SEC536: Adversarial AI - Penetration Testing AI Systems
SEC536Offensive Operations, Artificial Intelligence
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
UPDATED
SEC402: Cybersecurity Writing: Hack the Reader
SEC402Cybersecurity Leadership
- 12 Hours (Self-Paced)
Course authored by:
Lenny Zeltser
Course authored by:Lenny Zeltser
- 12 CPEs
Apply your credits to renew your certifications
- Self-paced
Train at your own pace from wherever you are
- Essential Skill Level
Course material is for individuals with an understanding of IT or cyber security concepts
Improve persuasive communication techniques to breach readers' defenses, ensuring security reports influence decisions even when audiences resist engaging with technical content.
Featured Quote
Outstanding course. Provides a writing framework/rubric to evaluate & guide future writing.
Course Overview
SEC402 teaches cybersecurity professionals to write so their reports, briefings, and emails get read and acted on. The technical insight is often there, but the writing that carries it loses the reader before the recommendation lands. This course teaches a reader-centered approach built around the five “golden” elements: structure, look, words, tone, and information. Students spot and fix problems in writing samples, including incident reports, threat reports, and assessment findings. They also learn how to use AI to draft, critique, and improve their writing, without ceding judgment to it.
What You'll Learn
- Apply a reader-centered approach to incident, threat, and assessment reports
- Organize your writing so busy colleagues and clients can scan, find what matters, and act
- Make decisive choices about words and tone, including for difficult conversations
- Match the information you include to the report type and the reader’s needs
Business Takeaways
- Get more recommendations approved and implemented
- Cut wasted time when stakeholders misread recommendations and incident updates
- Get executives to read the analysis behind the recommendation
- Minimize the back-and-forth between a security finding and a business decision
- Reduce rework caused by reports that don’t answer the right questions
Meet Your Author
Lenny Zeltser
FellowLenny Zeltser is a leader in developing resilient security programs. His invaluable tools, like REMnux, a widely used Linux distribution for malware analysis, have become industry standards in combating malicious software.
Read more about Lenny ZeltserCourse Syllabus
Explore the course syllabus below to view the full range of topics covered in SEC402: Cybersecurity Writing: Hack the Reader.
Section 1Capturing Attention: Structure, Look, and Words
Section 1 introduces the reader-centered approach and the first three elements that determine whether your writing gets read. Students learn to organize cybersecurity reports and messages, so readers find the takeaway, make it easy to scan, and choose words that work for both technical and business audiences. Hands-on exercises use weak and strong examples.
Topics covered
- Reader-centered methodology and the five “golden” elements
- Document structure with strong summaries, headings, paragraphs, and top-down narrative
- Visual layout and emphasis that direct the eye
- Word choice for clear, persuasive cybersecurity writing
- Using AI as a new kind of reader and drafting helper
Section 2Earning Trust: Tone and Information
Section 2 turns to tone and information, which readers weigh before they trust you and act on what you wrote. Students learn to set a tone that stays professional, responsive, and constructive, even in disagreements and negative findings. They also learn what each report type, including incident, assessment, and threat reports, needs to deliver to readers.
Topics covered
- The right tone: professional, responsive, constructive, and persuasive
- The right information in cybersecurity incident reports
- The right information in security assessment reports
- The right information in malware and threat reports
- Using AI to draft, review, and learn from public security reports
Things You Need To Know
Relevant Job Roles
Cybersecurity Legal Advice (OPM 731)
NICE: Oversight and GovernanceResponsible for providing cybersecurity legal advice and recommendations, including monitoring related legislation and regulations.
Explore learning pathSystems Authorization (OPM 611)
NICE: Oversight and GovernanceResponsible for operating an information system at an acceptable level of risk to organizational operations, organizational assets, individuals, other organizations, and the nation.
Explore learning pathSecurity Manager Training, Salary, and Career Path
Cybersecurity LeadershipDaily focus is on the leadership of technical teams. Includes titles such as Manager, Information Security Specialist, and Program/Project Leader.
Explore learning pathCommunications Security (COMSEC) Management (OPM 723)
NICE: Oversight and GovernanceResponsible for managing the Communications Security (COMSEC) resources of an organization.
Explore learning pathCybersecurity Instruction (OPM 712)
NICE: Oversight and GovernanceResponsible for developing and conducting cybersecurity awareness, training, or education.
Explore learning pathKnowledge Management (OPM 431)
NICE: Implementation and OperationResponsible for managing and administering processes and tools to identify, document, and access an organization’s intellectual capital.
Explore learning pathTechnology Program Auditing (OPM 805)
NICE: Oversight and GovernanceResponsible for conducting evaluations of technology programs or their individual components to determine compliance with published standards.
Explore learning pathIncident Response Team Member
Digital Forensics and Incident ResponseThis dynamic and fast-paced role involves identifying, mitigating, and eradicating attackers while their operations are still unfolding.
Explore learning pathCourse Schedule and Pricing
Have Questions?Contact Us
Group and Private Pricing
Enroll your team as a group or arrange a private session for your organization. We’ll help you choose the format that fits your goals.
Location & instructorDate & TimeCourse priceRegistration Options
- Date & TimeOnDemand (Anytime)Self-Paced, 4 months accessCourse price$3,505 USD*Prices exclude applicable local taxesRegistration Options
Showing 1 of 1
Learn Alongside Leading Cybersecurity Professionals From Around The World
- Slide 1 of 3Outstanding course. Provides a writing framework/rubric to evaluate and guide future writing.
- Slide 2 of 3I attended a training at my company right before coming here related to improving written communication. I notice similarities here but the cybersecurity focus here is invaluable!
- Slide 3 of 3Cybersecurity writing skills are critical for professional development.
Slide 1 of 0
(1/0)
Benefits of Learning with SANS
Get feedback from the world’s best cybersecurity experts and instructors
Choose how you want to learn - online, on demand, or at our live in-person training events
Get access to our range of industry-leading courses and resources