CASP CompTIA Advanced Security Practitioner Certification Study Guide (Exam CAS-001)

9Risk Management Strategy and Controls

CERTIFICATION OBJECTIVES

9.01 Classify Information Types into Levels of CIA Based on Organization/Industry

9.02 Determine the Aggregate Score of CIA

9.03 Determine the Minimum Required Security Controls Based on Aggregate Score

9.04 Conduct System-Specific Risk Analysis

9.05 Make Risk Determination

9.06 Decide Which Security Controls Should Be Applied Based on Minimum Requirements

9.07 Implement Controls

9.08 Enterprise Security Architecture (ESA) Frameworks

9.09 Continuous Monitoring

Two-Minute Drill

Q&A Self Test

Information security has become an exercise in risk management. Using the tools and techniques ...