Harvey Newstrom CISSP CISA CISM CIFI NSA-IAM ISSAP ISSMP ISSPCS IBMCP Fiderus Curriculum

In 2000, top IBM Security and Privacy Services management split away from IBM to create a new security company called Fiderus. Mr. Newstrom was tasked with creating the Security Testing Team and the strategy, methodology, training, and operations for that function. Within the first quarter, Mr. Newstrom and his team had earned the first revenue for the new company, established the first regional lab, worked on the first series of security engagements, and helped create the first series of deliverables. The new team was assigned to its permanent leader for continued operations before other teams had completed their planning phases.

From the (now defunct) Fiderus website:

Security and Privacy Training Curriculum

Executives, Managers and Staff

• Fundamentals of Information Security and Privacy Technology
• Security and Privacy Policies
• Security and Privacy Trends (legal and social)
• Security Technologies (cryptography, PKI and more)
• Risk Assessment Fundamentals
• Web and Intranet Security and Privacy (for e-commerce)
• Security and Privacy Architecture and Design
• Information Security Management
• Fraud Basics
• Forensics, Firewall and Perimeter Protection
• Intrusion Detection (filters, analysis, tools)
• Incident Handling (hacker exploits and more)
• Virtual Private Networks (VPNs) and Security and Privacy Audit
• Operating System Security (UNIX, LINUX, NT)
• Wireless Security (PDA, Palm, Windows CE, and mobile virus detection apps)
• Database Security
• Application Security
• Enterprise Resource Planning (ERP) Security

Training for Professionals & Practitioners

• Implementing Security and Privacy Policy and Procedures
• Threats
• Security Strategy and Policy
• Legal and Jurisdictional Issues
• Disaster Planning
• Risk Management
• Communications and Network
• Network Attacks (viruses, DoS and more)
• Security Technologies
• Database Security
• Intrusion Detection
• Forensics
• Firewall Principles and Technology
• TCP/IP Fundamentals