book

(ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 3rd Edition

Name: (ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 3rd Edition
Author: Mike Wills
ISBN: 9781119854982

by Mike Wills

February 2022

Intermediate to advanced

816 pages

29h 16m

English

Sybex

Read now

Unlock full access

Cover
Title Page
Copyright
Acknowledgments
About the Author
About the Technical Editor
Introduction
About This BookWhat Is an SSCP?Using This BookMajor Changes in This EditionObjective MapEarning Your CertificationCongratulations! You're Now an SSCP. Now What?Let's Get Started!Assessment TestAnswers to Assessment Test
PART I: Getting Started as an SSCP
Chapter 1: The Business Case for Decision Assurance and Information Security
Information: The Lifeblood of BusinessPolicy, Procedure, and Process: How Business Gets Business DoneWho Runs the Business?SummaryExam EssentialsReview Questions
Chapter 2: Information Security Fundamentals
The Common Needs for Privacy, Confidentiality, Integrity, and AvailabilityTraining and Educating EverybodySSCPs and Professional EthicsSummaryExam EssentialsReview Questions

PART II: Integrated Risk Management and Mitigation
Chapter 3: Integrated Information Risk Management
It’s a Dangerous WorldThe Four Faces of RiskGetting Integrated and Proactive with Information DefenseRisk Management: Concepts and FrameworksRisk AssessmentFour Choices for Limiting or Containing DamageSummaryExam EssentialsReview Questions
Chapter 4: Operationalizing Risk Mitigation
From Tactical Planning to Information Security OperationsOperationalizing Risk Mitigation: Step by StepThe Ongoing Job of Keeping Your Baseline SecureOngoing, Continuous MonitoringReporting to and Engaging with ManagementSummaryExam EssentialsReview Questions
PART III: The Technologies of Information Security
Chapter 5: Communications and Network Security
Trusting Our Communications in a Converged WorldInternet Systems ConceptsTwo Protocol Stacks, One InternetWireless Network TechnologiesIP Addresses, DHCP, and SubnetsIPv4 vs. IPv6: Important Differences and OptionsCIANA Layer by LayerSecuring Networks as SystemsSummaryExam EssentialsReview Questions
Chapter 6: Identity and Access Control
Identity and Access: Two Sides of the Same CIANA+PS CoinIdentity Management ConceptsAccess Control ConceptsNetwork Access ControlImplementing and Scaling IAMUser and Entity Behavior Analytics (UEBA)Zero Trust ArchitecturesSummaryExam EssentialsReview Questions
Chapter 7: Cryptography
Cryptography: What and WhyBuilding Blocks of Digital Cryptographic SystemsKeys and Key ManagementModern Cryptography: Beyond the “Secret Decoder Ring”“Why Isn't All of This Stuff Secret?”Cryptography and CIANA+PSPublic Key InfrastructuresApplying Cryptography to Meet Different NeedsManaging Cryptographic Assets and SystemsMeasures of Merit for Cryptographic SolutionsAttacks and CountermeasuresPKI and Trust: A RecapOn the Near HorizonSummaryExam EssentialsReview Questions
Chapter 8: Hardware and Systems Security
Infrastructure Security Is Baseline ManagementSecuring the Physical ContextInfrastructures 101 and Threat ModelingEndpoint SecurityMalware: Exploiting the Infrastructure's VulnerabilitiesPrivacy and Secure Browsing“The Sin of Aggregation”Updating the Threat ModelManaging Your Systems' SecuritySummaryExam EssentialsReview Questions
Chapter 9: Applications, Data, and Cloud Security
It's a Data-Driven World…At the EndpointSoftware as AppliancesApplications Lifecycles and SecurityCIANA+PS and Applications Software RequirementsApplication Vulnerabilities“Shadow IT:” The Dilemma of the User as BuilderInformation Quality and Information AssuranceProtecting Data in Motion, in Use, and at RestInto the Clouds: Endpoint App and Data Security ConsiderationsLegal and Regulatory IssuesCountermeasures: Keeping Your Apps and Data Safe and SecureSummaryExam EssentialsReview Questions
PART IV: People Power: What Makes or Breaks Information Security
Chapter 10: Incident Response and Recovery
Defeating the Kill Chain One Skirmish at a TimeHarsh Realities of Real IncidentsIncident Response FrameworkPreparationDetection and AnalysisContainment and EradicationRecovery: Getting Back to BusinessPost-Incident ActivitiesSummaryExam EssentialsReview QuestionsNote
Chapter 11: Business Continuity via Information Security and People Power
What Is a Disaster?Surviving to Operate: Plan for It!Timelines for BC/DR Planning and ActionOptions for RecoveryCloud-Based “Do-Over” Buttons for Continuity, Security, and ResiliencePeople Power for BC/DRSecurity Assessment: For BC/DR and ComplianceConverged Communications: Keeping Them Secure During BC/DR ActionsSummaryExam EssentialsReview Questions
Chapter 12: Cross-Domain Challenges
Operationalizing Security Across the Immediate and Longer TermSupply Chains, Security, and the SSCPOther Dangers on the Web and NetOn Our Way to the FutureEnduring LessonsYour Next StepsAt the CloseExam EssentialsReview Questions
Appendix: Answers to Review Questions
Chapter 1: The Business Case for Decision Assurance and Information SecurityChapter 2: Information Security FundamentalsChapter 3: Integrated Information Risk ManagementChapter 4: Operationalizing Risk MitigationChapter 5: Communications and Network SecurityChapter 6: Identity and Access ControlChapter 7: CryptographyChapter 8: Hardware and Systems SecurityChapter 9: Applications, Data, and Cloud SecurityChapter 10: Incident Response and RecoveryChapter 11: Business Continuity via Information Security and People PowerChapter 12: Cross-Domain Challenges
Index
End User License Agreement

Content preview from (ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 3rd Edition

Chapter 7Cryptography

Information at rest; information in use; information in motion. This defines our information security problem in a nutshell and dictates our consistent, integrated use of any and every means possible to protect that information. Cryptography is one such set of techniques, and it has its roots in the fundamental ways that humans represent ideas with symbols. We often think that cryptography is all about making messages secret, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

(ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 2nd Edition

Publisher Resources

ISBN: 9781119854982Purchase Link

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

(ISC)2 SSCP Systems Security Certified Practitioner Official Study Guide, 3rd Edition

by Mike Wills

Chapter 7Cryptography

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.