サイバーセキュリティ ガバナンス、リスク管理、コンプライアンス (GRC)のトレーニングコース

Description:

Basel III is a global regulatory standard on bank capital adequacy, stress testing and market liquidity risk. Having initially been agreed upon by the Basel Committee on Banking Supervision in 2010–11, changes to The Accord have extended implementation to 31st March 2019. Basel III strengthens bank capital requirements by increasing bank liquidity and decreasing bank leverage.
Basel III differs from Basel I & II in that it requires different levels of reserves for different forms of deposits and other types of borrowings, so it does not supersede them so much as it does work alongside Basel I and Basel II.
This complex and constantly changing landscape can be hard to keep up with, our course and training will help you manage likely changes and their impact on your institution. We are accredited with and a training partner to the Basel Certification Institute and as such the quality and suitability of our training and material is guaranteed to be up to date and effective

Objectives:

• Preparation for the Certified Basel Professional Examination.
• Define hands-on strategies and techniques for the definition, measurement, analysis, improvement, and control of operational risk within a banking organization.

Target Audience:

• Board members with risk responsibilities
• CROs and Heads of Risk Management
• Members of the Risk Management team
• Compliance, legal and IT support staff
• Equity and Credit Analysts
• Portfolio Managers
• Rating Agency Analysts

Overview:

• Introduction to Basel norms and amendments to the Basel Accord (III)
• Regulations for market, credit, counterparty and liquidity risk
• Stress testing for various risk measures including how to formulate and deliver stress tests
• The likely effects of Basel III on the international banking industry, including demonstrations of its practical application
• Need For The New Basel Norms
• The Basel III Norms
• Objectives of The Basel III Norms
• Basel III – Timeline

この講師主導の実践的なトレーニング（オンラインまたは対面）は、詐欺検査の概念を包括的に理解し、公認詐欺検査士 (CFE) 試験に備えたい上級レベルの専門家向けです。

このトレーニング終了時には、参加者は以下のことが可能です：

• 詐欺検査の原則とプロセスに関する包括的な知識を獲得します。
• さまざまな種類の金融詐欺スキームを識別、調査、および防止する方法を学びます。
• 詐欺に関連する法的環境、詐欺の法的要素、関連法律、規制について理解します。
• 証拠収集、インタビューテクニック、データ分析などの詐欺調査を行うための実践的なスキルを習得します。
• 組織内で効果的な詐欺予防および抑止プログラムを設計し、実装する方法を学びます。
• 公認詐欺検査士 (CFE) 試験に合格するために必要な自信と知識を得ます。

Description:

This four day event (CGEIT training) is the ultimate preparation for exam time and is designed to ensure that you pass the challenging CGEIT exam on your first attempt.
The CGEIT qualification is an internationally recognised symbol of excellence in IT governance awarded by ISACA. It is designed for professionals responsible for managing IT governance or with significant advisory or assurance responsibility for IT governance.
Achieving CGEIT status will provide you with wider recognition in the marketplace, as well as increased influence at executive level.

Objectives:

This seminar has been designed to prepare Delegates for the CGEIT examination by enabling them to supplement their existing knowledge and understanding to be better prepared to pass the exam, as defined by ISACA.

Target Audience:

Our training course is for IT and business professionals, with significant IT governance experience who are undertaking the CGEIT exam.

This instructor-led, live training in 日本 (online or onsite) is aimed at payment services compliance professionals who wish to create, implement, and enforce a compliance program within an organization.

By the end of this training, participants will be able to:

• Understand the rules set forth by government regulators for payment service providers.
• Create the internal policies and procedures needed to satisfy government regulations.
• Implement a compliance program that adheres to relevant laws.
• Ensures that all corporate processes and procedures comply with the compliance program.
• Uphold the business's reputation while protecting it from lawsuits.

このコースでは、新たに施行されたアクセシビリティ法について専門的な紹介を行い、開発者に対して完全にアクセシブルなアプリケーションを設計、開発、維持するための実践的なスキルを提供します。法律の重要性と影響についてのコンテクストに基づいた議論から始まり、準拠と障害者の包含性を確保するための手順コード練習、ツール、テスト技術に迅速に移ります。

コースの目標:

個人が GRC プロセスと機能の基本的な理解を確実に持ち、ガバナンス、パフォーマンス管理、リスク管理、内部統制、およびコンプライアンス活動を統合するスキルを持つことを確認することです。

概要:

• GRC の基本用語と定義
• GRC の原則
• 主要な構成要素、実践、および活動
• GRC が他の分野との関係

HIPAA (Health Insurance Portability and Accountability Act of 1996) is a legislation in the United States that provides provisions for data privacy and security for handling and storing medical information. These guidelines are a good standard to follow in developing health applications, regardless of territory. HIPAA compliant applications are recognized and more trusted globally.

In this instructor-led, live training (remote), participants will learn the fundamentals of HIPAA as they step through a series of hands-on live-lab exercises.

By the end of this training, participants will be able to:

• Understand the basics of HIPAA
• Develop health applications that are compliant with HIPAA
• Use developer tools for HIPAA compliance

Audience

• Developers
• Product Managers
• Data Privacy Officers

Format of the Course

• Part lecture, part discussion, exercises and heavy hands-on practice.

Note

• To request a customized training for this course, please contact us to arrange.

この講師主導のライブトレーニング（オンラインまたはオンサイト）では、HiTRUST 準拠のソフトウェアや製品を開発および管理する開発者と管理者を対象としています。

このトレーニング終了後、参加者は以下のことができます：

• HiTrust CSF (Common Security Framework) の主要な概念を理解します。
• HITRUST CSF の管理とセキュリティ制御ドメインを特定します。
• 異なる種類の HiTrust 評価とスコアリングについて学びます。
• HiTrust 準拠の認証プロセスと要件を理解します。
• HiTrust アプローチの採用に役立つベストプラクティスとヒントを知ります。

対象者

コンプライアンスとリスク管理に関する実践的な知識が必要なすべてのスタッフ

講座形式

以下を組み合わせたもの:

• ファシリテーションされたディスカッション
• スライドプレゼンテーション
• ケーススタディ
• 例示

講座の目的

この講座を修了した参加者は以下のことが Able to:

• コンプライアンスの主要な側面と、そのリスク管理に関連する国内外の取り組みを理解する
• 企業および従業員がどのようにしてコンプライアンス・リスク管理フレームワークを構築するかを定義する
• コンプライアンス・オフィサーとマネー・ラUNDERINGレポート・オフィサーの役割と、それらが企業にどのように統合されるべきであるかを詳細に説明する
• 国際ビジネス、タックスヘイブン、および高額資産顧客に関連する金融犯罪の他の「ホットスポット」を理解する

Open Source Software (OSS) Management is the practice of overseeing the lifecycle of open-source components within an organization, ensuring secure, compliant, and efficient use.

This instructor-led, live training (online or onsite) is aimed at intermediate-level IT professionals who wish to implement best practices for managing open-source software in enterprise and government environments.

By the end of this training, participants will be able to:

• Establish effective OSS policies and governance frameworks.
• Use SBOM and SCA tools to identify, track, and manage open-source dependencies.
• Mitigate risks associated with licensing and security vulnerabilities.
• Streamline OSS adoption while maximizing innovation and cost savings.

Format of the Course

• Interactive lecture and discussion.
• Case studies and scenario-based exercises.
• Hands-on demonstrations with OSS management tools.

Course Customization Options

• This course can be tailored to specific organizational OSS policies and toolchains. Please contact us to arrange.

This instructor-led, live Payment Card Industry Professional training in 日本 (online or onsite) provides an individual qualification for industry practitioners who wish to demonstrate their professional expertise and understanding of the PCI Data Security Standard (PCI DSS).

By the end of this training, participants will be able to:

• Understand the payment process and the PCI standards designed to protect it.
• Understand the roles and responsibilities for entities involved in the payment industry.
• Have deep insight into, and understanding of, the 12 PCI DSS requirements.
• Demonstrate knowledge of PCI DSS and how it applies to organizations that are involved in the transaction process.