I've recently found on the MS e-learning site that there are some security study courses which are FREE.
For example :
Title: Clinic 2801: Microsoft® Security Guidance Training I
Course Type: Self-paced Course
Available Offline: Yes
Estimated Time of Completion: 6 Hours
Language: English
Description:
This online clinic provides students with introductory knowledge and skills essential for the design and implementation of a secure computing environment. It also provides students with prescriptive guidance on security update management and best practices for implementing security on Microsoft Windows® server and client computers.
Audience:IT Pro
Objectives:
At the end of the course, students will be able to:
Establish the business case for security.
Apply the Security Risk Management Discipline (SRMD).
Use multiple layers of defense to minimize the possibility of successful attacks against an organization.
Respond effectively to security incidents.
Describe specific attack scenarios and implement measures to combat them.
Implement best practices for maximizing the security of a networked environment.
Use patch management tools and processes to implement. a patch management in their organizations.
Understand the basic server security principles.
Use active directory objects to manage server security.
Apply the Windows 2003 Security Guide templates for server hardening.
Manage domain controller policy settings.
Harden infrastructure servers by using service startup settings.
Understand the requirements for securing client computers in different server environments.
Implement best practices for clients in high-security environments.
Increase security for stand-alone clients.
Use Software Restriction Policies to manage application security for computers in an organization.
or number 5 covers :
Title: Clinic 2808: Microsoft® Security Guidance Training V
Course Type: Self-paced Course
Available Offline: Yes
Estimated Time of Completion: 6 Hours
Language: English
Description:
This clinic builds on existing knowledge of server and client security and provides students with the knowledge and skills to apply best practices to securing Microsoft® Exchange Server clients, protecting e-mail and data content, securing services and critical accounts, and securing administrative accounts and remote access using smart cards.
Objectives:
At the end of the course, students will be able to:
Implement practices to help ensure secure communication between Exchange Server and internal and remote access clients.
Implement a Rights Management Services (RMS) infrastructure to help protect the confidentiality of documents stored and shared throughout a networking environment.
Implement best practices to run services securely by determining current service-security status, and then implementing least privilege for service deployment.
Implement a multifactor authentication strategy using smart card technology to help secure administrative accounts and remote access.
Now admitedly you only tend to get a certificate of completion at the end of these but :
1) good for background for all of us
2) ideal for having a look at security implications
3) can act as a "taster" to see if you want to specialise in that area
So if you're interested why not head over to
https://www.microsoftelearning.com and have a look for yourself !
