Description

Prepare for the Systems Security Certified Practitioner (SSCP) certification. Review the objectives from the Incident Response and Recovery domain. Earning the (ISC)2 Systems Security Certified Practitioner (SSCP) certification can help to accelerate your career by validating your understanding of essential IT security concepts. In this installment of the SSCP Cert Prep series, instructor Mike Chapple covers the objectives of Incident Response and Recovery, the fourth domain of the SSCP exam. Topics discussed include incident management-including how to build a security incident response program-and network and software forensics. Mike also explores disaster recovery, discussing the design of backup strategies, different options for alternate processing facilities, and how to evaluate the effectiveness of business continuity and disaster recovery plans.

Tags

Syllabus

Syllabus IntroductionIncident response1. Incident ManagementBuild an incident response programIncident communications planIncident identificationEscalation and notificationMitigationRecovery and reconstitutionLessons learned and reportingBuilding an incident response team2. Investigations and ForensicsConducting investigationsEvidence typesIntroduction to forensicsSystem and file forensicsNetwork forensicsSoftware forensicsEmbedded device forensicsChain of custodyReporting and documenting incidentsElectronic discovery (eDiscovery)3. Business ContinuityBusiness continuity planningBusiness continuity controlsHigh availability and fault tolerance4. Disaster RecoveryDisaster recovery overviewBackupsValidating backupsDisaster recovery sitesTesting BC/DR plansConclusionWhat's next? Read more