Overview
-
Get the detailed information you need to prepare for the risk identification, monitoring, and analysis domain of the SSCP exam.
Syllabus
-
Introduction
- Managing risks
- What you need to know
- Study resources
- Risk assessment
- Quantitative risk assessment
- Risk management
- Ongoing risk management
- Risk management frameworks
- Risk visibility and reporting
- Threat intelligence
- Managing threat indicators
- Intelligence sharing
- Identifying threats
- Automating threat intelligence
- Threat hunting
- Vulnerability impacts
- Supply chain vulnerabilities
- Configuration vulnerabilities
- Architectural vulnerabilities
- What is vulnerability management?
- Identifying scan targets
- Scan configuration
- Scan perspective
- CVSS (Common Vulnerability Scoring System)
- Analyzing scan reports
- Correlating scan results
- Legal and compliance risks
- Legal definitions
- Data privacy
- Data breaches
- Monitoring log files
- Security information and event management
- Continuous security monitoring
- Visualization and reporting
- Compliance monitoring
- Legal and ethical issues in monitoring
- Continuing your studies
