-
Security and Risk Management 12
-
Understand and apply concepts of confidentiality, integrity and availabilityLecture1.1
-
Evaluate and apply security governance principlesLecture1.2
-
Determine compliance requirementsLecture1.3
-
Understand legal and regulatory issues that pertain to information security in a global contextLecture1.4
-
Understand, adhere to, and promote professional ethicsLecture1.5
-
Develop, document, and implement security policy, standards, procedures, and guidelinesLecture1.6
-
Identify, analyze, and prioritize Business Continuity (BC) requirementsLecture1.7
-
Contribute to and enforce personnel security policies and proceduresLecture1.8
-
Understand and apply risk management conceptsLecture1.9
-
Understand and apply threat modeling concepts and methodologiesLecture1.10
-
Apply risk-based management concepts to the supply chainLecture1.11
-
Establish and maintain a security awareness, education, and training programLecture1.12
-
-
Asset Security 6
-
Identify and classify information and assetsLecture2.1
-
Determine and maintain information and asset ownershipLecture2.2
-
Protect privacyLecture2.3
-
Ensure appropriate asset retentionLecture2.4
-
Determine data security controlsLecture2.5
-
Establish information and asset handling requirementsLecture2.6
-
-
Security Architecture and Engineering 11
-
Implement and manage engineering processes using secure design principlesLecture3.1
-
Understand the fundamental concepts of security modelsLecture3.2
-
Select controls based upon systems security requirementsLecture3.3
-
Understand security capabilities of information systems (e.g., memory protection, Trusted Platform Module (TPM), encryption/decryption)Lecture3.4
-
Assess and mitigate the vulnerabilities of security architectures, designs, and solution elementsLecture3.5
-
Assess and mitigate vulnerabilities in web-based systemsLecture3.6
-
Assess and mitigate vulnerabilities in mobile systemsLecture3.7
-
Assess and mitigate vulnerabilities in embedded devicesLecture3.8
-
Apply cryptographyLecture3.9
-
Apply security principles to site and facility designLecture3.10
-
Implement site and facility security controlsLecture3.11
-
-
Communication and Network Security 3
-
Implement secure design principles in network architecturesLecture4.1
-
Secure network componentsLecture4.2
-
Implement secure communication channels according to designLecture4.3
-
-
Identity and Access Management (IAM) 5
-
Control physical and logical access to assetsLecture5.1
-
Manage identification and authentication of people, devices, and servicesLecture5.2
-
Integrate identity as a third-party serviceLecture5.3
-
Implement and manage authorization mechanismsLecture5.4
-
Manage the identity and access provisioning lifecycleLecture5.5
-
-
Security Assessment and Testing 5
-
Design and validate assessment, test, and audit strategiesLecture6.1
-
Conduct security control testingLecture6.2
-
Collect security process data (e.g., technical and administrative)Lecture6.3
-
Analyze test output and generate reportLecture6.4
-
Conduct or facilitate security auditsLecture6.5
-
-
Security Operations 16
-
Understand and support investigationsLecture7.1
-
Understand requirements for investigation typesLecture7.2
-
Conduct logging and monitoring activitiesLecture7.3
-
Securely provisioning resourcesLecture7.4
-
Understand and apply foundational security operations conceptsLecture7.5
-
Apply resource protection techniquesLecture7.6
-
Conduct incident managementLecture7.7
-
Operate and maintain detective and preventative measuresLecture7.8
-
Implement and support patch and vulnerability managementLecture7.9
-
Understand and participate in change management processesLecture7.10
-
Implement recovery strategiesLecture7.11
-
Implement Disaster Recovery (DR) processesLecture7.12
-
Test Disaster Recovery Plans (DRP)Lecture7.13
-
Participate in Business Continuity (BC) planning and exercisesLecture7.14
-
Implement and manage physical securityLecture7.15
-
Address personnel safety and security concernsLecture7.16
-
-
Software Development Security 5
-
Understand and integrate security in the Software Development Life Cycle (SDLC)Lecture8.1
-
Identify and apply security controls in development environmentsLecture8.2
-
Assess the effectiveness of software securityLecture8.3
-
Assess security impact of acquired softwareLecture8.4
-
Define and apply secure coding guidelines and standardsLecture8.5
-
This content is protected, please login and enroll course to view this content!