Email Security Practitioner

You will be able to

• Audit any domain from public DNS and rank what you find by consequence
• Write a finding somebody will act on rather than file
• Sequence a programme across an estate with limited attention
• Run a spoofing campaign, an enforcement outage and a compromised sender
• Explain the risk and the residual risk to people who do not run DNS
• Hold a vendor to an alignment commitment, or prove they cannot meet it
• Say what authentication does not stop, without overselling or dismissing it

Syllabus

1. 1. Auditing a Domain Cold

   What public DNS tells you in fifteen minutes, how to rank it, and how to write it up.

   1. Fifteen minutes of public DNS12 min
   2. Ranking by consequence11 min
   3. The write-up that gets acted on10 min

2. 2. Designing the Programme

   Sequencing an estate, the work that belongs to other people, and what it really costs.

   1. Sequencing an estate12 min
   2. The work that is not yours11 min
   3. What it actually costs11 min

3. 3. Three Incidents

   A spoofing campaign, an outage you caused, and a sending account that is not yours any more.

   1. A spoofing campaign12 min
   2. An outage you caused11 min
   3. A sending account that is not yours any more12 min

4. 4. Explaining It

   Describing the risk to people who do not run DNS, and holding a vendor to a commitment.

   1. Explaining it to people who do not run DNS10 min
   2. Holding a vendor to it11 min

5. 5. What None of It Stops

   Residual risk after reject, authenticated fraud, and the questions this is the wrong answer to.

   1. Residual risk after reject11 min
   2. Fraud that authenticates perfectly11 min
   3. Questions this is the wrong answer to10 min

6. 6. End to End

   A worked estate from cold audit to steady state, and what steady state involves.

   1. A worked estate14 min
   2. What steady state involves11 min

7. 7. Final assessment

   15 scenario questions · 80% to pass · unlimited retakes

   What the assessment covers