This workshop will cover the core principles, technologies, and practices that drive modern Artificial Intelligence (AI). You will learn how AI systems are designed, developed, and deployed, while gaining practical knowledge in machine learning, deep learning, natural language processing (NLP), computer vision, robotics, AI governance, and risk management.

Throughout the workshop, you will explore real-world AI applications, participate in practical exercises, and work through hands-on demonstrations designed to reinforce key concepts. You will gain exposure to industry-relevant tools, methodologies, and frameworks used to build intelligent systems and support data-driven decision-making. In addition, you will receive resources and guidance to continue developing your AI expertise beyond the training.

These interactive sessions are designed to strengthen your understanding of AI technologies, improve your ability to identify and implement AI opportunities, and equip you with the skills needed to manage AI initiatives responsibly. The workshop encourages collaboration, discussion, and knowledge sharing, enabling participants to learn from both the instructor and fellow professionals from diverse backgrounds.

By the end of this workshop, you will understand the foundational and advanced concepts of Artificial Intelligence, be able to apply machine learning and deep learning techniques to real-world challenges, evaluate AI risks and ethical considerations, and align AI solutions with organizational objectives. This workshop is ideal for AI practitioners, data scientists, IT professionals, technology leaders, business decision-makers, and anyone seeking to build or advance a career in Artificial Intelligence.

A basic understanding of computer systems, data concepts, and information technology is recommended. Familiarity with programming, data analysis, or digital technologies can be beneficial but is not required. No prior experience in Artificial Intelligence or Machine Learning is necessary.

This workshop is designed for professionals and decision-makers who want to develop practical knowledge and skills in Artificial Intelligence and its business applications. It is particularly useful for:

• AI professionals involved in the development, deployment, or management of AI solutions
• Data scientists and data analysts seeking to expand their expertise in machine learning and deep learning
• IT managers and technology leaders overseeing AI initiatives and digital transformation projects
• Software developers and engineers interested in integrating AI into applications and business processes
• Risk, compliance, and governance professionals responsible for managing AI-related risks and regulatory requirements
• Business executives, including CIOs, CTOs, CEOs, and COOs, involved in AI strategy and decision-making
• Project managers leading AI implementation and innovation initiatives
• Aspiring AI practitioners and technology enthusiasts looking to build or advance a career in Artificial Intelligence

By completing this workshop, you will gain a practical understanding of Artificial Intelligence concepts, technologies, and implementation strategies, enabling you to confidently apply AI solutions in professional and organizational settings.

You will learn:

• The foundational concepts, principles, and real-world applications of Artificial Intelligence
• How to analyze, prepare, and visualize data to support AI-driven decision-making
• The fundamentals of machine learning, including supervised and unsupervised learning techniques
• How deep learning models, neural networks, and advanced AI architectures are used to solve complex problems
• The principles and applications of Natural Language Processing (NLP), Large Language Models (LLMs), and generative AI technologies
• How computer vision and robotics systems enable intelligent automation and advanced decision-making
• Strategies for identifying, managing, and mitigating AI-related risks, privacy concerns, and compliance requirements
• Best practices for implementing ethical AI, governance frameworks, and AI strategies aligned with organizational goals

Organizations that invest in AI capabilities gain a competitive advantage through improved efficiency, innovation, and data-driven decision-making.

This workshop will help your organization:

• Accelerate digital transformation initiatives through the effective adoption of Artificial Intelligence
• Improve operational efficiency and productivity by leveraging AI-powered automation and intelligent systems
• Enable better business decisions through data analysis, predictive insights, and machine learning applications
• Identify and manage AI-related risks while ensuring compliance with ethical, privacy, and regulatory requirements
• Develop internal AI expertise to reduce reliance on external resources and consultants
• Align AI initiatives with strategic business objectives to maximize value and return on investment
• Foster innovation by identifying new opportunities for AI-driven products, services, and process improvements
• Establish a strong foundation for responsible, scalable, and sustainable AI implementation across the organization

A basic understanding of computer systems, information technology, and digital tools is recommended. No prior experience in Artificial Intelligence or Machine Learning is required.

For the best learning experience, participants are encouraged to use their own laptop to participate in hands-on exercises, demonstrations, and practical activities throughout the workshop. Individuals without suitable hardware can follow along using the instructor's live demonstration environment and guided examples.

• Certification and examination fees are included in the price of the training course
• An attestation of course completion worth 31 CPD (Continuing Professional Development) credits will be issued to the participants who have attended the training course.
• Candidates who have completed the training course but failed the exam are eligible to retake it once for free within a 12-month period from the initial date of the exam.

Remi Afon is a cybersecurity and artificial intelligence security professional, certified trainer and Founder of Lynsec, a PECB Partner. He specialises in AI security, responsible AI governance, cloud security, DevSecOps, application security and secure digital transformation.

Remi holds a BSc in Computer Science and an MSc in Information Security, complemented by specialist training in Artificial Intelligence for Cyber Security from the University of Oxford. His professional certifications include Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), GIAC Cloud Security Automation Certification (GCSA), Certified Artificial Intelligence Professional, Certified ISO42001 and ISO27001 Lead Implementer and Certified Ethical Hacker (CEH). He is also a PECB Certified Trainer and EC Council Certified Trainer.

Through Lynsec, Remi delivers professional training in artificial intelligence, AI governance and cybersecurity, including the PECB Certified Artificial Intelligence Professional – CAIP®, ISO/IEC 42001 Artificial Intelligence Management Systems and ISO/IEC 27001 Information Security Management Systems programmes.

At ACDF 2026, Remi will lead the PECB/Lynsec CAIP® Intensive Training, combining academic knowledge, professional certification and practical industry experience to help participants understand AI technologies, manage emerging risks and support the secure, ethical and responsible adoption of artificial intelligence.

This workshop is designed for practitioners who need to build or consolidate digital forensics skills in a hands-on environment. It suits those new to forensics as much as those who have used individual tools but have never integrated them into a complete IR workflow.

• Incident Responders & SOC Analysts
• Digital Forensics Practitioners
• Law Enforcement Cybercrime Units
• National CERTs & CSIRTs
• Military & Intelligence Cyber Units
• Financial Sector Security Teams
• IT Security Engineers Moving into DFIR

Day 1 — 2 November 2026

• Participant orientation, tool verification, and introduction to the two-phase workshop structure
• Module 1: Evidence acquisition — order of volatility, live vs. dead acquisition, disk imaging with hash verification, RAM capture, and chain of custody documentation
• Module 2: Disk and artefact forensics — Windows registry, prefetch data, LNK files, and browser history examined hands-on using Autopsy and supporting tools
• Module 3: Log analysis and timeline construction — Windows Event Log triage using Chainsaw, proxy log analysis, and building a corroborated attack timeline from multiple sources
• Module 4: Memory forensics — Volatility 3 from first principles, covering process listing, network connections, code injection detection, credential exposure, and command-line reconstruction

Day 2 Morning — 3 November 2026

• Module 5: Network forensics — PCAP analysis in Wireshark, C2 beacon identification, exfiltration detection, and lateral movement tracing in network logs
• Phase 1 synthesis: facilitator-led session connecting all five modules into a single end-to-end investigation workflow
• Scenario brief: Case dossier distributed, investigation rules explained
• Independent investigation: participants work through all five evidence types — disk artefacts, event logs, PowerShell transcripts, memory evidence, and network captures — without investigative guidance
• Forensic report writing: participants produce a complete report covering executive summary, timeline, key findings, TTPs, and recommendations
• Findings briefings: each participant delivers a two-minute verbal summary to the room
• Full debrief, scenario solution revealed, and certificates issued

By the end of DFIR Foundations, every participant will be able to:

1. Evidence Acquisition: Execute a structured first-responder triage workflow; acquire forensically sound disk images and RAM captures with hash verification and compliant chain of custody documentation.
2. Disk Forensics: Conduct a structured examination of a Windows logical evidence set: recover deleted files, extract registry artefacts, prefetch data, LNK files, and browser history.
3. Log Analysis: Triage Windows Event Logs and proxy logs using Chainsaw and manual analysis to identify authentication events, PowerShell activity, log clearing, and lateral movement.
4. Timeline Building: Construct a chronological, corroborated attack timeline from multiple evidence sources, with each event linked to a specific named artefact or log entry.
5. Memory Forensics: Deploy Volatility 3 against a RAM capture: identify malicious processes, injected code, active network connections, and credentials exposed in memory.
6. Network Forensics: Analyse a PCAP in Wireshark: identify C2 beacon patterns, data exfiltration events, and lateral movement in network traffic.
7. Evidence Synthesis: Combine findings across all five evidence types into a single coherent investigation narrative with no evidentiary gaps.
8. Forensic Reporting: Produce a structured, legally defensible forensic investigation report covering executive summary, scope, timeline, methodology, findings, TTPs, and recommendations

1. Processor: 64-bit quad-core CPU, 2.0 GHz or higher (Intel Core i5/i7 or AMD Ryzen 5/7 recommended)
2. RAM: 8 GB minimum; 16 GB strongly recommended
3. Storage: 50 GB free disk space minimum (for VM image, evidence package, and tool outputs)
4. USB: One USB 3.0 port (for evidence package and toolkit distribution)
5. Operating System: Windows 10/11 (64-bit)

Dr. Robinson Tombari Sibe is the CEO and Lead Forensic Examiner of Digital Footprints Limited, Nigeria’s foremost private digital forensics laboratory and cybersecurity consulting company, based in Abuja. He has over 2 decades of high impact consulting experience across several sectors. He holds Ph.D and Master of Science qualifications in Digital Forensics from the University of the Cumberlands (USA) and is completing an LLM in Cybercrime, Cybersecurity and International Law at the University for Peace/UNICRI. He also holds a Master of Engineering degree in Electronic/Telecommunication Engineering and a Bachelors degree in Computer Engineering.

Practitioner Credentials

• Active Lead Forensic Examiner with a caseload spanning financial fraud, cybercrime, insider threats, and complex corporate investigations across Nigeria and beyond.
• Forensic laboratory architect: designed forensic laboratories, SOPs and governance frameworks for the sovereign entities, agencies, academia, and corporate institutions.
• International capacity-building delivery in partnership with ICMPD, FCDO, the Commonwealth Secretariat, ECOWAS, and others. Facilitated high impact forensic and cybersecurity trainings across several countries.
• Consulted for Law Enforcement Agencies, Criminal Justice Department, Military Institutions, financial institutions, National CERTs, and multiple national cybercrime investigation.

Academic & Thought Leadership

• Respected scholar-practioner, with affiliations with several universities such as University of South Wales, United Kingdom (Visiting Fellow), Capitol Technology University, USA (Dissertation Chair), University of the Cumberlands, USA (PhD IT Advisory Board Member), Rivers State University (Lecturer), MIVA Open University (Professor of Practice), and National Open University of Nigeria (Industry Supervisor).
• Co-author: Cybercrime, Digital Forensic Readiness and Financial Crime Investigation in Nigeria (Springer Nature)
• Authored several Peer-reviewed publications in respected journals.
• Written several expert opinion articles across channels such as Forbes, Guardian, Business Day, and featured as cybercrime and digital forensic expert on BBC, Channels TV, and many other global broadcasting stations.
• Member of the Board of Africa ICT Alliance (AfICTA).

Industry Certifications

Dr. Sibe holds several industry certifications, some of which include:

• EC-Council Certified Chief Information Security Officer (CCISO)
• PECB ISO/IEC 42001 (Artificial Intelligence Management System) Senior Lead Implementer
• PECB Certified Lead Forensic Examiner (PECB, Canada)
• PECB Certified Chief Information Security Officer (CCISO) (PECB, Canada)
• PECB Lead Cybersecurity Manager (PECB, Canada)
• PECB Certified Trainer (PECB, Canada)
• Certified Cyber Crime Examiner – National White Collar Crime Center (NW3C), USA
• Certified Economic Crimes Forensic Examiner (CECFE) – NW3C Inc, USA.
• Cellebrite Certified Mobile Examiner (CCME)
• Cellebrite Certified Physical Analyst (CCPA)
• Cellebrite Certified Operator (CCO)
• Cellebrite Certified Mobile Fundamentals (CMFF)
• Belkasoft Certified Instructor (BelkaCI)
• Belkasoft Certified Examiner (BelkaCE)
• Mobile Device Investigator – ADF Solutions Inc, USA
• Mobile Communication and Cell Forensic Analyst – SecurCube, Italy

This workshop will cover the core principles, methodologies, and practices required to establish or mature a Security Operations Center. You will learn how SOCs are governed, structured, and operated, while gaining practical knowledge in detection engineering lifecycle management, detections-as-code concepts, alert triage, hypothesis-driven investigation, incident response playbook design, and SOC performance measurement.

Throughout the workshop, you will work through guided exercises using structured templates; including SOC charter templates, RACI matrices, log source prioritization matrices, detection design worksheets, ATT&CK Navigator coverage mapping, playbook templates, and KPI dashboards. You will gain exposure to industry-relevant frameworks and reference tools used by mature security operations teams worldwide, and you will receive resources and guidance to continue developing your SOC capability beyond the training.

 These interactive sessions are designed to strengthen your ability to align SOC operations with institutional priorities and regulatory requirements, improve detection quality and measurability, and design a SOC that is resilient against modern challenges, including encrypted traffic limitations, cloud and identity-centric attacks, AI-enabled threats, and attacks targeting SOC tooling itself. The workshop encourages collaboration, discussion, and knowledge sharing, enabling participants to learn from both the instructor and fellow professionals from diverse backgrounds.

By the end of this workshop, you will understand how to define a SOC mandate and governance model, prioritize telemetry collection, engineer and continuously improve detections, run structured investigations, integrate incident response, measure SOC performance, and plan a phased maturity roadmap. This workshop is ideal for CISOs, SOC managers, security analysts, detection engineers, incident responders, and IT leaders responsible for building or improving security operations capabilities.

A basic understanding of information security concepts, IT infrastructure, and networking fundamentals is recommended. Familiarity with security monitoring tools (such as SIEM platforms) or incident handling can be beneficial but is not required. No prior experience in building or managing a SOC is necessary.

This workshop is designed for professionals and decision-makers responsible for establishing, managing, or improving security operations capabilities. It is particularly useful for:

• CISOs and security leaders planning to establish or restructure a SOC
• SOC managers and team leads seeking to mature existing operations
• Security analysts (Tier 1–3) looking to strengthen triage and investigation practices
• Detection engineers and threat hunters developing structured detection programs
• Incident responders integrating response processes into SOC workflows
• IT managers and infrastructure leaders supporting security monitoring initiatives
• Risk, compliance, and governance professionals responsible for security monitoring obligations
• MSSP professionals and consultants delivering SOC services to clients

By completing this workshop, you will gain a practical understanding of how to plan, build, and operate a measurable and resilient Security Operations Center aligned to organizational priorities.

You will learn:

• How to define a SOC mission, charter, governance structure, and tiered operating model
• How to design escalation workflows, severity classification, and role responsibilities
• How to build a detection-driven telemetry strategy with phased log onboarding priorities
• The detection engineering lifecycle — design, validation, deployment, tuning, and continuous improvement — including detections-as-code concepts
• How to classify, enrich, and tune alerts to systematically reduce false positives
• Structured triage and hypothesis-driven investigation methodologies with proper case documentation
• How to design incident response playbooks and integrate response into SOC workflows
• How to secure the SOC itself against modern threats, including attacks on monitoring infrastructure
• How to responsibly adopt AI-augmented and agentic workflows in SOC operations
• How to define SOC metrics (MTTD, MTTR, detection quality KPIs) and build a phased 90-day and 12-month capability roadmap

Organizations that invest in structured SOC capabilities gain measurable improvements in threat detection, response speed, and operational resilience.

This workshop will help your organization:

• Establish or mature a SOC using proven, framework-driven approaches rather than costly trial and error
• Align security monitoring with regulatory obligations, risk priorities, and institutional mandates
• Improve detection quality and reduce alert fatigue through structured tuning and quality management
• Accelerate incident response with well-designed playbooks and clear escalation paths
• Demonstrate SOC value to executives through meaningful metrics and reporting frameworks
• Reduce dependency on external consultants by developing internal SOC design expertise
• Prepare for emerging challenges including cloud attacks, identity-centric threats, and AI-enabled adversaries
• Leave with reusable artifacts — charters, matrices, roadmaps, and playbooks tailored to your organization

A basic understanding of information security and IT concepts is recommended. No prior SOC management experience is required.

For the best learning experience, participants are encouraged to bring their own laptop to work on the guided templates and exercises throughout the workshop. Individuals without suitable hardware can follow along using provided worksheets and the instructor's guided walkthroughs.

• Certificate of attendance is included in the price of the training course fees
• All workshop templates and frameworks are provided to participants for continued use after the training

Marvin Ngoma is a cybersecurity leader, author, and security evangelist. He specialises in security operations, detection engineering, threat detection and response, and the strategic design of Security Operations Center capabilities.

He holds a Master of Computer Science & Engineering from Chalmers University of Technology, a Masters of Science in Information Security from Luleå University of Technology, both in Sweden. He also holds a bachelor of Computer Science from the University of Zambia. His professional certifications include Certified Information Systems Security Professional (CISSP), GIAC Security Operations Manager Certification (GSOM), Elastic Certified SIEM Analyst, among others.

A seasoned consultant with experience spanning both the private and public sector in Europe, Middle East and Africa (EMEA), Marvin has led numerous engagements architecting and building security operations and intelligence capabilities for organizations,  unifying tools, processes, and people into measurable, sustainable programmes. He works with organizations throughout EMEA on how best to create security value, bridging strategic governance requirements, including regulatory drivers such as PCI DSS, NIS2, etc, with hands-on operational detection and response practice.

Marvin is a regular speaker and educator in the international cybersecurity community. He has presented at conferences including the ACDF Forum, Nordic Cyber Summit, BSides events across Africa and Europe, among others. He is a published author, writing on threat intelligence integration, context-driven security, practical realities of generative AI in threat detection and response, analyst alert fatigue reduction, and large-scale cyber defense exercises such as NATO's Locked Shields, and has appeared on industry podcasts discussing AI in security operations.

At ACDF 2026, Marvin will lead the Building & Operating a Modern SOC: From Charter to Capability Roadmap workshop, combining strategic governance guidance with hands-on operational methodologies to help participants build sustainable, measurable, and resilient security operations capabilities.