A CPE a Day

Kaspersky Discount

2012-10-25T17:33:00.003-04:00

SANS Special Webcast: Why Security Awareness Matters - 1st in Series

2012-10-19T06:56:00.000-04:00

There's still a ton of SANS Webcasts I haven't been through, it's like a treasure trove of CPEs! This one seemed appropriate for Cyber Security Awareness Month. I did this one the other day. It will give a certificate in your SANS account.

Here's the link:
https://www.sans.org/webcasts/security-awareness-matters-1st-series-95534

It's Cyber Security Awareness Month!

2012-10-04T11:08:00.001-04:00

SANS is doing a couple free Webcasts, and you can find a few on the main site of http://www.staysafeonline.org as well. If you know of anyplace to promote Cyber Security Awareness Month, please do so!

Here's the link to the ISC publication:
https://isc.sans.edu/diary.html?storyid=14200

SANS Special Webcast: Introduction to Malware Analysis: Turn Malware Inside Out!

2012-09-26T11:00:00.001-04:00

A quick CPE for you all today. We've all been to the SANS Archives many times, but I thought this one was pretty good!

Webcast:
Special Webcast: Introduction to Malware Analysis: Turn Malware Inside Out!
Here's the link:
https://www.sans.org/webcasts/introduction-malware-analysis-turn-malware-out-95490

InfoSecurity Professional Issue #19 Quiz

2012-09-11T20:51:00.000-04:00

This links to all issues of their magazine:

https://www.isc2.org/infosecurity_professional/default.aspx

Here's what I did:

Apply CPE to Credential/Concentration: CISSP

Domain for CPE Credit: CISSP - Multiple Domains (Group A)

Activity Start Date: 06/07/12

CPE Type: (ISC)2's InfoSecurity Professional Magazine Quiz

Magazine issue: #18

Free OWASP Online Course

2012-08-10T15:00:00.000-04:00

I received an email from isc2 that had the following CPE opportunity in it. I haven't yet tried this since I'm gearing up for a big test, so feel free to comment and let everyone know how it goes!

After a successful launch with (ISC)², Security Compass is pleased
to announce that we will continue hosting the OWASP Top 10 course,
free on our website.
Click here to access the free OWASP course.

What you’ll learn:

Discover vulnerabilities around the OWASP Top 10 in Security Compass’s easy-to-understand training style applicable to beginners and experts.
Understand what hackers look for in your web applications including how to defend these threats from a security perspective.
Learn how organizations have been affected in our Newsflashes and understand security concepts in a relatable manner.
Earn CPE credits for watching the course.*

Course topics include:

Injection
Cross-Site Scripting (XSS)
Broken Authentication and Session Management
Insecure Direct Object References
Cross-Site Request Forgery (CSRF)
Security Misconfiguration
Insecure Cryptographic Storage
Failure to Restrict URL Access
Insufficient Transport Layer Protection
Unvalidated Redirects and Forwards

About Security Compass:
Security Compass is an industry-leading information security firm that provides professional services and training to security-conscious companies. We bring extensive, internationally recognized, cross-industry experience to every client engagement. To our clients, we’re not simply an information security company - we are trusted partners in the development of secure software.

Learn more about Security Compass.

*You must submit the CPEs yourself through the (ISC)² Member website.

Here's the link:
http://securitycompass.com/computer-based-training/

New IASE Training - Smartphones and Tablets

2012-07-03T12:53:00.000-04:00

New training course on the IASE (Information Assurance Support Environment) site. I haven't taken it yet, just saw it and wanted to throw it out there.

Here's the link:

http://iase.disa.mil/eta/smartphone_tablet_v1/launchpage.htm

InfoSecurity Professional Issue #18 Quiz

2012-06-07T08:20:00.002-04:00

This links to all issues of their magazine:

https://www.isc2.org/infosecurity_professional/default.aspx

Here's what I did:

Apply CPE to Credential/Concentration: CISSP

Domain for CPE Credit: CISSP - Multiple Domains (Group A)

Activity Start Date: 06/07/12

CPE Type: (ISC)2's InfoSecurity Professional Magazine Quiz

Magazine issue: #18

Windows Server 2012: Preparing for the Datacenter Evolution

2012-05-31T11:26:00.001-04:00

Here's a good chance for some Group B CPE's!

Microsoft Jump Start Series
Windows Server 2012:
Preparing for the Datacenter Evolution
Windows Server 2012 Jump Start Details
Course: “Windows Server 2012: Preparing for the Datacenter Evolution”
Date/Time: June 20-21, 2012 from 9:00am – 4:00pm PST
Where: Live virtual classroom (online from wherever you are)
Cost: FREE!
Target audience: IT Professionals and IT Decision Makers

Here's the link:
http://mctreadiness.com/MicrosoftCareerConferenceRegistration.aspx?pid=323&WT.mc_id=Cloud_MSL_MCPFlash_May

COURSE OUTLINE
Day 1 Morning: Beyond Virtualization
• Learn about the game changers in the next release of the Hyper-V role on Windows Server 2012
     - Scale, CPU, RAM, Cores, etc.
     - Networking Switch (recorded demo hopefully)
     - NUMA and performance
     - Hyper-V over SMB and Hyper-V over RDMA
     - Replication
     - Shared Nothing Live Migration
     - Live Storage Migration
     - Moving VM from test to a production cluster without downtime
• Massive scale increases, networking improvements, replication and disaster recovery is all in the box
     - IP Address Virtualization
     - IP Address Virtualization with SCVMM 2012 SP1
Day 1 Afternoon: Manageability
• Learn about how you can manage a few systems up to a hundred systems – all from one console
     - Server Manager
     - DAC… and related topics
     - Installing roles in offline VHDs
• Server Core installs scaring you off? Learn about all your installation and management options
     - Moving from Core-MiniShell-Full UI and back again
• Windows PowerShell automation and management at scale – all with built in tools
     - PowerShell ISE and command simplification
     - PowerShell new features and new PowerShell replacements for common commands
     - Automating OS level tasks, IP addresses, etc.
• Clustering—Cluster-aware updating
• Networking
     - Network Teaming and network configuration
     - SMB MultiChannel and RDMA
Day 2 Morning: Storage
• Learn how Continuous Availability of File Services improves workload reliability and performance
     - Setup HA File Server; SMB Failover
     - Running SQL over SMB; Running Hyper-V over SMB
• Storage groups, disk provisioning, iSCSI and SAN integration
     - Storage Spaces
     - Built-in ISCSI; Boot from ISCSI
     - DeDup
     - Windows Online Backup
Day 2 Afternoon: Remote Users
• Remote connectivity options for your workforce
     - DA; Offline Domain Join and DA
     - DA simplified Setup; Possible DA Multi-Site
• VDI and Remote Desktop Services deployment and changes
      - User level disks
     - Pooled / Private VDI Setup
     - VDI Quick Setup
     - Multi-Touch RDP

Free Security Software (After Rebate)

2012-05-22T07:29:00.001-04:00

Some free security software from newegg.com!

bitdefender Total Security 2012 - 3 User (Expires 5/23/12)

TREND MICRO Titanium Maximum Security - 3 PCs (Free 4GB flash drive w/ purchase, limited offer )(Expires 5/30/12)

McAfee Total Protection 2012 - 3 PCs (Expires 5/30/12)

Phishing Awareness Version 2.0

2012-05-08T07:51:00.001-04:00

There's a new version of DoD's Phishing Awareness Online Class out. I haven't yet taken it, just saw it this morning. If it's like the last one, it's an easy CPE for a lunchtime break! (Or if you're just required to do it)

Here's the link:
http://iase.disa.mil/eta/phishing_v2/phishing_v2/launchPage.htm

FEMA's Emergency Management Institute

2012-04-24T08:30:00.000-04:00

FEMA's Emergency Management Institute has a lot of free courses you can take online, complete with test! ~~I'm not sure if you can get a certificate from them~~ (Update 5Jun12 - Looks like one reader did get a certificate from this course. Thanks AY!), but it looks like they would be some great disaster recovery CPE's!

Here's their link:
http://training.fema.gov/IS/NIMS.asp

If anyone completes one, please let me know if you get a certificate or transcript or something!

Thanks to Russ McRee and the SANS ISC for this one, check out his journal entry here:
https://isc.sans.edu/diary/Emergency+Operations+Centers+Security+Incident+Management+A+Correlation/13030

DOD Intrusion Detection System IDS Analysis Part 2

2012-04-18T07:40:00.001-04:00

The IASE Released a new training module, though I haven't been through it yet. Let me know how it goes!

Here's the link:
http://iase.disa.mil/eta/ids-part2/ids_part2/launchpage.htm

InfoSecurity Professional Issue #17 Quiz

2012-04-11T09:01:00.003-04:00

This links to all issues of their magazine:
https://www.isc2.org/infosecurity_professional/default.aspx

Here's what I did:
Apply CPE to Credential/Concentration: CISSP
Domain for CPE Credit: CISSP - Multiple Domains (Group A)
Activity Start Date: 04/11/2012
CPE Type: (ISC)2's InfoSecurity Professional Magazine Quiz
Magazine issue: #17

Free A+ Practice Tests

2012-03-27T11:44:00.000-04:00

I know this is only very loosely related to CPEs, but you can use CPE for self study, and if you're self studying for the A+, use these free practice tests to help you!

Here's the link:
http://www.examforce.com/offer/free-comptia-a-practice-exam-bundle-2

ISC2's SecurityTALK

2012-03-27T07:42:00.000-04:00

Plenty of Webcasts to choose from. I'm not sure if they'll give you a certificate or not, I haven't had time to do one yet! If someone can email me to let me know, please do so and I'll update this thing!

Here's the link:
https://www.isc2.org/SecurityTALK.aspx

Here's the info from their page:
SecurityTALK
Industry Knowledge at Your Fingertips
SecurityTALK is a searchable library of presentations and documents directly related to information security. From one convenient location, you have access to the following resources:
(ISC)² Online Events: e-Symposium webcasts and ThinkTank webinars
Industry Presentations: webcasts, webinars and podcasts on a variety of industry topics
Industry Research: research and whitepapers pertaining to information security
CPEs
You can earn CPEs by reviewing some of the materials in this media channel. To determine which resources are available for credit(s), refer to the (ISC)2 CPE Policies & Guidelines.
Submit Your Presentation or Research
Help this valuable site grow! You can offer your industry knowledge and expertise and make it available to your peers here.
See our SecurityTALK Submission Guidelines.
Check back often to keep up-to-date with what's happening in your industry.

Free Security Software (After Rebate)

2012-03-22T13:04:00.000-04:00

Free After Rebate items from Newegg.com. Free Security is always awesome security!

KASPERSKY lab Anti-virus 2012 - 1 User

McAfee Internet Security 2012 - 3 PCs

DoD Designated Accrediting Authority (DAA) v9.0 Training

2012-03-20T07:51:00.000-04:00

Just updated on the DISA Site! An easy CPE or two here. I have yet to take it, kind of busy this morning, but just wanted to get it out there.

Here's the link:
http://iase.disa.mil/eta/daav9/daav9/launchpage.htm

Someone let me know how long it took and I'll update the post!

Free After Rebate - Kaspersky Anti-Virus and Norton Ghost from Newegg!

2012-03-07T11:04:00.004-05:00

Click to go to Newegg.com!

ISC2 Need to Knows for Security Managers 10 part Series

2012-03-07T11:00:00.001-05:00

Nice stack of information here! Sign up! Not sure of the CPE potential yet...

Here's the link:

https://www.isc2.org/need-to-knows/Default.aspx

Update on ISC2 exams

2012-03-07T08:39:00.003-05:00

Here's a post from Hal Tipton on ISC2's blog (The tables don't import, so you should just head over there and read it. Here's the link: http://blog.isc2.org/isc2_blog/2012/03/2012-a-new-era-for-isc%C2%B2s-arsenal-of-certification-exams-.html

2012 a New Era for (ISC)²®’s Arsenal of Certification Exams

2012 a New Era for (ISC)²^®’s Arsenal of Certification Exams
By W. Hord Tipton, CISSP-ISSEP, CAP, CISA, Executive Director, (ISC)²
2012 marks a new era for (ISC)². This year, the last of our arsenal of certification exams will be transitioned from paper-based to computer-based testing (CBT). Beginning June 1, 2012, candidates around the globe will be able to register to take the CISSP, CISSP concentrations and the SSCP certification exams via CBT, with the ability to sit for an exam as early as the next day. Not only will this important final step in the testing transition process create a better user experience for a larger pool of candidates and greater global exam accessibility, it will also allow (ISC)² to realize its vision to fill the pipeline of the next generation of qualified information security professionals.
Our pilot program in Latin America for CISSP and SSCP exams via CBT has proven successful, with the exam being offered in English, Brazilian Portuguese and Spanish, and the SSCP examination offered via CBT in English and Spanish. (ISC)² certification exams via CBT are currently offered and will be offered in the future in the following languages accordingly:

Credential	Date Available	Geographic Availability	Languages
CAP	Available Now	Worldwide	English
CISSP	Available Now	Latin America	Brazilian Portuguese English Spanish
CSSLP	Available Now	Worldwide	English
SSCP	Available Now	Latin America	Brazilian Portuguese English Japanese
Future Release Dates
Credential	Date Available	Geographic Availability	Languages
CISSP	June 1^st, 2012	Worldwide	Brazilian Portuguese Chinese English French German Japanese Korean Spanish
ISSAP	June 1^st, 2012	Worldwide	English
ISSEP	June 1^st, 2012	Worldwide	English
ISSMP	June 1^st, 2012	Worldwide	English
SSCP	June 1^st, 2012	Worldwide	Brazilian Portuguese English Indonesian Spanish

All (ISC)² credential exams will be offered globally at approved Pearson VUE testing centers. For the convenience of its candidates, (ISC)² continues to expand its list of approved testing center locations within Pearson VUE’s extensive testing network, which includes more than 275 Pearson VUE-owned and -operated Pearson Professional Centers, the Pearson VUE Authorized Test Center Select network, and Pearson VUE Authorized Test Centers located on U.S. military installations around the world.
Beginning September 1, 2012, (ISC)² will no longer offer paper-based testing (PBT) for any of its certification exams except for candidates located in areas outside of a 75-mile radius from an approved testing center and on a case-by-case basis. August 24, 2012 is the last day candidates can register to sit for regularly scheduled PBT exams occurring through August 31, 2012.
This transition changes the entire structure of our organization and aligns with what we’ve seen in most aspects of our lives – everything is going digital! From our methods of communication to paying bills to visiting the doctor, we have become technologically reliant to fulfill most of our daily tasks. As the leading information security certification and education body worldwide, it’s vital that (ISC)² remains as current in our exam delivery methods as we do in our exam content.
(ISC)²’s transition to computer-based testing is an important investment in the future of its certification programs. This transition provides numerous benefits to candidates, members and the information security community, including:

Fair and precise evaluation of a candidate’s competency
Rapid turnaround of exam results
More choices as to when and where to take the exam
Easier registration
Fortified exam security

Years of long days and nights full of intense analysis and testing have brought us to this point. This transition has certainly been a long-fathomed goal for the organization and I’m proud to see it come to fruition. I look forward to your comments and feedback as the organization moves toward an all-encompassing digitized testing format throughout 2012.

Free classes from HP

2012-02-23T11:31:00.000-05:00

I'm not sure if these are CPE worthy, or not, but could help you if you're making a presentation for security to get your CPEs!

Here's the link to their classes:
http://h30440.www3.hp.com/learningcenter/Classes/ClassAll.aspx

New Certification from COMPTIA - CASP

2012-02-21T16:53:00.002-05:00

CompTIA Advanced Security Practitioner

The CompTIA Advanced Security Practitioner certification designates IT professionals with advanced-level security skills and knowledge.

The CASP exam is available at U.S. and Canadian Pearson VUE centers. Broader distribution is tentatively scheduled for early 2012.

The CompTIA Advanced Security Practitioner certification is an international, vendor-neutral exam that proves competency in enterprise security; risk management; research and analysis; and integration of computing, communications, and business disciplines.
The exam covers the technical knowledge and skills required to conceptualize, design, and engineer secure solutions across complex enterprise environments. It involves applying critical thinking and judgment across a broad spectrum of security disciplines to propose and implement solutions that map to enterprise drivers. For more detailed information, download the exam objectives.
While there is no required prerequisite, the CASP certification is intended to follow CompTIA Security+ or equivalent experience and has a technical, hands-on focus at the enterprise level.
The CompTIA Advanced Security Practitioner certification is accredited by the International Organization for Standardization (ISO) and the American National Standards Institute (ANSI).The CompTIA Advanced Security Practitioner certification may be kept current through the CompTIA Continuing Education program.

Test Details
Number of questions 70 (maximum)
Length of Test 150 minutes
Passing Score Pass/Fail only. No scaled score.
Recommended experience 10 years experience in IT administration, including at least 5 years of hands-on technical security experience
Languages English
Exam code CAS-001

The link to COMPTIA's CASP is here:
http://certification.comptia.org/getCertified/certifications/casp.aspx

Free McAfee Total Protection 2012 - 3 PCs at Newegg.com

2012-02-21T13:55:00.000-05:00

You can't really go wrong with free security software! Just click the picture for the link to it at newegg.com

Tons of Free courses at MIT OpenCourseWare (OCW)

2012-02-21T12:22:00.003-05:00

I see lots upon lots of Free CPEs here!! (Now I just have to find the time to do them...)

Here's the link:

http://ocw.mit.edu/courses/