|
Days 1,6
|
Information Security Governance and Risk Management
|
|
Topics
|
Security management entails the identification of an organization's information
assets and the development, documentation, and implementation of policies, standards,
procedures, and guidelines. Management tools such as data classification and risk
assessment/analysis are used to identify threats, classify assets, and to rate system
vulnerabilities so that effective controls can be implemented.
|
|
Days 1,6
|
Security Architecture and Design
|
|
Topics
|
The security architecture and design domain contains the concepts, principles, structures,
and standards used to design, monitor, and secure operating systems, equipment,
networks, applications and those controls used to enforce various levels of availability,
integrity, and confidentiality.
|
|
Days 2,6
|
Access Control
|
|
Topics
|
Access controls are a collection of mechanisms that work together to create a security
architecture to protect the assets of the information system.
|
|
Days 2,6
|
Application Security
|
|
Topics
|
This domain addresses the important security concepts that apply to application
software development. It outlines the environment where software is designed and
developed and explains the critical role software plays in providing information
system security.
|
|
Days 3,6
|
Operations Security
|
|
Topics
|
Operations Security is used to identify the controls over hardware, media, and the
operators and administrators with access privileges to any of these resources. Audit
and monitoring are the mechanisms, tools, and facilities that permit the identification
of security events and subsequent actions to identify the key elements and report
the pertinent information to the appropriate individual, group, or process.
|
|
Days 3,6
|
Physical (Environmental) Security
|
|
Topics
|
The physical security domain provides protection techniques for the entire facility,
from the outside perimeter to the inside office space, including all of the information
system resources.
|
|
Days 4,6
|
Cryptography
|
|
Topics
|
The cryptography domain addresses the principles, means, and methods of disguising
information to ensure its integrity, confidentiality and authenticity.
|
|
Days 4,6
|
Telecommunications and Network Security
|
|
Topics
|
- Network Structures
- Transmission methods
- Transport formats
- Security measures used to provide availability, integrity, and confidentiality
- Authentication for transmissions over private and public communications networks
and media
|
|
Days 5,6
|
Business Continuity and Disaster Recovery Planning
|
|
Topics
|
The business continuity and disaster recovery planning domain addresses the preservation
and recovery of business operations in the event of outages.
|
|
Days 5,6
|
Legal, Regulations, Compliance and Investigations
|
|
Topics
|
This domain addresses computer crime laws and regulations as well as the measures
and technologies used to investigate computer crime incidents.
|
|
Exam
|
CISSP Exam
|