Description

Use this course to help you prepare for the Security Operations domain of the 2021 CISSP exam.

Tags

Syllabus

Syllabus IntroductionSecurity operationsWhat you need to knowStudy resources1. Investigations and ForensicsConducting investigationsEvidence typesIntroduction to forensicsSystem and file forensicsNetwork forensicsSoftware forensicsMobile device forensicsEmbedded device forensicsChain of custodyReporting and documenting incidentsElectronic discovery (ediscovery)2. Logging and MonitoringSecurity information and event managementContinuous security monitoringEndpoint monitoring3. Resource SecurityPhysical asset managementChange and configuration management4. Security PrinciplesNeed to know and least privilegeSeparation of duties and responsibilitiesPrivileged account management5. Incident ManagementBuild an incident response programCreating an incident response teamIncident communications planIncident identificationEscalation and notificationMitigationContainment techniquesIncident eradication and recoveryValidationPost-incident activitiesIncident response exercises6. Personnel SafetyPersonnel safetyEmergency management7. Physical SecuritySite and facility designData center environmental controlsData center environmental protectionPhysical access controlVisitor managementPhysical security personnelConclusionContinuing your studies Read more