Play It Safe: Manage Security Risks

Overview

This course takes a deeper dive into concepts introduced in the first course, with an emphasis on recognizing the focus of the CISSP eight security domains, steps of risk management, security frameworks and controls (e.g., NIST, CIA triad, OWASP), as well as common security threats, risks, and vulnerabilities. Additionally, learners are provided with an opportunity to explore and analyze SIEM data, use a playbook to respond to identified threats, risks, and vulnerabilities, and conduct a security audit. By the end of this course, you will: - Identify the common threats, risks, and vulnerabilities to business operations. - Understand the threats, risks, and vulnerabilities that entry-level cybersecurity analysts are most focused on. - Comprehend the purpose of security frameworks and controls. - Describe the confidentiality, integrity, and availability (CIA) triad. - Explain the National Institute of Standards and Technology (NIST) framework. - Explore and practice conducting a security audit. - Use a playbook to respond to threats, risks, and vulnerabilities.

Syllabus

Security domains

This module explains the focus of CISSP’s eight security domains. Then, primary threats, risks, and vulnerabilities to business operations are identified and defined, along with a discussion of the threats, risks, and vulnerabilities entry-level security analysts focus on most. Additionally, NIST’s Risk Management Framework (RMF) is introduced.

Security frameworks and controls

This module explains security frameworks and controls, along with the core components of the confidentiality, integrity, and availability (CIA) triad. They will also learn about Open Web Application Security Project, recently renamed Open Worldwide Application Security Project® (OWASP), security principles and security audits.

Introduction to cybersecurity tools

This module will explore industry leading security information and event management (SIEM) tools that are used by security professionals to protect business operations. You'll learn how entry-level security analysts use SIEM dashboards as part of their every day work.

Use playbooks to respond to incidents

This module discusses the purposes and common uses of playbooks. They’ll also explore how cybersecurity professionals use playbooks to respond to identified threats, risks, and vulnerabilities.