SSCP (ISC)2 Systems Security Certified Practitioner Official Study Guide

Chapter 5Domain 3: Risk Identification, Monitoring, and Analysis

SSCP exam objectives covered in this chapter:

• Understand the risk management process
  • Risk visibility and reporting
  • Risk management concepts
  • Risk assessment
  • Risk treatment
  • Audit findings
• Understand security assessment activities
  • Participation in security testing and evaluation
  • Interpretation and reporting assessment results
• Operate, maintain, and monitor systems
  • Events of interest
  • Reviewing log files
• Analyze monitoring results
  • Security analytics, metrics, and trends
  • Visualization
  • Event data analysis
  • Communicate findings

IT risk management is the primary focus of the concept of IT security in an organization's IT operations. All organizations depend on IT operations ...