CISSP Domain 7: Security Operations

Overview

This course covers Domain 7 of the CISSP exam, focusing on security operations. In it we will look at incident response and forensic investigations, including response planning and change management. We'll also discuss how to keep your systems ready for anything with redundancy and how to plan ahead with a module on contingency planning, including facility recovery and testing. And finally, we'll explore physical security, including site and facility design; fire safety and prevention; and data center security.

Syllabus

Incident response and forensic investigations

This module looks at the steps to establish and implement a successful incident management program. In this course, we identify situations and solutions in which forensic evidence collection will take place. We discuss the incident management life cycle and the forensic data life cycle.

Redundancy

This module examines one of the basic tenets of security: availability. We discuss the meaning of high availability and look at solutions across various network implementations to better understand how comprehensive fault tolerance and resiliency can be implemented within an enterprise.

Contingency planning

The contingency planning module focuses on the need to be prepared for business disruptions ranging from minor incidents to catastrophic loss. We will look at NIST 800-34’s approach to the processes of business continuity and examine the tasks performed at each stage, from obtaining a BCP policy statement through testing.

Physical security

This course examines the many ways that physical security can impact cybersecurity. We will examine basic principles of security like CPTED (Crime Prevention Through Environmental Design) and discuss the importance of a layered approach, including protecting physical access to the external grounds and internal facility and everywhere in between.