Certificate of Education - CSYHT25.

KNOWLEDGE - Different types of cyber threats such as Ransomware, Phishing and Social Engineering, as well as vulnerabilities and risks of central importance. - Guidelines and processes that regulate data handling, such as GDPR and the Protective Security Act. - The security frameworks ISO 27000, CIS18 and NIST, and putting these in perspective in cyber and information security work. - Relevant controls within the frameworks, with implementation and follow-up work. - NIS2 and its relevance to cyber and information security. SKILLS - Notice and communicate potential security risks and strategies to minimise them. Understand and adapt the organisation to applicable rules and policies. - Understand and adapt the organisation to applicable rules and policies. - Identify and actively counter vulnerabilities and risks that may affect the organisation negatively. - Analyse and assess risks related to information systems within the organisation. - Carry out the measures needed to ensure that the organisation complies with the frameworks. COMPETENCES - Apply specialised knowledge to secure digitalisation in system administration, and justify improvements to prevent cyber threats and IT vulnerabilities. - Evaluate and ensure compliance with policies and laws to prevent threats. - Review and assess the organisation's cybersecurity requirements and rules to check that they comply with the frameworks.