Opleiding: Delete? Foundation IT Infrastructure Security

A practical introduction to IT infrastructure security for auditors, compliance professionals, and risk practitioners who need to understand the technology layers that support modern organizations. This course provides the knowledge required to review controls across infrastructure components, interpret technical evidence, and engage effectively with IT and security teams during audits and compliance reviews. Participants will explore the core building blocks of IT infrastructure, including servers, networks, storage, virtualization, containers, and cloud platforms. The course covers key security domains such as identity and access management, network segmentation and firewalls, endpoint protection, patch and vulnerability management, logging and monitoring, backup and recovery, cryptography, and secure configuration based on hardening benchmarks like CIS and NIST. Learners will also see how these controls map to widely used frameworks, including SOC 2, ISO 27001, PCI DSS, NIST CSF, and SOX. By the end of the course, participants will be able to understand how infrastructure components fit together, recognize typical security configurations and weaknesses, and request and interpret the right evidence during audit and compliance work. Who it's for: Internal and external auditors, GRC professionals, compliance analysts, and risk managers who need a solid grounding in IT infrastructure security without a deep technical background. Format: Short, self-paced modules with practical examples, annotated diagrams, and a closing knowledge check.