CCNA Security (640-554) Portable Command Guide

Chapter 2. Implementing Security Policies Using a Lifecycle Approach

The chapter covers the following topics:

Risk Analysis

• Quantitative Risk Analysis Formula

• Quantitative Risk Analysis Example

• Regulatory Compliance

Security Policy

• Standards, Guidelines, and Procedures

• Security Policy Audience Responsibilities

• Security Awareness

Secure Network Lifecycle Management

• Models and Frameworks

• Assessing and Monitoring the Network Security Posture

• Testing the Security Architecture

Incident Response

• Incident Response Phases

• Computer Crime Investigation

• Collection of Evidence and Forensics

• Law Enforcement and Liability

• Ethics

Disaster-Recovery and Business-Continuity Planning

Risk Analysis

Risk needs to be framed, assessed, monitored, ...