Course Review: Security in the Enterprise
In this course, our duo of experts guides students through the ever-changing and increasingly-sophisticated virtual battlefield of enterprise security. The course provides tips, tricks, and very practical advice on better defending your system.
The topics covered in this course are:
- The security landscape of today and tomorrow
- Tips and practical advice on social media security
- Advanced Windows defense
- Free tools to protect your Windows environment
- Information on vulnerability and patch management
- Top mitigation methods to protect your enterprise
This course has no prerequisites, but it has a Level 200 status. It is meant for IT professionals with at least six months of experience. It is worth 66 points, and runs approximately five hours. It has six modules and six assessment exams. The course is rated 4 out of 5 stars.
Erdal is an IT Security Guru with business development and management skills, who focuses on Penetration Testing, IT Auditing, and sharing his real life skills as a Lecturer/ Trainer. He is currently working as Chief Information Security Officer at EMT, a specialist IT security products distributor.

Erdal has the following qualifications: Master of Information Systems Security (M.I.S), Bachelor of Information Technology (B.I.T.), MVP, Microsoft Certified Trainer, Microsoft Certified Leaning Consultant, ISO27001 Consultant, Certified Ethical Hacker (CEH), Certified Ethical Instructor, and Licenced Penetration Tester. He is a lecturer at Charles Sturt University and is also completing his Doctor of Philosophy (Ph.D.) in IT Security.
May is a Technical Evangelist and Enterprise Device Infrastructuralist at Microsoft. He is an author, speaker, blogger, video and keynote presenter. He is very passionate about Windows, Microsoft Client, and Cloud technologies.
These days, more than ever before, it is essential to be able to prevent attacks and defend your system. It is true for individuals, as well as large companies and enterprises. Data is everywhere, and it is up to IT security personnel to keep it safe and secure. Microsoft provides a wide range of tools for those who wish to remain secure, and these training courses will help users harness the power of these tools, and maintain a healthy, risk-free enterprise.
While no one can guarantee security 100% of the time, by using these techniques and resources the probability of attack and theft is great reduced. Who is to stop hackers and identity stealers from absconding with confidential information? You are. These courses serve as a “heads up” to those who wish to stay on top and be prepared.
Courses on handling security in a cloud-centered workspace, on advanced Microsoft Azure features, and on security in Office 365 – these are all here, at the enterprise security section of MVA. Top industry experts are here to guide you through the best practices and techniques, designed to keep your company’s information safe.

CISO Insight
Cybersecurity is not a product you buy or a project you complete — it is a continuous operational discipline. Organisations achieving genuine maturity embed security thinking into every business decision, invest in people and processes alongside technology, and build resilience for when preventive controls inevitably fail.
The Evolving Cybersecurity Landscape
The threat landscape continues evolving at a pace challenging even well-resourced teams. AI-powered attacks, supply chain compromises, ransomware-as-a-service, and state-sponsored campaigns create a multi-dimensional environment no single technology addresses. Organisations defending most effectively take a risk-based approach — understanding which assets are critical, which threats most likely, and where investments create greatest impact. For CISOs, translating complexity into actionable strategy requires quantifying cyber risk in business terms, prioritising based on risk reduction, and communicating in language that resonates with non-technical stakeholders.
Building a Defence-in-Depth Strategy
Effective cybersecurity requires layered defences addressing the full attack lifecycle. No single control is sufficient; every control can be bypassed by determined adversaries. The goal is creating enough layers that attackers must overcome multiple independent defences, while ensuring detection and response capabilities contain breaches before catastrophic damage. The most common mistake is treating security as a technology problem. The fundamentals — patch management, access control, security awareness, incident response planning — prevent more breaches than advanced technology.
Frequently Asked Questions
What is the biggest cybersecurity mistake organisations make?
Buying tools without coherent strategy, skipping basic hygiene for advanced solutions, and failing to invest in people and processes. Fundamentals prevent more breaches than advanced technology.
How should CISOs prioritise security investments?
Start with risk assessment identifying critical assets and likely threats. Prioritise highest-risk scenarios. Ensure basic hygiene before advanced capabilities. Use NIST CSF or CIS Controls to structure your programme.
Related reading: Visit our Cyber Resilience Hub or download the CISO Toolkit.


