DAY 1:
Security Architecture and Models
-
- The Security Architecture and Models includes the concepts, principles, structures, and standards used to design, monitor, and secure operating systems, equipment, networks, applications and those controls used to enforce various levels of availability, integrity, and confidentiality
Access Control Systems and Methodology
-
- Access controls are a collection of mechanisms that work together to create a security architecture to protect the assets of the information system
DAY 2:
Application Development Security
-
- This topic addresses the important security concepts that apply to application software development. It outlines the environment where software is designed and developed and explains the critical role software plays in providing information system security
Operations Security
-
- Operations Security is used to identify the controls over hardware, media, and the operators and administrators with access privileges to any of these resources. Audit and monitoring are the mechanisms, tools, and facilities that permit the identification of security events and subsequent actions to identify the key elements and report the pertinent information to the appropriate individual, group, or process
DAY 3:
Physical Security
-
- Physical security provides protection techniques for the entire facility, from the outside perimeter to the inside office space, including all of the information system resources
Cryptography
-
- Cryptography addresses the principles, means, and methods of disguising information to ensure its integrity, confidentiality and authenticity
DAY 4 and 5:
Telecommunications, Network, and Internet Security
-
- Network Structures
- Transmission methods
- Transport formats
- Security measures used to provide availability, integrity, and confidentiality
- Authentication for transmissions over private and public communications networks and media
Business Continuity Planning
-
- The Business Continuity Plan (BCP) addresses the preservation and recovery of business operations in the event of outages