WP4 – Educational Activities and Cooperation with Secondary Schools

We have successfully run another iteration of the “Cyber and Information Security for Public Administration Experts” course, prepared as part of the project by the Competence and Educational Centre for Cyber and Information Security of TUKE. The course was designed for IT managers, IT specialists, security personnel, and other professionals involved in protecting information systems and infrastructure in the public sector.

Across seven online modules, we focused on securing network devices (AAA models, IDS/IPS, VPN, Cisco ASA), an introduction to cryptography, and notably penetration testing—ranging from planning and scoping in the public administration context, through passive and active reconnaissance (OSINT, nmap), vulnerability scanning (GVM), and social engineering (SET, BeEF), to exploiting network and application layer vulnerabilities (OWASP TOP 10, SQL Injection, XSS, CSRF).

There was also a focus on cloud, mobile, and IoT security, working with tools such as Metasploit and netcat, creating professional reports using Dradis, and solving model scenarios. In terms of content, the course builds upon the international Cisco Ethical Hacker programme and is based on hands-on work in virtual laboratories. Participants were thus able to test procedures directly within Kali Linux, Cisco Packet Tracer, and real-world security tools.