Advanced Cybersecurity Competence for a Secure World

This training is designed to prepare in-house personnel to serve as internal auditors for ISO/IEC 27001 compliance, with a focus on supporting continuous improvement within the organization. The program delivers a comprehensive, hands-on curriculum covering internal audit methodology, nonconformity detection, reporting procedures, and the management of corrective and preventive actions. Participants will gain the competencies required to structure and execute internal audits effectively, identify compliance gaps, and document findings in accordance with ISO 27001 standards. The training is available in both classroom and live online formats to accommodate organizational needs.

The ISMS Implementation Training, offered in both classroom and live online formats, is designed to equip participants with the skills needed to establish, implement, and manage an Information Security Management System (ISMS) within their organizations. The training provides an in-depth exploration of the ISO/IEC 27001 standard, supported by practical examples and real-world applications. By the end of the program, participants will be capable of structuring, executing, and continuously improving information security processes in alignment with international best practices.

This training program is designed to strengthen employees’ foundational information security awareness, assess its effectiveness, and ensure its long-term sustainability. Aimed at engaging all members of an organization, the program offers both in-person awareness seminars and live remote sessions. Going beyond theoretical instruction, it leverages a range of supporting materials—including visual designs, infographics, videos, and impactful messaging—to build lasting awareness. Upon completion, participants will possess a well-rounded understanding of how to prevent common information security threats and contribute to embedding a security-first mindset within the corporate culture.

This training is specifically designed for IT professionals seeking a deep understanding of the technical controls required by PCI DSS. Delivered by Cyberwise’s experienced experts, the program provides detailed insight into the interpretation and implementation of PCI DSS requirements, equipping participants with the knowledge to apply security controls effectively within their environments. The training is available in both classroom and live online formats, offering flexibility to accommodate organizational preferences.

In accordance with PCI DSS Requirement 9.9, necessary measures must be taken regarding POS security, and in line with Requirement 12.6, organizations must emphasize the importance of credit card security. PCI DSS Awareness Training aims to provide organizations with the security awareness activities expected to be carried out in accordance with Requirements 9.9 and 12.6. The training is offered either as classroom training or live online training format, depending on the request.

The secure deployment and commissioning of critical devices such as PLCs and RTUs in ICS/SCADA environments is vital for ensuring the resilience of industrial systems. This 1-day training provides hands-on instruction from both a logic and configuration perspective, addressing cybersecurity best practices at each stage. Participants gain practical skills in securely configuring and managing industrial control devices to reduce risk and enhance the security posture of operational technology environments.

This 3-day hands-on training is structured around the "ATT&CK® for ICS" framework, which is specifically developed for ICS/SCADA environments. Participants gain practical experience with the tactics, techniques, and procedures (TTPs) outlined in the framework, learning how adversaries operate within industrial networks and how to recognize and respond to these threats effectively. The program bridges theoretical knowledge with real-world application, helping professionals strengthen their defensive capabilities in critical infrastructure environments.

This advanced-level cybersecurity training is tailored for Industrial Control Systems (ICS/OT). Over four days, participants explore both offensive and defensive techniques through sector-specific, hands-on exercises. The program focuses on analyzing targeted attack scenarios against industrial environments and developing effective mitigation strategies. Delivered in a practical format, the training enables participants to strengthen their expertise in safeguarding critical operational technologies through real-world applications.

This training provides a broad overview of cybersecurity technologies deployed in industrial environments, with a focus on practical implementation. Over the course of two days, participants engage in hands-on exercises covering the selection, deployment, and integration of both open-source and commercial solutions. The program is designed to equip attendees with the skills needed to effectively position cybersecurity technologies within industrial architectures and strengthen operational technology (OT) security postures.

Mobile Application Security Training is a hands-on, attacker-focused program that examines mobile applications through the lens of offensive security. The course explores the root causes, exploitation methods, and potential impacts of mobile vulnerabilities, while also covering techniques for bypassing WAF/IPS and other app-level security controls. Addressing both the attacker’s and developer’s perspectives, the training provides a comprehensive view of mobile application security. Participants work through structured exercises specific to Android and iOS platforms in a lab environment, using tools and methodologies employed by professional penetration testers. Each exploited vulnerability is followed by in-depth discussions and remediation strategies. This training is delivered as a 3-day instructor-led classroom program.

The Penetration Testing Training equips participants with the knowledge and skills to ethically identify and exploit vulnerabilities in IT systems, adopting the perspective of an attacker. Covering key areas such as network, system, and application security, the program emphasizes hands-on practice through simulated attack scenarios in lab environments. Participants learn industry-standard methodologies, tools, and techniques used in penetration testing, enabling them to conduct assessments, interpret test reports, and recommend effective remediation strategies. Delivered as an intensive 5-day classroom course, the training offers a deep dive into offensive security practices within a controlled and ethical framework.

Web Application Security Training is a hands-on training where web applications are examined from an attacker's perspective. It covers web technologies, the structure of the HTTP protocol, root causes of application vulnerabilities, exploitation methods, impacts; bypassing WAF/IPS or application-based defenses, common configuration errors, and solution proposals for vulnerabilities. Throughout the training, vulnerabilities are exploited in a lab environment using methodologies and tools employed by penetration testers, demonstrating their effects. Solution proposals for vulnerabilities are also shared with participants after each application. This training is organized as a 3-day classroom session.

This training kit is a comprehensive video-based program designed to teach secure coding practices that help prevent security vulnerabilities in web applications. Spanning approximately 6 hours and 40 minutes across 82 instructional videos, the course covers core techniques for building secure software. Available in both Turkish and English, the content is offered in MP4 and SCORM 2004 formats to support flexible deployment across learning platforms. With unlimited user access, the program enables broad organizational participation and scalability. Once purchased, participants enjoy unlimited access to the content; however, update support is provided for one year. After this period, an updated version of the training kit must be purchased to access newly released content.

Secure coding practices play a critical role in mitigating vulnerabilities commonly found in web applications. Cyberwise’s Secure Code Development Training provides a comprehensive approach to embedding security into the software development lifecycle, with a focus on secure design principles and defensive coding strategies. Delivered over two days, hands-on modules tailored separately for J2EE and .NET environments, the training enables participants to identify security flaws and apply best practices for writing robust, secure code. Through interactive lab sessions, attendees gain practical experience by working directly on code, enhancing their ability to proactively address application-layer threats.