Overview
-
Use this course to help you prepare for the Security Operations domain of the 2021 CISSP exam.
Syllabus
-
Introduction
- Security operations
- What you need to know
- Study resources
- Conducting investigations
- Evidence types
- Introduction to forensics
- System and file forensics
- Network forensics
- Software forensics
- Mobile device forensics
- Embedded device forensics
- Chain of custody
- Reporting and documenting incidents
- Electronic discovery (ediscovery)
- Security information and event management
- Continuous security monitoring
- Endpoint monitoring
- Physical asset management
- Change and configuration management
- Need to know and least privilege
- Separation of duties and responsibilities
- Privileged account management
- Build an incident response program
- Creating an incident response team
- Incident communications plan
- Incident identification
- Escalation and notification
- Mitigation
- Containment techniques
- Incident eradication and recovery
- Validation
- Post-incident activities
- Incident response exercises
- Personnel safety
- Emergency management
- Site and facility design
- Data center environmental controls
- Data center environmental protection
- Physical access control
- Visitor management
- Physical security personnel
- Continuing your studies
