Guides on cybersecurity certifications, penetration testing, compliance (NIS 2, DORA) and Fortinet, written by Securevalley Training experts.
Cybersécurité
Secure Software Development: SSDF, OWASP | Securevalley — July 2, 2026 · Maroc — Security designed into every stage of the lifecycle: NIST SSDF, the OWASP Top 10:2025 changes, supply chain controls and DevSecOps practices that work.
Supply Chain Security and Third-Party Risk | Securevalley — July 2, 2026 · Maroc — Suppliers, service providers, software vendors: how to manage the risk of the extended enterprise and meet the requirements of NIS 2, DORA and ISO/IEC 27001.
Business Continuity and Disaster Recovery | Securevalley — July 2, 2026 · Maroc — How continuity and disaster recovery fit together: ISO 22301, business impact analysis, RTO and RPO, ransomware-resistant backups and plan testing.
Advanced Persistent Threats: APT Detection | Securevalley — July 2, 2026 · Maroc — APT groups aim for stealth and long-term access. Learn how their campaigns unfold and how visibility, behaviour-based detection and threat hunting expose them.
Insider Threats: Detection and Prevention | Securevalley — July 2, 2026 · Maroc — Negligent, malicious, collusive or third-party: how to recognise insider threats and reduce them with access control, DLP, monitoring and a clear programme.
Cryptography and Encryption Essentials | Securevalley — July 2, 2026 · Maroc — Algorithms, protocols and key management for protecting data, plus where NIST's post-quantum standards (ML-KEM, ML-DSA, SLH-DSA, HQC) stand in 2026.
Phishing: Recognition and Prevention | Securevalley — July 2, 2026 · Maroc — How to spot a phishing email and build a layered defence: SPF, DKIM, DMARC, filtering, FIDO2 MFA and an incident response procedure.
Security Awareness Training That Works | Securevalley — July 2, 2026 · Maroc — Awareness training works when it changes behaviour. How to target the right habits, run phishing simulations fairly and build a security culture.
Data Loss Prevention (DLP) Explained | Securevalley — July 2, 2026 · Maroc — DLP starts with knowing which data matters. Classification, detection techniques, enforcement channels and how to operate DLP without drowning in alerts.
Cyber Threat Intelligence Explained | Securevalley — July 2, 2026 · Maroc — Threat intelligence turns data on adversaries into decisions. Levels, life cycle, official sources and frameworks such as MITRE ATT&CK and STIX/TAXII.
VPN or ZTNA: Securing Remote Access | Securevalley — July 2, 2026 · Maroc — VPN and ZTNA take different approaches to remote access. Zero Trust principles, the end of SSL VPN tunnel mode in FortiOS 7.6.3, and how to migrate.
Incident Response Planning and Execution | Securevalley — July 2, 2026 · Maroc — How to plan and execute incident response using NIST SP 800-61 Rev. 3 and ISO/IEC 27035: roles, playbooks, containment, eradication, recovery and improvement.
Vulnerability and Patch Management | Securevalley — July 2, 2026 · Maroc — From asset inventory to verified remediation: how to prioritize vulnerabilities with CVSS 4.0, EPSS and the CISA KEV catalog, and run patching as routine work.
Cloud Security Best Practices | Securevalley — July 2, 2026 · Maroc — Shared responsibility, identity, data protection, secure configuration and logging: practical cloud security measures based on NSA, CISA and CSA guidance.
Network Segmentation vs Lateral Movement | Securevalley — July 2, 2026 · Maroc — Segmentation will not stop every intrusion, but it limits how far an attacker can move. Zone design, microsegmentation, enforcement and common pitfalls.
Understanding Zero Trust Architecture | Securevalley — July 2, 2026 · Maroc — What Zero Trust really means, the NIST SP 800-207 components, lessons from SP 1800-35 and the CISA maturity model, and a pragmatic way to get started.
Ransomware Prevention and Detection | Securevalley — July 2, 2026 · Maroc — Close entry points, contain lateral movement, detect the activity that precedes encryption and keep recoverable backups, based on CISA and NIST guidance.
Fortinet
FortiInsight, UEBA and FortiSIEM | Securevalley — July 2, 2026 · Maroc — The former FortiInsight UEBA product has had its analytics engine integrated into FortiSIEM. What to know about user and entity behavior analytics.
FortiWiFi and FortiAP: Secure Wi-Fi | Securevalley — July 2, 2026 · Maroc — FortiWiFi for small sites, FortiAP for larger spaces: architecture, management modes, 2026 status and the rules of a secure enterprise Wi-Fi network.
FortiAI: AI in Fortinet Security | Securevalley — July 2, 2026 · Maroc — FortiAI once referred to an appliance, now renamed FortiNDR. In 2026, it is the generative and agentic AI built into the entire Security Fabric.
FortiCASB and CASB: Securing the Cloud | Securevalley — July 2, 2026 · Maroc — A CASB controls the use of SaaS applications. In 2026, FortiCASB provides the API CASB for FortiGuard CASB and FortiSASE, complemented by inline mode.
FortiGuard Labs and Threat Intelligence | Securevalley — July 2, 2026 · Maroc — FortiGuard Labs feeds Fortinet devices with signatures, reputation data and alerts. Here is how these services work and how to benefit from them every day.
FortiOS: The Fortinet Operating System | Securevalley — July 2, 2026 · Maroc — FortiOS is the operating system of FortiGate firewalls and the foundation of the Security Fabric. Features, release cycle, what is new in 8.0 and best practices.
FortiSandbox: Advanced Malware Analysis | Securevalley — July 2, 2026 · Maroc — FortiSandbox examines suspicious files through static analysis and execution in an isolated environment to detect malware that signatures miss.
FortiCloud Services Explained | Securevalley — July 2, 2026 · Maroc — FortiCloud unifies Fortinet's hosted services under one account. What it covers in 2026, recent renames, and how to govern access with IAM.
FortiClient: Endpoints, VPN and ZTNA | Securevalley — July 2, 2026 · Maroc — FortiClient secures remote access and protects endpoints. Editions, EMS, the move to IPsec, ZTNA and integration into FortiEndpoint.
FortiDDoS and DDoS Protection | Securevalley — July 2, 2026 · Maroc — FortiDDoS is a dedicated solution for mitigating distributed denial-of-service attacks, based on learning normal traffic rather than on signatures.
FortiAuthenticator: Identity and Access | Securevalley — July 2, 2026 · Maroc — What FortiAuthenticator does: multi-factor authentication, SAML federation, FSSO, certificates and 802.1X, along with deployment best practices.
FortiAnalyzer Analytics and Reporting | Securevalley — July 2, 2026 · Maroc — FortiAnalyzer centralizes Fortinet logs, turns them into alerts, incidents and reports. Key design choices, retention, automation and what changed in 8.0.
FortiManager Centralized Management | Securevalley — July 2, 2026 · Maroc — FortiManager brings ADOMs, shared policy packages, templates and revision history to FortiGate fleets. Core concepts, change control and management plane security.
FortiEDR: Endpoint Detection and Response | Securevalley — July 2, 2026 · Maroc — FortiEDR protects endpoints and servers before, during and after an infection, with automated responses. An overview of the product and the skills to develop.
FortiMail Email Security Explained | Securevalley — July 2, 2026 · Maroc — How FortiMail inspects inbound and outbound email: deployment modes, sender authentication, sandboxing, CDR, encryption and the operating practices that matter.
FortiGate Enterprise Firewall Guide | Securevalley — July 2, 2026 · Maroc — FortiGate as an enterprise NGFW: security profiles, deployment roles, FortiOS 8.0, the end of SSL VPN tunnel mode and secure operating practices.
Certifications
Cybersecurity Certifications 2026 Roadmap | Securevalley — September 27, 2026 · Maroc — Beginner, SOC, pentest, governance or cloud: which certifications to target at each stage in 2026, with the prerequisites and experience to plan for.
CEH vs OSCP+: Which Pentest Certification | Securevalley — September 27, 2026 · Maroc — A 4-hour multiple-choice exam or a hands-on exam of nearly 24 hours: comparing CEH v13 and OSCP+ to choose, or combine, your pentest certifications.
Fortinet Certifications 2026: NSE Program | Securevalley — September 27, 2026 · Maroc — On July 15, 2026, Fortinet replaced FCF, FCA, FCP, FCSS and FCX with an eight-level NSE program. Tracks, the NSE 4 exam and recertification.
PCNSE Palo Alto: 2026 Certification Guide | Securevalley — September 27, 2026 · Maroc — The PCNSE exam has been retired since July 31, 2025. The new role-based portfolio, the Next-Generation Firewall Engineer exam and a preparation path.
Compliance
NIS 2 and DORA: Obligations for Morocco | Securevalley — September 27, 2026 · Maroc — Security measures, reporting deadlines, management accountability and penalties: what NIS 2 and DORA mean, including for Moroccan companies.