I. Learning Objectives:
Open-source intelligence (OSINT) is one of the most overlooked sources of organizational risk. This course equips information security and cybersecurity professionals to see their organization the way an adversary does, through public records, social media, job postings, filings, leaked credentials, and everyday digital exhaust, and to translate that exposure into governance language, risk register entries, assigned ownership, and a sustainable program that stands up to auditors, regulators, and the board.
By the end of this training, participants will be able to:
• Define OSINT, its lifecycle, and explain why it is a governance concern, not just a technical one.
• Recognize the main categories of OSINT and exposure (corporate, personnel, technical, physical, and financial) and who owns each.
• Distinguish between publicly available, commercially available, and breached or leaked information, and the ethical lines between them.
• Conduct a safe, legal and ethical self-assessment of their organization's public footprint.
• Translate OSINT findings into risk register entries with clear likelihood, impact, and ownership.
• Identify where ISO 27001, NIST CSF, COBIT, and PCI DSS leave OSINT exposure under addressed.
• Build a governance control and a 90-day action plan and board-ready reporting to operationalize OSINT awareness.
COURSE FEE:
ISACA Member Php4,200.00
Non-Member Php5,880.00
Fees are subject to 12% VAT