Tag: CISSP

[Notes] Chapter 2: Personnel Security and Risk Management Concepts

[Notes] Chapter 2: Personnel Security and Risk Management Concepts

Personnel Security Policies and Procedures: Vendor, Consultant, and Contractor Agreements and Controls: Privacy Policy Requirements: Security Governance: Risk Management Concepts: Risk Assessment/Analysis: Countermeasure Selection and Implementation: Types of Controls: Continuous Improvement: Risk Frameworks: Security Awareness, Education, and Training: Manage the Security Function:

[Notes] CISSP Chapter 1: Security Governance Through Principles and Policies

[Notes] CISSP Chapter 1: Security Governance Through Principles and Policies

The CIA Triad Confidentiality: Confidentiality terms: Integrity: Integrity terms: Availability: Availability terms: Other Security Concepts Evaluate and Apply Security Governance Principles Data Classification Organizational Roles and Responsibilities Security Control Frameworks Due Care and Due Diligence Developing Documents Threat Modeling Prioritization and Response Apply Risk-Based Management