CompTIA Security+ (SY0-701) Cert Prep: 5 Security Program Management and Oversight
1h 14mIntermediate2024-02-13
Authors
Mike Chapple
Teaching Professor at the University of Notre Dame
Course details
The CompTIA Security+ certification is an excellent entry point for a career in information security. The current version, SY0-701, expands on coverage related to cloud security, security automation and orchestration, cryptography, threat modeling, and security assessment and testing. Instructor Mike Chapple, an IT leader with 20 years of experience, provides you with the detailed information you need to prepare for the Security Program Management and Oversight domain of the exam.
In this course, part of a multipart series, learn about the core concepts and skills required to manage security policies, security governance, risk analysis, supply chain risk, privacy and compliance, and auditing.
In this course, part of a multipart series, learn about the core concepts and skills required to manage security policies, security governance, risk analysis, supply chain risk, privacy and compliance, and auditing.
Skills covered
Governance, Risk, and ComplianceIncident ResponseCert PrepCybersecurity
Concepts
Introduction
- Security program management
- Study resources
Security Policies
- Security policy framework
- Security policies
- Security standards
- Security procedures
- Policy monitoring and revision
- Policy considerations
Security Governance
- Security governance structures
- Data security roles
Risk Analysis
- Risk assessment
- Quantitative risk assessment
- Business impact analysis
- Risk treatment options
- Risk visibility and reporting
- Ongoing risk assessment
- Security metrics
Supply Chain Risk
- Managing vendor relationships
- Vendor agreements
- Vendor information management
Privacy and Compliance
- Legal and compliance risks
- Compliance monitoring and reporting
Auditing
- Audits and assessments
Conclusion
- Continuing your studies