CISSP – Security and Risk Management & Asset Security

欢迎学习本课程：CISSP 认证领域 1 和 2：完整课程。CISSP 认证是行业的黄金标准，是许多中高级职位所必需的。实际上，除了实践安全性之外，组织还有许多其他事情要做。在本课程中，我们将涵盖组织以整体方式实践安全所必需的许多学科。理解和应用风险管理概念、威胁建模和建立业务连续性要求是本课程涵盖的一些主要主题。每个组织都必须制定一个企业范围的安全计划，该计划由本课程涵盖的技术、程序和流程组成。根据定义，资产是对组织有价值的任何东西。信息安全是保护机密性和完整性以及资产的可用性。正如风险管理中所讨论的，虽然每项资产都需要受到保护，但本课程仅侧重于保护信息资产。资产对业务具有内在价值，可分为多种类型。资产的类型及其价值用于确定所需的安全保证级别。信息通常是组织最宝贵的资产，是每个信息系统的核心，因此精确关注其保护意义重大。资产对业务具有内在价值，可分为多种类型。资产的类型及其价值用于确定所需的安全保证级别。信息通常是组织最宝贵的资产，是每个信息系统的核心，因此精确关注其保护意义重大。资产对业务具有内在价值，可分为多种类型。资产的类型及其价值用于确定所需的安全保证级别。信息通常是组织最宝贵的资产，是每个信息系统的核心，因此对其保护的精确关注很有意义。

MP4 | Video: h264, 1280×720 | Audio: AAC, 44100 Hz
Language: English | Size: 3.78 GB | Duration: 11h 25m

What you’ll learn
Understand and apply concepts of confidentiality, integrity and availability
Evaluate and apply security governance principles
Determine compliance requirements
Understand legal and regulatory issues that pertain to information security in a global context
Understand, adhere to, and promote professional ethics
Develop, document, and implement security policy, standards, procedures, and guidelines
Identify, analyze, and prioritize Business Continuity (BC) requirements
Contribute to and enforce personnel security policies and procedures
Understand and apply risk management concepts
Understand and apply threat modeling concepts and methodologies
Apply risk-based management concepts to the supply chain
Establish and maintain a security awareness, education, and training program
Identify and classify information and assets
Determine and maintain information and asset ownership
Protect privacy
Ensure appropriate asset retention
Determine data security controls
Establish information and asset handling requirements
Requirements
A PC or Mac
Internet Access
Description
Welcome to this course: CISSP Certification Domain 1 & 2: The Complete Course. The CISSP certification is the industry’s gold standard, necessary for many mid and senior-level positions. In reality, organizations have many other things to do than practice security. In this course we will cover many of the disciplines that are necessary for organizations to practice security in a holistic manner. Understanding and applying risk management concepts, threat modeling, and establishing business continuity requirements are some of the main topics covered in this course. Each organization must develop an enterprisewide security program that consists of technologies, procedures, and processes covered throughout this course. An asset is, by definition, anything of worth to an organization. Information security is the preservation of confidentiality and integrity and the availability of assets. While every asset needs to be protected, as discussed in risk management, this course focuses exclusively on protecting information assets. Assets have intrinsic value to the business and are classified into various types. The type of asset and its value are used to determine the required level of security assurance. Information is typically the most valuable asset to an organization and lies at the heart of every information system, so precision focus on its protection makes a lot of sense.

In this course, you’ll learn:

Understand and apply concepts of confidentiality, integrity and availability

Evaluate and apply security governance principles

Determine compliance requirements

Understand legal and regulatory issues that pertain to information security in a global context

Understand, adhere to, and promote professional ethics

Develop, document, and implement security policy, standards, procedures, and guidelines

Identify, analyze, and prioritize Business Continuity (BC) requirements

Contribute to and enforce personnel security policies and procedures

Understand and apply risk management concepts

Understand and apply threat modeling concepts and methodologies

Apply risk-based management concepts to the supply chain

Establish and maintain a security awareness, education, and training program

Identify and classify information and assets

Determine and maintain information and asset ownership

Protect privacy

Ensure appropriate asset retention

Determine data security controls

This course will help you to enter the exam room with confidence, knowing that you have done all you can to prepare for the big day. So let’s get started.

Who this course is for:
Security Analyst
Security Manager
Security Auditor
IT Director/Manager
Network Architect
Security Systems Engineer