Penetration testing is the process of assessing and evaluating relevant systems and protocols, in order to identify their vulnerabilities and weaknesses, from the perspective of anonymous and non-privileged users (attackers) who intend to harm our system or network.
Penetration testing training will enable you to gain the knowledge and skills required to use publicly recognized pen-test frameworks, methodologies, tools and techniques, including: OSTTMM, OWASP, WASC, NIST, PTF - and many others.
When to choose penetration test training?
If you want to gain penetration testing competencies of:
- internal systems (including testing servers, workstations, network devices, mainframes, ATMs and ERP environments, etc.)
- external systems (including testing all publicly available services with or without restrictions)
- Web applications and services (including testing all types of web applications and services according to the OWASP methodology)
- desktop applications and service (including testing all types of desktop applications and services according to the WASC methodology and NIST recommendations)
- mobile applications and services (including testing all types of mobile applications and services according to WASC methodology and NIST recommendations and reverse engineering issues)
- wireless systems (including testing WiFi, Bluetooth and GSM wireless networks through the use of internally developed devices and applications)
- human resources (including direct or indirect testing and the problems of PHISHING, SCAREWARE and HOAX)
Who is the training intended for?
Penetration testing training is aimed at:
|
• IT professionals whose scope of work includes penetration testing |
|
|
• All other persons who, due to career guidance or other reasons, want to acquire competence in penetration testing |
|
Conditions in which training is carried out
You are unique. Your organization is unique. With this in mind, we can maintain the training in the conditions that we will entirely adapt to your needs and per your convenience, thus maximizing learning outcomes and training profitability. By choosing one or a combination of several options listed below, the training can be implemented with the features and the environment that suits you best.
 |
| Individual training |
Individual training takes place in the conditions in which the consultant-lecturer works one-on-one with the candidate.
The advantage of this type of training is that the consultant-lecturer can fully focus on working with one candidate and, in the extent that the training program allows, further assist the candidate in understanding the specific problems that she can face in her work.
The candidate can discuss with the consultant-lecturer the specific problems that the candidate faces regarding the topics covered by the training, without having to worry about personal or company confidential information.
 |
| Group training |
Group training is tailored to work in small groups.
The advantage of this kind of training in which the size of the group is not a limiting factor (since it is done in small groups) is that individual work involves group work, where the consultant-lecturer and other candidates, in the extent permitted by the training program, exchange their experiences.
 |
| Public training |
Public training is training that take place within the regular training of the GSC, which are timely published in accordance with the regular and special training calendar, in a classroom at a location that the GSC uses specifically for training needs.
Each candidate can attend these trainings - whether it is an individual or a member of one or more organizations - based on a previous registration.
The advantage of this type of training is that they take place in specially adapted locations for training candidates, which are outside of the organizations premises, thereby reducing the potential hindrance that may occur on the candidate's job, which often limits the learning effects. At the same time, since the nature of these trainings is primarily group-based and that candidates often come from various organizations, it creates the opportunity to network and work with people who have experience in related or other fields.
Public Training is timely announced in the GSC Training Calendar.
 |
| Organizational training |
Organizational training is a training tailored specifically to the needs of your organization. It can take place:
- at your location (in-house training) or
- at another convenient location outside of your premises, which we or you have adapted to the training needs.
For these trainings, it is characteristic that the organization has control over the structure of candidates participating in the training, whether it is a candidate, group members or teams, with or without the participation of members of their partner and other organizations.
The advantage of this type of training is that time frames and locations can be scheduled to suit the needs of candidates. Since these trainings are not open, they are already formed to suit specially selected candidates, they can be targeted and tailored specifically to the needs of specific teams (to the extent that the training program permits, the so-called tailor-made approach). Candidates, usually members of one or more teams of the organization, can share the specific problems they face in relation to training topics, without worrying about confidential information or the reputation of the organization, and the potential closeness and mutual knowledge of candidates can be an excellent basis for advanced learning in the team.
These trainings can increase the cost of travel and/ or accommodation of a consultant-lecturer and/ or candidate (in the case where training is outside the premises of the organization), but does not require the cost of travel and/ or accommodation that candidates can have if they attend public training.
 |
| Distance learning |
Distance learning is carried out by communication via the Internet and is adapted to work in conditions that do not require the presence of candidates in the classroom.
The advantage of this type of training is that it offers great freedom for candidates to choose a work environment because it allows them to attend training even when they are not able to attend the location where the pre-prepared classrooms training take place.
Materials needed during training
All relevant materials required during training are provided by the GSC and handed over to candidates during the course of the training (depending on the training program and the characteristics of the specific materials, they are delivered in whole, in an excerpt or in segments, in printed and/ or electronic form).
Evaluation of competencies and formal training outcomes
Evaluation of the candidate's work is done during the course of the training and during the final tested candidate (through evaluation of the final test, the results of individual and/ or group assignments, oral examinations, etc.) according to the scheme and program in accordance with the selected level of training.
Candidates who are identified in the evaluation process that they have achieved the competences of the chosen level of training achieve:
- Certificate of attendance
- certificate of achieved competencies,
- Certificate Supplement with description of achieved competencies.
Subsequent availability of certificates and work materials
Upon successful completion of the training, all candidates are allowed to create their own user page * on the official Global Standards Consortium website, on which there are permanently available:
- materials which are needed during training,
- all acquired certificates in electronic form.
* Creating a user page is not required.
