Global Learning for Operational Leaders
Classroom
14 sessions
Scroll for more
Online / Live
14 sessions
Scroll for more
Introduction
Course overview
Attackers continually scan for vulnerabilities in systems, applications and configurations. Organisations need structured vulnerability management and periodic penetration testing to find and fix weaknesses first.
This Aractech course explains the vulnerability management life cycle, scanning tools, risk-based prioritisation, patching, penetration testing types and methodology, scoping and rules of engagement, interpreting test reports and managing remediation. Participants plan a vulnerability programme and review penetration test findings.
The course is for managers and technical staff who commission, manage or act on security testing.
What you will achieve
Learning objectives
- Explain the vulnerability management life cycle
- Plan and run vulnerability scanning
- Prioritise vulnerabilities by risk
- Understand penetration testing types and methods
- Scope and manage penetration tests
- Track remediation and measure programme effectiveness
Who should attend
Target audience
- IT security professionals
- System and network administrators
- IT managers
- Security analysts
- Auditors
- Application owners
Methodology
Learning approach
- Technical presentations
- Tool demonstrations
- Report review exercises
- Prioritisation workshops
- Case studies
Complete course outline
Five focused days of learning and application
The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.
Day 1
Vulnerability Management
- Vulnerability concepts
- Life cycle
- Asset inventory
- Scanning tools
- Coffee break
- Scanning tools (continued)
- Programme governance
- Exercise: Programme design
Day 2
Prioritisation and Remediation
- Severity scoring
- Risk-based prioritisation
- Patch management
- Compensating controls
- Coffee break
- Compensating controls (continued)
- Exceptions
- Workshop: Prioritising findings
Day 3
Penetration Testing
- Types of testing
- Methodology
- Scoping
- Rules of engagement
- Coffee break
- Rules of engagement (continued)
- Legal considerations
- Exercise: Test scope
Day 4
Understanding Test Results
- Common findings
- Exploitation chains
- Reading reports
- Retesting
- Coffee break
- Retesting (continued)
- Case study: Pen test report
- Exercise: Remediation plan
Day 5
Programme Effectiveness
- Metrics
- Reporting
- Continuous testing
- Coffee break
- Continuous testing (continued)
- Bug bounty overview
- Improvement
- Capstone: Vulnerability management roadmap
FAQ
Frequently asked questions
What does Penetration Testing and Vulnerability Management Fundamentals (IMCS-014) cover?
This course covers IT Management and Cyber Security through a structured five-day outline focused on practical application, discussion, and implementation planning.
When is the next available session?
The next scheduled session starts on 16 - 20 November 2026. See the course schedules section for the available dates and delivery formats.
Who should attend this course?
IT security professionals, System and network administrators, IT managers
Is bilingual course delivery available?
Yes. All course materials and presentations are provided in English, while bilingual explanation and discussion support may be available depending on the selected location and trainer availability. For example, when attending a course in Istanbul, you may request a Turkish-speaking trainer to explain the English course content in Turkish. Arabic explanation support may also be requested at this location. Other languages are available in selected cities. You can choose your preferred language support as an optional preference during registration.
How can I register for a session?
Use any Register button next to the available course dates to open the participant registration page and submit your booking request for the selected session.
Is this course available online as well as classroom-based?
Check the course schedules section for currently published classroom and Online / Live sessions.
Where are classroom sessions delivered?
Current classroom venues include Barcelona, Dubai, Cape Town, Amsterdam, London, Istanbul, Munich, Paris, Frankfurt, Kuala lumpur, Rome, Vienna, Geneva, Madrid.
How long is the training programme?
The programme runs for five days from 09:00 to 14:00, which gives 25 contact hours, including a daily 30-minute break (22.5 hours of instruction).
Quick request
Send quick request
Send a fast enquiry about this course and the academy team will get back to you.
Get a quotation
Request a formal quotation
Choose an available date and venue, add your participants, and we will email a formal quotation for Penetration Testing and Vulnerability Management Fundamentals to your business address.