CISSP 2012 Domain: Operations Security


Overview/Description
Target Audience
Expected Duration
Lesson Objectives
Course Number


Overview/Description
In today's enterprise environment, security operations takes on many faces, but always comes back to making sure that all aspects of the operation of an enterprise environment are secured and functioning correctly. This course delves into the mechanisms used to track security threats, resource protection, and securing the enterprise environment. This course guides you through the Common Body of Knowledge (CBK) recommended by the International Information Systems Security Certification Consortium (ISC2) for its Certified Information Systems Security Professional (CISSP) certification. The CISSP credential certifies student expertise in ten different knowledge domains.

Target Audience
Mid- and senior-level managers who are working toward or have already attained positions as CISOs, CSOs, or Senior Security Engineers

Expected Duration (hours)
2.5

Lesson Objectives

CISSP 2012 Domain: Operations Security

  • recognize the activities involved in securing the operations of an enterprise
  • classify audit measures as either internal or external
  • identify the technologies used to maintain resource availability
  • match the attack type to their potential effects
  • recognize different approaches to securing operations
  • identify how audit trails can be used in operations security
  • differentiate between monitoring tools and techniques
  • define a strategy for securing and maintaining resources for a given scenario
  • secure enterprise operations against network violations for a given scenario
  • identify approaches to examining operations security
  • identify the reasons for resource protection
  • distinguish between e-mail protocols
  • recognize different types of e-mail vulnerability
  • recognize security issues associated with the web interfacing
  • identify the characteristics of technologies for transferring and sharing files over the Internet
  • match the reconnaissance methods to their descriptions
  • identify the key considerations involved in implementing administrative controls
  • specify how to secure media and media storage devices
  • specify the reasons resource and e-mail should be secure
  • propose safer file sharing practices for a given scenario
  • determine how to secure media in a given scenario

    • Course Number:
    sp_cpte_a07_it_enus