Oreilly - Certified Information Systems Security Professional (CISSP)

Oreilly - Certified Information Systems Security Professional (CISSP)

by Stone River eLearning | Publisher: Stone River eLearning | Release Date: January 2017 | ISBN: 100000006A0508

https://www.oreilly.com/library/view/certified-information-systems/100000006A0508/

The CISSP Certification is administered by the International Information Systems Security Certification Consortium or (ISC)². (ISC)² promotes the CISSP exam as an aid to evaluating personnel performing information security functions. Candidates for this exam are typically network security professionals and system administrators with at least four years of direct work experience in two or more of the ten test domains. As the first ANSI ISO accredited credential in the field of information security, the Certified Information Systems Security Professional (CISSP) certification provides information security professionals with not only an objective measure of competence, but a globally recognized standard of achievement.

Module 0
- Course Introduction 00:00:19
Module 1
- The CISSP Exam 00:00:16
- CISSP Certification Goals 00:01:26
- Security Professional Certification Value 00:01:26
- Exam Common Body of Knowledge 00:00:50
- Becoming a CISSP 00:02:25
Module 2
- Cryptography 00:00:19
- Cryptography Concepts Part1 00:06:19
- Cryptography Concepts Part2 00:02:53
- History of Cryptography 00:06:47
- Cryptosystem Features 00:02:13
- Encryption Systems Part1 00:06:24
- Encryption Systems Part2 00:03:04
- Substitution Ciphers 00:01:59
- Symmetric Algorithms Part1 00:07:20
- Symmetric Algorithms Part2 00:05:12
- Asymmetric Algorithms 00:05:07
- Message Integrity 00:07:52
- Digital Signatures 00:01:28
- Public Key Infrastructure Part1 00:06:19
- Public Key Infrastructure Part2 00:02:04
- Trusted Platform Module 00:02:41
- Encryption Communication Levels 00:01:56
- E-Mail Security 00:01:47
- Internet Security 00:05:35
- Cryptography Attacks 00:05:48
Module 3
- Physical (Environmental) Security 00:00:19
- Threat Mitigation Techniques 00:01:05
- Geographical-Man Made and Political Threats 00:06:09
- Site and Facility Design 00:04:35
- Perimeter Security 00:05:27
- Building and Internal Security 00:04:18
- Secure Data Centers and Fire Detection Systems 00:03:54
- Types of Power Issues 00:03:36
- HVAC Guidelines 00:00:54
- Equipment Security and Personal Security 00:01:43
Module 4
- Security Architecture and Design 00:00:23
- Security Model Concepts 00:00:57
- System Architecture 00:03:44
- Computing Platforms 00:01:57
- Virtual Computing and Security Services 00:02:28
- System Components 00:03:55
- Memory Concepts 00:04:08
- Enforcing Process Security and Multitasking 00:02:08
- System Security Architecture 00:05:05
- Security Models and Modes Part1 00:04:59
- Security Models and Modes Part2 00:04:28
- System Evaluation and Assurance Levels 00:03:36
- Certification and Accreditation 00:01:28
- Security Architecture Threats 00:02:47
- Database Security and Distributed Systems Security 00:03:41
Module 5
- Access Control 00:00:20
- Access Control Concepts 00:02:41
- Identification and Authentication 00:02:31
- Password Types and Management 00:04:39
- Ownership-Character-Physiological-Behavioral Factors 00:04:10
- Biometric Considerations 00:03:09
- Authorization Concepts Part1 00:03:28
- Authorization Concepts Part2 00:04:00
- User Accountability 00:03:10
- Vulnerability Assessment 00:00:49
- Penetration Testing and Threat Modeling 00:03:36
- Access Control Categories-Types-Models and Administration 00:06:38
- Provisioning Life Cycle and Access Control Monitoring 00:03:48
- Access Control Threats 00:05:12
Module 6
- Software Development Security 00:00:22
- System Development Life Cycle 00:01:24
- Software Testing and Validation 00:01:48
- Software Development Security Best Practices 00:00:58
- Software Development Methods 00:06:54
- Programming Languages 00:05:03
- Database Architecture and Models 00:01:29
- Database Interface Languages 00:00:52
- Data Warehouse-Mining and Threats 00:01:05
- Database and Application Access Control 00:01:50
- Monitoring for Problems 00:01:28
- Software Threats and Security 00:06:45
Module 7
- Information Security Governance and Risk Management 00:00:14
- Principles and Terms 00:03:48
- Security Frameworks and Methodologies Part1 00:05:37
- Security Frameworks and Methodologies Part2 00:05:16
- Risk Assessment 00:01:52
- Asset Values-Vulnerabilities and Threats 00:02:21
- Quantitative Risk Analysis 00:06:00
- Safeguard Selection 00:02:38
- Risk Management 00:04:39
- Security Governance Components 00:01:52
- Security Policies 00:04:22
- Classification Life Cycle 00:02:21
- Responsibilities and Roles 00:02:11
- Personnel Security 00:01:44
- Security Awareness Training 00:02:28
Module 8
- Telecommunications and Network Security 00:00:16
- OSI and TCIP Models Part1 00:07:11
- OSI and TCIP Models Part2 00:01:52
- IP Addressing 00:02:54
- Transmission Methods 00:03:11
- Types of Cabling 00:02:55
- Network Topologies 00:06:20
- Network Protocols and Services 00:04:00
- Network Routing and Devices 00:07:22
- Network Connection Types Part1 00:04:02
- Network Connection Types Part2 00:04:40
- Network Authentication 00:02:47
- Wireless Technologies 00:02:30
- WLAN Security Methods 00:01:55
- Network Threats and Cabling Behaviors 00:06:02
Module 9
- Operation Security 00:00:16
- Operation Security Concepts 00:01:49
- Protecting Tangible and Intangible Assets 00:01:28
- Asset and Media Management 00:02:56
- Storage Options 00:02:05
- Network and Resource Management 00:00:50
- Incident Response and Change Management 00:01:13
- Patch Management-Audit and Review 00:00:44
- Threats and Preventative Measures 00:00:53
- Trusted Paths-Trusted Recovery and System Hardening 00:01:03
- Monitoring and Reporting 00:01:00
Module 10
- Business Continuity and Disaster Recovery 00:00:18
- Business Continuity and Disaster Recovery Concepts Part1 00:06:02
- Business Continuity and Disaster Recovery Concepts Part2 00:02:05
- BIA Development 00:06:32
- Business Continuity Planning 00:02:27
- Preventive Controls 00:02:54
- Recovery Strategies Part1 00:07:23
- Recovery Strategies Part2 00:06:14
- Data Backup Types 00:05:15
- Data Recovery Terms 00:03:38
- Critical Teams and Duties 00:02:12
- BCP Testing 00:02:48
Module 11 00:02:31
Digital Crime 00:02:31
Computer Crime Concepts 00:02:45
Major Legal Systems 00:03:16
Intellectual Property Law 00:03:47
Privacy Part1 00:04:40
Privacy Part2 00:07:20
Liability 00:03:17
Incident Response 00:03:59
Forensic and Digital Investigations Part1 00:05:53
Forensic and Digital Investigations Part2 00:02:57
Evidence Part1 00:06:07
Legal, Regulations, Investigations, and Compliance 00:00:16
Evidence Part2 00:01:26
Security Professional Ethics 00:04:04
Course Outro 00:00:07