(ISC)2 SSCP Systems Security Certified Practitioner Official Practice Tests, 2nd Edition

Chapter 1Security Operations and Administration (Domain 1)

THE SSCP EXAM TOPICS COVERED IN THIS CHAPTER INCLUDE:

• Domain 1.0: Security Operations and Administration
  • 1.1 Comply with codes of ethics
    • (ISC)² Code of Ethics
    • Organizational code of ethics
  • 1.2 Understand security concepts
    • Confidentiality
    • Integrity
    • Availability
    • Accountability
    • Privacy
    • Non-repudiation
    • Least privilege
    • Segregation of duties (SoD)
  • 1.3 Identify and implement security controls
    • Technical controls (e.g., session timeout, password aging)
    • Physical controls (e.g., mantraps, cameras, locks)
    • Administrative controls (e.g., security policies, standards, procedures, baselines)
    • Assessing compliance
    • Periodic audit and review
  • 1.4 Document and maintain functional security controls ...