CCISO Certified Chief Information Security Officer All-in-One Exam Guide

Name: CCISO Certified Chief Information Security Officer All-in-One Exam Guide
Brand: McGraw Hill LLC
Price: 156.99 EUR
Availability: OnlineOnly

Steven Bennett Jordan Genung(Autor*in)

McGraw Hill LLC (Verlag)

1. Auflage

Erschienen am 27. November 2020

400 Seiten

E-Book

ePUB mit Adobe-DRM

Systemvoraussetzungen

E-Book

PDF mit Adobe-DRM

Systemvoraussetzungen

978-1-260-46393-4 (ISBN)

156,99 €inkl. 7% MwSt.

Systemvoraussetzungen

für ePUB mit Adobe-DRM und PDF mit Adobe-DRM

(Hinweis: Die Auswahl des von Ihnen gewünschten Dateiformats und des Kopierschutzes erfolgt erst im System des E-Book Anbieters)

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Cover
Title Page
Copyright Page
Dedication
Contents
Acknowledgments
Introduction
Chapter 1 Governance and Risk Management
Governance
Information Security Governance
Information Security Management Structure
Sizing
Management Structure
Principles of Information Security
The CIA Triad
Security Vulnerabilities, Threats, Risks, and Exposures
Cyberattack Elements
Defense-In-Depth
Risk Management
Risk Management Program
Best Practice Frameworks for Risk Management
Management and Technical Information Security Elements
Security Program Plan
Security Policies, Standards, and Guidelines
Asset Security
Identity and Access Management
Security Engineering
Physical Security
Security Operations
Software Development Security
Security Assessments and Testing
Security Training and Awareness
Business Continuity and Disaster Recovery
Compliance
Compliance Team
Compliance Management
Privacy
Privacy Impact Assessment
Privacy and Security
Laws and Regulatory Drivers
Federal Information Security Modernization Act
Defense Federal Acquisition Regulation Supplement 252.204-7012
Clinger-Cohen Act
Payment Card Industry Data Security Standard
Privacy Act of 1974
Gramm-Leach-Bliley Act
Health Insurance Portability and Accountability Act
Family Educational Rights and Privacy Act
Sarbanes-Oxley Act
General Data Protection Regulation
North American Electric Reliability Corporation Critical Infrastructure Protection
Summary of Laws and Regulatory Drivers
Standards and Frameworks
ISO/IEC 27000 Series
ISO/IEC 27001
NIST Cybersecurity Framework
Federal Information Processing Standards
NIST Special Publications
Privacy Shield
COBIT
Information Security Trends and Best Practices
Open Web Application Security Project
Cloud Security Alliance
Center for Internet Security
Information Security Training and Certifications
International Information System Security Certification Consortium
ISACA
International Council of E-Commerce Consultants
SANS Institute
Computing Technology Industry Association
International Association of Privacy Professionals
Offensive Security
Ethics
Chapter Review
Quick Review
Questions
Answers
Chapter 2 Information Security Controls, Compliance, and Audit Management
Information Security Controls
Control Fundamentals
Control Frameworks
Information Security Control Life Cycle Frameworks
NIST Risk Management Framework
NIST Cybersecurity Framework
ISO/IEC 27000
Information Security Control Life Cycle
Step 1: Risk Assessment
Step 2: Design
Step 3: Implementation
Step 4: Assessment
Step 5: Monitoring
Exploring Information Security Control Frameworks
NIST SP 800-53
NIST Cybersecurity Framework
ISO/IEC 27002
CIS Critical Security Controls
CSA Cloud Controls Matrix
Auditing for the CISO
Audit Management
Audit Process
Control Self-Assessments
Continuous Auditing
Specific Types of Audits and Assessments
Chapter Review
Quick Review
Questions
Answers
Chapter 3 Security Program Management and Operations
Security Program Management
Security Areas of Focus
Security Streams of Work
Asset Security Management
Security Projects
Security Program Budgets, Finance, and Cost Control
Establishing the Budget
Managing and Monitoring Spending
Security Program Resource Management: Building the Security Team
Project Management
Project Management Fundamentals
Project Management Training and Certifications
Phases of Project Management
Initiating
Planning
Executing
Monitoring and Controlling
Closing
Chapter Review
Quick Review
Questions
Answers
Chapter 4 Information Security Core Competencies
Malicious Software and Attacks
Malware
Scripting and Vulnerability-Specific Attacks
Social Engineering
Types of Social Engineering Attacks
Why Employees Are Susceptible to Social Engineering
Social Engineering Defenses
Asset Security
Asset Inventory and Configuration Management
Secure Configuration Baselines
Vulnerability Management
Asset Security Techniques
Data Security
Data at Rest
Data in Transit
Data in Use
Data Life Cycle
Identity and Access Management
Identity and Access Management Fundamentals
Identity Management Technologies
Authentication Factors and Mechanisms
Access Control Principles
Access Control Models
Access Control Administration
Identity and Access Management Life Cycle
Communication and Network Security
WANs and LANs
IP Addressing
Network Address Translation
Network Protocols and Communications
Wireless
Network Technologies and Defenses
Cryptography
Cryptographic Definitions
Cryptographic Services
Symmetric, Asymmetric, and Hybrid Cryptosystems
Hash Algorithms
Message Authentication Codes
Digital Signatures
Public Key Infrastructure
Cloud Security
Cloud Computing Characteristics
Cloud Deployment Models
Cloud Service Models
Cloud Security Risks and Assurance Levels
Cloud Security Resources
Physical Security
Physical Security Threats
Physical Security Program Planning
Physical Security Resources
Physical Security Controls
Physical Security Auditing and Measurement
Personnel Security
Software Development Security
Integrating Security into the SDLC
Security SDLC Roles and Responsibilities
Software Vulnerabilities
Secure Coding Practices
Software Vulnerability Analysis and Assessments
Forensics, Incident Handling, and Investigations
Relevant Law
Logging and Monitoring
Incident Response and Investigations
Forensics and Digital Evidence
Security Assessment and Testing
Vulnerability Assessments
Penetration Testing
Regulatory Compliance Assessments
Security Program Assessments
Business Continuity and Disaster Recovery
Continuity Planning Initiation
Business Impact Analysis
Identify Preventive Controls
Develop Recovery Strategies and Solutions
Develop the Plan
Test the Plan
Maintain the Plan
Chapter Review
Quick Review
Questions
Answers
Chapter 5 Strategic Planning, Finance, Procurement, and Vendor Management
Strategic Planning
Organizational Strategic Planning
Organizational Strategic Planning Teams
Strategic Planning Process
Security Strategic Plan Example
Making Security Decisions
Enterprise Architecture
Financial Management
Accounting and Finance Basics
Information Security Annual Budget
Procurement and Vendor Management
Procurement Core Principles and Processes
Types of Contracts
Scope Agreements
Third-Party Vendor Risk Management
Chapter Review
Quick Review
Questions
Answers
Appendix About the Online Content
System Requirements
Your Total Seminars Training Hub Account
Privacy Notice
Single User License Terms and Conditions
TotalTester Online
Technical Support
Glossary
Index

Systemvoraussetzungen

Dateiformat: ePUB
Kopierschutz: Adobe-DRM (Digital Rights Management)

Systemvoraussetzungen:

Computer (Windows; MacOS X; Linux): Installieren Sie bereits vor dem Download die kostenlose Software Adobe Digital Editions (siehe E-Book Hilfe).
Tablet/Smartphone (Android; iOS): Installieren Sie bereits vor dem Download die kostenlose App Adobe Digital Editions oder die App PocketBook (siehe E-Book Hilfe).
E-Book-Reader: Bookeen, Kobo, Pocketbook, Sony, Tolino u.v.a.m. (nicht Kindle)

Das Dateiformat ePUB ist sehr gut für Romane und Sachbücher geeignet – also für „fließenden” Text ohne komplexes Layout. Bei E-Readern oder Smartphones passt sich der Zeilen- und Seitenumbruch automatisch den kleinen Displays an.
Mit Adobe-DRM wird hier ein „harter” Kopierschutz verwendet. Wenn die notwendigen Voraussetzungen nicht vorliegen, können Sie das E-Book leider nicht öffnen. Daher müssen Sie bereits vor dem Download Ihre Lese-Hardware vorbereiten.

Bitte beachten Sie: Wir empfehlen Ihnen unbedingt nach Installation der Lese-Software diese mit Ihrer persönlichen Adobe-ID zu autorisieren!

Weitere Informationen finden Sie in unserer E-Book Hilfe.

Dateiformat: PDF
Kopierschutz: Adobe-DRM (Digital Rights Management)

Systemvoraussetzungen:

Computer (Windows; MacOS X; Linux): Installieren Sie bereits vor dem Download die kostenlose Software Adobe Digital Editions (siehe E-Book Hilfe).
Tablet/Smartphone (Android; iOS): Installieren Sie bereits vor dem Download die kostenlose App Adobe Digital Editions oder die App PocketBook (siehe E-Book Hilfe).
E-Book-Reader: Bookeen, Kobo, Pocketbook, Sony, Tolino u.v.a.m. (nicht Kindle)

Das Dateiformat PDF zeigt auf jeder Hardware eine Buchseite stets identisch an. Daher ist eine PDF auch für ein komplexes Layout geeignet, wie es bei Lehr- und Fachbüchern verwendet wird (Bilder, Tabellen, Spalten, Fußnoten). Bei kleinen Displays von E-Readern oder Smartphones sind PDF leider eher nervig, weil zu viel Scrollen notwendig ist.
Mit Adobe-DRM wird hier ein „harter” Kopierschutz verwendet. Wenn die notwendigen Voraussetzungen nicht vorliegen, können Sie das E-Book leider nicht öffnen. Daher müssen Sie bereits vor dem Download Ihre Lese-Hardware vorbereiten.

Bitte beachten Sie: Wir empfehlen Ihnen unbedingt nach Installation der Lese-Software diese mit Ihrer persönlichen Adobe-ID zu autorisieren!

Weitere Informationen finden Sie in unserer E-Book Hilfe.

Als PDF speichern Als Link merken