Corporate training in the Gulf, London, Europe & Asia since 2015
Enquire now
IT-003

Auditing a Cybersecurity Programme

Intensive 5-day course · English, Arabic & European languages

Auditors and IT professionals assess cybersecurity programmes in this five-day course. Delegates study the controls involved in protecting devices, networks and data, and examine their implementation and effectiveness. Simulated audits, risk assessments, threat analysis and breach case studies accompany work on information security management, incident response, crisis management and disaster recovery.

Classroom

Public courses in our cities

  • 19–23 Oct 2026Frankfurt£2,600 + VAT
  • 26–30 Oct 2026Manama£3,080 + VAT
  • 2–6 Nov 2026Barcelona£3,080 + VAT
  • 9–13 Nov 2026Frankfurt£2,600 + VAT
  • 16–20 Nov 2026Dubai£4,200 + VAT
  • 14–18 Dec 2026Barcelona£3,080 + VAT
Show 38 more dates
  • 21–25 Dec 2026Frankfurt£2,600 + VAT
  • 28 Dec – 1 Jan 2026Riyadh£4,200 + VAT
  • 4–8 Jan 2027Munich£3,400 + VAT
  • 18–22 Jan 2027Barcelona£3,080 + VAT
  • 18–22 Jan 2027Malaga£3,080 + VAT
  • 1–5 Feb 2027Barcelona£3,080 + VAT
  • 15–19 Feb 2027Paris£3,600 + VAT
  • 15–19 Feb 2027Sarajevo£3,400 + VAT
  • 8–12 Mar 2027Paris£3,600 + VAT
  • 15–19 Mar 2027Frankfurt£2,600 + VAT
  • 22–26 Mar 2027Dubai£4,200 + VAT
  • 5–9 Apr 2027Barcelona£3,080 + VAT
  • 12–16 Apr 2027Frankfurt£2,600 + VAT
  • 19–23 Apr 2027Riyadh£4,200 + VAT
  • 10–14 May 2027Barcelona£3,080 + VAT
  • 17–21 May 2027Frankfurt£2,600 + VAT
  • 24–28 May 2027Doha£4,200 + VAT
  • 7–11 Jun 2027Munich£3,400 + VAT
  • 21–25 Jun 2027Barcelona£3,080 + VAT
  • 21–25 Jun 2027Geneva£4,200 + VAT
  • 5–9 Jul 2027Barcelona£3,080 + VAT
  • 19–23 Jul 2027Paris£3,600 + VAT
  • 19–23 Jul 2027Abu Dhabi£4,200 + VAT
  • 9–13 Aug 2027Paris£3,600 + VAT
  • 16–20 Aug 2027Frankfurt£2,600 + VAT
  • 23–27 Aug 2027Cairo£2,280 + VAT
  • 6–10 Sep 2027Barcelona£3,080 + VAT
  • 13–17 Sep 2027Frankfurt£2,600 + VAT
  • 20–24 Sep 2027Jeddah£4,200 + VAT
  • 11–15 Oct 2027Barcelona£3,080 + VAT
  • 18–22 Oct 2027Frankfurt£2,600 + VAT
  • 25–29 Oct 2027Singapore£4,200 + VAT
  • 1–5 Nov 2027Munich£3,400 + VAT
  • 15–19 Nov 2027Barcelona£3,080 + VAT
  • 15–19 Nov 2027Muscat£3,080 + VAT
  • 6–10 Dec 2027Barcelona£3,080 + VAT
  • 20–24 Dec 2027Paris£3,600 + VAT
  • 20–24 Dec 2027Casablanca£2,280 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Can't make these dates? We can run this course for your team on dates that suit you. Ask for custom dates · In-house options

Online (live)

With a trainer, on dates to suit your team

This course can be taught live online by a trainer, in English, Arabic or any European language, for one person or a whole team.

£1,850 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Special requests

Tailor this course

Pick what you want changed and we’ll come back with a proposal and price.

Special request

What would you like to change? (pick any)
or

Course overview

A cybersecurity audit tests the effectiveness of an organisation's security programme and the controls intended to prevent data breaches. Auditors need to understand which controls are necessary, how they are implemented and how to evaluate their operation. The course introduces vulnerability and threat analysis, cyber risk assessment and auditing before examining device and software inventories, configuration controls and the use of administrative privileges. ISO 27001 and COBIT5 inform the learning objectives.

Logs need attention. Network sessions examine browser and email protection, malware defences, wireless access and the control of ports, protocols and services, while data security covers access permissions, recovery and boundary defences. Application security and incident management follow, including penetration testing and red team exercises. Exercises on creating and executing security solutions, simulated programme audits and practical auditing tips support cyber assessment work. Breach case studies examine consequences alongside incident response, crisis management and disaster recovery.

Course objectives

By the end of the course, delegates will be able to:

  1. Analyse risks arising from IT security breaches
  2. Explain the role of ISO 27001 and COBIT5
  3. Describe information security management
  4. Explain approaches to incident response, crisis management and disaster recovery

Who should attend

This course suits:

  • Auditors
  • IT professionals interested in cybersecurity audits, risk assessments, vulnerability or threat analysis, and control self-assessments

Daily agenda

  1. Day 1

    Cybersecurity assessment foundations

    • Assessing vulnerabilities
    • Analysing threats
    • Assessing cybersecurity risks
    • Understanding a cybersecurity programme
    • Auditing cybersecurity risk
  2. Day 2

    Securing devices, software and inventories

    • Inventories of authorised and unauthorised devices
    • Inventories of authorised and unauthorised software
    • Establishing secure configurations
    • Continuous assessment and remediation of vulnerabilities
    • Controlling administrative privilege use
    • Maintaining, monitoring and analysing audit logs
  3. Day 3

    Network security controls

    • Protecting email and web browsers
    • Defences against malware
    • Secure configurations for network devices
    • Controlling wireless access
    • Restricting and controlling network ports, protocols and services
  4. Day 4

    Data protection and access management

    • Protecting data
    • Controlling data access on a need-to-know basis
    • Capabilities for recovering data
    • Boundary defence controls
    • Monitoring and controlling accounts
    • Assessing security skills and providing training
  5. Day 5

    Managing security incidents

    • Security of application software
    • Cybersecurity incidents
    • Managing incident response
    • Penetration testing
    • Exercises involving red teams

Certificate

Every delegate who completes the course receives an ARUK Training Certificate of Attendance.

Frequently asked questions

How do I register?

Choose a date and city in the schedule and press Register, or send us an enquiry. Our team confirms your place and sends an invoice.

Are fees shown with VAT?

Fees are shown per delegate and exclude VAT, which is added to the invoice where applicable.

Can this course be delivered for our team only?

Yes. Any ARUK course can be delivered in-house at your premises, in a meeting room we book for you, or 1-to-1.

Is this course available online?

Yes. We run it live online with a trainer, on dates that suit your team, for £1,850 + VAT per delegate.

Is there a group discount?

Yes. 20% for 2 delegates, 35% for 3 delegates and 50% for 5 or more delegates on the same course.

Can the course be delivered in Arabic or another language?

Yes. Our courses can be delivered in English, Arabic or any European language, by a trainer who teaches in that language. Mention your preferred language when you register or enquire.

What certificate will I receive?

An ARUK Training Certificate of Attendance.

Related courses

Register

Key booking terms (read before you register)
  • The full fee is paid in advance, before the course starts.
  • Cancel in writing 30 or more days before the start date (45 for in-house) for a refund. Later than that, the full fee is payable.
  • No refund for non-attendance or partial attendance.
  • Places are for the named delegate only; another person cannot attend instead.
  • Moving to another date or city is only possible if ARUK agrees in writing.
  • Travel, accommodation and visas are your responsibility. A refused visa does not change the cancellation terms.

booking terms and conditions

Get a quotation