CASP+ (CAS-004) Cert Prep: 4 Governance, Risk, and Compliance

Course details

The CASP+ (CompTIA Advanced Security Practitioner+) (CAS-004) certification is a vendor-neutral certification that validates your knowledge and ability to conduct advanced-level cybersecurity skills. Designed for the advanced-level technical cybersecurity professional certification, the certification exam tests your ability to implement solutions within cybersecurity policies and frameworks. In this fourth installment of the series, information technology and cybersecurity expert Jason Dion covers the topics you need to know pertaining to governance, risk, and compliance: Data considerations, risk management, policies and frameworks, business continuity, risk strategies, and vendor risk. Jason also offers some other resources you can use to help you prepare for the test, as well as tips and tricks on how to raise your score and pass the exam.

Concepts

Introduction

Introduction

Data Considerations

Data considerations
Data security
Data classification
Data types
Data retention
Data destruction
Data ownership
Data sovereignty

Risk Management

Risk management
Risk strategies
Risk management lifecycle
Risk types
Risk handling
Risk tracking
Risk assessment
When risk management fails

Policies and Frameworks

Policies and frameworks
Policies
Frameworks
Regulations
Standards
Contracts and agreements
Legal considerations
Integrating industries

Business Continuity

Business continuity
Business continuity plan
Business impact analysis
Privacy impact analysis
Incident response plan
Testing plans

Risk Strategies

Risk strategies
Asset value
Access control
Aggregating risk
Scenario planning
Security controls
Security solutions
Cost of a data breach

Vendor Risk

Vendor risk
Business models
Influences
Organizational changes
Shared responsibility model
Viability and support
Dependencies
Considerations
Supply chain

Conclusion

Conclusion