CISSP Cert Prep (2021): 6 Security Assessment and Testing

CISSP Cert Prep (2021): 6 Security Assessment and Testing

2h 4mAdvanced2021-04-16

Authors

Mike Chapple

Mike Chapple

Teaching Professor at the University of Notre Dame

Course details

Are you getting ready for the Certified Information Systems Security Professional (CISSP) exam, or are you perhaps an experienced information security professional who wants to learn more about security assessment and testing? In this course, instructor Mike Chapple provides you with the detailed information you need to prepare for the Security Assessment and Testing domain of the 2021 CISSP exam. Mike explains information security and risk management practices, especially the practices you need to complete the CISSP exam. He covers security governance, compliance, and policy issues. Mike discusses business continuity, personnel security, threat modeling, vendor management, and security training and awareness topics.

Skills covered

Security TestingGovernance, Risk, and ComplianceCert PrepCybersecurity

Concepts

Introduction

  • Security assessment and testing
  • What you need to know
  • Study resources

Vulnerability Scanning

  • What is vulnerability management
  • Identify scan targets
  • Scan configuration
  • Scan perspective
  • Analyzing scan reports
  • Correlating scan results

Penetration Testing

  • Penetration testing
  • Ethical disclosure
  • Bug bounty
  • Cybersecurity exercises

Log Reviews

  • Logging security information
  • Security information and event management

Code Testing

  • Code review
  • Code tests
  • Fuzz testing
  • Interface testing
  • Misuse case testing
  • Test coverage analysis

Business Continuity Planning

  • Business continuity planning
  • Business continuity controls
  • High availability and fault tolerance

Disaster Recovery Planning

  • Disaster recovery
  • Backups
  • Restoring backups
  • Disaster recovery sites
  • Testing BC DR plans
  • After action reports

Assessing Security Processes

  • Collect security process data
  • Management review and approval
  • Security metrics
  • Audits and assessments
  • Control management

Continuing Your Preparation

  • Continuing your preparation
80,000 Toman