PROTECTION OF INFORMATION ASSETS IN CERTIFIED INFORMATION SYSTEMS AUDITOR Certificate Level

This book contains the following topics:

Part A: Information Asset Security and Control
• 5.1 Information Asset Security Policies, Frameworks, Standards and Guidelines
• 5.2 Physical and Environmental Controls
• 5.3 Identify and Access Management
• 5.4 Network and Endpoint Security
• 5.5 Data Loss Prevention
• 5.6 Data Encryption
• 5.7 Public Key Infrastructure
• 5.8 Cloud and Virtualized Environments
• 5.9 Mobile, Wireless and Internet of Things Devices
Part B: Security Event Management
• 5.10 Security Awareness Training and Programs
• 5.11 Information System Attack Methods and Techniques
• 5.12 Security Testing Tools and Techniques
• 5.13 Security Monitoring Logs, Tools and Techniques
• 5.14 Security Incident Response Management
• 5.15 Evidence Collection and Forensics
Case Study