Introduction
Controls and Security Concepts
- Security Controls
- Categories of Controls
- Types of Controls
- The CIA triad
- Non repudiation AAA
- Zero Trust
- Physical Security
- Honey Pots
- Gap Analysis
- Change Management Processes
- Cryptography
- Encryption
- PKI
- Demo Steganography
Threats, Vulnerabilities, and Mitigations
- Threat Actors and Motivations
- Threat Actor Motivations
- Threat Vectors and Attack Surfaces
- Social Engineering
- Other Threat Vectors
- Malicious Activities
- Application Attacks
- Other Application Attacks
- Password Attacks
- Physical Attacks
- Cryptographic Attacks
- Demo Password Cracking
- Network Attacks
- Indicators of Malicious Activity
- Demo Network Analysis Using Wireshark
- Demo Rogue DHCP
- Software Vulnerabilities
- Operating System Vulnerabilities
- Hardware Vulnerabilities
- Cloud and Supply Chain Vulnerabilities
- Mobile Vulnerabilities
- Virtualization Vulnerabilities
- Zero Day Vulnerability
- Misconfiguration Vulnerabilities
- Demo Perform an Nmap Port Scan
- Mitigation Techniques
- Other Mitigation Techniques
Security Operations
- Security Techniques
- Secure Baselines
- Wireless Security
- Wireless Security Settings Radius
- Mobile Security
- Mobile Security Techniques
- Hardening Targets
- Application Security
- Other Common Security Techniques
- Hardware Software and Data Asset Management
- Asset Management
- Vulnerability Management
- Vulnerability Analysis
- Vulnerability Analysis Part 2
- Response Remediation and Reporting
- Security Alerting and Monitoring
- Alerting and Monitoring Tools
- Enterprise Security
- Web Filters
- Other Enterprise Security Methods
- Identity and Access Management
- Access Controls
- Implementing and Maintaining IAM
- Single Sign On SSO
- Demo Social Engineering using SET
- Federation
- Multi Factor Authentication MFA
- Passwords
- Privilege Access Management Tools
- Automation Use Cases
- Security Automation and approaches
- Automation Other Considerations
- Digital Forensics
- Demo Install Open Source Firewall Web Proxy
- Section Conclusion
Security Architecture
- Architectural Models
- Infrastructure Concepts
- Infrastructure Considerations
- Security Principles
- Secure Communication and Access
- Data Protection
- Data Classifications
- Data Considerations
- Data States and Geolocation
- Resilience and Disaster Recovery
- Platform Diversity and Multi cloud
- Testing Methods
- Backups
- Backup Power
- Tools and Methods
- Demo Encrypting Data at Rest
Security Management
- Security Program Management and Oversight
- Security Governance
- Standards and Procedures
- External Considerations
- Roles Responsibilities and Structures
- Monitoring and Revisions
- Risk Management
- Risk Assessments
- Risk Analysis
- Risk Indicators and Tolerance
- Risk Management Strategies
- Business Impact Analysis BIA
- Vendor Assessments
- Vendor Monitoring and Questionnaires
- Consequences of Non Compliance
- Data Privacy
- External Audits
- Penetration Testing
- Demo Open Source Intelligence
- User Guidance and Training
- Reporting and Monitoring
- Demo Security Combination