book

(ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 2nd Edition

Name: (ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 2nd Edition
Author: Mike Wills
ISBN: 9781119542940

by Mike Wills

May 2019

Intermediate to advanced

688 pages

24h 4m

English

Sybex

Read now

Unlock full access

Cover
Acknowledgments
About the Author
Foreword
Introduction
Part I Getting Started as an SSCP
Chapter 1 The Business Case for Decision Assurance and Information Security
Information: The Lifeblood of BusinessPolicy, Procedure, and Process: How Business Gets Business DoneWho Runs the Business?Summary
Chapter 2 Information Security Fundamentals
The Common Needs for Privacy, Confidentiality, Integrity, and AvailabilityTraining and Educating EverybodySSCPs and Professional EthicsSummaryExam EssentialsReview Questions
Part II Integrated Risk Management and Mitigation
Chapter 3 Integrated Risk Management and Mitigation
It’s a Dangerous WorldThe Four Faces of RiskGetting Integrated and Proactive with Information DefenseRisk Management: Concepts and FrameworksRisk AssessmentFour Choices for Limiting or Containing DamageSummaryExam EssentialsReview Questions

Chapter 4 Operationalizing Risk Mitigation
From Tactical Planning to Information Security OperationsOperationalizing Risk Mitigation: Step by StepThe Ongoing Job of Keeping Your Baseline SecureOngoing, Continuous MonitoringReporting to and Engaging with ManagementSummaryExam EssentialsReview Questions
Part III The Technologies of Information Security
Chapter 5 Communications and Network Security
Trusting Our Communications in a Converged WorldInternet Systems ConceptsTwo Protocol Stacks, One InternetIP Addresses, DHCP, and SubnetsIPv4 vs. IPv6: Key Differences and OptionsCIANA Layer by LayerSecuring Networks as SystemsSummaryExam EssentialsReview Questions
Chapter 6 Identity and Access Control
Identity and Access: Two Sides of the Same CIANA CoinIdentity Management ConceptsAccess Control ConceptsNetwork Access ControlImplementing and Scaling IAMZero Trust ArchitecturesSummaryExam EssentialsReview Questions
Chapter 7 Cryptography
Cryptography: What and WhyBuilding Blocks of Digital Cryptographic SystemsKeys and Key ManagementModern Cryptography: Beyond the “Secret Decoder Ring”“Why Isn’t All of This Stuff Secret?”Cryptography and CIANAPublic Key InfrastructuresOther Protocols: Applying Cryptography to Meet Different NeedsMeasures of Merit for Cryptographic SolutionsAttacks and CountermeasuresOn the Near HorizonSummaryExam EssentialsReview Questions
Chapter 8 Hardware and Systems Security
Infrastructure Security Is Baseline ManagementInfrastructures 101 and Threat ModelingMalware: Exploiting the Infrastructure’s VulnerabilitiesPrivacy and Secure Browsing“The Sin of Aggregation”Updating the Threat ModelManaging Your Systems’ SecuritySummaryExam EssentialsReview Questions
Chapter 9 Applications, Data, and Cloud Security
It’s a Data-Driven World…At the EndpointSoftware as AppliancesApplications Lifecycles and SecurityCIANA and Applications Software RequirementsApplication Vulnerabilities“Shadow IT:” The Dilemma of the User as BuilderInformation Quality and Information AssuranceProtecting Data in Motion, in Use, and at RestInto the Clouds: Endpoint App and Data Security ConsiderationsLegal and Regulatory IssuesCountermeasures: Keeping Your Apps and Data Safe and SecureSummaryExam EssentialsReview Questions
Part IV People Power: What Makes or Breaks Information Security
Chapter 10 Incident Response and Recovery
Defeating the Kill Chain One Skirmish at a TimeIncident Response FrameworkPreparationDetection and AnalysisContainment and EradicationRecovery: Getting Back to BusinessPost-Incident ActivitiesSummaryExam EssentialsReview Questions
Chapter 11 Business Continuity via Information Security and People Power
A Spectrum of DisruptionSurviving to Operate: Plan for It!Cloud-Based “Do-Over” Buttons for Continuity, Security, and ResilienceCIANA at Layer 8 and AboveSummaryExam EssentialsReview QuestionsNote
Chapter 12 Risks, Issues, and Opportunities, Starting Tomorrow
On Our Way to the FutureCIA, CIANA, or CIANAPS?Enduring LessonsYour Next StepsAt the Close
Appendix Answers to Review Questions
Self-AssessmentChapter 2: Information Security FundamentalsChapter 3: Integrated Information Risk ManagementChapter 4: Operationalizing Risk MitigationChapter 5: Communications and Network SecurityChapter 6: Identity and Access ControlChapter 7: CryptographyChapter 8: Hardware and Systems SecurityChapter 9: Applications, Data, and Cloud SecurityChapter 10: Incident Response and RecoveryChapter 11: Business Continuity via Information Security and People Power
Index
Advertisement
Register and Access the Online Test Bank
End User License Agreement

Content preview from (ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 2nd Edition

Chapter 1The Business Case for Decision Assurance and Information Security

images Why do businesses, governments, the military, or private individuals need to have “secure” information? As an SSCP, you’ll have to help people and organizations identify their information security needs, build the systems to secure their information, and keep that information secure.

We’ll focus your attention in this chapter on how businesses use information to get work done—and why that drives their needs for information security. In doing so, you’ll see that today’s global marketplaces present a far more challenging set of information security needs than even a ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

(ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 3rd Edition

Publisher Resources

ISBN: 9781119542940Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

(ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 2nd Edition

by Mike Wills

Chapter 1The Business Case for Decision Assurance and Information Security

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.