Focused, practical training in the systems we run for customers: email authentication, identity, networks and voice, incident response and audit evidence.
The 9 courses below are being built. 5 of them are being written now and the rest are planned. There is no enrolment, no waiting list and no date: when a course is ready it will appear here, and anything we said before then would be a guess.
The outlines are real, though — each one is a syllabus for work we already do, so they are worth reading as a description of what matters in the subject. Several lessons are built around the free diagnostic tools on this site, and those work today. If you need the skill rather than the course, talk to us.
For everyone in the organisation, about the attacks that target people rather than systems.
The two things attackers actually go after, and the configuration that decides whether they get in.
Getting to an enforced policy without losing legitimate mail on the way.
Course outline ⟶Identity is the perimeter now. This is how to configure it without locking everyone out.
Course outline ⟶Diagnosing the infrastructure underneath everything else, including the calls people blame on the phone system.
Addressing, DNS, DHCP and NAT — and a method for finding which of them is broken.
Course outline ⟶Why calls break up on a connection that tests clean, and how to prove where the fault is.
Course outline ⟶Chains, names, renewal and the expiry that takes a service down on a Sunday.
Course outline ⟶What to do when something is already wrong, and how to find out whether your recovery plan works.
Evidence, controls and audits, from the point of view of the person who has to produce them.
Every course here is the written form of something we do for customers, which is the only kind of training we are in a position to give. That has two consequences worth stating.
The first is that the material leads with failure modes rather than features. The lesson on SPF is mostly about the ten-lookup limit and what breaks when you exceed it, because that is what goes wrong in practice. The lesson on backups is about restore testing, because an untested backup is a hypothesis.
The second is that there is no certification attached to any of it, and there will not be unless we can offer one that means something. These are courses for people who need to be able to do the work on Monday.
Most of what these courses cover is work we do for customers every week — email authentication rollouts, network and voice diagnosis, audit evidence, incident response. If you have a problem now rather than a training requirement, that is a shorter conversation.