ISC2 CISSP Certified Information Systems Security Professional Official Study Guide, 10th Edition

Chapter 17Preventing and Responding to Incidents

THE CISSP TOPICS COVERED IN  THIS CHAPTER INCLUDE:

• Domain 7.0: Security Operations
  • 7.2 Conduct logging and monitoring activities
    • 7.2.1 Intrusion detection and prevention system (IDPS)
    • 7.2.2 Security information and event management (SIEM)
    • 7.2.3 Continuous monitoring and tuning
    • 7.2.4 Egress monitoring
    • 7.2.5 Log management
    • 7.2.6 Threat intelligence (e.g., threat feeds, threat hunting)
  • 7.6 Conduct incident management
    • 7.6.1 Detection
    • 7.6.2 Response
    • 7.6.3 Mitigation
    • 7.6.4 Reporting
    • 7.6.5 Recovery
    • 7.6.6 Remediation
    • 7.6.7 Lessons learned
  • 7.7 Operate and maintain detection and preventative measures
    • 7.7.2 Intrusion detection systems (IDS) and intrusion prevention systems (IPS)
    • 7.7.3 Whitelisting/blacklisting ...