Overview
-
Prepare for the Systems Security Certified Practitioner certification (SSCP). Review the objectives from the Security Operations and Administration domain.
Syllabus
-
Introduction
- Conducting cybersecurity operations
- What you need to know
- Study resources
- The goals of information security
- Confidentiality
- Integrity
- Availability
- Ethics
- Accountability
- Privacy compliance
- Employee privacy
- Need to know and least privilege
- Separation of duties and responsibilities
- Physical asset management
- Software licensing
- Change and configuration management
- Understanding data security
- Data security policies
- Data security roles
- Limiting data collection
- The data lifecycle
- Developing security baselines
- Leveraging industry standards
- Customizing security standards
- Security control selection and implementation
- Control frameworks
- Security policy framework
- Collect security process data
- Management review
- Security metrics
- Audits and assessments
- Control management
- Security awareness and training
- Compliance training
- User habits
- Social engineering
- Measuring compliance and security posture
- Site and facility design
- Data center environmental controls
- Data center environmental protection
- Physical access control
- Visitor management
- Continuing your studies
