Module 1: Information Security Overview

Core Information Security Principles (CIA)
Security Planning
Security Policies, Procedures, Standards, Guidelines and Baseline
Best Practices in Information Security
Reporting Model
Secure Awareness Training
Overview of Ethics
Common Computer Ethic Fallacies
lSC2 Code of Ethic
Identify and understand the relationship between Vulnerabilities, Threat, Likelihood
Risk Assessment – Qualitative Risk Assessments

Module 2: Access Control

Definitions of key terms
6 Categories of Access Control Controls
3 Types of Access Controls
Threats of Access Controls
System Access
Data / Information Access
Intrusion Detection System (IDS) and Intrusion Prevention System (IPS)
Penetration Test
Assurance of Access Controls

Module 3: Cryptography

Definitions of key terms
History of Cryptography
2 Cryptography Methods
Encryption System – Substitution Ciphers
Encryption System – Asymmetric Algorithms
Features of Encryptions System other than encryption / decryption
Message Integrity Control Overview
Message Integrity Control – Hash Functions
Message Integrity Control – Message Authentication Code (MAC)
Digital Signatures
Cryptanalysis and Attacks

Module 4: Physical (Environmental) Security

Threats and Vulnerabilities in the Physical Environment
Site Location
Site fabric and infrastructure topics
Layered Defense Model
Infrastructure Support System

Module 5: Security Architecture and Design

Concepts in Computer Hardware
Concepts in Computer Software
Trusted Computer Base (TCB)
Reference Monitor
Security Models and Architecture Theories Overview
Security Models and Architecture Theories – Lattice Model
Security Models and Architecture Theories – Noninterference Model
Security Models and Architecture Theories – Information Flow Model
Security Models and Architecture Theories – Bell-LaPadula Confidentiality Model
Security Models and Architecture Theories – Biba Integrity Model
Security Models and Architecture Theories – Clark–Wilson Integrity Model
Security Models and Architecture Theories – Chinese Wall (Brewer - Nash) Model
Security Product Evaluation Methods and Criteria Overview
Security Product Evaluation Methods and Criteria – TCSEC
Security Product Evaluation Methods and Criteria - ITSEC
Security Product Evaluation Methods and Criteria - Common Criteria
Certification and Accreditation

Module 6: Business Continuity and Disaster Recovery Planning

Definition of Disaster
Definition of Business Continuity Planning (BCP) & Disaster Recovery Planning (DRP)
Understanding Business Continuity Management (BCM)
BCP Scope
Stages of BCM
BCP Phase 1: Project Management and Initiation
BCP Phase 2: Business Impact Assessment (BIA)
BCP Phase 3: Recovery strategy
BCP Phase 4: Plan design and development
BCP Phase 5: Testing, Maintenance, Awareness and Training
Steps in developing recovery strategies
Alternate Sites Overview
Alternate Sites – Mirror Site
Alternate Sites – Hot Site
Alternate Sites – Warn Site
Alternate Sites – Cold Site
Alternate Sites – Mobile Site
Reciprocal agreement

Module 7: Telecommunications and Network Security

Core Data Network Key Terms and Technologies
OSI Reference Model
Basic Telephony
Remote Access Security and Technologies
Network Vulnerabilities, Network Attack and Countermeasures
Network Access Controls (AAA and Firewalls)
Network Availabilities Controls
Internet Security Protocols
Multimedia Security
Network Audit

Module 8: Application Security

Basic Programming Procedures: Coding and Compiling
Threats in Software Environment
Application Development Security Protections and Controls
Software Protection Mechanisms
Malware – Trojans
Malware – Hoaxes
Malware – Virus
Malware – Worms
Other Malware
Malware Protections
DBMS Architecture
Data Warehouse
Database Interface Language - ODBC
Database Interface Language - OLEDB
XML
Database Vulnerabilities, Threats and Protection
Web Application Vulnerabilities, Threats and Protection

Module 9: Operation Security

Roles of System Administrators
Roles of Security Administrators
Operation Security Threats
7 types of Operation Security Controls
Operation Security Control Methods
Continuity of Operations
Change Management
Patch Management

Module 10: Legal, Regulations, Compliance and Investigations

Major Legal System Overview
Major Legal System - Common Law
Major Legal System - Civil Law
Major Legal System – Religious Law
Major Legal System – Mixed Law
Intellectual Properties Laws
Incident Response
Digital / Electronic Evidence
Computer Forensics