Data Integrity and Security Training Course

Participants can assess integrity risks, identify threat scenarios and prioritise treatment actions.

• Apply asset, threat, vulnerability and impact analysis to critical datasets
• Model tampering threats across people, processes, applications and infrastructure
• Use STRIDE to identify spoofing, tampering and repudiation risks
• Rate inherent and residual risk using likelihood, impact and control effectiveness
• Document threat scenarios for fraudulent transactions, altered records and corrupted interfaces
• Prioritise treatment actions using risk appetite and business impact criteria

Participants can establish handling rules that preserve integrity throughout the data lifecycle.

• Create classification criteria for public, internal, confidential and restricted data
• Assign handling requirements for creation, storage, transfer, retention and disposal
• Specify approved repositories, file formats and version-control requirements
• Control data exports, extracts and copies using authorised release procedures
• Apply retention schedules, legal holds and defensible disposal controls
• Assess third-party handling obligations within data processing agreements

Participants can design access and approval controls that prevent unauthorised data changes.

• Apply least privilege and role-based access control to data operations
• Separate request, approval, execution and review duties for sensitive changes
• Design joiner, mover and leaver controls for timely access removal
• Protect privileged accounts using vaulting, session recording and periodic review
• Require multi-factor authentication for administrative and high-risk transactions
• Review access recertification evidence against defined data-owner responsibilities

Participants can specify technical controls that preserve transaction and database integrity.

• Validate input using allowlists, format checks and business-rule validation
• Enforce referential integrity, constraints and transaction controls within databases
• Use checksums, hashes and digital signatures to detect altered data
• Configure immutable audit trails for create, update, delete and approval events
• Protect application programming interfaces through authentication, authorisation and schema validation
• Assess OWASP injection, broken access control and insecure design weaknesses

Participants can select cryptographic controls for protected storage, transfer and verification of data.

• Differentiate encryption, hashing, message authentication codes and digital signatures
• Select encryption controls for data at rest and data in transit
• Manage cryptographic keys through generation, storage, rotation, revocation and destruction
• Verify file integrity using approved hash algorithms and recorded baselines
• Apply certificate validation and mutual authentication to system-to-system exchanges
• Evaluate key compromise scenarios and required containment actions

Participants can define monitoring requirements that detect suspicious changes and integrity degradation.

• Specify audit events for critical records, privileged actions and configuration changes
• Synchronise system clocks using trusted time sources and time-stamp controls
• Establish log retention, protection and access requirements for investigations
• Correlate unusual changes with user activity, approvals and system events
• Define alert thresholds for failed validations, reconciliation breaks and mass updates
• Use baselines to identify unexpected configuration, schema and data changes

Participants can manage suspected data tampering incidents from containment through validated recovery.

• Triage suspected integrity incidents using scope, impact and evidence criteria
• Preserve volatile and non-volatile evidence using chain-of-custody records
• Contain unauthorised changes without destroying forensic evidence or business records
• Compare backups, transaction logs and source records to establish trusted states
• Conduct root-cause analysis using five whys and causal factor mapping
• Validate restored data through reconciliation, approval and business-owner sign-off

Participants can assess integrity controls for suppliers, cloud services and data-sharing arrangements.

• Assess supplier controls for data entry, processing, storage and transmission
• Define contractual requirements for integrity, audit rights and incident notification
• Review cloud responsibility models for managed databases and storage services
• Test interface controls for file transfers, APIs and batch-processing exchanges
• Require reconciliation procedures between source systems and external service providers
• Monitor service-level commitments for backup, recovery and change management

Participants can measure control performance and produce a practical data integrity improvement plan.

• Map integrity controls to ISO/IEC 27001 and NIST SP 800-53
• Develop key risk indicators for exceptions, unauthorised changes and failed reconciliations
• Plan control testing using design effectiveness and operating effectiveness criteria
• Report integrity risks through concise findings, evidence and treatment recommendations
• Build a prioritised remediation roadmap with owners, milestones and dependencies
• Set review cycles for data classifications, access rights and control performance