PTA Security Training Course

Lesson 1 • The PTA Security Landscape

Defines the scope of PTA security and its unique threat environment. Sets the baseline vocabulary used throughout the course.

Lesson 2 • Regulatory and Policy Framework

Surveys applicable security regulations and internal policy structures. Provides context for compliance obligations relevant to PTA operations.

Lesson 3 • Security Roles and Responsibilities

Maps security duties across organisational levels within a PTA. Clarifies accountability chains and escalation paths.

Lesson 1 • Threat Identification Methods

Covers structured techniques for surfacing physical, cyber, and insider threats. Feeds directly into the risk assessment process introduced later in the chapter.

Lesson 2 • Building a Risk Register

Guides students through compiling a formal risk register from assessment outputs. Establishes the living document used in subsequent chapters.

Lesson 3 • Communicating Risk to Stakeholders

Translates technical risk findings into clear executive and operational briefings. Reinforces stakeholder roles introduced in Chapter 1.

Lesson 4 • Risk Scoring and Prioritisation

Applies likelihood and impact matrices to rank identified risks. Produces a prioritised list that guides resource allocation decisions.

Lesson 1 • Physical Security Audits

Provides a structured audit methodology for evaluating physical controls. Produces findings that feed back into the risk register.

Lesson 2 • Secure Areas and Asset Protection

Defines criteria for designating secure zones and protecting high-value assets. Builds on access control concepts to restrict sensitive areas.

Lesson 3 • Access Control Systems

Examines credential-based, biometric, and key-management access systems. Ties access control decisions to risk register priorities from Chapter 2.

Lesson 4 • Perimeter Security Design

Covers fencing, barriers, lighting, and signage as first-line deterrents. Connects perimeter design to the layered defence model.

Lesson 1 • Secure Configuration Practices

Applies hardening standards to operating systems, applications, and devices. Reduces the attack surface identified through vulnerability analysis.

Lesson 2 • Common Cyber Attack Vectors

Surveys phishing, malware, social engineering, and supply-chain attacks. Prepares students to recognise and report incidents covered in Chapter 5.

Lesson 3 • Data Classification and Handling

Establishes a data classification scheme aligned with PTA sensitivity levels. Defines handling rules that reduce exposure of critical information.

Lesson 4 • Identity and Access Management

Addresses user authentication, privilege management, and account lifecycle controls. Extends physical access control concepts into the digital domain.

Lesson 1 • Incident Response Procedures

Walks through containment, eradication, and recovery phases of response. Establishes the procedural framework used in the tabletop exercise.

Lesson 2 • Communication During Incidents

Defines internal and external communication protocols during active incidents. Reinforces stakeholder communication skills from Chapter 2.

Lesson 3 • Post-Incident Review and Lessons Learned

Structures the after-action review process to extract actionable improvements. Outputs feed directly into risk register updates.

Lesson 4 • Detection Tools and Techniques

Covers log analysis, intrusion detection systems, and anomaly monitoring. Connects detection capabilities to the attack vectors surveyed in Chapter 4.

Lesson 1 • Ongoing Personnel Monitoring

Addresses behavioural indicators, periodic re-screening, and access reviews. Builds on insider threat indicators introduced in Chapter 2.

Lesson 2 • Managing High-Risk Transitions

Covers security procedures for role changes, disciplinary actions, and terminations. Prevents data exfiltration and access abuse during vulnerable transitions.

Lesson 3 • Pre-Employment Screening

Covers background verification, reference checks, and credential validation processes. Establishes the first control layer against insider threats.

Lesson 4 • Insider Threat Program Design

Integrates screening, monitoring, and response into a cohesive insider threat program. Synthesises all personnel security concepts from the chapter.

Lesson 1 • Performance Metrics and Reporting

Defines operational KPIs and reporting cadences for security management review. Connects daily operations to strategic security objectives.

Lesson 2 • Patrol and Inspection Routines

Structures randomised patrol schedules and inspection checklists for facilities. Reinforces physical security controls from Chapter 3.

Lesson 3 • Writing Effective Security Procedures

Teaches procedure structure, clarity standards, and version control practices. Produces the documentation foundation for all operational security activities.

Lesson 4 • Shift Handover and Continuity

Defines handover protocols that maintain situational awareness across security shifts. Prevents gaps in coverage that create exploitable windows.

Lesson 1 • Continuous Improvement and Review

Embeds review cycles, lessons learned, and emerging threat monitoring into programme governance. Ensures the programme adapts as the threat landscape evolves.

Lesson 2 • Budget Planning and Resource Allocation

Applies risk-based prioritisation to security budget decisions and resource requests. Translates risk register priorities into justified investment proposals.

Lesson 3 • Security Program Governance

Establishes governance structures, charters, and oversight mechanisms for a security program. Integrates all prior chapter outputs into a unified framework.

Lesson 4 • Security Maturity Assessment

Uses maturity models to benchmark current programme capability and identify gaps. Provides the baseline for roadmap development.