Information security: Principles and practices

01 Why Study Information Security? 6 topics +

• Introduction
• The Growing Importance of IT Security and New Career Opportunities
• Becoming an Information Security Specialist
• Contextualizing Information Security
• Summary
• Test Your Skills

02 Information Security Principles of Success 15 topics +

• Introduction
• Principle 1: There Is No Such Thing As Absolute Security
• Principle 2: The Three Security Goals Are Confidentiality, Integrity, and Availability
• Principle 3: Defense in Depth as Strategy
• Principle 4: When Left on Their Own, People Tend to Make the Worst Security Decisions
• Principle 5: Computer Security Depends on Two Types of Requirements: Functional and Assurance
• Principle 6: Security Through Obscurity Is Not an Answer
• Principle 7: Security = Risk Management
• Principle 8: The Three Types of Security Controls Are Preventative, Detective, and Responsive
• Principle 9: Complexity Is the Enemy of Security
• Principle 10: Fear, Uncertainty, and Doubt Do Not Work in Selling Security
• Principle 11: People, Process, and Technology Ar...Needed to Adequately Secure a System or Facility
• Principle 12: Open Disclosure of Vulnerabilities Is Good for Security!
• Summary
• Test Your Skills

03 Certification Programs and the Common Body of Knowledge 7 topics +

• Introduction
• Certification and Information Security
• International Information Systems Security Certifications Consortium (ISC)2
• The Information Security Common Body of Knowledge
• Other Certificate Programs in the IT Security Industry
• Summary
• Test Your Skills

04 Governance and Risk Management 9 topics +

• Introduction
• Security Policies Set the Stage for Success
• Understanding the Four Types of Policies
• Developing and Managing Security Policies
• Providing Policy Support Documents
• Suggested Standards Taxonomy
• Who Is Responsible for Security?
• Summary
• Test Your Skills

05 Security Architecture and Design 12 topics +

• Introduction
• Defining the Trusted Computing Base
• Protection Mechanisms in a TCB
• System Security Assurance Concepts
• The Trusted Computer Security Evaluation Criteria
• The Canadian Trusted Computer Product Evaluation Criteria
• The Federal Criteria for Information Technology Security
• The Common Criteria
• The Common Evaluation Methodology
• Confidentiality and Integrity Models
• Summary
• Test Your Skills