Händer som håller i hänglås med nyckel i

it_sakerhet_utbildning_consid

Hander-hanglas-nyckel

Buildning a strong information security culture

This course provides a foundational and inspiring introduction to how organizations can improve information security by focusing on behavior. Grounded in the science of human behavior, participants gain an understanding of why people act the way they do and how organizations can create conditions that make secure behavior easier and more natural. 



windows_it_sakerhet_consid

personer-arbetar-tillsammans

<h2>About the course</h2>
<p>Information security is not only about technology, policies, and regulations – it is ultimately about how people behave in their everyday work. Most security incidents are caused by human actions such as shortcuts, misjudgments, or unclear responsibilities. At the same time, the human factor represents the greatest opportunity to strengthen security in a sustainable and effective way.</p>
<p>The course combines theory, reflection, and practical examples tailored to the participants’ own organizational context, enabling them to continue the work independently after the session.</p>
<h3>Content</h3>
<ul>
<li>Understand the role of the human factor in information security</li>
<li>Increase awareness of why security incidents occur in everyday work</li>
<li>Introduction to a behavior-focused approach and what truly influences human behavior</li>
<li>Understand the difference between attitudes, traits, and behaviors</li>
<li>Understand the relationship between culture, behavior, and outcomes</li>
<li>Learn the principles behind behavior change and how they can be applied in practice</li>
<li>Identify behaviors that are particularly critical to information security</li>
<li>Discuss how organizations can make it easier and more rewarding to “do the right thing”</li>
<li>Reflect on responsibility, culture, and shared ownership in security efforts</li>
</ul>
<p>&nbsp;</p>
<h3><strong>Längd</strong></h3>
<p>3 h</p>
<h3>Course type</h3>
<p>The course is customized for closed groups. It can be conducted on-site or digitally.</p>
<h3>Target audience</h3>
<p>This course is designed for organizations seeking to increase knowledge, awareness, and engagement around information security. It is particularly suitable for managers, leaders, security professionals, key roles, and teams who want to understand the human factor and gain practical insights to strengthen their information security culture. No prior knowledge is required, and the course is applicable across both business and support functions.</p>


Any questions? Contact me directly!

Other courses on IT-security

office_121

Office_121

Hands-padlock-key

We offer several courses within IT security.

IT Security

Cyber security

This course provides an inspiring introduction to how organizations can improve information security by focusing on behavior.

Course: Buildning a strong information security culture - Consid

Kurs: Buildning a strong information security culture - Consid

https://cms.consid.net/wp-content/uploads/2020/02/it_sakerhet_utbildning_consid.jpg

Start

Business Areas

Creating digital solutions for the future

Consid

https://cms.consid.net/wp-content/uploads/2020/02/consid.se_logo-2.svg

Introduktionskurs inom informations- och cybersäkerhet för företag som vill lära sig mer om IT-säkerhet.

Kurs: Introduktion till informations- och cybersäkerhet - Consid

Cloud Security Fundamentals

Cloud services have transformed how organizations build and deliver digital solutions, offering scalability, flexibility, and reduced time to market. However, adopting cloud platforms also introduces unique security challenges and cost considerations. Organizations must understand the shared responsibility model, implement effective risk management strategies, and protect sensitive data across multi-cloud and hybrid environments.







office-3-3

Office-3

<h2>About the course</h2>
<p>This course introduces cloud security, balancing technical details with governance and risk perspectives. Participants will gain insights into threat landscapes, compliance obligations, and modern security practices that can help them design, operate, and monitor secure cloud environments.</p>
<p>&nbsp;</p>
<h3>Contents</h3>
<ul>
<li>Understand the shared responsibility model across major cloud service providers (IaaS, PaaS, SaaS)</li>
<li>Identify common cloud security concerns and attack vectors</li>
<li>Learn strategies for cloud risk management and compliance alignment</li>
<li>Explore cost of ownership considerations and the link between cost optimization and security</li>
<li>Gain insights into data protection practices, including encryption at rest and in transit</li>
<li>Understand Bring Your Own Key (BYOK) and Customer-Managed Key (CMK) solutions</li>
<li>Examine cloud-native security controls (network isolation, identity, monitoring)</li>
<li>Explore multi-cloud and hybrid security challenges</li>
<li>Learn best practices for logging, monitoring, and incident response in the cloud</li>
</ul>
<p>&nbsp;</p>
<h3><strong>Target audience</strong></h3>
<p>This course is ideal for cloud architects, IT managers, security professionals, and decision-makers responsible for cloud adoption and governance.</p>
<p>It is also valuable for developers and operations teams seeking to better understand their security responsibilities when building and deploying cloud-based applications.</p>
<p>&nbsp;</p>
<h3><strong>Duration</strong></h3>
<p>Two days</p>
<h3>Course type</h3>
<p>Customized course for closed groups. Can be conducted on-site or online.</p>
<p>&nbsp;</p>


Further questions? Contact me directly!

More courses on IT security

This course introduces cloud security, risk perspectives, threat landscapes, compliance obligations and modern security practices.

Course: Cloud Security Fundamentals - Consid

I kursen går vi igenom hur du ska möta de nya kraven till anpassningar av webbsidor & appar som inkluderas i Webbdirektivet - WCAG

Kurs: Tillgänglighetsutbildning - WCAG / Webbdirketivet - Consid

Identity and Access Management

Identity and Access Management (IAM) is at the heart of modern security. As organizations adopt cloud services, hybrid environments, and distributed applications, managing identities and enforcing access controls has become increasingly complex — and increasingly critical. Effective IAM reduces the risk of breaches, ensures compliance, and enables seamless user experiences without compromising security.






<h2>About the course</h2>
<p>This course provides a deep dive into IAM principles, technologies, and best practices. Participants will learn how to design secure authentication and authorization workflows, integrate identity providers, and apply modern standards such as OAuth2, OpenID Connect, and SAML. Through a combination of theory and practical exercises, you will gain the skills to implement IAM solutions that are both secure and user-friendly.</p>
<p>&nbsp;</p>
<h3>Contents</h3>
<ul>
<li>Understand the fundamentals of authentication, authorization, and identity lifecycle management</li>
<li>Explore common identity models</li>
<li>Gain hands-on experience with protocols and standards such as OAuth2, OpenID Connect, and SAML</li>
<li>Learn best practices for managing privileged access and enforcing least privilege</li>
<li>Examine identity management in cloud and hybrid environments</li>
<li>Explore Single Sign-On (SSO) and Multi-Factor Authentication (MFA) in practice</li>
<li>Understand how to secure APIs and microservices with identity tokens and claims-based access</li>
<li>Learn how to integrate IAM with compliance requirements (GDPR, ISO, NIS2, etc.)</li>
<li>Discuss emerging trends such as passwordless authentication and decentralized identity</li>
</ul>
<p>&nbsp;</p>
<h3><strong>Target audience</strong></h3>
<p>This course is designed for security professionals, solution architects, system administrators, and developers who work with identity-aware applications or cloud services. It is also valuable for IT managers and compliance officers seeking to strengthen their organization’s identity strategy and governance.</p>
<p>&nbsp;</p>
<h3><strong>Duration</strong></h3>
<p>Two days</p>
<h3>Course type</h3>
<p>Customized course for closed groups. Can be conducted on-site or online.</p>
<p>&nbsp;</p>


This course deep dives into IAM principles, technologies and how to implement secure and user-friendly IAM solutions.

Course: Identity and Access Management - Consid

Security Testing Tools (SAST + DAST)

Building secure applications requires more than just secure coding practices — it demands systematic testing throughout the development lifecycle. Security testing tools such as Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) play a vital role in identifying vulnerabilities before attackers can exploit them. This course provides a hands-on introduction to modern security testing approaches and tools. 





<h2>About the course</h2>
<p>In this course the participants will learn how to integrate testing into development and CI/CD pipelines, how to interpret results effectively, and how to balance automation with manual analysis. The training emphasizes both methodology and practice, ensuring participants walk away with actionable skills they can apply immediately.</p>
<p>&nbsp;</p>
<h3>Contents</h3>
<ul>
<li>Understand the fundamentals of SAST and DAST and when to use each approach</li>
<li>Explore the strengths and limitations of automated security testing tools</li>
<li>Gain hands-on experience with widely used tools such as Burp Suite, OWASP ZAP, Dependency-Track, and CodeQL</li>
<li>Learn how to integrate security testing into CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI, etc.)</li>
<li>Understand how to prioritize findings and avoid “alert fatigue”</li>
<li>Explore the role of dependency and supply chain analysis in modern application security</li>
<li>Discuss best practices for combining automated scanning with manual testing for maximum coverage</li>
<li>Learn how to communicate findings effectively with developers and stakeholders</li>
</ul>
<p>&nbsp;</p>
<h3><strong>Target audience</strong></h3>
<p>This course is ideal for developers, DevOps engineers, QA specialists, and security professionals who want to strengthen their security testing practices. It is also valuable for technical leads and product managers seeking to embed security testing into development workflows and improve the overall maturity of their security programs.</p>
<p>&nbsp;</p>
<h3><strong>Duration</strong></h3>
<p>Two days</p>
<h3>Course type</h3>
<p>Customized course for closed groups. Can be conducted on-site or online.</p>
<p>&nbsp;</p>


This course focus on how to integrate testing into development and CI/CD pipelines and how to balance automation with manual analysis.

Course: Security Testing Tools (SAST + DAST) - Consid

Infrastructure as Code and CI/CD

Modern software delivery requires speed, consistency, and strong security practices. Infrastructure as Code (IaC) and Continuous Integration/Continuous Delivery (CI/CD) pipelines are essential approaches for organizations that want to automate their environments and streamline deployments across cloud and on-premises platforms. By defining infrastructure and workflows as code, teams gain repeatability, reduce risks of misconfiguration, and create a solid foundation for DevOps collaboration.




<h2>About the course</h2>
<p>This course provides a practical introduction to IaC and CI/CD concepts using tools and examples from different environments. You will explore common frameworks such as Terraform, Pulumi, and Bicep, and learn how to design and implement CI/CD pipelines with YAML-based workflows and industry-standard platforms. Security and governance are emphasized throughout, ensuring that automation not only accelerates delivery but also strengthens compliance.</p>
<p>&nbsp;</p>
<h3>Contents</h3>
<ul>
<li>Understand the fundamentals of Infrastructure as Code and CI/CD</li>
<li>Learn the advantages of codifying infrastructure for scalability and security</li>
<li>Explore popular IaC tools such as Terraform, Pulumi, and Bicep with real-world examples</li>
<li>Gain hands-on experience with YAML-based pipelines across platforms (GitHub Actions, GitLab CI, Azure DevOps, etc.)</li>
<li>Integrate automated testing and security checks into pipelines (“shift-left” security)</li>
<li>Apply best practices for managing secrets, credentials, and sensitive data</li>
<li>Implement environment strategies (dev, test, prod) with versioning and approval gates</li>
<li>Recognize common pitfalls and challenges when adopting IaC and CI/CD across multi-cloud environments</li>
</ul>
<p>&nbsp;</p>
<h3><strong>Target audience</strong></h3>
<p>This course is designed for DevOps engineers, cloud architects, system administrators, and developers who want to improve automation and delivery practices. It is also valuable for IT managers and product owners seeking to understand how IaC and CI/CD can accelerate innovation while maintaining governance and compliance across diverse platforms.</p>
<p>&nbsp;</p>
<h3><strong>Duration</strong></h3>
<p>Three days</p>
<h3>Course type</h3>
<p>Customized course for closed groups. Can be conducted on-site or online.</p>
<p>&nbsp;</p>


This course provides a practical introduction to IaC and CI/CD concepts using tools and examples from different environments.

Course: Infrastructure as Code and CI/CD - Consid

Zero Trust Architecture

As organizations face increasingly sophisticated cyber threats, the traditional perimeter-based security model is no longer sufficient. Zero Trust Architecture (ZTA) has emerged as a modern approach to safeguarding systems, data, and users by enforcing the principle of "never trust, always verify“.



workshop-6-4

Workshop-6

<h2>About the course</h2>
<p>This course provides a comprehensive introduction to Zero Trust concepts and practices. The participants will learn how to design and implement Zero Trust in real-world environments, ensuring that access is strictly controlled, identities are verified, and sensitive data is protected. The training aims to equip you with the mindset and tools necessary to build resilient systems that can withstand today’s evolving threat landscape.</p>
<h3>Contents</h3>
<ul>
<li>Understand the core principles and philosophy of Zero Trust</li>
<li>Learn how to move from a perimeter-based to a Zero Trust security model</li>
<li>Explore identity and access management as the foundation of Zero Trust</li>
<li>Gain insights into network segmentation, micro segmentation, and continuous monitoring</li>
<li>Examine practical examples of Zero Trust implementation in cloud, hybrid, and on-premises environments</li>
<li>Explore key technologies enabling Zero Trust (MFA, conditional access, SIEM, EDR, etc.)</li>
<li>Understand regulatory and compliance drivers that make Zero Trust a business requirement</li>
</ul>
<h3></h3>
<h3><strong>Target audience</strong></h3>
<p>This course is ideal for IT architects, security specialists, system administrators, and decision-makers who want to modernize their organization’s security posture. It is also valuable for developers and infrastructure engineers seeking to understand how Zero Trust principles impact system design and day-to-day operations.</p>
<h3><strong>Duration</strong></h3>
<p>Two days</p>
<h3>Course type</h3>
<p>Customized course for closed groups. Can be conducted on-site or online</p>
<p>&nbsp;</p>


This course provides a comprehensive introduction to Zero Trust practices and how they impact system design and day-to-day operations.

Course: Zero Trust Architecture - Consid

Cyber security - a lecture

We are pleased to be able to offer you an exclusive lecture on cyber threats and information security. This approximately two-hour lecture will provide industry insights compiled by experts at the forefront of the field of cyber threats and information security. We will unveil the latest trends, dive deep into the very latest threats to corporate data and discuss effective strategies for managing and mitigating the risk of cyberattacks. This is the perfect lecture to book for your next conference or corporate event. 

<h2>About the lecture</h2>
<p>We live in a digital era where information is the most valuable asset. However, this explosion of data access also creates a new class of threats &#8211; cyber threats. Now more than ever, it is essential to protect your organization&#8217;s data value and secure its success in this fast-moving cyber world.</p>
<p>This lecture focuses on concrete mitigating steps that your organization can take to strengthen its information and cybersecurity strategy. It is ideal for management teams, IT specialists, and anyone involved in ensuring the organization&#8217;s cybersecurity. Don&#8217;t miss this opportunity to prepare your organization against future cyber threats.</p>
<h3>Contents:</h3>
<ul>
<li>What does the cyber threat landscape look like in this fast-moving world?</li>
<li>What do we need protection from?</li>
<li>What are the potential impacts of a cyberattack on an organization?</li>
<li>The most effective techniques for safeguarding data and corporate information.</li>
<li>Trends in cyber threats and how to stay ahead.</li>
<li>How to foster a culture of security within the organization.</li>
<li>Strategies for mitigating risks and minimizing the damage from potential cyberattacks.</li>
</ul>
<h3><strong>The goal</strong></h3>
<p>This lecture aims to enhance participants&#8217; understanding and awareness of the growing cyber threat landscape while providing fundamental insights into developing protection strategies and a culture of security.</p>
<h3><strong>Duration</strong></h3>
<p>2 hours</p>
<h3>Lecture type</h3>
<p>The lecture is customizable and aimed for closed groups and can be held on-site or online.</p>


Further questions? Ask me directly!

This lecture is aimed at companies and organisations who want to learn more about cyber security and information threats.

Lecture: Cyber security - Consid

Cyber security &#8211; a lecture

Introduction to cybersecurity

Get it right from the start in an uncertain world. In this course, you will learn more about information- and cybersecurity. You will gain valuable knowledge by experts and their prior experience, ranging from cyber-attacks and external threats to ensuring preparation and protection - in the best possible way. By showcasing real-world scenarios in this field, you will also learn how to approach these types of issues and how to work proactively rather than reactively.


<h2>Contents</h2>
<ul>
<li>Various threats from the world around us – what are the potential threats of today?</li>
<li>Cyber-attacks targeting companies and authorities – how and why?</li>
<li>Anonymity &#8211; a dilemma in cyberspace</li>
<li>What is secure coding? How do we protect ourselves?</li>
<li>Management systems &amp; advice from the National Cybersecurity Center</li>
<li>Employee Safety</li>
<li>Hacker attacks and spread of viruses, from a historical perspective</li>
<li>Methods of hacking, such as social engineering, SQL injections, phishing, XOR, and more</li>
<li>Essential security principles (safety first)</li>
<li>The term attack surface, encryption, digital signatures, and authentication</li>
<li>Firewalls, wireless networks, and secure/insecure network protocols</li>
<li>Data protection legislation (GDPR)</li>
<li>NIS/NIS2 – The EU-directive for cyberscurity</li>
</ul>
<h3><strong>Course goals</strong></h3>
<p>After this course your team will have more of an understanding for what cybersecurity means and what it takes to protect your product or platform against cyberattacks and other threats.</p>
<h3><strong>Duration</strong></h3>
<p>One full day on-site or two half-days online</p>
<h3>Course type</h3>
<p>Customized course for closed groups. Can be conducted on-site or online</p>
<h3>Prerequisets</h3>
<p>No knowledge required. Any company that wants to educate their employees in cyber security is welcome to book the course, regardsless of level</p>
<p>&nbsp;</p>


Further questions? Ask me directly! 

This is an introduction course for companies and organisations who want to educate their staff on cyber security.

Course: Introduction to cyber security - Consid

Writing secure code

In the constantly changing technological landscape we live in today, it's not only important to create efficient and user-friendly products but also to ensure that these products and applications stand robust against cyber threats and data protection violations. This is where the critical art of secure coding comes into play. 
We are now offering a course in secure coding and application development, aimed at developers.


<h2>About the course</h2>
<p>This course, which stretches over three days, is tailored to provide you with relevant knowledge and tools for creating secure and reliable high-quality products in an era where cyber threats are widely spread.</p>
<p>The course is appropriate for development teams, Product Managers, IT Specialists, and for those involved in creating digital solutions or working closely with technology. The course will provide you with the skills and knowledge needed to take your products to the next level of security and user trust.</p>
<h3>Contents</h3>
<ul>
<li>Stay updated on the latest trends in the field of cyber threats</li>
<li>Understand the importance of secure coding and how to integrate security measures from the beginning of the development process</li>
<li>Learn how to identify and protect ourselves against common security vulnerabilities and attacks</li>
<li>Gain practical experience in writing secure code through exploratory hands-on labs.</li>
<li>Explore best practices and guidelines for creating secure solutions</li>
<li>Gain insights into regulations and standards related to data security and privacy</li>
</ul>
<h3><strong>Course goals</strong></h3>
<p>The main goal of this course is to equip participants with knowledge and skills to create secure and robust digital products and applications by effectively integrating security principles and best practices into the coding and development process. The course also aims to raise awareness of the importance of data privacy and protection, as well as how to comply with applicable regulations and standards in this field.</p>
<h3><strong>Duration</strong></h3>
<p>Three full days on-site, or online by agreement</p>
<h3>Course type</h3>
<p>Customized course for closed groups. Can be conducted on-site or online</p>
<h3>Target audience</h3>
<p>The course is designed for businesses and organizations looking to educate their Developers, Product Managers and IT specialists in cybersecurity and secure coding practices.</p>


This is a course in writing secure code aimed at developers, IT-specialists and Product Managers.

About the course This course, which stretches over three days, is tailored to provide you with relevant knowledge and tools for creating secure and

Course: Writing secure code - Consid

europa-flagga-staende-2

europa-flagga-staende

IT Law

The course is intended for those who work part-time or full-time with these issues or for other reasons need to learn best practices when it comes to personal privacy online.

<h2 class="whitespace-pre-wrap">About the Course</h2>
<p class="whitespace-pre-wrap">Personal data is considered by many to be the gold of the future, and to protect European personal data and strengthen individuals&#8217; rights to their own data, GDPR (General Data Protection Regulation) was introduced on May 25th, 2018. Knowledge of how personal data should be handled and understanding the basic principles of personal data processing is a hygiene factor in nearly all companies. In this course, we provide a context for how the issue of online privacy has grown increasingly important, and guide participants through best practice step by step.</p>
<p class="whitespace-pre-wrap">The course is taught by a lawyer who, in addition to education, also supports many companies in both the private and public sectors.</p>
<h3 class="whitespace-pre-wrap">Content</h3>
<ul>
<li class="whitespace-pre-wrap">GDPR basic principles</li>
<li class="whitespace-pre-wrap">Key concepts</li>
<li class="whitespace-pre-wrap">Personal data and authorization management</li>
<li class="whitespace-pre-wrap">What applies to storage in the cloud?</li>
<li class="whitespace-pre-wrap">Schrems II background</li>
<li class="whitespace-pre-wrap">Third country transfers</li>
<li class="whitespace-pre-wrap">How is your company affected?</li>
<li class="whitespace-pre-wrap">Cookies &#8211; Law on electronic communication</li>
<li class="whitespace-pre-wrap">The importance of consent</li>
</ul>
<p>&nbsp;</p>
<h4 class="whitespace-pre-wrap">Duration</h4>
<p class="whitespace-pre-wrap">Half-day.</p>
<h4 class="whitespace-pre-wrap">Implementation</h4>
<p class="whitespace-pre-wrap">Customized course for closed business groups. Can be held on-site or digitally.</p>
<h4 class="whitespace-pre-wrap">Target audience</h4>
<p class="whitespace-pre-wrap">This course is aimed at those who work in communication, marketing, IT and law or similar fields that deal with content on websites and apps, and who need to adapt them according to the new directives.</p>


You can also contact me directly!

Other courses on IT-security and Law

office_-1-2

Office_-1

1733931541074

Cajsa Ljungberg

This course by a certified lawyer aims to teach companies and organisations the importance and laws of personal data protection.

About the Course Personal data is considered by many to be the gold of the future, and to protect European personal data and strengthen individuals&#8217;

Course: IT Law - Consid

https://cms.consid.net/wp-content/uploads/2021/09/Dator.jpeg

Customize your data settings

We use cookies to make your experience smooth and secure. Some cookies are used to make functionality work or to improve it, while others are used to tailor your experience.

Welcome to Consid

Used to collect anonymous information about how you use the website. See the full list of cookies in our cookie policy.

Statistics Cookies

Used to collect anonymous information about how you use the website and show you ads and offerings we think you might like, based on your behaviour. See the full list of cookies in our cookie policy.

Marketing Cookies

Cookie policy

We are one of the Nordic region’s leading tech consultancies, offering end-to-end expertise in IT, digital transformation, strategy, leadership, design and communication.

About us

News

Find our offices and learn more about our locations.

Our offices

Learn more about the awards we have received.

Awards

Discover how we work with sustainability.

Sustainability

Annual reports

Our initiatives

We work for an equal IT industry, learn more here.

Q by Consid

Our annual sustainability hackathon held together with a partner organisation.

Considition

Our initiative to inspire and strengthen young people’s interest in technology.

Consid Youth Education

Our annual gala celebrating role models in digital transformation.

Consid Awards

Discover life at Consid. Get to know our people, learn more about our culture and explore our open positions.

Career

Looking for new possibilities? See our open positions.

Open positions

People of Consid

Explore our insights on digital transformation, including expert blog posts, downloadable white papers and podcast episodes.

Insights

Insights and analysis on the most important topics in the industry, written by our experts.

Blog

Learn more about and sign up for our upcoming events and webinars.

Events and webinars

In-depth guides, reports, and white papers on the industry’s hottest topics.

Knowledge base

We bring together leading expertise to create long-term, sustainable value for world-leading brands and organisations.

Services

Our services

We help you build business systems that support growth and efficiency.

Business systems (ERP)

We help you create modern, secure and sustainable IT environments.

Cloud, security and IT architecture

We help you create strong customer experiences at every touchpoint.

Communication, customer experience and web (CX)

We help you build future-ready organisations powered by data and AI.

Data, AI and analytics

We develop digital products and services that combine business value with technology.

Digital product and service development

We create intelligent products and connected solutions.

Embedded systems and connected devices

We develop solutions and strategies that engage employees and strengthen organisations.

Employee experience and intranet (EX)

We empower leaders and organisations to drive change.

Management and strategy

We develop, modernise and manage systems with high quality.

System and software development

How we create value

We offer training and capability development that strengthen individuals and organisations.

Education

We collaborate with leading technology providers in the market.

Partners

Our delivery models are tailored to your needs.

Delivery models

Contact us

sitevision_most_valuable_utmarkelse-3

Two-hands-holding-padlock-with-key-in

We offer several courses within IT security. See which courses we can offer right now down below. 

We offer several courses within IT security. Here you can see which courses we offer right now.