Security principles are the first line of defense, but often the last box checked! The IT world never stands still! Therefore, IT security cannot stand still either. It doesn't matter if we are talking about deploying loT devices or services cloud, security is important. According to a recent study, the main source of security incidents within a company are current employees!
The Certifed Security Principles, C)SP course will prepare you for security across the entire environment, including understanding risk management, identity and access control, network and data security. This is just a short list of everything we cover in this course, which will include new technologies such as loT and services cloud. This course is meant to prepare you to become a boon to any company trying to improve their security posture!
Upon graduation, the Certified Security Principles candidate will not only be able to successfully pass the C)SP exam, but will also understand the basic security knowledge to keep companies' IP and IT infrastructure secure.
Before taking this course you must have:
- 12 months of server administration experience, or
- Mile2 C)SA1, C)SA2, C)HT, C)OST and C)NP, or
- Equivalent knowledge
Module 1 – Introduction to IT Security
- Understanding Security
- Responsibilities
- Building a Security Program
- CIA Triad
- Governance, Risk, Compliance
- State of Security Today
Module 2 – Risk Management
- Risk Management
- Risk Assessment
- Types of Risk, Threats and Vulnerabilities
- Mitigating Attacks
- Discovering Vulnerabilities and Threats
- Responding to Risk
Module 3 – Understanding of Cryptography
- Understanding Cryptography
- Symmetric Encryption
- Asymmetric Encryption
- Hashing
- PKI
- Cryptography in Use
Module 4 – Understanding Identity and Access Management
- Identity Management
- Authentication Techniques
- Single Sign-on
- Access Control Monitoring
Module 5 – Managing Data Security
- Virtualization Principles
- Key Components Mapped to Cloud Layer
- Key Security Concerns
- Other Technologies Used in the Cloud
- The Layers
- Relevant CCM Controls
Module 6 – Data Security
- Different Types of Storage
- Encryption options
- Data management
Module 7 – Managing Server/Host Security
- The Operating Systems
- Hardening the OS
- Physical security
- Virtualization and Cloud Technologies
Module 8 – Application Security for Non-Developers
- Application Security Principle
- Software Development Life Cycle
- OWASP Top 10
- Hardening Web Applications
- Patch/Update/Configuration Management
Module 9 – Understanding Mobile Device Security (IoT)
- What devices are we talking about?
- What is the risk?
- Hardening Mobile/IoT Devices
- Corporate Management
Module 10 – Managing Day to Day Security
- Company Responsibilities
- Product Management
- Business Continuity Basics
- Incident Response
- Why Train?
Module 11 – Understating Compliance and Auditing
- Benefits of Compliance
- Assurance Frameworks
- What is Auditing
This course prepares participants to take the exam C) SP and getting certified by Certified Security Principles.
