Description

TABLE OF CONTENT

UNIT 1 : Security and Risk Management:

Security Governance Principles
Compliance
Legal and Regulatory Issues
Professional Ethics
Risk Management Concepts
Threat Modeling
Security Awareness and Education

UNIT 2 : Asset Security:

Information and Asset Classification
Ownership
Protect Privacy
Information Security Roles and Responsibilities

UNIT 3 : Security Architecture and Engineering:

Security Models and Frameworks
Security Engineering
Communication and Network Security
Identity and Access Management
Security Assessment and Testing
Security Operations

UNIT 4 : Communication and Network Security:

Secure Network Architecture Design
Secure Communication Channels
Network Attacks

UNIT 5 : Identity and Access Management (IAM):

Access Control
Identity Management Implementation
Authentication
Authorization
Accountability

UNIT 6 : Security Assessment and Testing:

Security Assessment
Test Output and Reporting

UNIT 7 : Security Operations:

Security Operations Concepts
Incident Management
Disaster Recovery Planning
Business Continuity Planning
Legal and Regulatory Issues in Incident Handling

UNIT 8 : Software Development Security:

Security in the Software Development Lifecycle
Development Environment Security Controls
Software Security Effectiveness