CompTIA Security+ (SY0-701) Cert Prep: 5 Security Program Management and Oversight

1h 14mIntermediate2024-02-13

Authors

Mike Chapple

Teaching Professor at the University of Notre Dame

Course details

The CompTIA Security+ certification is an excellent entry point for a career in information security. The current version, SY0-701, expands on coverage related to cloud security, security automation and orchestration, cryptography, threat modeling, and security assessment and testing. Instructor Mike Chapple, an IT leader with 20 years of experience, provides you with the detailed information you need to prepare for the Security Program Management and Oversight domain of the exam.

In this course, part of a multipart series, learn about the core concepts and skills required to manage security policies, security governance, risk analysis, supply chain risk, privacy and compliance, and auditing.

Skills covered

Governance, Risk, and ComplianceIncident ResponseCybersecurityCert Prep

Concepts

0. Introduction

01 - Security program management
02 - Study resources

1. Security Policies

03 - Security policy framework
04 - Security policies
05 - Security standards
06 - Security procedures
07 - Policy monitoring and revision
08 - Policy considerations

2. Security Governance

09 - Security governance structures
10 - Data security roles

3. Risk Analysis

11 - Risk assessment
12 - Quantitative risk assessment
13 - Business impact analysis
14 - Risk treatment options
15 - Risk visibility and reporting
16 - Ongoing risk assessment
17 - Security metrics

4. Supply Chain Risk

18 - Managing vendor relationships
19 - Vendor agreements
20 - Vendor information management

5. Privacy and Compliance

21 - Legal and compliance risks
22 - Compliance monitoring and reporting

6. Auditing

23 - Audits and assessments

Conclusion

24 - Continuing your studies