Training Overview

  Introduction, Concentrations and Exam Highlights

  Domain 1. 1 Understand, adhere to and promote professional ethics

  Domain 1.2 Understand and apply security concepts

  Domain 1.3 Evaluate and apply security governance principles

  Domain 1.4 Determine compliance and other requirements

  Domain 1.5 Understand legal and regulatory issues that pertain to InfoSec

  Domain 1.6 Understand requirement for investigation types

  Domain 1.7 Develop, Document and implement security policy, standards, etc

  Domain 1.8 Identify, analyze and prioritize business continuity (BC) req

  Domain 1.9 Contribute to and enforce personnel security policies and procedures

  Domain 1.10 Understand and apply risk management concepts

  Domain 1.11 Understand and apply threat modeling concepts and methodologies

  Domain 1.12 Apply supply chain risk management (SCRM) concepts

  Domain 1.13 Establish and maintain a security awareness, education, etc

  Domain 2.1 Identify and classify information and assets

  Domain 2.2 Establish information and asset handling requirements

  Domain 2.3 Provision Resources Securely

  Domain 2.4 Manage Data Lifecycle

  Domain 2.5 Ensure Appropriate Asset Retention

  Domain 2.6 Determine Data Security Controls

  Domain 3.1 Manage Engineering Processes Using Secure Design

  Domain 3.2 Fundamental Concepts of Security Models

  Domain 3.3 Controls Based on System Security Requirements

  Domain 3.4 Understand Security Capabilities of Information Systems

  Domain 3.5 Assess and Mitigate the Vulnerabilities of Security Architectures

  Domain 3.6 Select and Determine Cryptographic Solutions

  Domain 3.7 Understand Methods of Cryptanalytic Attacks

  Domain 3.8 Apply Security Principles to Site and Facility Design

  Domain 3.9 Design Site and Facility Controls

  Domain 4.1 Implement Secure Design Principles in Network Architectures

  Domain 4.2 Secure Network Components

  Domain 4.3 Implement Secure Communication Channels According to Design

  Domain 5.1 Control Physical and Logical Access to Assets

  Domain 5.2 Manage Identification and Authentication , Devices, & Services

  Domain 5.3 Federated Identity With a Third-Party Service

  Domain 5.4 Implement and Manage Authorization Mechanism

  Domain 5.5 Manage the Identity and Access Provisioning Life-cycle

  Domain 5.6 Implement Authentication Systems

  Domain 6.1 Design and Validate Assessment, Test, and Audit Strategies

  Domain 6.2 Conduct Security Control Testing

  Domain 6.3 Collect Security Process Data (e.g. Technical and Administrative)

  Domain 6.4 Analyze Test Output and Generate Report

  Domain 6.5 Conduct or Facilitate Security Audits

  Domain 7.1 Understand and Comply with Investigations

  Domain 7.2 Conduct Logging and Monitoring Activities

  Domain 7.3 Perform Configuration Management (CM)

  Domain 7.4 Apply Foundational Security Operations Concepts

  Domain 7.5 Apply Resource Protection

  Domain 7.6 Conduct Incident Management

  Domain 7.7 Operate and Maintain Detective and Preventative Measures

  Domain 7.8 Implement and Support Patch and Vulnerability Management

  Domain 7.9 Understand and Participate in Change Management Process

  Domain 7.10 Implement Recovery Strategies

  Domain 7.11 Implement Disaster Recovery (DR) Processes

  Domain 7.12 Test Disaster Recovery Plans (DRP)

  Domain 7.13 Participate in Business Continuity (BC) Planning and Exercises

  Domain 7.14 Implement and Manage Physical Security

  Domain 7.15 Address Personnel Safety and Security Concerns

  Domain 8.1 Understand and integrate security - Software Development Life Cycle

  Domain 8.2 Identify and Apply Security Controls in Development Ecosystems

  Domain 8.3 Assess the Effectiveness of Software Security

  Domain 8.4 Assess Security Impact of Acquired Software

  Domain 8.5 Define and Apply Secure Coding Guidelines and Standards

  Audio Version of the Training