CompTIA Security+

1. Control types
2. False positives
3. False negatives
4. Importance of policies in reducing risk
5. Risk calculation
6. Quantitative vs. qualitative
7. Vulnerabilities
8. Threat vectors
9. Probability/threat likelihood
10. Risk avoidance, transference, acceptance, mitigation, deterrence
11. Risks associated with cloud computing and virtualization
12. Recovery time objective and recovery point objective
Summarize the security implications of integrating systems and data with third parties.
1. On-boarding/off-boarding business partners
2. Social media networks and/or applications
3. Interoperability agreements
4. Privacy considerations
5. Risk awareness
6. Unauthorized data sharing
7. Data ownership
8. Data backups
9. Follow security policy and procedures
10. Review agreement requirements to verify compliance and performance standards
Given a scenario, implement appropriate risk mitigation strategies.
1. Change management
2. Incident management
3. User rights and permissions reviews
4. Perform routine audits
5. Enforce policies and procedures to prevent data loss or theft
6. Enforce technology controls
Data Loss Prevention (DLP)
Given a scenario, implement basic forensic procedures. 1. Order of volatility
2. Capture system image
3. Network traffic and logs
4. Capture video
5. Record time offset
6. Take hashes
7. Screenshots
8. Witnesses
9. Track man hours and expense
10. Chain of custody
11. Big Data analysis
Summarize common incident response procedures. 1. Preparation
2. Incident identification
3. Escalation and notification
4. Mitigation steps
5. Lessons learned
6. Reporting
7. Recovery/reconstitution procedures
8. First responder
9. Incident isolation
Quarantine
Device remova
10. Data breach
11. Damage and loss control
Explain the importance of security related awareness and training. 1. Security policy training and procedures
2. Role-based training
3. Personally identifiable information
4. Information classification
High
Medium
Low
Confidential
Private
Public
5. Data labeling, handling and disposal
6. Compliance with laws, best practices and standards
7. User habits
Password behaviors
Data handling
Clean desk policies
Prevent tailgating
Personally owned devices
8. New threats and new security trends/alerts
New viruses
Phishing attacks
Zero-day exploits
9. Use of social networking and P2P
10. Follow up and gather training metrics to validate compliance and security posture
Compare and contrast physical security and environmental controls.
1. Environmental controls
2. Physical security
3. Control types