9ine Tech Academy – Building a zero trust architecture through cybersecurity and systems hardening

Stream 1- Security Standards, Frameworks & Accreditations - Operational Focus

December 6, 2024

Zero Trust Architecture

Adopt a Zero Trust Architecture to enhance your school's network security. This module introduces the principles and practices of Zero Trust, emphasising continuous verification and least privilege access strategies. Learn how to implement this architecture to safeguard sensitive data and systems from internal and external threats.

January 10, 2025

Security Accreditation Standards Explained

Navigate the complex landscape of security accreditation standards to ensure your school's compliance and enhance its security posture. This session demystifies common standards and frameworks, providing insights into how they can be effectively implemented to meet regulatory requirements and improve security measures.

February 14, 2025

Security Operations Center Explained / Rationale for Why

Explore the critical functions and benefits of establishing a Security Operations Centre (SOC) for your school. This session explains the key components of a SOC, its operational benefits, and how it serves as a centralised unit for monitoring, assessing, and defending against cybersecurity threats.

March 13, 2025

Incident Management

An incident management procedure plan is critical to responding to a cyber attack, data breach or significant failure of IT systems and services. This module follows a framework to enable your school to implement an incident response policy and procedure for recording, assessing and managing incidents. Importantly, the framework has embedded within it the assessment of privacy risks as a consequence of the incident, and the need to report to the regulator, other authorities and data subjects (parent, students, staff)

April 10, 2025

Centralised Logging - SIEM

Focus on the critical importance of securing systems through proper configuration and the role of continuous monitoring in detecting and responding to threats. This module provides insights into best practices for system hardening, the implementation of security baselines, and the use of monitoring tools to maintain a secure IT environment. Security Information and Event Management (SIEM) are key to collating system logs and analysing information. 

Stream 2 - Network Security & Standards - Technical Focus

November 14th, 2024

Network Switching Audit and Best Practice

Foundation module covering the auditing and then configuration of your school network to minimise the ability for lateral movement through the network and implement effective network operational management and administration. Covering off network design, VLAN segregation, Port Level Authentication & 802.1x

December 5, 2024

Access Control List Implementation

This module covers topics to improve network security standards through the implementation of Access Control Lists to limit access to network devices in line with a Zero Trust Framework. The module provides a step-by-step guide, with associated resources to enable you in assessing, planning and configuring your network with ACLs.

January 9, 2025

Wireless Audit & Best Practice

A well designed and configured wireless network is critical to the effective operations of a school. Within this module we take you through a framework to evaluate your current network for performance and security improvements, including topics such as access point heatmaps, channelling, configuration and security.

February 13, 2025

Firewall Audit & Best Practice

Firewalls are critical to keeping school systems safe and secure. They also play a fundamental role in the technical performance of all systems and devices that rely on the internet. This step-by-step module takes you through the planning, technical configuration and implementation of setting up or auditing a layer 7 firewall.

March 13, 2025

Incident Management

An incident management procedure plan is critical to responding to a cyber attack, data breach or significant failure of IT systems and services. This module follows a framework to enable your school to implement an incident response policy and procedure for recording, assessing and managing incidents. Importantly, the framework has embedded within it the assessment of privacy risks as a consequence of the incident, and the need to report to the regulator, other authorities and data subjects (parent, students, staff)

April 10, 2025

Centralised Logging - SIEM

Focus on the critical importance of securing systems through proper configuration and the role of continuous monitoring in detecting and responding to threats. This module provides insights into best practices for system hardening, the implementation of security baselines, and the use of monitoring tools to maintain a secure IT environment. Security Information and Event Management (SIEM) are key to collating system logs and analysing information.

Stream 3 - Cyber Awareness - Operational & Technical

November 21, 2024

Cyber Basics and Cybersecurity Awareness and Training

Cyber attacks occur through a number of avenues. These can generically be split into unprotected internet facing systems or services and through user accounts or devices. With the latter, a user's account or device is compromised, then when connected to the school network, vulnerabilities are across other devices and accounts, followed by lateral movement by the malicious actor until they are in control of sensitive data or systems. This module takes a look at how to best raise awareness of your users.

December 12, 2024

Phishing and Social Engineering

Increase awareness and defence against phishing and social engineering attacks. This module teaches the tactics used by cybercriminals to exploit human factors, offering effective strategies for identifying and mitigating such threats. Empower your staff and students with the knowledge to protect their personal and school data.

January 16, 2025

Malware and Antivirus

Understand the evolving landscape of malware threats and the crucial role of antivirus solutions. This session covers types of malware, methods of spread, and the comprehensive strategies required to protect your IT environment. Learn about the latest antivirus technologies and best practices for deployment and management.

February 20, 2025

Removable Media and Encryption

Address the security challenges posed by removable media through effective encryption practices. This module explores the risks associated with the use of removable devices and teaches encryption techniques to secure data in transit and at rest, thus preventing unauthorised access and data breaches.

March 20, 2025

Account Security and Password Hygiene

Strengthen account security with improved password management and hygiene practices. This session provides essential tips for creating and managing strong passwords, the use of password managers, and the importance of multi-factor authentication to enhance the security of user accounts.

April 17, 2025

Mobile Device Security and Encryption

Secure mobile devices through comprehensive security measures and encryption. This module discusses the vulnerabilities associated with mobile computing and provides practical guidance on securing devices, data encryption, and implementing policies to manage and protect mobile technology in a school environment.