Competency 05 · of 05
Monitoring a secure information system
Level 2 (BUT2) — “Getting to grips with information system monitoring and testing tools”
Why — continuous monitoring detects threats early and shortens the response time to incidents.
What — administer monitoring tools (SIEM, logs, alerts), analyse/correlate, run penetration tests, handle incidents.
Where / When — used from SAÉ 4.01 onwards (monitoring, logging and risk assessment on the Proxmox infrastructure), semester 4, and through penetration testing practice (pentesting, Root-Me, TryHackMe).
- Keeping a constant watch on threats
- Applying critical updates
- Automating tasks
- Fitting into a team
- Monitoring network behaviour
- Ensuring contracts are respected and the information system meets its compliance obligations
- Monitoring and analysing the information system
- Security audit
- Handling a security incident
A cybersecurity competency of the Cyber track, developed through penetration testing methodology (reconnaissance, scanning, exploitation, post-exploitation with Nmap, Metasploit, Burp Suite…) and my practice on Root-Me / TryHackMe, as well as through the monitoring and risk-assessment part of SAÉ 4.01.
- AC25.01 — Administer protection against malware
- AC25.02 — Get to grips with network/system penetration testing tools