- Cover
- About This E-Book
- Title Page
- Copyright Page
- Contents at a Glance
- Table of Contents
- About the Authors
- Dedication
- Acknowledgments
- About the Technical Reviewer
- We Want to Hear from You!
- Reader Services
- Introduction
- Chapter 1 Security and Risk Management
- Foundation Topics
- Security Terms
- Security Governance Principles
- Compliance
- Legal and Regulatory Issues
- Professional Ethics
- Security Documentation
- Business Continuity
- Personnel Security Policies and Procedures
- Risk Management Concepts
- Geographical Threats
- Threat Modeling
- Security Risks in the Supply Chain
- Security Education, Training, and Awareness
- Exam Preparation Tasks
- Review All Key Topics
- Complete the Tables and Lists from Memory
- Define Key Terms
- Answer Review Questions
- Answers and Explanations
- Chapter 2 Asset Security
- Chapter 3 Security Architecture and Engineering
- Foundation Topics
- Engineering Processes Using Secure Design Principles
- Security Model Concepts
- System Security Evaluation Models
- Certification and Accreditation
- Control Selection Based upon Systems Security Requirements
- Security Capabilities of Information Systems
- Security Architecture Maintenance
- Vulnerabilities of Security Architectures, Designs, and Solution Elements
- Vulnerabilities in Web-Based Systems
- Vulnerabilities in Mobile Systems
- Vulnerabilities in Embedded Devices
- Cryptography
- Cryptographic Types
- Symmetric Algorithms
- Asymmetric Algorithms
- Public Key Infrastructure
- Key Management Practices
- Message Integrity
- Digital Signatures
- Applied Cryptography
- Cryptanalytic Attacks
- Digital Rights Management
- Site and Facility Design
- Site and Facility Security Controls
- Exam Preparation Tasks
- Complete the Tables and Lists from Memory
- Answer Review Questions
- Answers and Explanations
- Chapter 4 Communication and Network Security
- Chapter 5 Identity and Access Management (IAM)
- Foundation Topics
- Access Control Process
- Physical and Logical Access to Assets
- Identification and Authentication Concepts
- Identification and Authentication Implementation
- Identity as a Service (IDaaS) Implementation
- Third-Party Identity Services Integration
- Authorization Mechanisms
- Provisioning Life Cycle
- Access Control Threats
- Prevent or Mitigate Access Control Threats
- Exam Preparation Tasks
- Answer Review Questions
- Answers and Explanations
- Chapter 6 Security Assessment and Testing
- Chapter 7 Security Operations
- Foundation Topics
- Investigations
- Investigation Types
- Logging and Monitoring Activities
- Resource Provisioning
- Security Operations Concepts
- Resource Protection
- Incident Management
- Detective and Preventive Measures
- Patch and Vulnerability Management
- Change Management Processes
- Recovery Strategies
- Disaster Recovery
- Testing Disaster Recovery Plans
- Business Continuity Planning and Exercises
- Physical Security
- Personnel Safety and Security
- Exam Preparation Tasks
- Answer Review Questions
- Answers and Explanations
- Chapter 8 Software Development Security
- Foundation Topics
- Software Development Concepts
- Security in the System and Software Development Life Cycles
- Security Controls in Development
- Assess Software Security Effectiveness
- Security Impact of Acquired Software
- Secure Coding Guidelines and Standards
- Exam Preparation Tasks
- Review All Key Topics
- Define Key Terms
- Answer Review Questions
- Answers and Explanations
- Chapter 9 Final Preparation
- Glossary
- Index
- Online Elements
- Code Snippets
Dedication
For my husband, Michael, and my son, Jonas. It really is all for you! —Robin
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.