course introduces the zSecure Audit rule-based compliance evaluation framework. The course explains rule-based compliance evaluation concepts and includes an overview and demonstration of the supported compliance evaluation functions and reports. With the standard built-in compliance evaluation interface, you report the compliance of your systems against one or more of the supported external standards: STIG, STIGplus, GSD, or PCI-DSS. The course also teaches you how to customize compliance evaluations for the supported standards to fit your company's requirements. Finally, you learn how to create a company-defined compliance standard. Hands-on exercises are included to enforce the skills that are taught in this course so that you can experiment with the rule-based compliance evaluation interface.Please contact ibmlearning@ibm.com for enrollment information.

This is an instructor-led course that provides basic introduction of the IBM Security Admin ISPF interface for customers who administer RACF profiles and generate basic RACF overview reports.This course focuses on frequently used administrative functions, standard reports, and verification functions of IBM Security zSecure Admin. Gain experience in administering RACF profiles using the built-in functions and line commands that the ISPF interface provides. Learn how to report and review RACF profiles using the built-in functions and provided line commands. Verification functions that report RACF database inconsistencies are explored and demonstrated. The CKGRACF function is also described. Finally, you also learn how to produce customized reports, tailor the RACF installation data field, and define company-specific custom fields.Please contact ibmlearning@ibm.com for enrollment information.

In this workshop, you learn how to maintain a Resource Access Control Facility (RACF®) database with IBM® Security zSecure Admin and monitor the system with IBM Security zSecure Audit. During hands-on exercises, you act as a RACF security administrator for a fictitious company. In this simulated job role, you learn to define a RACF security environment for a specific department.This workshop teaches the basics of the security administration process and how to implement company security policies and guidelines into specific RACF profile definitions and settings. You learn to verify the quality and validity of the RACF profiles that you define. Finally, you learn how to interpret and report SMF events that the z/OS system logs during the workshop.Please contact ibmlearning@ibm.com for enrollment information.

This course describes audit concerns that IBM® Security zSecure™ Audit reports. The course explains auditing your RACF® database and z/OS subsystems such as CICS, IMS, and DB2. You can measure your security and z/OS system settings against the security requirements of a selected policy level. Also, you learn about an Access Monitor data set containing historic RACF access decisions statistics. This information is used to find profiles, permissions, or connections that are unused and can be removed from the RACF database. Furthermore, you learn reviewing the general SMF and RACF audit settings. This course explains how to use and interpret predefined SMF reports, and how to create customized SMF reports. Finally, the Library and sequential data set status and change analysis functions are explained.Please contact ibmlearning@ibm.com for enrollment information.

Learn the basics of the IBM Security zSecure programming language CARLa. This course teaches you to use the CARLa programming language to create reports for RACF, SMF, UNIX Systems Services (USS), CICS, DB2, and RACF command generation. You spent approximately 40 percent of the course on hands-on lab exercises, where you produce CARLa code that you can use for effective management and reporting on RACF, SMF, USS, and other subsystems. You learn to use CARLa to create custom reports, commands, emails, XML output, or modify existing zSecure RACF functions to fit with your installation's requirements. In addition, you learn how to automate these functions by using them in scheduled batch jobs.Please contact ibmlearning@ibm.com for enrollment information.

In this workshop, you learn to maintain a RACF® database with IBM® Security zSecure™ Admin and monitor the system with IBM Security zSecure Audit. During hands-on exercises, you act as a RACF security administrator for a fictitious company. In this simulated job role, you learn to define a RACF security environment for a specific department. This workshop teaches the basics of the security administration process and how to implement company security policies and guidelines into specific RACF profile definitions and settings. You learn to verify the quality and validity of RACF profiles that you define. Finally, you learn to interpret and report SMF events that the z/OS® system logs during this RACF management workshop.Please contact ibmlearning@ibm.com for enrollment information.

Data security and privacy challengers are never-ending. IBM Guardium Data Protection (Guardium) provides a broad range of data security and protection capabilities that can protect sensitive and regulated data across environments and platforms. It discovers and classifies sensitive data from across an enterprise, providing real-time data activity monitoring and advanced user behavior analytics to help discover unusual data activity.The course prepares the student to administer Guardium appliances, discover unusual data activity, locate vulnerable data, automate compliance processes, and monitor and protect sensitive data. To proact using Guardium, students complete hands-on lab exercises.This course is based on Guardium Data Protection version 12.1.

IBM Security® Verify Privilege Vault helps keep privileged accounts safe. Accounts are secured in an encrypted vault. Discovering and vaulting privileged accounts helps you understand how many privileged accounts you have, and exactly who has access to your organization’s key systems through real-time session monitoring, recording, and key logging. IBM Security Verify Privilege Vault also helps organizations to maintain compliance through full audit reports on vault activity. In this course, learners will gain hands-on experience with Privilege Vault and learn how to use a variety of Privilege Vault features. This course is designed and built on IBM Security Verify Privilege Vault version 11.6.26.

Learn how to detect insider threats triggered by anomalous or malicious user behavior. Get ready to install, configure, and tune IBM Security® QRadar UBA and the Machine Learning app. Improve your skill to investigate user behavior with UBA and expand your threat detection capabilities across your network with the QRadar® Advisor with Watson™ app.

Gain knowledge on how to integrate IBM Security® QRadar® EDR and SIEM by creating an API application in QRadar EDR and by adding a new log source in QRadar SIEM to add endpoint detection and alerts to QRadar SIEM. Having advanced and automated response capabilities enables analysts to focus on the fight in front of them. This course applies to version 3.12 of the on-premises QRadar EDR offering.

In this course you learn how to integrate QRadar EDR and SIEM by creating an API application in QRadar EDR and by adding a new log source in QRadar SIEM to add endpoint detection and alerts to QRadar SIEM. Integrating QRadar EDR and SIEM amplifies the power of QRadar XDR (extended detection and response) by leveraging AI and automation opportunities. Having advanced and automated response capabilities enables analysts to focus on the fight in front of them.This course applies to version 3.12 of the on-premises IBM Security QRadar EDR offering.

When deploying IBM Security® QRadar® EDR into production, you must configure important details, such as notifications, alerts, and policies. After QRadar EDR is deployed successfully, you must set up your users, groups, and clients, configure your Hive-Cloud score, and define how to handle downloaded and quarantined files from endpoints. Another important maintenance task revolves around monitoring audit logs. This course applies to version 3.12 of the on-premises QRadar EDR offering as well as the January 2024 SaaS-based offering.

In this course, you gain hands-on experience with the IBM Security® QRadar® EDR user interface with a focus on threat hunting, learn how to investigate threats on your endpoints, and manage your endpoints to stay secured and up-to-date. You also observe a detailed demonstration about how to detect malware attacks, and how to remediate these threats.This course applies to version 3.12 of the on-premises QRadar EDR offering as well as the January 2024 SaaS-based offering.

In this course, you learn about the IBM Security® QRadar® EDR architecture and how to position the product within your company’s landscape of security solutions. You gain skills around how to install the QRadar EDR Hive on your premises and the EDR Agents on your endpoints. You can review the user interface and how to navigate the EDR Dashboard while investigating endpoint threats.This course applies to version 3.12 of the on-premises QRadar EDR offering.

Are you ready to explain how QRadar processes data in your organization's environment?Interpret QRadar log sources (events) and network activity (flows) so you can investigate security incidents with ease. Knowing how to search the data from QRadar events, flows, and assets means you can streamline your analysis.

This course is designed and built on IBM Security® QRadar® 7.4.3. and QRadar 7.5.0. The lab is built on QRadar 7.5.0 update 8. What you learn:Create custom log sourcesWork with reference data collections and custom rulesUse X-Force data and Threat Intelligence appUse the Use Case Manager appUse User Behavior Analytics (UBA) and QRadar AdvisorDiscover and perform tuningExplore custom action scriptsIntegrate QRadar with IBM SOAR Skills you gain:Threat investigationQRadar data searchingQRadar X-Force integrationQRadar incident response