...

Download Our Latest Course Catalog | Download Now

[woo_multi_currency_layout10]

Data Security Analyst for the AI Era

Build the skills to investigate data security incidents and recognise risky behaviour across endpoints, cloud applications, email, and AI tools.

This three-day course combines instructor-led lessons with hands-on labs. You’ll practise investigating alerts, reviewing user activity, and identifying ways to contain data exposure. The course also supports preparation for the Certified Data Security Analyst for the AI Era exam.

Overview

Overview

A data security alert is the starting point for an investigation. You need to check what happened, understand the information involved, and decide what action to take. This course helps you work through those decisions using Proofpoint Data Security tools.

You’ll learn how to validate alerts, investigate user activity, and build context across endpoints, cloud applications, and email. The course also covers AI-related data exposure, including the use of AI classifiers, Data Security Posture Management, Data Security for AI, and Satori-assisted alert triage.

Hands-on labs help you apply these skills to common data security use cases. You’ll also explore containment, recovery, evidence preservation, and post-incident reporting.

Scope
  • Duration: 3 days
  • Format: Virtual instructor-led training or on-site training at a customer’s facilities, with hands-on labs
  • Platform Support: Proofpoint Data Security Workbench, Data Classification, Insider Threat Management, Endpoint DLP, Cloud DLP/CASB, Email DLP, Data Security Posture Management, and Data Security for AI
Prerequisites

NA

Target Audience
  • Messaging administrators
  • Security analysts
Exam Blueprint
  • Incident Response Foundations: 5%
  • The Preparation Phase: 5%
  • Detection and Analysis: 60%
  • Containment, Eradication, and Recovery: 15%
  • Post-Incident Activity: 15%
Certification

This course is the recommended learning for the Certified Data Security Analyst for the AI Era exam.

The certification validates your ability to investigate data security incidents, analyse risky user behaviour, and protect sensitive information across endpoints, cloud applications, email, and AI-powered environments. It assesses knowledge of threat detection, incident response, remediation, and data protection strategies.

The course and related exam are based on the NIST SP 800-61 Revision 2 Computer Security Incident Handling Guidelines.

The exam is intended for IT professionals, security analysts, triage analysts, and incident responders.

FAQs

1. Can I take this course online?

Yes, the course is available through virtual instructor-led training.

2. Is onsite training available?

Yes, the course can be delivered onsite at a customer’s facilities.

3. Does the course include hands-on labs?

Yes, you’ll work in a classroom lab environment and use Proofpoint Data Security tools to address common data security use cases.

4. Will I learn how to investigate AI-related data exposure?

Yes, the course covers AI-related investigation context, Satori-assisted alert triage, and sensitive data protection. You’ll also explore how GenAI prompt protection supports containment.

5. Does this course support certification preparation?

Yes, Proofpoint recommends this course as preparation for the Certified Data Security Analyst for the AI Era exam. The exam is available through Certiverse.

Course Outline

Module 1: Incident Response Basics

  • Distinguish between security events, alerts, and incidents
  • Understand how cybersecurity frameworks guide analyst decisions
  • Understand the incident response lifecycle
  • Explain how threats and vulnerabilities create risks for users, systems, and data

 

Module 2: The Preparation Phase

  • Understand how incident response plans, playbooks, and runbooks support consistent response
  • Explain how exercises and readiness testing prepare analysts for incidents
  • Identify when to update documentation following lessons learned, tool changes, or role changes

 

Module 3: Platform Foundations

  • Understand how Proofpoint protects sensitive data and addresses risky behaviour and AI interactions across channels
  • Explain how Data Security Workbench, Data Classification, and Administration support analyst workflows
  • Understand the roles of Data Security Posture Management and Data Security for AI
  • Explain how detectors, data classes, AI classifiers, and Satori support data protection in the AI era

 

Module 4: Investigating Alerts

  • View, filter, assign, tag, export, and investigate alerts in Data Security Workbench
  • Use rules, detectors, data classes, snippets, and workflow status to validate alerts
  • Investigate Endpoint DLP alerts
  • Investigate CASB/Cloud DLP and Email DLP alerts
  • Investigate alerts triaged by Satori

 

Module 5: Investigating Activity

  • Use Explorations to investigate user activity and risky behaviour across available channels
  • Build investigation context using filters, tags, dashboard views, exports, and timelines
  • Document and escalate findings from an example DLP investigation

 

Module 6: Containment, Eradication, and Recovery

  • Identify recovery options after an investigation
  • Document remediation outcomes
  • Understand how Endpoint DLP, Cloud DLP/CASB, and Email DLP remediation options help limit data exposure
  • Explain how GenAI prompt protection supports containment of AI-related data exposure

 

Module 7: Post-Incident Activity Phase

  • Perform post-incident reviews
  • Preserve incident evidence
  • Document incident timelines using user, file, device, Attack Sequence, and multichannel Exploration evidence
  • Export activity results to support reports and recommendations
  • Use investigation findings to support future improvements

 

Note : A representative from Datacipher will contact you with further details
Payment Methods

At DataCipher, we offer a variety of payment options for our Fortinet courses. Here are the methods available:

Purchase Order (PO) – If your organization prefers using a purchase order, begin the registration process by clicking the Register button. At the conclusion of the registration form, choose the option “My company will pay for it, please send an invoice with the payment details.” Our training team will then provide an official quote and any necessary additional information that your accounts department might need to issue the PO.

Bank Transfer – DataCipher maintains bank accounts in both the US and Europe, accommodating all standard bank transfer methods such as IBAN/BIC, Swift, ACH, or wire transfer. To make a payment via bank transfer, simply use the Register button to sign up for your selected course.

Credit Card Payments – We accept payments from all major credit cards, including Mastercard, VISA, American Express, Discover & Diners, and Cartes Bancaires. Payments can be made directly through the registration link or by requesting an invoice that includes a web link for online payment. All transactions are secure, and DataCipher does not store any credit card information.

These options are designed to make the registration process as smooth and flexible as possible for all participants.

Status

Guaranteed to Run – DataCipher is committed to running this class unless unforeseen events such as an instructor’s accident or illness occur.

Guaranteed on Next Booking – The course will proceed once an additional student registers.

Scheduled Class – We have scheduled this course and rarely cancel due to low enrollment. We offer a “Cancel No More Than Once” guarantee, ensuring that if a class is canceled due to insufficient enrollment, the next session will run regardless of the number of attendees.

Sold Out – If the class is fully booked, please use our contact form to join the waiting list or to inquire about additional sessions. We’re here to accommodate your training needs and keep you informed of new opportunities.

Half and Full-Day Training

At DataCipher, we offer our training courses in both traditional full-day and convenient half-day formats. Our half-day classes are specifically designed for IT professionals who cannot be away from their workplaces for consecutive full days. This flexible schedule allows participants to dedicate a few hours to learning and then return to their regular work responsibilities.

The curriculum for both the full-day and half-day formats is identical. The primary difference is that the half-day classes spread the coursework over a more extended period, providing a balanced approach to professional education. DataCipher has been successfully running these half-day training sessions for several years, receiving consistently positive feedback from our customers. They appreciate the flexibility and report that the extended timeframe facilitates a deeper understanding of the material, as it gives them more time to absorb and reflect on the information learned.

Download the course details. Click the button below.

REQUEST CUSTOM DELIVERY

REQUEST a Quote

Become An Expert By Practice – Get Your Hands On Labs

Don’t let your tech outpace the skills of your people

TRUSTED BY TOP COMPANIES LIKE IBM, DELOITTE, ERICSSON, AND MORE.
DISCOVER OUR CUSTOMER PORTFOLIO.

Dedicated to excellence, we cultivate strong partnerships with worldwide technology innovators.

Testimonials

What Our Clients Say

You’re all set!

Thanks for registering. Our training team will be in touch soon to confirm your class schedule and help you get started.