Security awareness/ IT and information security training and courses
Lausitz Energie Kraftwerke AG is part of the LEAG Group and runs several power plants, which are an important element of power generation and a supply reserve for the whole of Germany.
Security awareness and IT and information security trainings were provided in a total of three projects.
IT security and awareness training sessions
This project was designed to provide target group-specific IT security and awareness trainings. The training content was customized by secunet for the target groups
- general IT users,
- information security coordinators,
- control technicians and system managers
and coordinated with the client.
In terms of content, the topics of risk situation, e-mail security, other security measures, password security, phishing and risk management were addressed in particular. With regard to the didactic design, care was also taken to ensure that the training consisted of both a theoretical and a practical part and that the participants were actively involved. The project lasted several months, as several training units were implemented at different locations.
The duration of the training sessions was around 2 hours per training group. Ten training sessions were held with an average of 20 participants.
Hacking trainings for IT administrators
The purpose of the training was to teach participants about typical attacks on Office networks. On the one hand, the training was carried out theoretically by describing - supported by slides - how attackers typically proceed when an internal LAN is to be taken over. In the practical part of the training, the participants then had the task of independently searching for and finding the weak points in an Active Directory test supplied by secunet. The participants worked in small groups on laptops that were started via USB stick and therefore had all the necessary attack tools. If questions arose, these were answered directly by the two trainers so that all employees were able to complete all the attacks.
The duration of the planned training was approx. 6 hours (plus breaks) per training group. Two training sessions were held, each with an average of 12 participants.
Customized training in ISMS risk management
This project was designed to enable the participants to understand and apply the risk management methodology established at LEAG through customer-specific training on ISMS risk management, so that they would be able to accomplish the corresponding risk management tasks independently in the future. To this end, secunet first looked at the customer's specific risk management process and created a customized training session on this basis.
The training had three parts:
- Part 1: Knowledge transfer regarding the basics of risk management (aligned with the organization's defined methodology)
- Part 2: Consideration and application of the tool to be used
- Part 3: Practice with practical examples and Q&A
The scheduled duration of the training was approx. 5 hours (plus breaks) per training group. Five training sessions were held, each with an average of 8 participants.
After the individual training sessions, feedback discussions were held with the main person responsible on the customer side in order to ensure an optimal approach and to apply adaptation requirements to subsequent training sessions. After completion of all training sessions, the follow-up activities were discussed with the client in a final meeting. In 2024, LEAG has included the above-mentioned training sessions in the Group's internal training catalog so that they will be regularly available to participants from the entire LEAG Group and can be called up as standard training.
