We are in the middle of an era where we continuously experience cyber incidents despite investments in cyber security protection mechanisms for prevention and detection. It is not just the cost of recovery following an incident that is ever escalating; it is the loss of revenue, damage to business reputation and loss of trust by customers and partners that are affecting businesses adversely.
It has been observed that users are usually the weakest link in the cybersecurity defence plan.
This calls for an increase in the level of cybersecurity awareness through a programme of instruction that provides insights that users can directly put into play.
The cyber education team at DarkMatter:
Our programmes include:
Outside of general awareness as a means to reduce the incidence of attack and compromise, the largest area of risk is around coding. A programme of security coding which combines knowledge attainment and good practices is intended to reduce risk. This offering includes training material and exercises from a service provider with consulting support and programme management by DigitalE1.
We provide cyber training to technical resources in government and private organisations. Roles include penetration testers, auditors, and compliance analysts.
As the name suggests this is an advanced programme where we provide additional skills and knowledge at a deeper level. Those receiving this knowledge will work in government in classified programmes.
Police investigative agencies need specialists who understand technology and who are capable of retrieving evidence from computing devices including computers, networks, and mobile devices and how to enhance audio and video recordings. The evidence needs to be collected and stored in a manner that satisfies legal requirements including chain of custody. The digital forensics academy will provide the technical and procedural training and skills development required for new entrants to the profession and to bring forensics analysts through their career to the expert level. The digital forensics academy will teach the theory and practice and use of generally accepted forensics tools. It will also provide professional certifications necessary to demonstrate competency and expertise and annual recertification that is required for practitioners.
This offering builds upon material offered in the cyber academy and digital forensics academy. It provides the knowledge and skill required to verify that an organization has suffered an incident, identify what the nature and source of the attack is, and support the expeditious recovery to normal business operation.
The interest in developing cyber talent in the UAE is a national imperative. The Ministry of Education has developed an integrated strategy for K-12 students to introduce cyber hygiene in early grades and cyber security in programmes for older students. Cyber Quest is a program intended to create awareness, build skill, and support the development of the next generation of cyber defenders.
Organisations are recognising that the capabilities of new employees in terms of their knowledge, skills and abilities is overly focused on limited areas of technology. Such employees may not understand the wider aspects of cyber and information security. This limits their ability to comprehend broad security issues or the impact of technology or administrative decisions on the security posture or on the ability to effectively manage operational risk. The lack of broad knowledge also limits their ability to take on new roles or responsibilities or leadership positions. To correct this, management hopes to implement broad training and skills development programmes focusing on knowledge and skill gaps within the staff not only for newer members but for more experienced members who need to prepare for roles.