CISSP Cert Prep: 1 Security and Risk Management (Feb. 2018) Part 2
Posted by Superadmin on December 20 2018 14:28:14

CISSP Cert Prep: 1 Security and Risk Management (Feb. 2018) Part 2

CISSP Cert Prep: 1 Security and Risk Management (Feb. 2018)

 

Learn about information security and risk management practices needed to complete the first domain of the 2018 Certified Information Systems Security Professional (CISSP) exam. CISSP is the industry's gold standard certification, necessary for many mid- and senior-level positions. This course includes coverage of key exam topics from the Security and Risk Management domain: security governance, compliance and policy issues, personnel security, threat modeling, and vendor management. Author Mike Chapple also covers the trifecta of information confidentiality, integrity, and availability. He reviews business continuity and risk management strategies, and highlights the importance of ongoing security awareness and education in any organization.

Topics include:
Aligning security with the business
Using control frameworks
Understanding compliance ethics
Implementing effective security policies
Planning for business continuity
Ensuring the security of employees
Managing risk
Identifying threats
Managing vendors
Building security awareness
Conducting security training

7. Threat Modeling



 
 
 
36. Identifying threats
37. Understanding attacks
38. Technology and process remediation



8. Vendor Management



 
 
 
 
39. Managing vendor relationships
40. Vendor agreements
41. Vendor information management
42. Third-party security services


9. Awareness and Training



 
 
 
 
43. Security policy training and procedures
44. Compliance training
45. User habits
46. User-based threats
 
 
47. Measuring compliance and security posture
48. Awareness program reviews


Conclusion



 
49. Next steps