Integrity Training – Certified Information Systems Security Professional 2019

Course Curriculum

Course Introduction
StartCourse Introduction (5:29)
StartCourse Introduction A (2:19)
StartCourse Introduction B (2:22)
StartCourse Introduction C (1:29)
StartInstructor Introduction (3:40)
Domain 01 – Security and Risk Management
StartSecurity and Risk Management (0:32)
StartTopic: Confidentiality, Integrity, and Availability (0:22)
StartConfidentiality (4:41)
StartConfidentiality conti… (2:36)
StartIntegrity (1:53)
StartIntegrity conti… (2:00)
StartAvailability (1:52)
StartAvailability conti… (1:52)
StartReferences (0:12)
StartTopic: Security Governance (0:25)
StartSecurity Governance Principles (1:03)
StartSecurity Governance Principles conti… (2:45)
StartSecurity Functions to Business Goals (2:02)
StartSecurity Functions to Business Goals conti… (3:46)
StartSecurity Functions to Business Goals conti… (2:56)
StartOrganizational Processes (2:17)
StartOrganizational Processes conti… (3:17)
StartRoles and Responsibilities (1:43)
StartRoles and Responsibilities conti… (1:25)
StartSecurity Control Frameworks (2:47)
StartSecurity Control Frameworks conti… (3:02)
StartSecurity Control Frameworks conti… (2:56)
StartDue Care / Due Diligence (2:17)
StartReferences (0:13)
StartTopic: Compliance Requirements (0:18)
StartCompliance Requirements (3:37)
StartContracts, Legal, Industry Standards (2:45)
StartContracts, Legal, Industry Standards conti… (2:13)
StartContracts, Legal, Industry Standards cont… (3:52)
StartPrivacy Requirements (1:13)
StartPrivacy Requirements conti… (2:12)
StartReferences (0:10)
StartTopic: Legal and Regulatory – Global (0:29)
StartLegal and Regulatory – Global (2:17)
StartLegal and Regulatory – Global conti… (1:24)
StartCyber Crimes and Data Breaches (1:20)
StartCyber Crimes and Data Breaches conti… (1:36)
StartIntellectual Property (2:35)
StartIntellectual Property conti… (1:18)
StartIntellectual Property conti… (1:58)
StartIntellectual Property conti…. (1:46)
StartImport / Export Controls (3:04)
StartTrans-border Data Flows (1:48)
StartPrivacy (1:51)
StartPrivacy conti… (3:25)
StartReferences (0:10)
StartTopic: Professional Ethics (0:30)
StartProfessional Ethics (2:02)
StartProfessional Ethics cont… (1:15)
StartTopic: Security Policy, Standards, Procedures (0:21)
StartSecurity Policy, Standards, Procedures (2:14)
StartSecurity Policy, Standards, Procedures cont… (1:29)
StartSecurity Policy, Standards, Procedures cont… (2:55)
StartReferences (0:08)
StartTopic: Business Continuity (0:20)
StartBusiness Continuity (1:23)
StartBusiness Continuity cont… (3:21)
StartDocument Scope and Plan (1:55)
StartDocument Scope and Plan conti… (2:57)
StartBusiness Impact Analysis (2:14)
StartBusiness Impact Analysis cont… (2:09)
StartReferences (0:05)
StartTopic: Personal Security Policies (0:29)
StartPersonal Security Policies (3:30)
StartCandidate Screening / Hiring (2:12)
StartEmployment Agreements / Polices (3:12)
StartOn-boarding / Termination Process (3:03)
StartOn-boarding / Termination Process conti… (2:52)
StartVendor, Consultant, Contractor (1:55)
StartCompliance Policy Requirements (1:40)
StartPrivacy Policy Requirements (2:26)
StartReferences (0:09)
StartTopic: Apply Risk Management (0:12)
StartApply Risk Management Part1 (2:03)
StartApply Risk Management Part2 (3:38)
StartApply Risk Management Part3 (1:40)
StartApply Risk Management Part4 (1:47)
StartApply Risk Management Part5 (1:21)
StartReferences (0:11)
StartTopic: Threat Modeling (0:07)
StartThreat Modeling – Concepts / Methodology (3:44)
StartThreat Modeling – Categorizing Threats (2:33)
StartThreat Modeling – Generic Steps (2:50)
StartThreat Modeling – Analyzing Risk (2:20)
StartReferences (0:08)
StartTopic: Risk Management – Supply Chain (0:19)
StartHardware, Software (3:40)
StartHardware, Software conti… (2:47)
Start3rd Party Evaluations (2:27)
Start3rd Party Evaluations conti…. (3:37)
StartMinimum Security (2:36)
StartReferences (0:30)
StartTopic: Security Awareness and Training (0:28)
StartSecurity Awareness and Training (4:38)
StartMethods and Techniques (1:39)
StartPeriodic Content Reviews (1:46)
StartEffectiveness Evaluations (2:15)
StartReferences (0:12)
StartQuiz 1
Domain 02 – Asset Management
StartAsset Management (0:33)
StartTopic: Identify and Classify (0:23)
StartData Classification Part1 (2:35)
StartData Classification Part2 (2:35)
StartData Classification Part3 (2:30)
StartAsset Classification (2:07)
StartAsset Classification conti… (1:41)
StartReferences (0:08)
StartTopic: Asset Ownership (0:11)
StartAsset Ownership Part1 (4:24)
StartAsset Ownership Part2 (3:31)
StartAsset Ownership Part3 (2:44)
StartReferences (0:08)
StartTopic: Protect Privacy (0:14)
StartData Owners (2:18)
StartData Owners conti… (3:55)
StartData Processors (2:24)
StartData Processors conti… (1:15)
StartData Remanence (1:46)
StartData Remanence conti… (2:19)
StartData Collection Part1 (1:43)
StartData Collection Part2 (1:14)
StartData Collection Part3 (1:37)
StartReferences (0:21)
StartTopic: Asset Retention (0:12)
StartAsset Retention (2:14)
StartRecord Retention (5:08)
StartReferences (0:12)
StartTopic: Data Security Controls (0:19)
StartData Security Controls Part1 (3:08)
StartData Security Controls Part2 (3:52)
StartData Security Controls Part3 (3:54)
StartScoping and Tailoring (2:21)
StartStandards Selection (2:47)
StartData Protection Methods (1:04)
StartData Protection Methods conti… (2:08)
StartReferences (0:20)
StartTopic: Information / Asset Handling (0:11)
StartInformation / Asset Handling Part1 (1:47)
StartInformation / Asset Handling Part2 (3:26)
StartInformation / Asset Handling Part3 (2:43)
StartFailure Examples (3:26)
StartStorage Options (1:52)
StartReferences (0:13)
StartQuiz 2
Domain 03 – Security Architecture and Engineering
StartSecurity Architecture and Engineering (0:46)
StartTopic: Engineering Processes and Secure Design (0:11)
StartEngineering Processes and Secure Design (2:06)
StartClosed / Open Systems (2:59)
StartClosed / Open Source Code (2:38)
StartTechniques / Confinement (2:08)
StartBounds (1:42)
StartProcess Isolation (1:35)
StartControls / MAC and DAC (2:00)
StartReferences (0:11)
StartTopic: Concepts of Security Models (0:11)
StartConcepts of Security Models (3:12)
StartSecurity Perimeter (1:58)
StartReference Monitors / Security Kernels (1:44)
StartVarious Models (1:18)
StartReferences (0:10)
StartTopic: Controls Based on Security Requirements (0:09)
StartControls Based on Security Requirements (1:19)
StartRainbow Series (2:49)
StartTCSEC (1:17)
StartITSEC / Common Criteria (1:33)
StartCommon Criteria (1:23)
StartReferences (0:10)
StartTopic: Security Capabilities of Information Systems (0:14)
StartSecurity Capabilities of Information Systems (1:49)
StartVirtualization (2:39)
StartTrusted Platform Module (1:57)
StartReferences (0:10)
StartTopic: Assess / Mitigate Vulnerabilities (0:26)
StartAssess / Mitigate Vulnerabilities (2:29)
StartLocal Caches (1:52)
StartServer-Based Systems (2:13)
StartDatabase Systems (2:46)
StartDatabase Systems conti… (2:40)
StartIndustrial Control Systems (4:04)
StartCloud-Based Systems (4:16)
StartCloud-Based Systems conti… (2:52)
StartDistributed Systems (2:12)
StartInternet of Things (2:46)
StartReferences (0:12)
StartTopic: Assess / Mitigate Vulnerabilities (Web) (0:12)
StartAssess / Mitigate Vulnerabilities (Web) Part1 (3:36)
StartAssess / Mitigate Vulnerabilities (Web) Part2 (3:00)
StartAssess / Mitigate Vulnerabilities (Web) Part3 (3:28)
StartReferences (0:25)
StartTopic: Assess / Mitigate Vulnerabilities (Mobile) (0:07)
StartAssess / Mitigate Vulnerabilities (Mobile) (3:17)
StartDevice Security (5:53)
StartApplication Security (4:10)
StartApplication Security conti… (1:40)
StartReferences (0:11)
StartTopic: Assess / Mitigate Vulnerabilities (Embedded) (0:14)
StartAssess / Mitigate Vulnerabilities (Embedded) (2:18)
StartEmbedded / Static Systems (2:26)
StartSecuring Embedded / Static Systems (4:10)
StartReferences (0:11)
StartTopic: Apply Cryptography (0:40)
StartApply Cryptography (4:20)
StartCryptographic Life Cycle (1:40)
StartCryptographic Methods (1:54)
StartSymmetric Key (2:41)
StartAsymmetric Key (3:55)
StartAsymmetric Key conti… (2:06)
StartElliptic Curve (1:51)
StartPublic Key Infrastructure (1:28)
StartCertificates (2:09)
StartCertificates conti… (1:57)
StartKey Management (3:20)
StartDigital Signatures (1:57)
StartIntegrity – Hashing (1:35)
StartIntegrity – Hashing conti.. (1:56)
StartCryptanalytic Attacks (2:47)
StartDigital Rights Management (DRM) (3:38)
StartReferences (0:10)
StartTopic: Site / Facility Security Principles (0:09)
StartSite / Facility Security Principles (3:08)
StartSite / Facility Security Principles conti… (3:03)
StartReferences (0:10)
StartTopic: Site / Facility Security Controls (3:40)
StartSite / Facility Security Controls (2:20)
StartServer Rooms / Data Centers (2:15)
StartServer Rooms / Data Centers conti… (2:16)
StartMedia Storage Facilities (1:31)
StartEvidence Storage (2:52)
StartRestricted and Work Area Security (1:43)
StartUtilities and HVAC (2:33)
StartEnvironmental Issues (2:09)
StartFire Prevention, Detection, and Suppression (0:55)
StartFire Extinguishers / Detection (1:27)
StartWater Suppression / Gas Discharge (1:40)
StartReferences (0:12)
StartQuiz 3
Domain 04 – Communication and Network Security
StartCommunication and Network Security (0:26)
StartTopic: Secure Design and Network Architecture (0:22)
StartSecure Design and Network Architecture (1:29)
StartOSI Model (0:34)
StartEncapsulation / Decapsulation (1:35)
StartPhysical / Data Link Layers (2:14)
StartNetwork Layer (0:55)
StartTransport Layer (0:56)
StartSession Layer (0:57)
StartPresentation Layer (1:04)
StartApplication Layer (0:37)
StartIP Networking (0:43)
StartTCP/IP (4:31)
StartSYN / ACK / TCP (2:36)
StartIP Classes (0:57)
StartMultilayer Protocols (1:13)
StartConverged Protocols (1:46)
StartWireless Networks (1:38)
StartSecure SSID (1:26)
StartSecure Encryption Protocols (1:05)
StartSecure Encryption Protocols conti… (1:18)
StartReferences (0:20)
StartTopic: Secure Network Components (0:18)
StartOperation of Hardware (2:49)
StartFirewalls (2:10)
StartFirewall Inspection (1:43)
StartTransmission Media (1:57)
StartBaseband / Broadband (0:50)
StartTwisted Pair (1:53)
StartNetwork Access Controls (0:30)
StartNetwork Access Controls – Concepts (1:09)
StartEndpoint Security (2:02)
StartDistribution Networks (1:25)
StartReferences (0:12)
StartTopic: Secure Communication Design (0:13)
StartVoice (1:57)
StartPBX Fraud (1:06)
StartMultimedia Collaboration (1:19)
StartRemote Meeting (1:38)
StartSecuring Email (1:30)
StartRemote Access (1:53)
StartRemote Access conti…. (1:51)
StartRemote Authentication (1:23)
StartVirtualized Networks (1:46)
StartVPN Protocols (0:58)
StartReferences (0:16)
StartQuiz 4
Domain 05 – Identity and Access Management
StartIdentity and Access Management (0:32)
StartTopic: Physical and Logical Access (0:13)
StartInformation (1:57)
StartAccess Control Process (2:34)
StartLogical and Technical Access Controls (2:55)
StartLogical and Technical Access Controls conti… (2:04)
StartSystems (1:53)
StartDevices (2:13)
StartFacilities (2:23)
StartReferences (0:44)
StartTopic: Manage Identification / Authentication (0:24)
StartIdentity Implementation (1:47)
StartSingle / Multi-factor Authentication (3:50)
StartService Authentication (2:38)
StartAccountability (2:56)
StartSession Management (2:16)
StartRegistration / Proofing Identity (2:34)
StartFederated Identity Management (2:33)
StartCommon Language (2:17)
StartCredential Management Systems (3:44)
StartCyberArk (1:38)
StartReferences (0:17)
StartTopic: Integrate Identity as a Third-Party Service (0:12)
StartOn-Premise (2:37)
StartCloud (2:31)
StartFederated (1:00)
StartReferences (0:12)
StartTopic: Implement and Manage Authorization (0:29)
StartRole-Based Access (1:52)
StartUpsides / Downsides (1:28)
StartRule-Based Access (1:39)
StartMandatory Access (1:42)
StartDiscretionary Access (2:09)
StartAttribute-based Access (0:54)
StartReferences (0:11)
StartTopic: Manage Identity / Access Lifecycle (0:12)
StartAccount Review (4:37)
StartSystem Access Review (3:57)
StartProvisioning (1:04)
StartProvisioning conti… (2:12)
StartReferences (0:11)
StartQuiz 5
Domain 06 – Security Assessment and Testing
StartSecurity Assessment and Testing (0:27)
StartTopic: Assessment, Test, and Audit Strategies (0:08)
StartAssessment, Test, and Audit Strategies (2:56)
StartSecurity Assessment / Testing (3:12)
StartSecurity Assessments (1:32)
StartExternal / Third Party (2:37)
StartAuditing Standards (1:11)
StartReferences (0:10)
StartTopic: Security Control Testing (0:21)
StartVulnerability Assessment (4:22)
StartVulnerability Scans (3:48)
StartNetwork Vulnerability Scans (2:29)
StartWeb Vulnerability Scans (4:38)
StartPenetration Testing (3:42)
StartTesting Options (1:00)
StartLog Reviews (4:13)
StartSynthetic Transaction (1:01)
StartCode Review / Testing (1:47)
StartTesting Options (cont.) (2:13)
StartMisuse Case Testing (1:37)
StartTest Coverage Analysis (1:07)
StartInterface Testing (2:06)
StartReferences (0:27)
StartTopic: Security Process Data (0:16)
StartAccount Management (6:40)
StartManagement Review (2:41)
StartPerformance and Risk Indicators (1:15)
StartBackup Verification (1:54)
StartTraining and Awareness (1:04)
StartReferences (0:07)
StartTopic: Analyze Test Output / Generate Reports (0:13)
StartAnalyze Test Output / Generate Reports (3:48)
StartExternal Scan Report (3:22)
StartReferences (0:04)
StartTopic: Conduct / Facilitate Security Audit (0:08)
StartInternal Aspects (3:05)
StartExternal / 3rd Party Aspect (1:51)
StartReferences (0:11)
StartQuiz 6
Domain 07 – Security Operations
StartSecurity Operations (0:19)
StartTopic: Investigations (0:16)
StartEvidence Collection (2:51)
StartNetwork / Software / Hardware Analysis (3:12)
StartReporting and Documentation (3:35)
StartInvestigative Techniques (1:11)
StartGathering Evidence (1:07)
StartDigital Forensics (1:48)
StartChain of Custody (1:39)
StartReferences (0:09)
StartTopic: Investigation Team (0:10)
StartAdministrative Aspects (2:51)
StartCriminal Investigations (2:32)
StartCivil Investigations (2:53)
StartRegulatory Investigations (2:20)
StartReferences (0:09)
StartTopic: Logging and Monitoring Activities (0:14)
StartSIEM (3:06)
StartDeployment (2:21)
StartContinuous Monitoring (2:39)
StartEgress Monitoring (2:06)
StartTools to Assist (4:04)
StartReferences (0:10)
StartTopic: Provisioning Resources (0:13)
StartAsset Inventory (2:03)
StartAsset Management (2:30)
StartCloud-Based Management (3:59)
StartConfiguration Management (2:16)
StartReferences (0:16)
StartTopic: Security Operations Concepts (0:21)
StartSeparation of Duties (3:01)
StartNeed to Know / Least Privilege (1:43)
StartSeparation of Privilege (1:16)
StartPrivileged Account Management (4:58)
StartJob Rotation (3:05)
StartInformation Lifecycle (1:48)
StartKey Phases of Data (2:51)
StartService Level Agreements (1:48)
StartReferences (0:12)
StartTopic: Protection Techniques (0:09)
StartMedia Management (2:46)
StartHardware / Software Asset Management (1:44)
StartSoftware (2:15)
StartReferences (0:09)
StartTopic: Incident Management (0:14)
StartDetection (2:38)
StartResponsive (2:36)
StartReporting (2:37)
StartLegal / Compliance (1:46)
StartRecovery (2:05)
StartRemediation (1:29)
StartLessons Learned (1:16)
StartReferences (0:15)
StartTopic: Detective / Preventative Measures (0:23)
StartFirewalls (4:07)
StartIntrusion Detection / Prevention (2:05)
StartKnowledge / Behavior-Based (1:58)
StartNetwork / Host-Based (1:49)
StartWhitelisting / Blacklisting (2:01)
StartThird-Party Security Services (1:41)
StartSandboxing (1:22)
StartHoneypots/Honeynets (2:53)
StartAnti-Malware (1:55)
StartReferences (0:13)
StartTopic: Patch and Vulnerability Management (0:09)
StartPatch and Vulnerability Management (2:43)
StartPatch Management (2:26)
StartReferences (0:15)
StartTopic: Change Management Processes (0:10)
StartChange Management (2:28)
StartSecurity Impact Analysis (2:55)
StartReferences (0:08)
StartTopic: Implement Recovery Strategies (0:22)
StartBackup Storage (2:37)
StartRecovery Site Strategies (3:19)
StartBusiness / Functional Unit Priorities (2:03)
StartCrisis Management (4:09)
StartMultiple Processing Sites (2:29)
StartOptions (2:03)
StartCloud Computing (1:17)
StartHigh Availability / QoS (1:08)
StartHard Drives / Power Sources (3:17)
StartQoS (0:57)
StartReferences (0:09)
StartTopic: Implement Disaster Recovery (0:15)
StartResponse (2:11)
StartPersonnel (2:17)
StartCommunications (3:09)
StartAssessment (1:00)
StartRestoration (1:37)
StartTraining and Awareness (2:10)
StartReferences (0:06)
StartTopic: Test Disaster Recovery (0:22)
StartOverview (4:23)
StartRead-Through Checklists (1:20)
StartWalk-Through (Table-Top) (1:14)
StartSimulation Test (1:42)
StartParallel Test (1:09)
StartFull Interruption (1:49)
StartReferences (0:07)
StartTopic: Implement / Manage Physical Security (0:14)
StartPerimeter Security (3:24)
StartFences, Gates and Lighting (2:45)
StartSecurity Dogs (2:24)
StartInternal Security Controls (1:55)
StartBadges / Regulatory Requirements (1:52)
StartReferences (0:06)
StartTopic: Personnel Safety / Security (0:12)
StartTravel (2:31)
StartTravel conti… (2:49)
StartSecurity Training and Awareness (1:59)
StartEmergency Management (1:28)
StartDuress (2:22)
StartReferences (0:15)
StartQuiz 7
Domain 08 – Software Development Security
StartSoftware Development Security (0:30)
StartTopic: Software Development Life Cycle (0:09)
StartDevelopment Methodologies (2:07)
StartFunctional Requirements / Control Specifications (3:22)
StartDesign / Code Review (1:14)
StartUser Acceptance Testing / Change Management (2:20)
StartMaturity Models (2:08)
StartAgile / SW-CMM (2:09)
StartChange Management (2:13)
StartIntegrated Product Team (1:39)
StartReferences (0:18)
StartTopic: Security Controls in Development (0:15)
StartSecurity of Software Environments (2:24)
StartDevelopment Security (3:35)
StartSecure Coding Configuration Management (4:39)
StartCode Repositories (1:47)
StartBest Practices (1:33)
StartReferences (0:16)
StartTopic: Assess Software Security Effectiveness (0:17)
StartAuditing and Logging (2:00)
StartODBC / NoSQL (3:03)
StartRisk Analysis / Mitigation (2:38)
StartDevelopment Methodology (2:35)
StartTracking Progress / Repeat (1:03)
StartReferences (0:14)
StartTopic: Security Impact of Acquired Software (0:10)
StartSecurity Impact of Acquired Software (3:13)
StartOWASP Key Considerations (3:05)
StartReferences (0:10)
StartTopic: Secure Coding Guidelines and Standards (0:11)
StartSecurity Weaknesses / Vulnerabilities (3:21)
StartReconnaissance Attacks (1:33)
StartMasquerading Attacks (2:11)
StartAPI Security (1:47)
StartSecure Coding Practices (0:56)
StartTesting Options (0:44)
StartReferences (0:11)
StartQuiz 8
StartCourse Closure (2:58)